ASSOC.PROF.TEACHER DR. HASAN ERSÖZ CLINIC
INFORMATION/EXPLANATION STATEMENT REGARDING THE PROCESSING OF PERSONAL DATA
This information text has been prepared to inform you about which of your personal data is processed, for what purpose, how and for what purpose, with whom it is shared and for how long it is stored by the data controller. The information is collected within the scope of Article 10 of the Law on the Protection of Personal Data No. 6698.
As ASSOC. PROF. DR. HASAN ERSÖZ CLINIC, we prioritize the patient’s right to privacy in our clinical activities. For this purpose, we implement the necessary procedures for the processing and storage of the personal data of the persons related to our clinic/services, our patients, patient relatives, employees and employees who benefit from the health services/consultancy services we provide, in accordance with the Constitution of the Republic of Turkey and the international human rights agreements to which Turkey is a party.
Law on the Protection of Personal Data No. 6698 (“LPPD”).
In accordance with the KVKK and as the Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties, classified, anonymized when necessary, rendered unidentifiable when necessary, destroyed and processed in the ways listed in the KVKK in connection with and proportionate to our activities and service purposes.
With this Disclosure Text, we provide explanatory information as the “Data Controller” regarding how we process your personal data obtained within the scope of the health services we provide (what type of personal data we collect, how we collect it, how we use it, how we protect it, how we transfer it, how we delete it, etc.).
Below, ASSOCIATE PROFESSOR DR. Information regarding HASAN ERSÖZ’s processing of your personal data as the data controller is included:
COLLECTION AND PROCESSING OF PERSONAL DATA
We collect various information from our patients and/or, when necessary, from our patients’ legal representatives/guardians, our employees and third parties related to our clinic within the scope of the service we provide before and/or during the health service we provide. This information is collected in accordance with the data processing principles and conditions in the KVKK No. 6698 in all cases.
Among the special personal data, the health data of the relevant persons can only be processed by persons or authorized institutions and organizations under the obligation of confidentiality, without the explicit consent of the relevant person, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning, management and financing of health services. In addition, all special personal data, regardless of their type, can only be processed in accordance with the law if the adequate measures specified in the KVKK are taken.
Your personal data shared with us within the scope of the services we provide in our polyclinic are obtained, recorded, stored, changed, rearranged and collected by automatic or non-automatic methods through all kinds of channels including websites, surveys, social media applications such as social responsibility and verbal, written, visual or electronic environments for the purpose of preventive medicine, medical diagnosis, treatment and care services and health services provided by ASSOCIATE PROFESSOR DR. HASAN ERSÖZ.
KVKK accepts any transaction performed on data as “processing of personal data”.
According to KVKK, your personal data is collected by automatic or non-automatic means, verbally, in writing or electronically through the methods listed below and other channels that may be added to these in the future and processed within the scope of Articles 5.1, 5.2, 6.2 and 6.3 of KVKK.
Correspondence made through our e-mail addresses, text messages or other communication methods, including multimedia messages sent to the data controller and data operator for other purposes, will be processed automatically or non-automatically in written, verbal or electronic form via Google Drive and all other electronic software systems. The processed data will be protected using virus protection software.
Data will be processed automatically or non-automatically verbally or electronically via any website, social media or other channels where Personal Data is publicly available.
In addition, your personal data may be processed through your use of our consultation line or website, your visit to our clinic or website and your browsing on this site for other purposes related to information, appointment, complaint or service provision.
In addition, the Data Controller, ASSOC. PROF. DR. HASAN ERSÖZ, is not among the persons to whom ASSOC. PROF. DR. HASAN ERSÖZ transfers and shares data as the data controller of the posts made on the websites named “Doctor Calendar” or “Doctor Site”. The data controller cannot be held responsible for data breaches that occur as a result of the registrations and applications made through these websites.
TYPES OF PERSONAL DATA COLLECTED
Although the data content varies depending on the health service provided or to be provided to the patient or legal entity (employee, consultant, etc.) in our clinic, examples of personal data collected for the purposes specified in Section 3 are given below:
Personal Information: Your name, surname, copy of your identity document or passport or driver’s license, your Turkish identity number, passport number or temporary Turkish identity number, place and date of birth, marital status, gender, insurance or patient protocol number and other data that can be used to identify you.
Contact Information: Address, telephone number, contact number, e-mail address and other contact information of the representative or guardian or authorized relative, contact and address information of the representative or guardian, records of calls made with the helpline and personal data obtained when contacting us via e-mail.
Account Information: Data such as bank account number, IBAN number, credit card information, invoice information.
Data related to private health insurance and/or Social Security Institution data for the purpose of financing and planning health services.
Pre- and post-operative photographs.
Pre- and post-operative photographs.
Health Information: All kinds of personal data related to health and sexual life, including but not limited to laboratory results, examination results, examination data, prescription information obtained during or as a result of medical diagnosis, treatment and care services.
Biometric and other data: Photographs related to health service provision.
In case of video call consultancy service provided via remote connection systems, identity information, contact information, health information and related sexual life and genetic data, as well as visual and audio data organized by the Consultant, Interview Records/Customer Files. In general, all kinds of private and/or general Personal Data shared with our clinic/ASSOCIATE PROFESSOR DR. HASAN ERSÖZ through various channels are within the scope of data.
collected.
PURPOSE OF COLLECTING PERSONAL DATA
Specific personal data and/or general personal data shared with us;
processed:
To fulfill legal obligations under the Health Services Fundamental Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, Regulation on Private Health Institutions for Outpatient Diagnosis and Treatment, Personal Health Data Regulation and other relevant legislation,
To store data within the scope of our contractual obligations,
To protect information regarding health data that must be stored,
To share the requested information with the Ministry of Health and other public institutions,
Institutions and organizations in accordance with the relevant legislation,
To protect public health, provide preventive medicine, medical diagnosis, treatment services,
and care services,
To provide information to prosecutors, courts and relevant public officials on matters related to public safety and legal disputes upon request and when necessary,
In accordance with the legislation,
Security,
To provide health and consultancy services, including preventive health services,
For the planning and management of financing for the provision of health services,
Video Consultancy For Service Delivery,
To take all necessary technical and administrative measures within the scope of the data
To plan and manage the internal functioning of the clinic, to develop services,
To analyze quality processes, manage risk and evaluate,
To provide information to patients about appointments,
To monitor and prevent fraud and unauthorized transactions,
To issue freelance receipts in return for the services we provide,
To verify identity,
To respond to all your questions and complaints about our health services,
To measure patient satisfaction and increase patient satisfaction, train and develop
employees,
To supply medicines or medical devices,
To carry out risk management and quality improvement activities,
To provide information by Marketing, Media and Communication, hotline departments, to design and promote special content, to announce tangible and intangible benefits,
web and mobile channels and public information applications,
To ensure the implementation of our clinic’s human resources policies; to increase the performance level and employee satisfaction, to fulfill the obligations stipulated by the Labor Law and labor and social security legislation and other legislation in force,
To protect the data of our employees, to ensure occupational safety and peace;
For these purposes, all your personal data may be processed.
Your personal data may be transferred to physical archives and/or information systems within our Company.
It is stored in clinics and/or contracted institutions and is kept in both digital and physical environments.
EXPLICIT CONSENT IN PROCESSING PERSONAL DATA
Within the scope of Articles 5 and 6 of the KVKK, “Personal data cannot be processed without the explicit consent of the relevant person”. However, the following situations are listed as exceptions:
This situation:
If it is explicitly provided for in the laws.
If it is mandatory for the protection of the person’s life or physical integrity,
The consent of a person who cannot express his consent or whose consent is not legally valid or of another person.
The processing of personal data belonging to the parties to the contract is necessary,
provided that it is directly related to the establishment or performance of a contract.
It is mandatory for the data controller to fulfill its legal obligation.
Data processing is mandatory for the establishment, exercise or protection of a right. Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.
However, it should be noted that these exceptions do not apply to all personal data of a special nature and in all cases. Data related to race, ethnicity, political views, philosophical beliefs, religion, sect or other beliefs, dress code, association, foundation or union membership, health, sexual life, criminal conviction and security measures, as well as biometric and genetic data are sensitive personal data and cannot be processed without the explicit consent of the relevant person. If regulated by law, explicit consent is not required for personal data other than health and sexual life.
Personal data related to health and sexual life can only be processed by persons or authorized institutions and organizations under a confidentiality obligation for the purposes of protecting public health, conducting preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, without seeking the explicit consent of the relevant person.
Therefore, due to the provision of preventive medicine and other health services, we process our patients’ health data and, when necessary, their sexual life data without obtaining explicit consent.
In cases stipulated by law, we process special data other than health and sexual life without obtaining explicit consent.
We process all your other private and personal data with your explicit consent.
PERIOD OF PROCESSING PERSONAL DATA
In summary, personal data will be processed in accordance with the law and the rule of honesty, in connection with the purposes of processing, limited and proportionate, accurate and up-to-date, specific, clear and legitimate purposes.
Personal Data will be processed in accordance with the legislation on the protection of personal data, especially the KVKK, and the periods stipulated in other legislation (statute of limitations, legal periods such as legitimate interest periods) as long as the purposes specified in this text exist. The storage period for health data is 20 years as a rule.
PERSONS AND ORGANIZATIONS TO WHICH YOUR PERSONAL DATA MAY BE TRANSFERRED
Personal data may be transferred to institutions or organizations permitted by the Health Services Fundamental Law No. 359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Health Institutions for Outpatient Diagnosis and Treatment, the Personal Health Data Regulation and other relevant legislation provisions, the Ministry of Health and its affiliated units, law enforcement agencies and similar law enforcement agencies affiliated to the Ministry of Internal Affairs, prosecution authorities, courts, other official authorities authorized by law, private insurance companies, in the event of a possible legal dispute, to our lawyers, consultants, auditors, business partners, laboratories, centers and similar third parties with whom we cooperate for health services, domestic organizations and other third parties from whom we receive services under contract to carry out our activities.
In addition, the personal data subject to the disclosure text, those transferred for the purpose of fulfilling legal obligations and fulfilling obligations arising from the employment contract and legislation, and other places to which they are transferred are listed below:
Identity/Social Security Institution, financial advisors, suppliers
Professional experience/Social Security Institution, financial advisor
Finance/Social Security Institution, financial advisor
Professional experience/Social Security Institution, financial advisor
Health information/Social Security Institution, Joint Health and Safety Unit, suppliers, private insurance companies
Physical location security/Authorized public institutions and organizations
Personnel/Natural persons or private law legal entities
WHAT SHOULD WE DO IF THERE ARE CHANGES IN PERSONAL DATA?
In case of any change in personal data, our clinic must be informed in order to update the records. In addition, in accordance with our procedures, confirmation will be requested to check the accuracy and up-to-dateness of personal data such as contact and address data.
PERSONAL DATA OF CHILDREN
In accordance with the laws of the Republic of Türkiye, we may process the personal data of persons under the age of 18 with the consent of their parent or guardian in cases where explicit consent is required.
METHODS OF COLLECTING PERSONAL DATA
Personal data of employees, job candidates, potential product or service buyers, product or service buyers (hereinafter referred to as “patients”), supplier employees, supplier officials and visitors are collected in the following ways:
Personal data of patients, through the physical presentation of documents by the relevant person
Patient medical history, through the relevant person presenting the medical history form in a physical environment or sending it via virtual methods such as e-mail
Non-automatic methods
Personal data of patients are obtained by the relevant person filling out the form in a physical environment and verbally declaring their personal data.
RIGHTS OF THE PERSONAL DATA OWNER
According to Article 11 of the KVKK No. 6698, the rights of the Personal Data Owner are as follows:
To apply to us in accordance with the legislation regarding your processed personal data,
To learn whether your personal data has been processed, To request information regarding this if your personal data has been processed,
To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
To learn the third parties to whom the data is transferred domestically and abroad,
To request correction of personal data if they are processed incompletely or incorrectly,
To request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK (since the storage of personal data within the scope of health is mandatory within the scope of legislation, the right to deletion will be evaluated in accordance with the Personal Health Data Regulation),
To request notification of these transactions to third parties to whom personal data is transferred in the event of correction, deletion or destruction of personal data, (since the storage of personal data within the scope of health is mandatory within the scope of legislation, the right to deletion will be evaluated in accordance with the Personal Health Data Regulation),
To analyze the processed data exclusively through automated systems object to the emergence of a result against the person,
You have the right to demand compensation for the damages if you suffer damages due to the unlawful processing of your personal data.
Consent can be withdrawn at any time.
In addition, when approval is received for the processing of personal data for a specific purpose (e.g. for a research project, scientific studies) or to conduct informative promotional activities, the approval
can be withdrawn at any time.
In this context, you can forward your requests regarding the above-mentioned rights to our e-mail address specified below by creating a request that meets the conditions determined by the Personal Data Protection Authority and sending it via an e-mail address previously notified to us and registered in our system, or you can send it to our “kep” address with a secure electronic signature or mobile signature, or to our postal address specified below with a wet-signed petition, by hand or via a notary public, or by other methods that may be added by the Personal Data Protection Authority in the future. Your request will be finalized free of charge as soon as possible and within 30 (thirty) days at the latest, depending on its nature. These applications are free of charge and if the procedure requires an additional cost in accordance with the second paragraph of Article 13 of the Law, the fee in the tariff determined by the Board will be collected by our clinic/ASSOCIATE PROFESSOR DR. HASAN ERSÖZ.
Address: Kazımdirik Mah. 184 Sk. No:63 K:1 D:1 Bornova / İZMİR/TURKEY
E-Mail: info@drcurver.com