www.klinikemel.com

LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA ( PDPL)

INFORMATION AND CLARIFICATION TEXT

As https://klinikemel.com; we pay utmost attention to the processing and protection of your personal data. In accordance with the Law on the Protection of Personal Data, the Basic Law on Health Services, the Regulation on Personal Health Data, the Regulation on Private Health Institutions Providing Oral and Dental Health Services, the Regulation on Private Hospitals, the Patient Rights Regulation and the relevant legislation, as the data controller; All necessary technical and administrative measures are taken to prevent unlawful processing of personal data, to prevent unlawful access to personal data, and to ensure the preservation of personal data.

Pursuant to Article 10 of the Law on the Protection of Personal Data; we inform you with the policies and this clarification text created to cover our patients, patient companions, patient relatives, visitors, hospital managers and employees, employee candidates, suppliers, service providers and their managers and employees, business / solution partners, company partners, employee candidates, interns, employees of public institutions and organizations and private law legal entities with which we are in contact, and relevant third parties. This disclosure text has been prepared by the data controller https://klinikemel.com within the scope of Article 10 of the Law on the Protection of Personal Data (“Law”), Article 5/8 of the Regulation on Personal Health Data and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation.

1-Data Supervisor

“https://klinikemel.com” processes your personal data in the capacity of “Data Controller” as defined in Article 3 of the Law No. 6698 on the Protection of Personal Data.

2-Purpose for which Personal Data will be Processed

Your personal data collected in accordance with the Law on the Protection of Personal Data, the Basic Law on Health Services, the Regulation on Personal Health Data, the Regulation on Private Health Institutions Providing Oral and Dental Health Services, the Regulation on Private Hospitals, the Regulation on Patient Rights and the relevant legislation, in accordance with the principles stipulated in the law, in whole or in part, automatically or by non-automatic means, provided that it is part of any data recording system, is obtained, recorded, stored, stored, modified, rearranged and processed.

Your personal data are processed for the following purposes within the scope of company activities in accordance with Articles 4, 5, 6 of the Law and the relevant legislation:

• Ensuring the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and managing the financing of health services,
• In accordance with the relevant legislation to which we are subject, to share the information we obtain on health services with the Ministry of Health, Social Security Institution and other relevant public institutions and organizations, to respond to the requests of the institutions, to make the necessary notifications to the relevant public institutions and organizations, and to fulfill legal obligations,
• To ensure that the data that must be kept in accordance with the legislation within the scope of the health service we provide are maintained,
• To confirm your identity, to confirm your legal contact with contracted institutions within the scope of the health services provided, to ensure billing and financial reconciliation, to notify the relevant institutions and organizations such as judicial cases arising from the legislation,
• Within the scope of our health services, making appointments, creating appointments, providing necessary information, ensuring patient, patient relatives and visitor satisfaction, following up requests and complaints, conducting examinations and evaluations required by the health services provided,
• Improving company services, maintaining corporate development activities, maintaining advertising and marketing activities, maintaining the company’s finance and accounting, administrative, legal and technical business processes, fulfilling risk management and quality improvement processes,
• Planning and execution of human resources processes, fulfillment of labor application processes, creation of personal files for employees, fulfillment of financial obligations, determination of the company’s wage policy,
• Establishing and ensuring the execution of contracts made or to be made between our Company and patients, suppliers, service providers, employees and consultants, relevant institutions and organizations, third parties with whom it has a legal relationship,
• The Company’s burden of proof as evidence in legal disputes with third parties,
• Ensuring communication between our Company and relevant persons and organizations, providing the necessary contact through our website, online applications, live support services, social media accounts, maintaining the necessary processes for you to fill out the relevant electronic and physical forms, ensuring the transaction security of the relevant persons,
• Providing necessary information to regulatory and supervisory authorities and private legal entities,
• To ensure the procurement of medical drugs, materials or devices, invoicing and payment transactions related to the services provided;
• Monitoring the security of our patients, visitors, employees and relevant third parties, ensuring legal, technical and commercial business security, preventing criminal behavior of third parties, ensuring the physical security of the company building and its annexes and its surroundings by means of a closed circuit camera recording system,
• Ensuring performance evaluation, attendance and control through the personnel attendance control system, controlling the entrances and exits of the company building and its annexes within the scope of the employment contract made with the employees, for the benefit of the company,

In line with the purposes written above, your personal data written below are processed, limited to the activities of the company.

• Your Identity Information (Turkish ID / foreign ID number, your name and surname, place and date of birth, mother and father’s name, marital status, gender, identity information on your passport, foreign identity document, driver’s license, identity information on your identity document or other identity information on the identity sharing system, patient number, patient protocol number for patients)
• Your contact information (phone numbers, contact address, e-mail address, residence, work address)
• Personal Information (Personal information on the contracts filled out in terms of employees, interns, education, diploma information, certificate information, social security registration number information, general health insurance, private health insurance information, SSI employment, exit declaration, identity information written on the family status declaration, dependents, spouse, child proximity information, population registration information of family members, embezzlement certificate received according to the nature of the work, work certificate, resignation, termination, severance and notice payroll, payroll information, disciplinary investigation information, service breakdown, resume information, leave information, occupational information, reference information, bank account information, IBAN number information, survey information, personal information received within the scope of occupational health and safety, military service information, personnel attendance control system, personal information received through personnel cards in order to ensure entry and exit transactions to the relevant units, information contained in the job application form,)
• Financial Information (Billing and payment information, bank account number, IBAN number, credit card information, private insurance information within the scope of financial payment, policy information, General Health Insurance information, financial information received within the scope of notifications to be made to the SSI and the Ministry of Health, payroll, expense advance information, tax identification number, tax office information, personal information on invoices, delivery notes, signature circulars, delivery and receipt documents, information contained in the annexes of contracts with third parties)
• Legal Transaction Information (Legal contact with the relevant persons and the services provided, personal information in correspondence with courts, prosecutor’s offices, mediators, arbitration committees, judicial authorities within the scope of legal disputes, information in lawsuit and execution files, identity, contact, location information processed in the system in legal notifications required to be made to the security directorates for identity verification in terms of patients, companions, patients, patient relatives, visitors during their visits to our hospital, personal information contained in the minutes, forms kept in legal disputes and other cases, personal information contained in the forms received, notified, recorded and filled in through communication, website, call center within the scope of the “White Code Application” established by the Ministry of Health in terms of healthcare professionals, death examination, autopsy procedures, correspondence within the scope of forensic medicine, transactions made, information contained in the documents issued)
• Professional experience information (Education status information, school, diploma information, working life, reference information, internship, seminar, hardware, software, computer knowledge, foreign language knowledge, former workplace, institution information, courses attended, vocational training information, certificates, driving license information, other information in the reported forms, specialization, title, duty information),
• Audio and Visual Records (Health reports issued within the scope of the Company’s activities, your photographs on documents, your voice recordings during calls with call centers during the creation of appointments, communication with the company and follow-up of request and complaint processes, job application forms, printed forms filled in electronic and physical environments, photograph information on your documents and official identity documents, your photographs, videos / images in camera recordings shared on the company website, our social media accounts or written and visual media, third party social media channels for the protection of public health, medical diagnosis, treatment and care services, promotion and information purposes)
• Physical Space Security Information (Your camera recording information that takes video and audio recordings, security exit book information, information in the forms kept, vehicle license plate information),
• Within the scope of the company’s activities, in accordance with the employment contract and the legitimate interests of the company, for the purposes of promotion, advertisement and information, on the company website, social media accounts, mobile applications, promotional brochures, professional experience, promotion, information, resume and photograph information of the employees,
• For the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, images of patients in photographs and videos shared in written, visual media, websites, social media accounts with the explicit consent of the person concerned by persons under the obligation of confidentiality or authorized institutions and organizations, personal data,
• Request and Complaint Information (Information on the evaluation and management process regarding the requests and complaints of the relevant persons received through information and records collected from electronic and physical media, internet and social media, online channels, call center)
• Information on Criminal Conviction and Security Measures (Criminal record, conviction, conviction information, judicial status information),
• Health Information (Processed within the scope of the activities of protecting public health, preventive medicine, medical diagnosis, treatment and care services in terms of patients; examination, all kinds of laboratory, imaging and test results, patient diagnosis, diagnosis, treatment, prescription, drug information, doctor analysis and comments, patient history (anamnesis) information, examination information, diagnosis and prescription information, health reports and all health information received within the scope of health services, health status information written in the job application form, health reports for employees, health tests, blood group information, personal health and physical disability status information, health board reports, your personal data regarding diagnosis and treatment procedures are processed)

Pursuant to PDPL No. 6698, your personal data that you share with our clinic are processed by our clinic by obtaining, recording, storing, storing, changing, rearranging, and subject to any kind of processing performed on your personal data, in whole or in part, automatically or by non-automatic means, provided that it is part of any data recording system. The personal data processed by the Company within the scope of its activities are processed in accordance with the relevant legislation for the following purposes.

For their purposes, your personal data are processed in accordance with the conditions and purposes determined in accordance with Articles 4, 5 and 6 of the Law. Your personal data will not be used for any other purpose other than the activities of our clinic.

3-To whom and for what purpose the processed personal data can be transferred

Your personal data processed by our company is transferred to the relevant real and legal persons for the following purposes in accordance with the relevant legislation to which our company is subject and Articles 8 and 9 of the Personal Data Protection Law:

• In order to fulfill the legal obligations stipulated in the relevant legislation, the Ministry of Health, its sub-units, family medicine centers, the Social Security Institution, the General Directorate of Security and its affiliated organizations, other law enforcement agencies, the General Directorate of Population and Citizenship Affairs, the Pharmacists Association of Turkey, the Revenue Administration, Tax Offices, all relevant public institutions and organizations, and professional organizations in the nature of public institutions,
• University hospitals, public hospitals, private hospitals, medical faculties, laboratories, medical centers and third parties providing health services, other health institutions in cooperation with which medical diagnosis, examination, treatment and referral procedures are carried out,
• In order to realize the occupational health and safety processes of the relevant persons, within the scope of occupational health and safety measures, the health information of the employees to the relevant health service providers and organizations, private insurance companies,
• For the purposes of protecting public health, carrying out medical diagnosis, treatment and care services, promotion and information, your photographs, videos/images in camera recordings taken based on your explicit consent may be shared with written and visual media organs, relevant press institutions and organizations, third party websites and social media channels. ,
• To banks, financial institutions, public and private legal entities, public officials, in order to carry out the financial transactions of relevant persons,
• In matters related to public security and legal disputes, upon request and limited to the purpose of request in accordance with the legislation, to prosecutors’ offices, courts, mediators, enforcement offices and relevant legal institutions and organizations,
• To software, hardware, informatics and technology companies at home and abroad for the purpose of installing computer operating systems and computer programs used within our company, ensuring the security of electronic data, and performing maintenance and repair operations of the programs,
• In order to carry out the company’s activities and fulfill mutual obligations; “https://klinikemel.com”, to company partners, group companies, business/solution partners, service providers, suppliers,
• Along with the relevant person groups listed above, our company’s employees, legal, financial and tax consultants, regulatory and supervisory institutions, auditors and official authorities, relevant ministries, authorized public institutions and organizations, persons, institutions and organizations permitted by the provisions of the payment service legislation,
• In accordance with the legal regulation in terms of personal data of special nature, by obtaining explicit consent when necessary, in accordance with the legislation and limited to the purpose of transfer, for the purpose of protecting public health, preventive medicine, medical diagnosis, execution of treatment and care services, planning and management of health services and financing, without seeking the express consent of the relevant person. Your personal data is transferred.

4-Data Transfer Abroad:

4/2 of the Personal Data Protection Law. In accordance with the principles set out in the article, by obtaining explicit consent texts regarding the personal data of the relevant persons processed in accordance with the principles set out in Article 5/2., 6/3 of the Law. In the cases stipulated in the articles, after foreign countries with sufficient protection to be determined by the Personal Data Protection Board (“Board”) are declared, in accordance with the rules in Article 9 of the Law, without explicit consent, only to persons and organizations resident in these countries are determined and declared as not having sufficient protection. For the countries where data is included, it can be transferred provided that the data controllers in Turkey and the relevant foreign country undertake in writing to provide adequate protection and the necessary permissions are obtained from the Personal Data Protection Board in terms of the relevant transfer, and that it is limited to company activities. Within the framework of the limits stipulated by the legislation, by taking all necessary measures, within the scope of your legal relationship and activity with our company, in accordance with the legislation and limited to the purpose of transferring the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing. , identity, communication, transaction security, service area/customer transaction information, financial information, visual and audio data, health of the relevant persons through the applications used, software programs, website, mobile applications, online services, live support services, social media accounts. Your personal information about relevant persons, such as personal information, sexual life information, genetic data, protocol number, patient number, may be transferred abroad.

5-Method and Legal Reasons for Collecting Personal Data:

Your personal data; The services we offer are in line with the personal data processing purposes stated above; using software and hardware programs offered in electronic environments, using call center and live support services, filling out forms on the website through our mobile applications, social media accounts, e-mail channels, creating memberships, using online services, receiving patient applications, performing registration procedures, By arranging printed forms, providing medical diagnosis, treatment and health services within the scope of health services, creating personnel files, arranging and executing contracts, processing accounting, financial, legal transaction information, which is fully or partially automatic or part of any data recording system Your personal data is processed and collected by non-automatic means. Your personal data and special personal data; It is processed based on the explicit consent of the relevant person, in accordance with the legal regulations to which our company is subject. In addition, your personal data is processed based on the legal reasons stated below, without explicit consent. According to this; your personal data,

• Since it is clearly stipulated in the law,
• It is necessary for the protection of the life or physical integrity of the person or someone else who is unable to express his/her consent due to actual impossibility or whose consent is not given legal validity.
• It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of contracts between our company and real and legal persons,
• Personal data has been made public by the relevant person himself,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• Due to the reasons that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned,

Articles 5 and 6 of the Personal Data Protection Law, Article 5/1-h of the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation. It is processed, collected and transferred limited to the specified purposes in accordance with the article. Your personal data is kept within the scope of company activities for the period specified in the relevant legislation.

6-Rights of the Personal Data Owner in accordance with PDPL No. 6-6698 (Right of Application)

Your requests within the scope of Article 11 of the Personal Data Protection Law No. 6698, which “regulates the rights of the data subject”, can be submitted to “https://klinikemel.com” “Kartaltepe Mah, Şanlı Asker Sk. No:16/1 D:3, 34146 – Bakırköy – İstanbul”, the relevant person who is the Personal Data Owner can fill out the attached APPLICATION FORM and personally deliver a signed copy of the form to the company address along with documents identifying your identity, Secure Electronic Signature, mobile You can send it by sending an e-mail to info@klinikemel.com by using the signature or the e-mail address that you have notified to our clinic and registered in our clinic’s system, by making a personal application, by applying through a Notary, or by using the methods determined by the KVK Institution.

In accordance with Article 11 of the Law; Everyone can contact the data controller regarding himself/herself;

• Learning whether personal data is processed or not,
• Requesting information if personal data has been processed,
• Learning the purpose of processing personal data and whether they are used for their intended purpose,
• Knowing the third parties to whom personal data is transferred at home or abroad,
• Requesting correction of personal data if it is incomplete or incorrectly processed,
• Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the PDPL,
• In case of correction, deletion or destruction of personal data, to request that these transactions be notified to third parties to whom personal data have been transferred,
• Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,
• In case of damage due to unlawful processing of personal data, they have the right to demand compensation for the damage.

Personal Data Protection Law No. 6698 13/1. In accordance with the article, you must submit your applications to our Company in order to exercise your rights stated above, in writing or through the above-mentioned methods determined by the PDPL Authority. Our company will finalize your requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board will be charged. In this context, if the application of the relevant person is responded to in writing, no fee will be charged for up to ten pages, and a processing fee of 1 TL will be charged for each page over ten pages. If the response to the application is given on an electronic recording medium such as a CD or flash memory, the fee that may be requested by our company will not exceed the cost required by the recording medium.