As Dr. Ceyhun Aydoğan, operating at “Tugay Yolu Street, No: 20/B No: 19, Ofisim İstanbul, 34844 Maltepe/Istanbul,” we hereby declare that we place great importance on the confidentiality and security of your personal data in our capacity as a data controller within the scope of the Personal Data Protection Law No. 6698 (KVKK). Your personal data is recorded and stored in accordance with KVKK.
- Definitions
– Personal Data: Any information relating to an identified or identifiable natural person.
– Personal Data Protection Law (KVKK): Law No. 6698, which was published in the Official Gazette on April 7, 2016, and came into force on that date.
– Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller.
– Data Controller: The person or organization that determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Dr. Ceyhun Aydoğan acts as a data controller in accordance with KVKK.
- Your Processed Personal Data
The personal data processed are listed below:
– Identity Data: Your name, surname, Turkish ID number, passport number or temporary Turkish ID number, place and date of birth, marital status, gender, protocol number specific to our clinic, signature.
– Contact Data: Your address, phone number, email address, and other contact details.
– Health Data: All health data obtained during the execution of medical diagnosis, examination, treatment, and care services, including health reports and blood type.
– Financial Data: Your payment and billing information such as IBAN, invoice details, tax number, and data related to your private health insurance.
– Visual and Audio Data: Any visual and audio information that may be obtained by us at various times.
– Physical Space Security: CCTV camera recordings.
- Method of Collecting Personal Data, Processing, and Purposes of Processing
Collection Method:
Your personal data are collected through automatic or non-automatic methods, verbally, in writing, or electronically, for the purpose of providing you with higher standards of healthcare services in accordance with the legal grounds specified in Articles 5 and 6 of KVKK.
Purposes of Processing:
Your personal data may be processed for the following purposes:
– Verifying your identity,
– Handling your appointment requests and providing information about appointments,
– Executing and improving medical diagnosis, treatment, and care services,
– Conducting billing processes for the healthcare services provided and benefiting from state incentives and support programs related to health tourism,
– Complying with legal obligations towards the Ministry of Health and other public institutions,
– Sharing necessary information with relevant insurance companies and judicial authorities under professional liability insurance,
– Providing information regarding any inquiries or complaints,
– Monitoring and preventing abuse and unauthorized transactions,
– Ensuring necessary technical and administrative measures related to data security,
– Managing information security and physical security processes,
– Archiving to fulfill retention obligations under relevant legislation,
– Enhancing scientific and academic research,
– Managing employment and recruitment processes,
– Fulfilling obligations arising from employment contracts,
– Ensuring business continuity and conducting operations,
– Conducting market research, promotional, and informational activities,
– Planning and managing the financing of healthcare services.
- Legal Grounds for Processing Personal Data:
In accordance with the principles outlined in Article 4 of KVKK, your data is processed based on the legal grounds stated in Articles 5(2) and 6(3) of KVKK. The legal grounds for processing your personal data are as follows:
For your personal data:
– Clearly provided for by law (KVKK Art. 5/2-a).
– It is impossible to obtain consent due to actual impossibility (KVKK Art. 5/2-b).
– Directly related to the establishment or performance of a contract (KVKK Art. 5/2-c).
– Required for compliance with a legal obligation (KVKK Art. 5/2-ç).
– Necessary for the establishment, exercise, or protection of a legal right (KVKK Art. 5/2-e).
For your special categories of personal data:
– Necessary for the protection of public health, preventive medicine, medical diagnosis, treatment, and care services, as well as the planning, management, and financing of healthcare services, by persons or authorized institutions and organizations under confidentiality obligations (KVKK Art. 6/3-e).
– Necessary for fulfilling legal obligations in the areas of employment, occupational health and safety, social security, social services, and social assistance (KVKK Art. 6/3-f).
- Transfer of Personal Data:
Your personal data may be shared with the following persons and institutions in accordance with legal regulations and the purposes explained above and in compliance with the basic principles stipulated in KVKK:
– Medical Diagnosis and Treatment Cooperation: Laboratories, hospitals, and other healthcare providers with whom we collaborate.
– Public Institutions: The Ministry of Health and other public institutions and organizations.
– Private Insurance Companies: The insurance companies from which you receive services under private health insurance.
– Organizations We Work With to Conduct Our Activities: Business partners, suppliers, IT service providers, and other service providers with whom we have established contractual relationships.
– Other Natural or Legal Third Parties: Other third parties deemed necessary for the execution of healthcare services.
– Judicial Authorities: Courts and judicial authorities.
– Authorized Public Institutions and Organizations: Authorized regulatory institutions and authorities.
– Lawyers and Consulting Services: Our authorized lawyers and third-party consultants when necessary.
Additionally, your personal or special categories of data may only be shared with the individuals or organizations you specify via email or physical delivery, at your request.
- Data Retention Period:
Your personal data will be processed in accordance with the legal retention and statute of limitations periods specified in the laws, primarily the health legislation and other relevant legal regulations, in line with the purposes outlined above. If there are any changes to the data processing periods stipulated by the laws, the newly determined periods will be applied.
- Data Subject’s Rights under Article 11 of the Law:
As a data subject, we remind you that, in accordance with Article 11 of the Personal Data Protection Law No. 6698 (KVKK), you have the following rights:
– Learning the Processing Status: To learn whether your personal data is being processed.
– Access to Processed Data: To request information regarding the processed personal data if it has been processed.
– Learning the Purposes of Processing: To learn the purpose of processing your personal data and whether it is being used in accordance with the purpose.
– Information on Third-Party Transfers: To learn about third parties to whom your personal data has been transferred, domestically or abroad.
– Correction of Data: To request the correction of your personal data if it has been processed incompletely or inaccurately, and to request notification of this correction to the relevant third parties.
– Deletion of Data: To request the deletion or destruction of your personal data when the reasons for processing no longer exist, and to request that this deletion be communicated to the relevant third parties.
– Objection to Automated Processing: To object to the emergence of a result against you by analyzing your processed data exclusively through automated systems.
– Compensation for Damages: To request compensation if you suffer damages due to the unlawful processing of your personal data.
