Personal Data Protection Statement
General Information About the Personal Data Protection Law
As {kvkk-title}, we undertake the responsibility for the collection, purpose of use, processing, transfer, storage period, and confidentiality of personal data in accordance with the Law No. 6698 on the Protection of Personal Data and secondary legislation. We take security measures for this purpose and inform you about your rights, attaching great importance to the security of your personal data. We maintain all kinds of personal data shared by our patients in a manner that respects patient confidentiality and take all necessary technical and administrative measures to ensure an appropriate level of security for your personal data.
This Personal Data Protection Information, in accordance with the letter of access to Health Data numbered 75730711 by the Ministry of Health, General Directorate of Health Information Systems, explains how we collect, use, transfer, and protect your personal data during the services provided and our personal data protection and processing policy.
1. COLLECTION, PROCESSING, AND PROCESSING PURPOSES OF PERSONAL DATA
Beyaz İnci processes and maintains your personal data within the framework of legal regulations specified in the Personal Data Protection Law and secondary legislation. Your personal data are collected and preserved for the purpose of fulfilling the contractual and other legal obligations of Beyaz İnci arising from the provision of healthcare services within the legal framework. Personal data are collected automatically or non-automatically through methods such as call centers, websites, online services, WhatsApp, and similar means, verbally, in writing, or electronically, depending on the health services provided.
Your Personal Data;
Your name, surname, TR identity number, passport number or temporary TR identity number, place and date of birth, marital status, gender, other identification data that we can identify you with, created patient file content by our clinic; your address, phone number, email address, and other contact details; your financial data such as payment, credit card, bank information, and billing information; voice and/or digital information obtained at various times by us through electronic or non-electronic methods; your visual and/or auditory camera recordings obtained and/or obtainable during your visit to our clinic; general and special qualified personal data including personal health data obtained during the execution of all medical diagnosis, examination, treatment, and care services; your private health insurance data and Social Security Institution data, health and identification data you send through our website, payment, and billing information, and limited to these, will be processed by our clinic as necessary.
Also, when you use {kvkk-title}'s online services, use our call center or website, participate in the trainings, seminars, or events organized by our Clinic, or visit the web pages or navigate on these sites, your personal data may be processed.
Your personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the PDPL. Your personal data, including your health data and special qualified personal data, can be processed by our Clinic for the following purposes;
Your personal data, including special qualified personal data;
- Fulfillment of our legal obligations specified in the Basic Law on Health Services No. 3359, Decree Law on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, Regulation on Private Hospitals, Regulation on Processing of Personal Health Data and Protection of Privacy, and related other regulations,
- Protection of public health, preventive medicine, execution of medical diagnosis, treatment, and care services,
- Financial planning for healthcare services,
- Invoicing for the services provided,
- Sharing the requested information with private insurance companies within the scope of financing healthcare services,
- Reconciliation of financial transactions related to healthcare services provided to you with the institutions we have agreements with,
- Notification to you regarding appointments if you make an appointment,
- Conducting campaigns and informing through messages, emails, or other means,
- Planning the internal functioning of your Clinic,
- Monitoring and preventing misuse and/or unauthorized transactions,
- Conducting scientific research,
- Responding to any questions and complaints related to our healthcare services,
- Taking all necessary technical and administrative measures for the data security of our Clinic's systems and applications,
- Analyzing your use of healthcare services and storing your health data as required by the relevant legislation for the purpose of improving and enhancing the healthcare services we provide to you,
- Including but not limited to measuring patient satisfaction, with similar purposes.
In addition, your personal data may be processed by us or by real or legal persons we cooperate with or authorize within the scope of operational reasons such as increasing employee satisfaction and ensuring occupational safety and peace in accordance with the provisions of the Labor Law and other legislation in force.
2. PERSONS AND INSTITUTIONS TO WHOM YOUR PERSONAL DATA MAY BE TRANSFERRED
Your personal data may be transferred to third parties within the scope of the Law and similar legislation and for the purposes mentioned above:
- Ministry of Health and its affiliated units, Family Health Centers,
- Social Security Institution,
- Private insurance companies (health, retirement, life insurance, etc.),
- General Directorate of Security and similar law enforcement agencies,
- Population Directorate,
- Turkish Pharmacists Association,
- Turkish Dental Association,
- Prosecutors, Courts, arbitrators or arbitrators in arbitration proceedings,
- Third parties such as laboratories, centers, etc. with which we cooperate for medical diagnosis,
- Your representatives whom you have authorized,
- The healthcare institution to which the patient is referred or the patient himself/herself applies,
- Consultants including lawyers, tax consultants, and auditors from whom we receive consultancy,
- Regulatory and supervisory authorities, official authorities,
- Our suppliers, support service providers, business partners, and other third parties with whom we benefit from or cooperate,
within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL.
3. METHOD AND LEGAL BASIS OF PERSONAL DATA COLLECTION
Your personal data are collected within the framework of the principles specified in the PDPL for the purposes mentioned above and in accordance with the principles determined by the PDPL, for the purpose of fulfilling the contractual and legal obligations of {kvkk-title} arising from the provision of healthcare services and the legal framework specified for this purpose, verbally, in writing, or electronically, in any kind of verbal, written, or electronic medium.
4. YOUR RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA
Regarding your processed personal data, in accordance with the legislation;
- Learning whether personal data is processed, requesting information if personal data are processed,
- Access to personal health data and requesting this data, learning the purpose of processing personal data and whether they are used in accordance with this purpose,
- Knowing the third parties to