According to the Law No. 6698 on the Protection of Personal Data (hereinafter referred to as the “KVKK Law”), Dr. Sedar Tatar Clinic (hereinafter referred to as the “Clinic”) is responsible for processing your personal data.
As a patient, we process your personal data as explained below and within the limits prescribed by legislation. In accordance with Article 10 of the Law, which regulates the Obligation to Inform, we would like to inform you about our personal data processing process as data controllers.
About the Data Controller
In accordance with the KVKK Law, as the Clinic and in our capacity as the Data Controller, we can process, disclose, or transfer your personal data specified below for the purposes explained below and in accordance with the principles stipulated in the legislation for as long as necessary.
Your Processed Personal Data, Legal Reasons, and Processing Purposes
Your Personal Data Subject to Processing;
Patient’s;
- Name, Surname, Date of Birth, Country of Birth, City of Birth, Gender, Marital Status, Nationality, T.C. Identity Card Information (ID Number, Series Number, Wallet Number, Father’s Name, Mother’s Name, Place of Birth, Province, District, Neighborhood, Volume Number, Family Order Number, Order Number, Household Number, Page Number, Registration Number, Place of Issue, Reason for Issue, Date of Issue, Previous Surname), Copy of National ID Card/Driver’s License/Passport,
- Address, Telephone Number, Email Address
- Your Health Data, Blood Type, Body Measurements (Height, Weight, Head, Chest), Laboratory and Imaging Results, Test Results, Examination Data, Prescription Information, and other Health and Sexual Life Data obtained during medical diagnosis, treatment, and care services,
- Your Financial Data such as Bank Account Number, IBAN Number,
- Your Educational Status
- Your Responses and Comments Shared for Evaluating Our Services,
- Image and Sound Recordings obtained through Closed Circuit Camera System, Voice Call Records when you contact our Call Center, Private Health Insurance Data, and Social Security Institution Data for Financing and Planning Health Services, Copy of Contracted Institution
- Any type of still/moving image recording, photograph, sound recording, interview, and recordings made before/after the process using devices capable of image and sound transmission in the context of campaign, promotional activities
- Browsing information obtained during the use of our website, IP address, browser information, and persistent and session cookie information
Patient’s Relative; - Name/Surname, T.C. Identity Number, Passport Number, Contact Information, Address Information, Educational Information, Consent and Approval Forms, Address Information
- Your personal data collected are processed in accordance with the basic principles laid down by the KVKK Law,
a) Compliance with the law and integrity rules,
b) Being accurate and up to date when necessary
c) Processing for specified, explicit, and legitimate purposes,
d) Being related, limited, and proportionate to the purposes for which they are processed,
e) Being retained for the period stipulated by relevant legislation or necessary for the purpose for which they are processed.
As per Article 5/1 of the KVKK Law, “Obtaining explicit consent”, and as per Article 5/2;
a) “Explicitly stipulated by laws”,
b) “Necessary for processing the personal data of the parties of a contract, provided that it is directly related to the establishment or execution of the contract”,
c) “Necessary for the data controller to fulfill its legal obligation”,
d) “Necessary for processing data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject” based on the processing condition,
- Sharing information requested by the Ministry of Health and other public institutions and organizations in accordance with relevant legislation,
- Preservation of health data required to be stored by legislation,
- Execution of inspection and/or regulatory duties by competent public institutions and organizations and professional organizations in the nature of public institutions
- Fulfilling requests for information and documents demanded by judicial bodies and/or administrative authorities
- Informing about scheduled appointments
- Compliance with legal and regulatory requirements,
- Billing for provided health services
- Informing you about your appointment through Call Centers and Digital Channels,
- Confirmation of your identity,
- Conducting advertising/campaign/promotional processes
- Conducting analyses for the improvement of health services,
- Confirmation of your relationship with institutions contracted with our Clinic, enabling financial reconciliation related to health services provided to you
- Conducting emergency processes of the Clinic; including but not limited to the measurement of patient satisfaction and execution of medical, diagnostic, treatment, and care services
- Responding to all kinds of questions and complaints related to our health services,
taking all necessary technical and administrative measures within the scope of data security for our clinic’s systems and applications, - Planning and conducting activities necessary for recommending and promoting products and services offered by the Clinic to relevant individuals, tailored to their preferences, usage habits, and needs
,
- Conducting necessary studies by our relevant business units and conducting related business processes for the realization of commercial activities by the Clinic,
- Planning and executing commercial and/or business strategies,
- Processing for purposes of ensuring legal, technical, and commercial occupational safety of individuals in business relations with our Clinic and will be processed until the purpose requiring the storage of the data ceases to exist and when it is no longer legally or mandatorily required to be stored, the data will be destroyed in accordance with the provisions of the KVKK Law and the Regulation on the Deletion, Destruction, or Anonymization of Personal Data and any other relevant legislative provision that may be enacted thereafter.
Transfer of Your Personal Data
Article 8 of the KVKK Law, titled “Transfer of Personal Data”, allows the transfer of personal data without seeking explicit consent under the conditions specified in Articles 5/2 and 6/3. These conditions are:
In terms of personal data:
- Explicitly stipulated by laws,
- If the person is unable to express their consent due to actual impossibility or if their consent is not legally recognized, it is mandatory for the protection of the life or physical integrity of the person or another person,
- Necessary for processing the personal data of the parties of a contract, provided that it is directly related to the establishment or execution of the contract,
c) Mandatory for the data controller to fulfill its legal obligation, - Being made public by the data subject,
- Mandatory for establishing, exercising, or protecting a right,
- Mandatory for processing data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,
- In the absence of these reasons, your personal data can be transferred with your explicit consent.
- As part of the activities covered by this information text, your special category personal data are not processed, so they will not be subject to transfer. However, if there are special category personal data among the data you have made public as stated above, in this case, the transfer can only be possible in the following cases as per Article 6/3:
- Personal data other than health and sexual life may be processed without seeking explicit consent in cases stipulated by laws,
- Personal data related to health and sexual life may be processed without seeking explicit consent only for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, by persons or authorized institutions and organizations under the obligation of confidentiality,
- If none of these conditions exist, explicit consent will be obtained.
- For example, the transfer of personal data can be shown as storing the collected personal data on a server located within the country for storage purposes or sending them to relevant public institutions and organizations in the event of an administrative or criminal investigation or litigation arising from educational activities. In this context, upon request, we can transfer your personal data to public institutions (Ministries and Presidential boards, and other public institutions and organizations) specified in the law within the purposes and limitations stipulated by the law.
Methods of Collecting Personal Data
Your personal data can be collected automatically or non-automatically, verbally, in writing, or electronically through all contracts/information forms and other documents regulated with your consent and/or signature, website, social media platforms, mobile applications, and similar means.
What Are Your Rights as a Related Person Under Article 11 of the KVKK Law?
The rights of real persons whose personal data are processed as per Article 11 of the KVKK Law are as follows;
- To learn whether personal data are processed or not,
- If personal data has been processed, to request information regarding this,
- To learn the purpose of processing personal data and whether they are used appropriately for their purpose,
- To know the third parties in the country or abroad to whom personal data has been transferred,
- If personal data are processed incompletely or inaccurately, to request their correction and to request notification of the operations made within this scope to third parties to whom personal data has been transferred,
- Despite being processed in accordance with the provisions of the KVKK Law and other related laws, to request the deletion or destruction of personal data in case the reasons necessitating their processing cease to exist and to request notification of the operations made within this scope to third parties to whom personal data has been transferred,
- To object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
- To request compensation for the damage in case of loss due to unlawful processing of personal data.
Your applications regarding the processing of your personal data should be submitted to our office in writing or via registered electronic mail (KEP) address, secure electronic signature, mobile signature, or by using the electronic mail address previously notified to us and recorded in our records, in accordance with Article 13/1 of the Law.
CONTACT INFORMATION
Assoc. Dr. Sedar Tatar Clinic
Telephone No: +90 (555) 100 10 83
Contact Link: [email protected]
Address: Levent District, Karanfil Araligi Street No: 18 Besiktas/ISTANBUL