KVKK - Personal Data Protection Law

As “ Mehmet Gökhan Şahin ”, the scope within which the personal data we obtain from our patients can be processed as the Data Controller in accordance with the Personal Data Protection Law No. 6698, taking into account the issues related to the privacy of private life, is explained below.

What is the Method and Legal Reason for Collecting Your Personal Data?

Your personal data is processed in accordance with the relevant legal regulations and by taking measures taken by the KVK Board in order to establish and fulfill the healthcare service contract with you, to fulfill our legal obligations, provided that it does not harm your fundamental rights and freedoms, if data processing is mandatory for our legitimate interests, to carry out preventive medicine, medical diagnosis services, to provide, finance and manage healthcare services, to conduct statistical studies to increase service quality, and to ensure workplace safety.

Your personal data is obtained through the filling in of patient information forms, consent forms and patient treatment cards by you, through written, verbal and e-mail notifications from you, through patient telephone conversation records, through information entered by you into our website, through notifications from your private health insurance company, through your medical examinations, through notifications from the hospital or health institution where you receive treatment or have medical examinations and tests, and through closed circuit security camera recordings.

Your personal data refers to your health information, medical history, identity information, photograph, security camera recording, contact information, profession, data you provide in patient information and consent texts, and examination results that you provide to us in writing, verbally, or electronically during and after examination/diagnosis/treatment, and this information is stored physically and digitally. Your personal data may be processed and transferred to real and legal persons specified in this “Information Text” and for the purposes set out below, in accordance with the basic principles stipulated by the KVKK, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

For What Purposes Do We Process Your Personal Data?

Your personal data can be processed for the purposes of providing medical treatment and services, informing you about our services, informing you about your appointment if you make an appointment, providing you with the opportunity to benefit from products, services and opportunities related to our activities, informing you about and making you benefit from special campaigns, promotions and discounts, informing you about events, services and developments, performing analysis to improve services, ensuring workplace safety, copying/backing up to prevent data loss, billing, sending SMS and commercial electronic messages, informing you and our followers on our social media accounts, measuring patient satisfaction and responding to all your questions and complaints within the scope of our health services, ensuring digital and physical data security and ensuring that legal obligations are fulfilled as required or made mandatory by legal regulations, and for other purposes specified in the LPPD.

To Whom and For What Purposes Do We Transfer Your Personal Data?

Your personal data collected in accordance with the KVKK and Articles I and II above; in accordance with the basic principles stipulated by the KVKK and within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK and for the purposes stated above; (in case you consent) your SMS and e-mail information to inform you about our services, to inform you about your appointments, to inform you about events, services and developments, to send SMS and commercial electronic messages to the company from which we receive the IYS bulk shipping service, your e-mail address to our accountant for invoicing, your photo and video visual (in case you consent) to the company that manages our social media accounts, the closed circuit camera recording of the clinic’s interior to the security company or official authorities in case of legal obligation or legitimate interest, and for other purposes specified in the KVKK; In case of legal necessity or legitimate interest, it may be transferred to the legal representatives and third parties from whom we receive consultancy, authorize, including lawyers, financial advisors, consultants, auditors with whom we work, laboratories from which we receive services for medical examination and analysis, legally authorized public institutions and private persons.

What are your rights as a data owner as listed in Article 11 of the KVKK?

As the personal data owner, you have the right to learn whether your personal data has been processed, to request information about your personal data if it has been processed, to learn the purpose of processing your personal data and whether it is used in accordance with its purpose, to know the third parties to whom your personal data has been transferred, to request correction of your personal data if it is processed incompletely or incorrectly and to request notification of the transaction made within this scope to the third parties to whom your personal data has been transferred, to request deletion or destruction of your personal data if the reasons requiring processing are eliminated despite the fact that it has been processed in accordance with the provisions of the KVKK and other relevant laws and to request notification of the transaction made within this scope to the third parties to whom your personal data has been transferred, to object to the emergence of a result against the person by means of analysis of your processed data exclusively through automated systems, to withdraw your consent to the processing of your personal data, and to request compensation for your damages in case you suffer damages due to the processing of your personal data in violation of the law.

How Will You Exercise Your Rights as a Data Owner?

In order to exercise your above-mentioned rights pursuant to Article 11 of the KVKK; You may contact “ Mehmet Gökhan Şahin ” (Contact Address: Alpaslan Mahallesi, Bahar Caddesi, Çırağan Sitesi, C Blok, No: 31/B 38030 Kayseri) by applying in person or by submitting your written application through a notary. “Mehmet Gökhan Şahin” will finalize the request as soon as possible and within thirty (30) days at the latest, depending on the nature of the request.

You can also submit your requests within the scope of Article 11 of the Law “Regulating the Rights of the Data Subject” in writing to the Personal Data Protection Authority’s address “Nasuh Akar Mahallesi 1407 sokak No: 4 Çankaya / Ankara” in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” or by applying online to www.kvkk.gov.tr.

How Long Will Your Personal Data Be Processed?

In accordance with the KVKK, your personal data processed for the purposes specified in the Information Text and Consent Text will be deleted, destroyed or anonymized and will continue to be used by us when the purpose requiring processing is eliminated according to KVKK article 7/f.1 and/or when the limitation periods required for us to process your data in accordance with the legislation expire.

In accordance with the KVKK, Cases in Which “Mehmet Gökhan Şahin” May Process Your Personal Data Without Your Explicit Consent:

In accordance with Article 5 of the KVKK, your personal data, which is stated above and obtained in accordance with the law, may be processed without your explicit consent in the following cases:

In cases where it is clearly foreseen by the laws, if you are unable to give your consent as the data owner due to a de facto impossibility or if your consent is not legally valid, if the processing of your personal data is mandatory for the protection of your own life or physical integrity or that of someone else, if it is mandatory to fulfill a legal obligation, if your personal data has been made public by you, if the processing of data is mandatory for the establishment, exercise or protection of a right, if the processing of data is mandatory for the legitimate interests of “Mehmet Gökhan Şahin”, provided that it does not harm your fundamental rights and freedoms.

DATA SECURITY

“Mehmet Gökhan Şahin”, as the data controller within the scope of KVKK; takes all necessary physical, digital, technical and administrative measures to ensure the appropriate level of security in order to prevent the unlawful processing of personal data, to prevent unlawful access to personal data, and to ensure the preservation of personal data.