DISCLOSURE TEXT ON THE PROCESSING OF PERSONAL DATA
- PURPOSE AND SCOPE
This disclosure text is in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the European Union General Data Protection Regulation ("GDPR"), Dr. HÜSEYİN HIRA It has been prepared in order to enlighten data subjects about the procedures and principles regarding the processing of Personal Data of patients/visitors who apply to the practice and employees/trainees working at the practice.
- PRINCIPLES REGARDING THE PROCESSING OF PERSONAL DATA
Dr. HÜSEYİN HIRA, Data Controller processes your personal data within the framework of the following principles.
2.1 Processing in accordance with the Law and Good Faith
In the processing of your personal data, we act in accordance with the principles introduced by legal regulations and the general rule of trust and honesty.
2.2 Ensuring that Personal Data is Accurate and Up-to-Date When Necessary
Taking into account your legitimate interests, periodic checks and updates are made to ensure that the processed data is accurate and up-to-date and necessary measures are taken accordingly. In this context, systems for checking the accuracy of personal data and making necessary corrections Dr. HÜSEYİN HIRA is created within the organization.
2.3 Processing for Specific, Explicit and Legitimate Purposes
Your personal data is processed based on clear, specific and legitimate data processing purposes.
2.4 Being relevant, limited and proportionate to the purpose for which they are processed
Your personal data is processed in a proportionate, purpose-related and limited manner in order to achieve the envisaged purpose(s) and the processing of personal data that is not related to the realization of the purpose or is not needed is avoided.
2.5 Storage for the Period Stipulated in the Relevant Legislation or Required for the Purpose for which they are Processed
Your personal data are retained only for the period stipulated in the relevant legislation or required for the purpose for which they are processed. In this context, first of all, it is determined whether a period of time is stipulated for the storage of personal data in the relevant legislation, if a period of time is determined, it is acted in accordance with this period, and if a period of time is not determined, personal data is stored for the period required for the purpose for which they are processed. In the event that the period expires or the reasons requiring processing disappear, if there is no legal reason that allows them to be processed for a longer period, your personal data Dr. HÜSEYİN HIRA It is deleted, destroyed or anonymized according to the Personal Data Retention and Destruction Policy.
- CONDITIONS FOR PROCESSING PERSONAL DATA
Your personal data, Dr. HÜSEYİN HIRA processed by the Company under the conditions set out below.
3.1 Explicit Provision in the Law
In cases where personal data processing is explicitly stipulated in the laws, your personal data may be processed.
3.2 Failure to Obtain the Explicit Consent of the Relevant Person Due to Actual Impossibility
Your personal data may be processed if it is mandatory to process personal data in order to protect the life or physical integrity of the person concerned or another person who is unable to disclose his consent due to actual impossibility or whose consent cannot be recognized as valid.
3.3 Direct Relevance to the Establishment or Performance of the Contract
Provided that it is directly related to the establishment or performance of the contract, your personal data may be processed if it is necessary to process personal data belonging to the parties to the contract.
3.4 Dr. HÜSEYİN HIRA 's Fulfillment of Legal Obligation
As a data controller, your personal data may be processed if processing is mandatory to fulfill legal obligations.
3.5 Publicization of Personal Data
If your personal data is made public by you, it may be processed.
3.6 Data Processing is Mandatory for the Establishment or Protection of a Right
Your personal data may be processed if data processing is mandatory for the establishment, exercise or protection of a right.
3.7 Processing of Data Based on Legitimate Interest
Dr. HÜSEYİN HIRA 's Your personal data may be processed if data processing is necessary for legitimate interests.
3.8 Processing Based on Explicit Consent
In cases where your personal data cannot be processed based on any of the conditions specified in these Principles, it is processed based on explicit consent.
- YOUR PERSONAL DATA TO BE PROCESSED
Your Personal Data and Sensitive Personal Data specified below, in accordance with the basic principles stipulated in Article 4 of the KVKK and Article 5 of the GDPR, in line with the Personal Data Processing Conditions and Purposes specified in Articles 5 and 6 of the KVKK and Articles 6 and 9 of the GDPR and within the scope of the purposes set forth in this Clarification Text; in accordance with the law, in connection with the purpose of processing, limited and proportionate, observing the principle of fairness and transparency, accurate and up-to-date, by taking all kinds of technical and administrative measures stipulated in the legislation in order to ensure data security Dr. HÜSEYİN HIRA will be processed by
4.1 Your Identity Information : Your name, surname, Turkish ID Number and/or Passport Number and/or Temporary Turkish ID Number, place and date of birth, marital status, gender, occupation, signature and other identification data that can identify you.
4.2 Your Contact Data : Your address (residence/workplace), telephone number (home/workplace fixed and/or mobile telephone numbers you have provided), e-mail address, IP address, social media accounts and other contact data.
4.3 Your Health Information : Your blood type, allergies, chronic diseases, venereal diseases, infectious diseases, data about your previous surgeries/operations, medications you use continuously, information about Covid-19 disease, medical treatments, medical reports, analysis and imaging results, prescription information, body analysis and measurement data, skin analysis data, habits harmful to health and other health data necessary for the treatment and medical applications to be applied to you.
4.4 Your Photographs and Video Images : Your photographs and/or videos taken before, during and/or after the medical procedure.
4.5 Your Financial Information : Your bank account number, IBAN number, credit card information, billing and invoicing information and other financial data.
4.6 Transfer and Accommodation Information: If you are a Health Tourist coming within the scope of International Health Tourism, your transfer information, flight ticket round trip information, hotel accommodation information.
- PURPOSES OF PROCESSING PERSONAL DATA
Your Personal Data; To be able to create a patient file, to carry out your examination, preventive medicine, medical diagnosis, treatment and care services, to carry out your controls after medical diagnosis and treatment processes, to manage complication processes that may occur, to communicate with you one-on-one, to manage appointment processes, to manage patient satisfaction and demand management, to fulfill legal and contractual obligations, to keep the information regarding your health data that must be kept in accordance with the relevant legislation within the specified periods, To be able to receive consultation services from other relevant specialist physicians when necessary in order to ensure that your treatment is carried out correctly, to fulfill legal obligations in accordance with the legislation within the scope of International Health Tourism, to plan the transfer and accommodation services of patients/consultants coming within the framework of Health Tourism, to announce innovations regarding medical treatment and practices, to inform third parties about the medical procedure applied in medical terms, to carry out promotional activities of medical services applied within the framework of Health Tourism Incentive Legislation, to plan and manage health services and financing, to plan and manage the responsibilities arising from the legal relationship established between the doctor and the patient. To be able to inform third parties medically, to carry out promotional activities of medical services applied within the framework of Health Tourism Incentive Legislation, to plan and manage health services and financing, to fulfill the responsibilities arising from the legal relationship established between the doctor and the patient, to fulfill financial and administrative obligations, to ensure technical and commercial security and to fulfill public obligations, in accordance with KVKK and GDPRDr. HÜSEYİN HIRA processed by the
Your Personal Data, in the following situations and circumstances Dr. HÜSEYİN HIRA will be processed within the scope of KVKK and GDPR:
5.1 Your Identity Data will be processed in order to carry out examination, preventive medicine, medical diagnosis, treatment and care services, to create patient files, to realize patient satisfaction and demand management, to plan transfer and accommodation services of patients/consultants coming within the framework of Health Tourism.
Your Contact Information; will be processed in order to carry out your controls after medical diagnosis and treatment processes, to manage appointment processes, and may also be processed for the purpose of introducing, informing, announcing innovations regarding medical treatments and practices, reminding the appointment date in continuous treatments, and congratulating and celebrating on special occasions, provided that you give your explicit consent.
5.2 Your Health Information will be processed in order to carry out your medical treatments successfully, to receive consultation from another specialist physician if deemed necessary in your treatment process, to create a patient file, to keep the information regarding your health data that must be kept in accordance with the relevant legislation within the period, to fulfill the legal obligations within the scope of the Health Law and Health Tourism Legislation in force.
Your Photo, Video and Voice Recording Information; Dr. HÜSEYİN HIRA will be processed for the purpose of observing and managing the treatment process and may also be processed for the purpose of informing and promoting the medical procedure applied to you to Health Tourist 3rd Parties who wish to receive treatment in our country within the scope of International Health Tourism, provided that you give your explicit consent.
Your Financial Data will be processed for the purpose of checking your fee payments, issuing invoices and refunding any excess fees.
5.3 Your Transfer and Accommodation Information will be processed in order to plan the transfer and accommodation services of patients/consultants coming within the framework of International Health Tourism.
Your above-mentioned Personal Data and Sensitive Personal Data will be processed for the above-mentioned purposes and in line with the legislation in order to carry out your medical treatment and fulfill the obligations regarding your treatment. In the event that you do not provide your relevant personal data, your personal data will be processed by Dr. Dr. Dr., who will serve as a physician in your medical treatment. HÜSEYİN HIRA 's legal obligations will not be duly fulfilled and your treatment and/or recovery processes will not be carried out successfully.
- TO WHOM AND FOR WHAT PURPOSE PERSONAL DATA WILL BE TRANSFERRED
Your Personal Data collected in accordance with the conditions and purposes within the scope of the Personal Data Processing Conditions specified in Articles 5 and 6 of the KVKK No. 6698 and Articles 6 and 9 of the GDPR; In accordance with Articles 8 and 9 of the KVKK and Articles 45 and 49 of the GDPR, Dr. Dr. Dr. HÜSEYİN HIRA Execution and development of examination, preventive medicine, medical diagnosis, treatment and care services, management of complication processes, consultation services from other specialist physicians when necessary, fulfillment of administrative obligations regarding International Health Tourism legislation, planning transfer and accommodation services of patients arriving within the framework of Health Tourism, For the purposes of managing promotional activities, communicating with patients, planning and managing health services and financing, fulfilling the responsibilities arising from the legal relationship established between the doctor and the patient, fulfilling financial, legal and administrative obligations, ensuring technical and commercial security and fulfilling public obligations in accordance with the International Health Tourism Incentive legislation; To the extent sufficient for the realization of the purpose, by signing the necessary confidentiality agreements, by providing all administrative and technical security measures in accordance with the legislation, "To legally authorized public institutions and organizations in Turkey, Judicial Authorities private insurance company, contracted financial advisor, contracted occupational health and safety company, contracted lawyer, contracted audit firm, contracted consultancy company, salary bank and contracted banks, It will be transferred to the Contracted Airline Company / Hotel / Bus Company, other specialist physicians for consultation purposes, Database (Server) Providers, Translators, Overseas Promotion Consultant, Data Protection Officer, Tourism Agencies.
- METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA
Your Personal Data, Dr. HÜSEYİN HIRA"DATA PROCESSOR / PROCESSOR" by real or legal persons authorized by the Company in the capacity of "DATA PROCESSOR / PROCESSOR"; verbally, in writing, by taking camera and photo records, by keeping records in physical and electronic media together with the necessary technical and administrative security measures, and in cases stipulated by the relevant provisions of KVKK and GDPR, it may also be processed by obtaining your explicit consent.
- SECURITY OF PERSONAL DATA
8.1 Dr. HÜSEYİN HIRAIn order to ensure the security of personal data, to prevent unlawful processing, it takes reasonable measures to prevent unauthorized access risks, accidental data loss, deliberate deletion of data or damage to data.
8.2 All necessary technical and physical measures are taken to prevent access to personal data by persons other than those authorized to access it. In this context, especially the authorization system is designed in such a way that no one can access more personal data than necessary.
8.3 Dr. HÜSEYİN HIRAThe Company carries out and has carried out the necessary audits in its own institution or organization in order to ensure the implementation of the provisions of Law No. 6698.
- PERSONAL DATA PROCESSING PERIOD
Your personal data will be processed by complying with the data processing and statute of limitations periods specified in all relevant laws and other legal legislation, limited to the purposes specified in this Clarification Text. In case of changes in the laws regarding data processing periods, the new periods determined will be taken as basis.
As a requirement of the principle of purpose limitation, your personal data is processed for the fulfillment of the purposes described in this Clarification Text, limited to the period that requires processing, and after the expiration of the periods, it is deleted, destroyed or anonymized.
- APPLICATION PROCEDURES AND PRINCIPLES
As a data subject, in case you have a request regarding your rights under Article 11 of Law No. 6698; by filling out the Application Form on the Protection of Personal Data, which you can obtain from the Information Desk or our website, in accordance with the procedures and principles specified or with your application that meets the minimum conditions stipulated by the Communiqué on the Procedures and Principles of Application to the Data Controller; huseyinhira@gmail.com by sending a message to our e-mail address with mobile signature or e-signature or "Halaskargazi Mh. Halaskargazi Cd. No:38-66 D:107 ŞİŞLİ/İSTANBUL" You can apply to our address in person with a wet signed written application or through a notary public. Your application Dr. HÜSEYİN HIRA we will finalize your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, Dr. HÜSEYİN HIRA The fee in the tariff determined by the Personal Data Protection Board will be charged by the Personal Data Protection Board.
In this context, as a data subject, you have the following rights;
- a)Learn whether personal data is being processed,
- b)Request information if their personal data has been processed,
- c)To learn the purpose of processing personal data and whether they are used for their intended purpose,
ç) To know the third parties to whom personal data are transferred domestically or abroad,
- d)To request correction of personal data in case of incomplete or incorrect processing,
- e)To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
- f)To request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data are transferred,
- g)To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
ğ) In case of damage due to unlawful processing of personal data, to demand compensation for the damage