Personal Data Processing Policy
As ‘ASSOC. PROF. DR. TAYLAN ÖZTÜRK’, we take the utmost care in processing and protecting your personal data. In accordance with the Personal Data Protection Law, the Basic Law on Health Services, the Regulation on Personal Health Data, the Patient Rights Regulation and related legislation, as the data controller, we take all necessary technical and administrative measures to prevent the unlawful processing of personal data, prevent unlawful access to personal data, and ensure the protection of personal data.
In accordance with Article 10 of the Personal Data Protection Law, we are informing you with the policies established to cover our patients and their relatives and this disclosure statement.
This disclosure statement is prepared in accordance with Article 10 of the Personal Data Protection Law (‘Law’) Article 10 of the Law, Article 5/8 of the Regulation on Personal Health Data, and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, has been prepared by ‘ASSOC. PROF. DR. TAYLAN ÖZTÜRK’ in his capacity as data controller.
1- Data Controller:
DOÇ. DR. TAYLAN ÖZTÜRK,‘ hereinafter referred to as ’CLINIC.”
As the ‘Data Controller’ as defined in Article 3 of the Personal Data Protection Law, it processes your personal data.
2- Purposes for Processing Personal Data:
Your personal data, collected in accordance with the Personal Data Protection Law, the Health Services Fundamental Law, the Regulation on Personal Health Data, the Patient Rights Regulation, and relevant legislation, is obtained, recorded, stored, modified, and processed in accordance with the principles set forth in the law, in whole or in part, automatically or non-automatically, provided that it is part of a data recording system.
Your personal data is processed within the scope of our “PHYENEHANE” activities, in accordance with Articles 4, 5, and 6 of the Law and relevant legislation, for the following purposes:
Protecting public health, providing preventive medicine, medical diagnosis, treatment, and care services, planning and managing the financing of healthcare services,
Ensuring the preservation of data required by law within the scope of the healthcare services we provide,
Confirming your identity, confirming your legal contact with contracted institutions within the scope of the healthcare services provided, and ensuring billing and financial reconciliation,
Protecting public health, providing preventive medicine, medical diagnosis, treatment, and care services,
Providing information to prosecutors, courts, and relevant public officials upon request and in accordance with legislation regarding matters related to public safety and legal disputes,
Scheduling and scheduling appointments within the scope of our healthcare services, providing necessary information, ensuring patient and family satisfaction, monitoring request and complaint processes, and conducting necessary reviews and evaluations of the healthcare services provided,
Protecting healthcare services Providing healthcare and consultancy services, including:
Planning and managing the internal operations of the practice, developing services, conducting analyses, evaluating risk management and quality processes,
Issuing freelance receipts for services provided;
Improving the practice’s services, maintaining development activities, maintaining the practice’s financial and accounting, administrative, legal, and technical business processes, and fulfilling risk management and quality improvement processes.
The burden of proof in potential legal disputes with patients;
Maintaining the necessary processes for completing physical forms, ensuring the security of transactions for relevant individuals;
Providing necessary information to regulatory and supervisory authorities and private legal entities;
Ensuring billing and payment transactions for services provided;
As Assoc. Prof. Dr. TAYLAN ÖZTÜRK’s practice, your personal data will be used primarily to provide you with effective, safe, and high-quality healthcare services. The general purposes for which your personal data is used include confirming your identity, facilitating doctor-patient communication, protecting public health, providing preventive medicine, medical diagnosis, planning and effectively executing treatment and care services, planning and managing healthcare financing, planning and managing the internal and daily operations of our practice, and procuring medications and supplies. If you schedule an appointment with our clinic, we will use your data to inform you of your appointment.
For the purposes stated above, and limited to the practice’s activities, your personal data listed below will be processed.
Your Identity Information (Turkish ID number, first and last name, your civil ID document, or other civil ID information found on the identity sharing system)
Your Contact Information (Phone numbers, contact address, email address)
Financial Information (Billing and payment information, bank account number, IBAN number, credit card information)
Visual and Audio Recordings (Photo information found on your official identity documents)
Health Information (Your personal data regarding examinations, all kinds of laboratory, imaging, and test results, patient diagnoses, treatment, prescriptions, medication information, doctor’s analyses and comments, diagnosis and prescription information, health reports, nutrition, diet information, and all health information received within the scope of health services, health board reports, diagnosis, and treatment procedures are processed within the scope of activities to protect public health, provide preventive medicine, medical diagnosis, treatment, and care services for patients.)
3- To Whom and for What Purposes May Processed Personal Data Be Transferred?
Your personal data processed by our practice is transferred to the relevant real and legal persons for the following purposes, in accordance with the relevant legislation governing our practice and Articles 8 and 9 of the Personal Data Protection Law:
University hospitals, public hospitals, private hospitals, medical schools, and other healthcare institutions with which we collaborate for the purpose of medical diagnosis, examination, treatment, and referral; Banks, financial institutions, public and private legal entities, and public officials for the purpose of carrying out financial transactions of relevant individuals;
In matters related to public security and legal disputes, upon request and limited to requests required by law, to prosecutors’ offices, courts, mediators, enforcement offices, and relevant legal institutions and organizations;
For the purposes of conducting the practice’s activities and fulfilling mutual obligations; Your personal data will be transferred to private healthcare institutions, hospitals where surgeries are performed, and accounting departments.
In accordance with legal regulations, your personal data will be transferred to the relevant parties, with express consent when necessary, for the purposes of protecting public health, providing preventive medicine, medical diagnosis, treatment and care services, and planning and managing healthcare services and financing, in accordance with the legislation and limited to the purpose of transfer.
Your personal data will be transferred to physical archives and/or information systems within our office/TAYLAN ÖZTÜRK and/or contracted organizations, and may be stored in both digital and physical formats.
Duration
Your personal data will be processed in accordance with the legislation on the protection of personal data, particularly the KVKK, and within the timeframes stipulated in other legislation (within the legal timeframes such as statutes of limitations and within the timeframes related to legitimate interests), in all cases, as long as the legitimate purposes mentioned above remain valid.
After this period, your personal data will be deleted, destroyed, and/or anonymized by the Practice or, upon your request, by methods in accordance with the Personal Data Protection Law and relevant regulations. You may withdraw your consent to the processing of personal data at any time, except for data required by law.
Duration
Your personal data will be processed in accordance with the Personal Data Protection Law, particularly the KVKK, and the mandatory periods stipulated in other legislation (including statutory periods such as statute of limitations and periods related to legitimate interests) in all cases, as long as the aforementioned legitimate purposes remain valid.
After this period, your personal data will be deleted, destroyed, and/or anonymized by the Practice or, upon your request, by methods in accordance with the Personal Data Protection Law and relevant regulations. You may withdraw your consent for the processing of personal data other than that required by law.
Transfer of Data Abroad:
In accordance with the principles set forth in Article 4/2 of the Personal Data Protection Law, you may obtain explicit consent for the processing of personal data belonging to the relevant individuals, or in accordance with Articles 5/2 and 6/3 of the Law. In the cases stipulated in the articles, without seeking explicit consent, in accordance with the rules in article 9 of the Law, after foreign countries with sufficient protection are determined by the Personal Data Protection Board (“Board”) and declared, personal data may be transferred only to persons and organizations resident in these countries. For countries where it is determined and declared that there is no sufficient protection, personal data controllers in Turkey and the relevant foreign country undertake in writing to provide sufficient protection and the necessary permissions are obtained from the Personal Data Protection Board for the relevant transfer, provided that it is limited to clinic activities. Within the limits stipulated by legislation, by taking all necessary precautions, within the scope of your legal relationship and activity with our office, in accordance with legislation and limited to the purpose of transferring to the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of healthcare services and their financing, your personal information regarding the relevant persons such as identity, contact information, transaction security, service recipient/customer transaction information, financial information, visual and audio data, health information, genetic data, protocol number, patient number may be transferred abroad through the applications, software programs, website, mobile applications, and social media accounts used.
Duration
Your personal data will be processed in accordance with the Personal Data Protection Law, particularly the KVKK, and the mandatory periods stipulated in other legislation (including statutory periods such as statute of limitations and periods related to legitimate interests) in all cases, as long as the aforementioned legitimate purposes remain valid.
After this period, your personal data will be deleted, destroyed, and/or anonymized by the Practice or, upon your request, by methods in accordance with the Personal Data Protection Law and relevant regulations. You may withdraw your consent for the processing of personal data other than that required by law.
Transfer of Data Abroad:
In accordance with the principles set forth in Article 4/2 of the Personal Data Protection Law, you may obtain explicit consent for the processing of personal data belonging to the relevant individuals, or in accordance with Articles 5/2 and 6/3 of the Law. In the cases stipulated in the articles, without seeking explicit consent, in accordance with the rules in article 9 of the Law, after foreign countries with sufficient protection are determined by the Personal Data Protection Board (“Board”) and declared, personal data may be transferred only to persons and organizations resident in these countries. For countries where it is determined and declared that there is no sufficient protection, personal data controllers in Turkey and the relevant foreign country undertake in writing to provide sufficient protection and the necessary permissions are obtained from the Personal Data Protection Board for the relevant transfer, provided that it is limited to clinic activities. Within the limits stipulated by legislation, by taking all necessary precautions, within the scope of your legal relationship and activity with our office, in accordance with legislation and limited to the purpose of transferring to the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of healthcare services and their financing, your personal information regarding the relevant persons such as identity, contact information, transaction security, service recipient/customer transaction information, financial information, visual and audio data, health information, genetic data, protocol number, patient number may be transferred abroad through the applications, software programs, website, mobile applications, and social media accounts used.
I have read and understood this Disclosure Text, prepared in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data, titled “Data Controller’s Obligation to Inform,” which explains who will process my personal data and for what purposes, to whom and for what purposes the processed personal data may be transferred, the method and legal basis for collecting personal data, and my rights stipulated in Article 11 of the Law. I have been informed in detail about this matter by the “MAYENEHANE” (Practical Practice), acting as the data controller.