Privacy Policy

Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

We attach a high degree of sensitivity to the security of your personal data. With this awareness, we place great importance on patient privacy and, in this context, on the processing and preservation of all types of personal data belonging to our patients in the best and most diligent manner possible. With the awareness of this responsibility, as the Data Controller, we process your personal data within the framework stated below, in accordance with the Law on the Protection of Personal Data No. 6698 (“Law”) and relevant legislation.

COLLECTION, PROCESSING, AND PURPOSES OF PROCESSING OF PERSONAL DATA

Personal data processing activities are carried out in accordance with Article 20 of the Constitution and the principles set forth in Article 4 of the Personal Data Protection Law (KVKK). Personal data is retained for the period prescribed by law or required for the purpose of personal data processing. Your personal data, consisting of the name, surname, email, and phone number information you submit via our website, will be processed by us for the purpose of communicating with you and creating appointments. Your personal data will be processed in any case within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

Your general and special categories of personal data, primarily your health data, may be processed by our Hospital for the purposes stated below: Processing your personal data, including special categories of personal data, in order to fulfill our legal obligations contained in the Basic Law on Health Services No. 3359, the Decree Law on the Organization and Duties of the Ministry of Health and its Affiliated Institutions No. 663, the Regulation on Private Hospitals, the Regulation on the Processing and Security of Personal Health Data, and other relevant regulations; protecting public health, preventive medicine, medical diagnosis, treatment, and care services; planning and managing the financing of health services; being able to inform you about the appointment if you make one; planning and managing the internal operations of our clinic; monitoring and preventing abuse and unauthorized transactions; performing risk management and quality improvement activities; conducting research; billing for our services; verifying your identity; responding to all your questions and complaints regarding our health services; taking all necessary technical and administrative measures within the scope of data security for our clinic’s systems and applications; analyzing your use of health services and storing your health data for the purpose of developing and improving the health services we offer; retaining information regarding your health data that must be stored in accordance with relevant legislation; and may be processed for similar purposes including, but not limited to, measuring patient satisfaction.

Furthermore, your personal data may be processed within the framework of the Basic Law on Health Services No. 3359, the Decree Law on the Organization and Duties of the Ministry of Health and its Affiliated Institutions No. 663, the Regulation on Private Hospitals, the Regulation on the Processing and Protection of Personal Health Data, and Ministry of Health regulations and other legislative provisions, and may be kept under preservation in both digital and physical environments by being transferred to the physical archives and information systems belonging to our Clinic and/or our suppliers.

PERSONS AND INSTITUTIONS TO WHOM YOUR PERSONAL DATA MAY BE TRANSFERRED

Your personal data may be transferred, within the scope of the Law and other legislation and for the purposes stated above, to: our Clinic, the Social Security Institution (SGK), the Ministry of Health and its affiliated sub-units, the General Directorate of Security and similar law enforcement agencies, the General Directorate of Population and Citizenship Affairs, the Turkish Pharmacists Association, Courts, third parties such as laboratories and centers with which we cooperate for medical diagnosis, your authorized representatives, third parties from whom we receive consultancy services including lawyers, tax advisors, and auditors, regulatory and supervisory authorities, official bodies, our suppliers, support service providers, and business partners from whom we receive services or with whom we are in cooperation, and other third parties, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.

METHOD AND LEGAL BASIS OF PERSONAL DATA COLLECTION

Your personal data is collected in any oral, written, or electronic environment, for the purposes stated above, and for the purpose of ensuring that health services can be provided within the determined legal framework and that contractual and legal obligations are fulfilled fully and properly in this context.

YOUR RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA

In accordance with the legislation regarding your processed personal data, you have the rights to: learn whether or not personal data has been processed, request information if it has been processed; access and request personal health data; learn the purpose of processing of personal data and whether they are used in compliance with their purpose; know the third parties to whom personal data are transferred in the country or abroad; request the rectification of personal data in case it is processed incompletely or incorrectly; request the deletion or destruction of personal data; request that the operations regarding the rectification and/or deletion or destruction of personal data be notified to third parties to whom personal data has been transferred; object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems; and request the remedy of the damage in case of loss due to illegal processing of personal data.

DATA SECURITY

Our clinic protects your personal data in full compliance with all technical and administrative security controls required by information security standards and procedures. Said security measures are provided at a level appropriate to the potential risk, taking into account technological possibilities.