WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA

PATIENT / SERVICE RECIPIENT DISCLOSURE TEXT

DR. ARSLAN POLYCLINIC attaches importance to protecting the confidentiality of your personal information. As DR. ARSLAN POLYCLINIC, pursuant to the Law No. 6698 on the Protection of Personal Data (“KVKK”), and within the framework of our disclosure obligation as Data Controller, we would like to inform you about the purposes of processing your personal data, the legal grounds, the method of collection, the persons and institutions to whom your data may be transferred, and your rights under the KVKK, taking into consideration the data security of our patients and their relatives, and due to the importance we attach to the privacy of private life and the protection of fundamental rights and freedoms.

Which Personal Data Do We Process?

In order to provide healthcare services to our patients, we collect various personal data in accordance with the principles and conditions set forth under the KVKK and other relevant legislation, including the Private Hospitals Regulation and the Regulation on Personal Health Data. The following data is collected by our hospital from our patients, other healthcare institutions and organizations, or patients’ relatives for the purpose of providing healthcare services and carrying out medical diagnosis, examination, treatment, and care services.

  • Your Identity Information; Your name, surname, Turkish Republic Identification Number, driver’s license, passport number or temporary Turkish Republic Identification Number, place and date of birth, marital status, gender, insurance or patient protocol number, and other identity data through which we may identify you.
  • Your Contact Information: Your address, telephone number, e-mail address, and other contact data; your voice call records kept by customer representatives or patient services in accordance with call center standards; and your personal data obtained when you contact us via e-mail, letter, or other means.
  • Your Financial Information; Your financial data such as your bank account number, IBAN number, credit card information, and billing information.
  • Camera and photograph records kept for security purposes if you visit our hospital; your vehicle license plate data if you use parking and valet services, and related photograph and camera records.
  • Your closed-circuit camera system images and records obtained during your visit to our hospitals,
  • Your Health Information; Your general and special categories of personal data, particularly your personal health data obtained during the execution of all medical diagnosis, examination, treatment, and care services and submitted by you; for example, your appointment and examination information, laboratory results, test results, check-up and prescription information, and your data specified in the consent form in the event of a medical intervention,
  • Your survey, suggestion, satisfaction, thank-you, and complaint data; your browsing information obtained through e-mail, website contact forms, our website, and mobile applications; your IP address, Wi-Fi information, browser information, and medical documents, surveys, relevant records and form information that you submit through the same system with your own consent, or other data you share with us when contacting us through other means, including private health insurance data and similar data for the financing and planning of healthcare services.

For What Purposes Do We Process Your Personal Data?

Your Personal Data and Special Categories of Personal Data listed above may be processed for the following purposes;

  • Fulfilling our legal obligations set forth in the Basic Law on Healthcare Services No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Public Health Law No. 1593, the Patient Rights Regulation, the Private Hospitals Regulation, the Regulation on Personal Health Data, and other relevant regulations;
  • Protection of public health, preventive medicine, execution of medical diagnosis, treatment, and care services, planning and management of healthcare services and their financing, execution of all medical diagnosis, examination, treatment, and care services, and provision of medicines, consumables, and special materials,
  • Providing you with information regarding your appointment if an appointment is made; verifying your identity; issuing invoices; and ensuring that your procedures are planned, managed, and monitored quickly and accurately,
  • Ensuring financial reconciliation with contracted institutions regarding the healthcare services provided to you; responding to requests from public institutions and organizations in accordance with legislation
  • Measuring patient satisfaction after you receive healthcare services and improving patient satisfaction; responding to all your questions and complaints; contacting you for the purpose of providing information regarding our services;
  • Improving, monitoring, and carrying out quality processes and related activities;
  • Researching and analyzing your use of healthcare services in order to improve the services we provide,
  • Enabling participation in campaigns and providing campaign information by the relevant departments through all communication channels,

FOR THESE PURPOSES, your data may be processed, recorded, stored, retained, classified, and, in matters concerning public security and in legal disputes that may arise, transferred upon request and as required by legislation to public prosecutors’ offices, courts, all judicial authorities, the General Directorate of Population and Citizenship Affairs, the Turkish Medical Association and the Turkish Pharmacists’ Association, and relevant public officials; and, where necessary, within the scope of the purposes stated above, to authorized public institutions and organizations, institutions and organizations to which referrals are made, healthcare institutions and organizations with which we cooperate for medical diagnosis, laboratories, our business partners, private insurance companies, law firms, financial advisors, and all consultants, including third parties from whom we receive consultancy services.

What Are the Methods of Collecting Your Personal Data and the Related Legal Grounds?

Your personal data specified above may be processed within the scope of the purposes stated in this Disclosure Text on the legal grounds set forth in Articles 5 and 6 of Law No. 6698, namely: (i) being expressly provided for by law, (ii) being necessary for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of a contract, (iii) being mandatory for the protection of the life or physical integrity of the person or another person where the data subject is unable to express consent due to actual impossibility or whose consent is not legally valid, (iv) being mandatory for the data controller to fulfill its legal obligation, (v) being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, and (vi) protection of public health, preventive medicine, execution of medical diagnosis, treatment, and care services, and planning and management of healthcare services and their financing;

  1. a) In compliance with the law and the principles of good faith,
  2. b) Accurately and, where necessary, up to date,
  3. c) For specific, explicit, and legitimate purposes,
  4. d) In a manner that is related to, limited to, and proportionate to the purposes for which they are processed,
  5. e) To be retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed, by automated means, such as camera recordings, or by non-automated means, such as forms filled out by you, provided that they are part of any data recording system; and may be processed, recorded, stored, retained, classified, and transferred.

What Are Your Rights Regarding the Processing of Personal Data and How Can You Exercise These Rights?

Your Rights Regarding the Protection of Personal Data

The relevant patient/service recipient who approves this Disclosure Text pursuant to the Law and relevant legislation has been informed that they have the following rights;

  • To learn whether their personal data is being processed,
  • To request information if their personal data has been processed,
  • To access and request their personal health data,
  • To learn the purpose of processing their personal data and whether it is used in accordance with that purpose,
  • To know the third parties to whom their personal data is transferred domestically or abroad,
  • To request correction if their personal data has been processed incompletely or inaccurately,
  • To request the deletion or destruction of their personal data or its anonymization,
  • To request notification to third parties to whom their personal data has been transferred regarding the correction of incomplete or inaccurate personal data and/or the deletion or destruction of their personal data,
  • To object to any result against them arising from the analysis of their processed data exclusively through automated systems,
  • To request compensation for damages if they suffer damage due to the unlawful processing of their personal data

THEY HAVE BEEN INFORMED that they possess these RIGHTS.

Contact and Application;

You may submit your requests regarding your rights under the KVKK, pursuant to Article 5 of the “Communiqué on the Procedures and Principles of Application to the Data Controller,” by completing the “Application Form Pursuant to the Law on the Protection of Personal Data” available at “[www.drarslanklinik.com](http://www.drarslanklinik.com);

  • Harbiye Mahallesi Abdi İpekçi Caddesi No: 59 Daire: 6 Nişantaşı / Istanbul
  • You may send it through a notary public,
  • It is hereby presented to your information within this Disclosure Text that the personal data subject to processing through all contact information submitted by you will be shared with us by you as the personal data subject, and that in the event of any change in the relevant contact information, such information must be updated by notifying us as the Data Controller.

Data Controller: DR. ARSLAN POLYCLINIC

Address: Harbiye Mahallesi Abdi İpekçi Caddesi No: 59 Daire: 6 Nişantaşı / Istanbul

I have read and understood this Disclosure Text.

NAME SURNAME – SIGNATURE