PDPL

www.klinikemel.com

LAW ON PROTECTION OF PERSONAL DATA NUMBER 6698 ( PDPL )

INFORMATION AND INFORMATION TEXT

As https://klinikemel.com; We pay utmost attention to the processing and protection of your personal data. As a data controller in accordance with the Law on the Protection of Personal Data, the Basic Law on Health Services, the Regulation on Personal Health Data, the Regulation on Private Healthcare Institutions Providing Oral and Dental Health Services, the Regulation on Private Hospitals, the Regulation on Patient Rights and related legislation; All necessary technical and administrative measures are taken to prevent the illegal processing of personal data, to prevent illegal access to personal data, and to ensure the protection of personal data.

Pursuant to Article 10 of the Personal Data Protection Law; our patients, patient companions, patient relatives, visitors, hospital managers and employees, employee candidates, suppliers, service providers, managers and employees, business/solution partners, company partners, employee candidates, interns, public institutions and organizations we are in contact with, and private law legal entities. We inform you with the policies created to cover the employees and relevant third parties and with this clarification text. This clarification text, Article 10 of the Personal Data Protection Law (“Law”), 5/8 of the Regulation on Personal Health Data. It has been prepared by the data controller https://klinikemel.com within the scope of the Communiqué on the Procedures and Principles to be Complied with in the Fulfillment of the Clarification Obligation.

1-Data Controller

“https://klinikemel.com”; It processes your personal data in the capacity of “Data Controller” defined in Article 3 of the Law on the Protection of Personal Data No. 6698.

2-For What Purpose Personal Data Will Be Processed

Your personal data collected in accordance with the Law on the Protection of Personal Data, the Basic Law on Health Services, the Regulation on Personal Health Data, the Regulation on Private Healthcare Institutions Providing Oral and Dental Health Services, the Regulation on Private Hospitals, the Regulation on Patient Rights, and the relevant legislation, are completely or partially, automatically or by non-automatic means provided that it is a part of any data recording system, recorded, stored, modified, rearranged and processed.

Your personal data is processed within the scope of company activities in accordance with the 4th, 5th, 6th articles of the Law and the relevant legislation for the following purposes:

• Protection of public health, preventive medicine, medical diagnosis, execution of treatment and care services, planning and management of health services financing,
• In accordance with the relevant legislation to which we are subject, sharing the information we have obtained regarding health services with the Ministry of Health, Social Security Institution and other relevant public institutions and organizations, responding to the requests of the institutions, making necessary notifications to the relevant public institutions and organizations, fulfilling legal obligations,
• To ensure that the data required to be kept in accordance with the legislation are preserved within the scope of the health service we offer,
• To confirm your identity, to confirm your legal contact with contracted institutions within the scope of the health services provided, to provide invoicing and financial reconciliation, to make notifications arising from the legislation to relevant institutions and organizations such as judicial cases,
• Making an appointment within the scope of our health services, making an appointment, providing the necessary information, ensuring the satisfaction of the patient, patient’s relative, visitor, following the request and complaint processes, making the examinations and evaluations required by the health services provided,
• Improving company services, maintaining corporate development activities, maintaining advertising and marketing activities, maintaining the company’s finance and accounting, administrative, legal and technical business processes, fulfilling risk management and quality improvement processes,
• Planning and execution of human resources processes, fulfillment of employment application processes, creation of personnel files for employees, fulfillment of financial obligations, determination of company wage policy,
• Establishment and execution of contracts made or to be made between our company and patients, suppliers, service providers, employees and consultants with whom it has legal relations, relevant institutions and organizations, and third parties,
• The obligation of the company to prove as evidence in legal disputes with third parties,
• To provide communication between our company and related persons and organizations, to provide the necessary contact through our website, online applications, live support services, social media accounts, to maintain the necessary processes for filling in the relevant electronic and physical forms, to ensure the transaction security of the relevant persons,
• Providing necessary information to regulatory and supervisory official institutions and legal entities of private law,
• To ensure the procurement of medical drugs, materials or devices, invoicing and payment transactions related to the services provided;
• Monitoring the safety of our patients, visitors, employees and related third parties through the closed circuit camera recording system, ensuring legal, technical and commercial occupational safety, preventing criminal behavior of third parties, ensuring the physical security of the company building and its annexes and its surroundings,
• The employment contract with the employees, within the scope of the company’s benefit, performance evaluation, attendance and control through the personnel attendance control system, control of the entrances and exits of the company buildings and annexes,

In line with the above-mentioned purposes, your personal data written below is processed, limited to company activities.

• Your Identity Information (T.R. identity / foreign identity number, name and surname, place and date of birth, mother and father name, marital status, gender, passport, foreign identity document, identity information on the driver’s license, your identity document or identity sharing system) other population identification information on the patient, patient number in terms of patients, patient protocol number)
• Your contact information (Phone numbers, contact address, e-mail address, residence, work address)
• Personal Information (Personal information on contracts filled in terms of employees, interns, education, diploma information, certificate information, social security registration number information, general health insurance, private health insurance information, SGK employment and exit declaration, identity information written on family status declaration , dependents, spouse, child proximity information, family members’ birth registration information, embezzlement certificate received according to the nature of the job, work certificate, resignation, termination, severance and notice payslip, payroll information, disciplinary investigation information, service breakdown, resume information, leave information, professional information, reference information, bank account information, IBAN number information, survey information, personal information received within the scope of occupational health and safety, military service information, personnel attendance control system, personnel cards received through personnel cards for the purpose of providing entry and exit transactions to the relevant units. personal information in the job application form information contained in it)
• Financial Information (Billing and payment information, bank account number, IBAN number, credit card information, private insurance information within the scope of financial payment, policy information, General Health Insurance information, financial information received within the scope of notifications to SGK and the Ministry of Health, payroll, expense advances information, tax identification number, tax office information, invoices, waybills, signature circular, personal information on delivery receipt documents, information in the annexes of contracts made with third parties)
• Legal Transaction Information (Legal contact with the relevant persons and services provided, courts, prosecutors’ offices, mediators, arbitral tribunals, personal information in correspondence with judicial authorities, information in case and execution files, patients, accompanying persons, which are required to be made to police directorates for identity verification purposes. Identity, contact, location information entered into the system in legal notifications, patient, patient relatives, tortious acts during the visit of visitors to our hospital, legal disputes and personal information in the forms kept in the minutes and forms, the “White Code Application” created by the Ministry of Health in terms of healthcare professionals. Personal information in the forms received, reported, recorded and filled through communication, website, call center, death examination, autopsy procedures, correspondences within the scope of forensic medicine, transactions made, documents issued within the scope of ” informations)
• Professional experience information (Educational status information, school, diploma information, working life, reference information, internship, seminar, hardware used, software, computer knowledge, foreign language knowledge, former workplace, institution information, courses attended, in-service training information, certificates, driver’s license information, other information in the notified forms, specialty, title, job information),
• Audio-Visual Records (Health reports prepared within the scope of company activities, your photos on documents, audio recordings of calls made with call centers during appointment, communication with the company, and follow-up of demand and complaint processes, job application forms, printed forms filled in electronic and physical environments , photo information on your documents and official identity documents, your photos shared on the company website, our social media accounts or written and visual media, third-party social media channels for the purpose of protecting public health, conducting medical diagnosis, treatment and care services, promoting and informing, your images in videos/camera recordings)
• Physical Venue Security Information (Your camera recording information that takes video and audio recordings, security exit ledger information, information in kept forms, vehicle license plate information),
• Within the scope of the company’s activities, in accordance with the employment contract and the legitimate interests of the company, for promotion, advertising and information purposes, on the company website, social media accounts, mobile applications, promotional brochures, professional experience, promotion, information, resume and photograph information of the employees,
• For the purpose of protecting public health, performing preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, by persons or authorized institutions and organizations under the obligation of secrecy, with the explicit consent of the relevant person, in written, visual media, on the website, Images and personal data of patients in photos and videos shared on our social media accounts,
• Request and Complaint Information (Information and records collected from electronic and physical environments, evaluation of requests and complaints received via internet and social media, online channels, call center, information on management process)
• Information on Criminal Conviction and Security Measures (Criminal record, conviction, conviction information, judicial status information),

• Health Information (Examination, all kinds of laboratory, imaging and test results, patient diagnosis, diagnosis, treatment, prescription, drug information, doctor analysis and information, which are processed within the scope of the activities of protecting public health, preventive medicine, medical diagnosis, treatment and care services for patients. comments, patient history (anamnesia) information, examination information, diagnosis and prescription information, health reports and all health information received within the scope of health services, health status information written in the job application form, health reports for employees, health tests, blood group information, personal health and physical disability status information, health board reports, your personal data regarding diagnosis and treatment procedures)
  Pursuant to the KVKK No. 6698, your personal data that you share with our clinic is obtained, recorded, stored, modified, rearranged, fully or partially, automatically or by non-automatic means, provided that it is a part of any data recording system, as the subject of any processing performed on your personal data. processed by our clinic. The personal data that the company processes within the scope of its activities are processed in accordance with the relevant legislation in line with the following purposes.

  For their purposes, your personal data is processed in accordance with the conditions and purposes determined in accordance with the 4th, 5th and 6th articles of the Law. Your personal data will not be used for any purpose other than the activities of our clique.

3-To whom and for what purpose the Processed Personal Data can be transferred

Your personal data processed by our company is transferred to real and legal persons for the following purposes in accordance with the relevant legislation to which our company is subject and Articles 8 and 9 of the Personal Data Protection Law:

• In order to fulfill the legal obligations stipulated in the relevant legislation, the Ministry of Health, its sub-units, family medicine centers, Social Security Institution, General Directorate of Security and its affiliated organizations, other law enforcement forces, General Directorate of Population and Citizenship Affairs, Turkish Pharmacists Association, Revenue Administration, Tax All relevant public institutions and organizations, including their offices, professional organizations in the nature of public institutions,
• University hospitals, public hospitals, private hospitals, medical faculties, laboratories, medical centers and third parties providing health services, other health institutions for the purpose of carrying out medical diagnosis, examination, treatment and referral procedures,
• In order to carry out the occupational health and safety processes of the persons concerned, within the scope of occupational health and safety measures, the health information of the employees is sent to the persons and organizations from which the relevant health services are received, private insurance companies,
• Your photos, videos/images in camera records taken based on your explicit consent, for the purpose of protecting public health, conducting medical diagnosis, treatment and care services, for promotion and information purposes, are sent to written and visual media organs, relevant media institutions and organizations, third-party websites, social media channels. ,
• To banks, financial institutions, public and private legal entities, public officials,
• In matters of public security and legal disputes, upon request and limited to the purpose of the legislation, to prosecutors’ offices, courts, mediators, enforcement offices and relevant legal institutions and organizations,
• To software, hardware, information and technology companies located in Turkey and abroad in order to establish computer operating systems and computer programs used within our company, to ensure the security of electronic data, and to carry out maintenance and repair operations of the programs,
• In order to carry out company activities and fulfill mutual obligations; “https://klinikemel.com” means company partners, group companies, business/solution partners, service providers, suppliers,
• To the employees of our company, legal, financial and tax consultants, regulatory and supervisory institutions, auditors and official authorities, relevant ministries, authorized public institutions and organizations, individuals, institutions and organizations permitted by the provisions of the payment service legislation, together with the above-mentioned related groups of persons,
• In terms of special quality personal data, to be in compliance with the legislation and limited to the purpose of transfer, without seeking the explicit consent of the relevant person, for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, by obtaining explicit consent when necessary, as required by legal regulation. your personal data is transferred.

4-Data Transfer Abroad:

4/2 of the Personal Data Protection Law. Pursuant to the principles set forth in Article 5 of the Law, by obtaining clear consent texts regarding the processed personal data of the persons concerned, or in accordance with Articles 5/2, 6/3 of the Law. In the cases stipulated in Articles of Association, without seeking explicit consent, after the declaration of foreign countries with sufficient protection to be determined by the Personal Data Protection Board (“Board”) in accordance with the rules in Article 9 of the Law, only persons and organizations residing in these countries are determined and announced that there is no adequate protection. and for the countries where data controllers in Turkey and in the relevant foreign country undertake to provide adequate protection in writing, and by obtaining the necessary permissions from the Personal Data Protection Board in terms of the relevant transfer, and limited to company activities. Within the framework of the legislation, by taking all necessary precautions, within the scope of your legal relationship and activity with our company, in accordance with the legislation and to protect public health, conduct preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, limited to transfer purposes. , applications used, software programs, website, mobile applications, online services, live support services, identity, communication, transaction security, service user/customer transaction information, financial information, visual and audio data, health Your personal information, such as information on sexual life, genetic data, protocol number, patient number, may be transferred abroad.

5-Method and Legal Reasons for Collecting Personal Data:

Your personal data; the services we provide, in line with the above-mentioned personal data processing purposes; Using software and hardware programs offered in electronic media, using call center, live support services, filling out forms on the website, using our mobile applications, social media accounts, e-mail channels, creating membership, using online services, receiving patient applications, making registration, Fully or partially automatic or part of any data recording system, by means of issuing printed forms, performing medical diagnosis, treatment and health services within the scope of health services, creating personal files, issuing and performing contracts, processing accounting, finance, financial, legal transaction information. Your personal data is processed and collected by non-automatic means. Your personal data and personal data of special nature; It is processed based on the explicit consent of the person concerned, in accordance with the legal regulations to which our company is subject. In addition, your personal data is processed based on the legal reasons written below without seeking explicit consent. According to this; your personal data,

• As it is clearly stipulated in the laws,
• It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally valid.
• Provided that it is directly related to the establishment or performance of contracts between our company and real and legal persons, it is necessary to process the personal data of the parties to the contract,
• The personal data has been made public by the person concerned,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller,

5/1-h. It is processed, collected and transferred limited to the purposes specified in accordance with the article. Your personal data is kept within the scope of company activities for the period written in the relevant legislation.

6-Rights of Personal Data Owner in accordance with PDPL No. 6698 (Right of Application)

Your requests within the scope of Article 11 of the Personal Data Protection Law No. 6698 “regulating the rights of the data subject”, as the data controller in accordance with the Communiqué on Application Procedures and Principles to the Data Controller (3), “https://klinikemel.com” “Kartaltepe Mah, Şanlı Asker Sk. No:16/1 D:3, 34146 – Bakırköy – İstanbul” by filling in the attached APPLICATION FORM of the person who is the Personal Data Owner, and personally send a signed copy of the form to the company address with the documents identifying your identity, Secure Electronic Signature, mobile By sending an e-mail to info@klinikemel.com using your signature or the e-mail address you have given to our clinic and registered in the system of our clinic, with your personal application, with your application through a notary public or by the methods determined by the KVK Institution.

Pursuant to Article 11 of the Law; everyone, in relation to himself by applying to the data controller;

• Learning whether personal data is processed or not,
• If personal data has been processed, requesting information about it,
• Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
• Knowing the third parties to whom personal data is transferred at home or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing,
• Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
• In case of correction, deletion or destruction of personal data, requesting that these transactions be notified to the third parties to whom the personal data has been transferred,
• Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• It has the right to demand the compensation of the damage in case of loss due to the unlawful processing of personal data.

PDPL Law No. 6698, 13/1. In accordance with the article, you must submit your applications to our Company in writing or through the above-mentioned methods determined by the PDPL Authority, in order to exercise your above-mentioned rights. Our company will conclude your requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board will be charged. In this context, if the application of the person concerned is answered in writing, no fee will be charged for up to ten pages, and a processing fee of 1 TL will be charged for each page above ten pages. If the response to the application is given in an electronic recording medium such as CD or flash memory, the fee that may be requested by our company will not exceed the cost required by the recording medium.