DR.NAGİHAN SAHİLLİOĞLU CLINIC

UNDER THE PERSONAL DATA PROTECTION LAW

INFORMATION TEXT

This text is defined as “relevant person” in the Law on the Protection of Personal Data No. 6698, which came into force after being published in the Official Gazette dated 07/04/2016, and other relevant legislation, as a requirement of the acceptance of the protection of personal data as one of the fundamental human rights in our Constitution. The personal data (including special personal data) of our identified patients (data owners) are transferred to our healthcare institution, Dr., who has the title of “data controller” in the same Law and legislation. It has been prepared by Nagihan Sahillioğlu Clinic for the purpose of enlightening the processes of receiving, recording, storing, processing, updating, transferring, destroying and anonymizing and the mutual rights and obligations of the parties related to these processes.

A.PERSONFLOODI</strong >LAW ON THE PROTECTION OF LANDINs >ÇERÇEVES IN DEFINITIONS

In this text;

PersonalPersonal Data: Information about an identified or identifiable natural person,

Personal Data of Special QualificationPersonal Data: Race, ethnic origin, political thought, philosophical belief, religion of the relevant person , sect, other beliefs, appearance and clothing, association, foundation or union membership, criminal conviction and security measures, health, sexual life, biometric and genetic data,

Processing of Personal Data: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, transferring, personal data can be obtained All kinds of activities carried out in the process from collection to deletion, destruction or anonymization, including the collection, classification and prevention of use,

KVKK:Personal Data Protection Law No. 6698,

Data Controller:refers to the Clinicthat determines the purposes and means of processing Personal Data and is responsible for establishing and managing the data recording system.

  • Data Controller

Our healthcare institution acts as the ‘data controller‘ defined in Article 3 of Law No. 6698 in the processing of personal data of its patients/clients. It determines the purposes and means of processing and storing your personal data.

Our healthcare institution, as the data controller, is obliged to establish and manage the data recording system and take administrative and technical measures regarding data security. In this context, we would like to point out that your data may also be processed by third parties who have the title of ‘data processor‘ as defined in Article 3 of the Law.

Our healthcare institution, as the data controller, is obliged to establish and manage the data recording system and take administrative and technical measures regarding data security. In this context, we would like to point out that your data may also be processed by third parties who have the title of ‘data processor‘ as defined in Article 3 of the Law.

  1. Personal DataProcessed

Personal data, defined as “all kinds of information that makes a person specific or identifiable” in Law No. 6698, are data such as the person’s name and surname, TR ID number, contact information, date of birth and gender.

Undoubtedly, the personal data intended to be protected by the said Law is not limited to these. Special personal data that may cause discrimination or victimization of the relevant person if learned are also under the protection of the Law. Such data includes the person’s race, ethnic origin, political opinion, philosophical or religious thoughts and beliefs, criminal information, biometric and genetic data, sexual life and health data.

On the other hand, in addition to your personal information listed above, your audiovisual data (photographs, video recordings, voice recordings) obtained by taking audio and video in the workplace, polyclinics, clinics and vehicles of our health institution are also subject to the limits specified in Articles 5 and 6 of the Law. It is processed by us as your personal data.

In addition, as a patient/consultant of our healthcare institution, your personal data that you have provided to us through various methods such as telephone conversation, electronic correspondence, verbal interview, as well as the forms you fill out electronically or physically, can be found on our websites or websites belonging to third parties. The contact forms you filled out to contact us, various contracts/forms you signed with us, and the mails, faxes and letters you sent to us, our employees, customer service channels, social media channels, Google, etc. Your personal data that you specify in the use of search engines, membership agreements and other agreements, campaigns, applications and forms are also collected by our Company / healthcare institution.

We will endeavor to keep your personal data requested by our health institution to the minimum possible level, that these data will be processed for clear and legitimate purposes and in accordance with the law and the rules of honesty, that all precautions will be taken without hesitation to prevent your data from falling into the hands of unauthorized persons, and maximum attention will be paid to its protection, For this purpose, we hereby inform you that the data in question will be checked periodically, your data will be kept for a period appropriate to the purpose for which they are processed, and will be destroyed at the end of this period.

Your collected and processed personal data and special personal data will be stored by our healthcare institution in a secure environment that is not open to public use and will never be shared with third parties unless there is permission or a legal obligation. In this context, special attention will be paid to the security and confidentiality of your special personal data as defined above.

  1. Purpose and Methods of Collection of Personal Datamethods

The personal data of our patients / clients are processed by our healthcare institution within the scope of various legal reasons and processing purposes, such as ensuring the security of legal, commercial, medical, administrative and therapeutic business and transactions carried out by our patients / clients with our healthcare institution, and preventing illegal acts such as theft and fraud. for purposes; It is collected automatically through the information and documents submitted to us and through the Closed Circuit Camera Recording System in the activity areas, workplaces and vehicles of our healthcare institution.

In accordance with Articles 4 and 10 of KVKK, our personal data in the following categories;

Identity Data; To be able to carry out operational activities, identification and verification during appointment, diagnosis and treatment processes,

Contact Data; Keeping track of appointments and reminding you, keeping you informed when necessary, providing you with information, and keeping you informed about campaign processes,

Finances Data ; Making and tracking payments by you, issuing invoices, sharing information requested by contracted institutions/organizations, especially private insurance companies, within the scope of financing health services, and performing identity verification.

Special Personal Data; Protection of public health, preventive medicine, medical diagnosis, execution of treatment and care services, supply of medicines and/or devices specific to treatment, execution of activities in accordance with the legislation, execution of the management processes of the relationship with you, management of treatment processes, post-treatment care and checks,
Visual data; To be able to follow the course of treatment, to be able to diagnose and use it as evidence in a possible court process, to ensure physical space security,

In terms of all data, we carry out our obligation to provide the necessary information to authorized persons, institutions and organizations, to archive and store it for the purposes of carrying out the processes, and we store it physically or digitally at the Clinic center by taking the necessary security measures.

  1. Processing of Your Personal Data, Legal Reasons and Purposes of Processing

Your personal data collected by our healthcare institution is subject to all relevant national/international legislation and secondary regulations published by national/international competent authorities (BTK, BRSA, TCMB, MASAK, TBB, etc.), especially the Law on Private Security Services of our healthcare institution. and also for purposes such as ensuring the security of the legal, commercial, medical, administrative and therapeutic works and transactions of our healthcare institution and the people with whom it has business relations, to prevent unlawful acts such as theft and fraud, in order to fulfill the obligations arising from all contracts to which it is a party, and to comply with the Law. It is processed in accordance with the principles in Article 4 and within the processing conditions specified in Articles 5 and 6 of the same Law.

  1. Persons to whom your personal data is transferred and Purposes of Transfer

Your personal data collected by our healthcare institution may be shared with private and public institutions and organizations that have the permission, right and authority to request and process personal information within the scope of the legislation and/or within the scope of the said legislation or contracts to which we are a party, for the purposes explained in this text (T.R. Ministry of Health). , Provincial Health Directorates, District Health Directorates, Health Institutions, Laboratories and Centers, Law Enforcement Forces, Courts, Ministries, Chief Public Prosecutor’s Offices, BDDK, MASAK, SGK, judicial and administrative authorities, other official institutions and organizations and individuals) within the scope of Law No. 6698 Personal data may be shared within the framework of the processing conditions and purposes specified in Articles 8 and 9.

It will not be possible to share your special personal data with third parties without your explicit consent, except for exceptions arising from the Law.

  1. Duration of Processing of Your Personal Data

Your personal data collected by our healthcare institution will be processed within the scope of the purposes explained in this text, excluding obligations arising from legal regulations, for the maximum period necessary for the purpose for which they are processed and, in all likelihood, within the legal statute of limitations. After the specified period expires, your personal data will be deleted, destroyed or anonymized in accordance with Article 7 of the Law.

  1. Your Legal Rights

As a personal data owner, by applying to our Company / health institution, which is the data controller, within the scope of the provisions of Article 11 of the Law;

  • Learning whether your personal data is being processed,
  • Requesting information if your personal data has been processed,
  • Learning the purpose of processing your personal data and whether they are used for their intended purpose,
  • Knowing the third parties to whom your personal data is transferred at home or abroad,
  • Requesting correction of your personal data if it has been processed incorrectly or incompletely, and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
  • Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law (in case the reasons requiring the processing of your personal data disappear, even though it has been processed in accordance with the Law and other relevant legal provisions) and the processing carried out within this scope may be processed by the third party to whom the personal data is transferred. Requesting notification to people,
  • Objecting to the emergence of a result against you by analyzing your processed data exclusively through automatic systems,
  • Requesting compensation in case you suffer damage due to unlawful processing of your personal data

You have rights. The exceptional cases stipulated in Article 28 of the Law are reserved.

You can submit your requests regarding these rights by filling out the “Application Form” at www.kvkk.gov.tr and using the methods in this form. You can send it via . Your request will be finalized as soon as possible and in any case within thirty (30) days at the latest, free of charge as a rule, but exceptionally if it requires an additional cost, for a fee at the tariff determined by the Personal Data Protection Board.

Regards,

Dr. Nagihan Sahillioğlu Clinic

Data controller: Clinic

Data controller officer: Dr.Nagihan Sahillioğlu

Phone:+90 212 813 09 29

Address: Hüsrev Gerede cad. No:77 Tozan apt. Flat:8 Nişantaşı-Şişli/İstanbul

Email: drnagihansahilliogluklinik@gmail.com

Information text regarding the processing and protection of personal data of service recipients  I declare that a copy was delivered to me by the data controller clinic, that I have been informed, read and understood it, and signed it with my free will.

History :

Patient/Client

Name-surname-signature