OP.DR. NECAT KAPLAN'S INFORMATION TEXT ON THE PROTECTION OF PERSONAL DATA
1- Identity of the Data Controller
As the data controller, we operate at the address Zühtüpaşa Mahallesi Bağdat Cadde No: 19/1 Kadıköy İstanbul. OP.DR. NECAT KAPLAN (“DOCTOR”As [Company Name], we take great care to process and store all your personal data in the best possible way. Accordingly, in accordance with the Law No. 6698 on the Protection of Personal Data (“Law”In order to ensure that we can act in accordance with the relevant legislation, we present the following information to you as part of our obligation to inform you.
2- The Purpose for Which Personal Data Will Be Processed
Your personal data may be collected in accordance with the fundamental principles stipulated in the Law and the purposes of personal data processing specified in Articles 5 and 6 of the Law, depending on the nature of the service, for the reasons stipulated in the Law, and as required for the performance of the contractual relationship, within the framework of conducting our activities, operating and improving our services.
In order to provide you with safe healthcare services, your personal data processed by the DOCTOR is collected through automated or non-automated methods, depending on the nature of the healthcare services provided, via telephone, verbally, and through similar means, including physical locations and secretarial services, in verbal, written, and visual formats.
Your personal data, including your health data, as well as your general and special categories of personal data, will be processed by the DOCTOR. This includes: your name, surname, Turkish Republic Identity Number, passport number or temporary or foreign Turkish Republic Identity Number if you are not a Turkish citizen, place and date of birth, marital status, gender, your DOCTOR-specific protocol number, and other identifying information that we can use to identify you; your address, telephone number, email address, and other contact information; your financial data such as payment and billing information; your health and sexual life data obtained during the performance of medical diagnosis, treatment, and care services, such as laboratory and imaging results, test results, examination data, and prescription information that you submit for tracking purposes in your file; audio and digital information that we may obtain from you at various times through electronic or non-electronic methods; and all your general and special categories of personal data, primarily personal health data, obtained during the performance of medical diagnosis, examination, treatment, and care services. Your data regarding private health insurance and Social Security Institution information, your responses and comments shared for the purpose of evaluating our services, and your personal data are processed within the scope of the personal data processing conditions and purposes specified in the applicable Law and other relevant legislation.
Your personal data, including your special categories of personal data, may be processed for the following purposes: protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services; informing you about your appointment if you have one; planning and managing the internal operations of DOKTOR, conducting analysis to improve health services; training and developing our employees, billing for our services; verifying your identity; verifying your relationship with institutions contracted with DOKTOR; sharing requested information with the Ministry of Health and other public institutions and organizations in accordance with relevant legislation; sharing requested information with private insurance companies within the scope of financing health services; responding to all your questions and complaints regarding our health services; taking all necessary technical and administrative measures within the scope of data security of DOKTOR's systems and applications; analyzing your use of health services and storing your health data for the purpose of developing and improving the health services we provide to you; maintaining information regarding your health data that must be stored in accordance with relevant legislation; ensuring financial reconciliation with our contracted institutions regarding the health services provided to you; increasing patient satisfaction, research and similar purposes.
The "Personal and Special Category Data" mentioned above may be processed and kept in physical form by the DOCTOR within the framework of the provisions of the Law and relevant legislation, the Basic Law on Health Services No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Private Hospitals Regulation, the Regulation on the Processing of Personal Health Data and the Protection of Privacy, and other regulations and legislation of the Ministry of Health.
Medical records such as test results, reports, and X-rays that you submitted to the DOCTOR regarding examinations and treatments at other healthcare institutions will be destroyed within three months if you do not collect them upon discharge.
3- Transfer of Processed Personal Data
Your collected personal data may be shared with or transferred to suppliers, service providers, legally authorized third parties, the Ministry of Health, its affiliated subunits and family medicine centers, private insurance companies (health, pension and life insurance, etc.), the Social Security Institution, the General Directorate of Security and other law enforcement agencies, the General Directorate of Population, the Turkish Pharmacists Association, courts, medical centers and third parties providing health services, the health institution you are referred to or to which you apply, your authorized representatives, the institution you are affiliated with and/or work for, third parties from whom we receive consultancy services, regulatory and supervisory institutions and official authorities, domestic or foreign laboratories, systems and business partners with whom we cooperate for medical diagnosis, within the framework of Articles 8 and 9 of the Law and limited to the purposes stated in this Disclosure Statement, for the purposes explained in Article 2 of this Disclosure Statement and to ensure DOKTOR's compliance with the relevant legislation.
4- Method and Legal Basis for Personal Data Collection
Your personal data may be collected by the DOCTOR, through automated or non-automated means, for the performance of the healthcare service relationship or for legitimate reasons based on our legitimate interests, with your explicit consent. However, as explicitly stated in Article 6, paragraph 3 of the Law, personal data relating to health and sexual life may be processed by persons or authorized institutions and organizations under an obligation of confidentiality without seeking the explicit consent of the data subject, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and planning and managing healthcare services and their financing.
5- Rights of the Personal Data Subject
In accordance with Article 11 of the Law, individuals whose personal data is processed may apply to the DOCTOR and make requests regarding the following matters:
* To find out whether your personal data is being processed;
* If personal data has been processed, the right to request information regarding this processing;
* Access to and request for personal health data;
* To learn the purpose for which your personal data is processed and whether we use it in accordance with those purposes,
* To learn the third parties to whom your personal data is transferred, whether domestically or internationally;
* The right to request correction of personal data if it has been processed incompletely or inaccurately;
* The right to request the deletion, destruction, or anonymization of personal data when the reasons requiring its processing cease to exist;
* In these cases, or in case of correction, requesting that these be notified to third parties to whom the data has been transferred;
* The right to object to an outcome that is detrimental to oneself, resulting solely from the analysis of processed data by automated systems;
* The right to claim compensation for damages incurred as a result of the processing of personal data in violation of the law.
6- Data Security and Right to Appeal
To exercise the rights listed above, you can submit a petition containing your identification information and your explanation of the right you wish to exercise, as specified in Article 11 of the Law, to the following address: Zühtüpaşa Mahallesi Bağdat Cadde No: 19/1 Kadıköy İstanbul, either in person or via a notary public.
Depending on the nature of your request, your applications will be processed free of charge as soon as possible, and no later than thirty days; however, if the process requires additional costs, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.