Information Text on the Processing and Protection of Personal Data

Dear Guests / Patients,

At the address “Öğretmenevleri Mah. 922. Sok. No:1 Bilgin Duran Plaza K: 2 D: 21-22 Konyaaltı/Antalya,” Uzman Dr. Mezihat BEYOĞLU, who acts as the Data Controller under the Law on the Protection of Personal Data No. 6698 (“KVKK”), adopts the principle of “protecting patient confidentiality” while providing services and respects the privacy of both patients and their relatives regarding their rights to the protection of personal data. Accordingly, this information text has been prepared to inform you about the collection and protection of your Personal Data and Special Categories of Personal Data, as well as your rights regarding your Personal Data under KVKK, in order to protect your fundamental rights and freedoms.

Any transaction performed on Personal Data under KVKK is considered as “processing of personal data.”

1. Processed Personal Data

Your personal and special categories of personal data, including but not limited to, your health data, which is considered as Special Categories of Personal Data under KVKK, include: name, surname, T.C. Identity number and/or passport number and/or temporary T.C. Identity number, photograph, place and/or date of birth, marital status, gender, and other identity data that can identify you in your identity document; address, phone number, email address, and other communication data; voice recording obtained through call center standards held by customer representatives and/or patient services when you contact us via email, letter, and/or other means; financial data such as bank account number, IBAN number, credit card information, invoicing, and invoice details; data related to private health insurance for the financing and planning of health services; information about the payer institutions such as the Social Security Institution; patient medical reports, diagnostic data, laboratory results, test results, examination data, doctor analyses and comments, appointment information, prescription information, and all health information and data obtained during the execution of medical diagnosis, treatment, and care services and/or as a result of these services; data you send or enter on our website; IP address, cookies, and other personal data; as well as any other personal data obtained in direct connection with the provision of the service (“Personal Data/Special Categories of Personal Data”), can be processed by Uzman Dr. Mezihat BEYOĞLU in a relevant and proportionate manner, as stated in Article 2, and may be transferred to the persons, institutions, and organizations specified in Article 3.

Pursuant to Articles 5 and 6 of the KVKK, your Personal Data may be processed without your explicit consent in the following cases:

  • When explicitly foreseen in the laws,
  • When you cannot express your consent due to physical impossibility or in cases where your consent has no legal validity, and processing of your personal data is necessary for the protection of your life or bodily integrity or that of another person,
  • When processing of Personal Data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract,
  • When necessary for the fulfillment of a legal obligation,
  • When your Personal Data has been made public by you,
  • When processing of your data is necessary for the establishment, exercise, or protection of a right,
  • When processing of your data is necessary for the legitimate interests of our clinic, provided that it does not harm your fundamental rights and freedoms,
  • Your health and sexual life-related Personal Data may only be processed without your explicit consent for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and planning and management of health services and financing, by persons or authorized institutions and organizations bound by the obligation of confidentiality.

2. Purposes of Personal Data Processing

Your Personal Data may be processed by Uzman Dr. Mezihat BEYOĞLU for the following purposes:

  • To fulfill our legal obligations under the Law on the Protection of Personal Data No. 6698, the Basic Law on Health Services No. 3359, the Decree Law on the Organization and Duties of the Ministry of Health and Affiliated Institutions No. 663, the Regulation on Private Health Institutions Providing Oral and Dental Health Services, the Regulation on the Processing of Personal Health Data and Ensuring Privacy, regulations of the Ministry of Health, and other relevant legislation,
  • To keep the information regarding your health data that must be kept under relevant legislation,
  • To prevent unauthorized access to your Personal Data by identifying and verifying your identity,
  • To protect public health, provide preventive medicine, conduct medical diagnosis, treatment and care services, and plan and manage health services and financing,
  • To share the requested information with the Ministry of Health and other public institutions and organizations under relevant legislation,
  • To provide information to prosecutors, courts, and relevant public officials upon request and as required by law in matters related to public safety and legal disputes,
  • To provide you with specific medication and/or medical supplies and/or devices,
  • To plan and manage the internal processes of the clinic, improve services, perform analyses, manage risks, and evaluate quality processes,
  • To inform you about your appointments if you have made one, provide information, and/or remind you of your appointment,
  • To carry out risk management and quality improvement activities,
  • To meet legal and regulatory requirements,
  • To query your eligibility with partner institutions/organizations or provide financial reconciliation regarding the health services offered to you by these institutions,
  • To share information requested by private insurance companies and other partner institutions/organizations within the scope of financing health services and verify identity,
  • To issue invoices for the services we provide,
  • To take all necessary technical and administrative measures to ensure data security of systems and applications,
  • To analyze your use of the services we provide and store your data to improve and enhance these services, and to respond to your inquiries or complaints regarding our services,
  • To provide the necessary information to regulatory and supervisory institutions, and official authorities as required,
  • To keep the information regarding your health data that must be stored under relevant legislation,
  • To comply with internal policies and principles,
  • To measure and increase your satisfaction after receiving services from partner institutions/organizations,
  • To carry out promotional and informational activities specific to you and ensure your benefit, and to contact you for the purpose of informing you about our services.

Your Personal Data and/or Special Categories of Personal Data obtained and processed in accordance with relevant legislation may be kept by Uzman Dr. Mezihat BEYOĞLU in physical archives and/or transferred to information systems, both in digital and physical environments for the legal periods.

3. Transfer of Personal Data

By ensuring that all necessary technical and administrative measures are taken to ensure an appropriate level of security, your Personal Data and/or Special Categories of Personal Data may be transferred to the persons/institutions/organizations permitted by the provisions of the Insurance Law, Commercial Law, Law on the Protection of Personal Data No. 6698, and other relevant legislation, limited to the purposes specified in Article 2; including private insurance companies, healthcare institutions, other healthcare providers for consultation purposes, banks, funds, foundations; directly/indirectly domestic/international shareholders, auditors, consultants, business partners, and other real and/or legal third parties with whom we have contracted to carry out our activities.

With your explicit consent, your Special Categories of Personal Data may be displayed to candidate patients in the clinic. With your explicit consent, your qualified health data, including photographs and videos, may be transferred to international scientific organizations.

Your personal data related to the services you receive may be transferred to third parties in Turkey as well as abroad under the conditions and purposes of personal data transfer specified in Articles 8 and 9 of the Law, including but not limited to private insurance companies, the Ministry of Health and its affiliated units, the Social Security Institution, the General Directorate of Security and other law enforcement agencies, the General Directorate of Population, the Turkish Pharmacists’ Association, Turkish courts, and all judicial authorities, your authorized representatives, lawyers, tax and financial advisors, and consultants, as well as regulatory and supervisory institutions, and official authorities with whom we cooperate to improve or provide healthcare services.

4. Methods of Collecting Personal Data and Legal Grounds

Your Personal Data is collected through explicit legal grounds provided in laws, by filling out consent forms, or verbally, in writing, visually or electronically, via telephone, SMS, MMS, or other telecommunication communication means, through the Social Security Institution system online, from records shared in case of benefiting from private insurance, from emails you send, call center call records, the website, written, printed and similar channels, and is stored in both physical and digital environments.

Your Personal Data will be destroyed by us (through deletion, destruction, or anonymization methods) when the purpose of processing no longer exists and/or when the storage periods have expired, in accordance with Article 7/f.1 of the KVKK.

5. Rights of the Personal Data Owner

According to Article 11 of the Law, as a personal data owner, you have the following rights:

  • To learn whether your personal data is being processed,
  • To request information about your personal data if it has been processed,
  • To learn the purpose of processing your personal data and whether they are used in accordance with that purpose,
  • To know the third parties to whom your personal data is transferred, domestically or abroad,
  • To request correction of your personal data if they are incomplete or inaccurately processed, and to request that the third parties to whom your personal data has been transferred are notified of such correction,
  • To request deletion or destruction of your personal data if the reasons for processing have been eliminated, despite being processed in accordance with the Law and other relevant laws, and to request that the third parties to whom your personal data has been transferred are notified of such deletion or destruction.

According to the “Communiqué on the Procedures and Principles for Applications to the Data Controller,” published in the Official Gazette dated March 10, 2018, and numbered 30356, if the response to the data owner’s application is to be given in writing, no fee will be charged for up to ten pages. A processing fee of 1 Turkish Lira may be charged for each page exceeding ten pages. If the response to the application is provided on a storage medium such as a CD or flash drive, the fee that can be requested cannot exceed the cost of the storage medium.