Privacy policy

1. Who is responsible

The controller responsible for processing your personal data is:

Dr. Kemal Yüksel
Tirana, Albania
Phone: +355 69 608 1215
Contact form: https://drkemalyuksel.com/en/contact/

2. Legal framework

We process personal data in accordance with Albanian Law No. 124/2024 “On the Protection of Personal Data” and, where it applies to patients from the European Union, the General Data Protection Regulation (EU) 2016/679 (GDPR).

3. Visiting the website

You can read this website without telling us who you are. When a page is requested, the web server may automatically record technical information such as your IP address, the date and time of the request, the page requested and the type of browser. This information is needed to deliver the website and keep it secure. It is not used to identify you and is kept by the hosting provider only for a short period. The legal basis is our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).

With your consent (Art. 6(1)(a) GDPR) this website uses Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure how visitors use the site. Google receives pseudonymous usage data such as pages viewed, device and browser type and approximate location; IP addresses are not stored. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework, and are deleted automatically after at most 14 months. You can withdraw your consent at any time via “Cookie settings” at the bottom of every page. The website does not use advertising tools and does not load fonts, maps or social media plugins from other websites. Details are in the cookie policy.

4. Contact form

When you send a request through the contact form, we process the information you enter: your name, country of residence, email address and/or phone number, preferred language, preferred contact method and your message. We also record that you confirmed this privacy policy and the time you sent the request.

We use this information only to answer your request and, if you wish, to arrange an appointment. The legal basis is handling your request before a possible treatment (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR).

Your message may contain information about your health. We process such information only because you choose to share it with us and give your explicit consent (Art. 9(2)(a) GDPR). Please share only what is needed for a first reply, and do not send medical reports through the form; we will explain how to share documents securely.

The form is delivered to us by email. The website does not store the content of your message in a database.

5. Contact by email, phone or WhatsApp

If you contact us directly by email, phone or WhatsApp, we process the information you give us in the same way and for the same purpose. Messaging services such as WhatsApp are operated by third parties under their own privacy policies.

6. Who receives your data

Your data are seen only by Dr. Kemal Yüksel and by the people who help him organise appointments, who are bound to confidentiality. Technical service providers, such as the website host and the email provider, process data on our behalf solely to provide these services. We do not sell your data and do not use them for advertising.

7. Where your data are processed

Your data are processed in Albania. If you contact us from another country, you send your data directly to us in Albania. If a service provider processes data outside Albania or the European Union, this happens only with the safeguards required by law.

8. How long we keep your data

We keep your request only for as long as it is needed to answer it and to organise a possible appointment. If no treatment follows, we delete it once the matter is closed. If you become a patient, your data form part of your medical record and are kept for the periods required by law. Technical server logs are deleted automatically after a short period.

9. Your rights

You have the right to:

• request access to the personal data we hold about you;
• have incorrect data corrected;
• have your data deleted or their processing restricted;
• object to processing based on our legitimate interest;
• receive the data you provided in a common, machine-readable format;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, contact us using the details above.

You also have the right to lodge a complaint with a supervisory authority. In Albania this is the Commissioner for the Right to Information and the Protection of Personal Data (idp.al). If you live in the European Union, you can also contact the data protection authority in your country.

10. Children

This website is not intended for children. If you are under 16, please ask a parent or legal guardian to contact us on your behalf.

11. Security

The website uses an encrypted connection (HTTPS). We apply technical and organisational measures appropriate to the sensitivity of the data to protect your information against loss and unauthorised access.

12. Changes to this policy

We update this policy when the website or the way we process data changes. The current version always applies.

Last updated: 30 October 2026