PERSONAL DATA PROTECTION POLICY OF ÇAMLIK ORAL AND DENTAL HEALTH POLICY CLINIC
In accordance with the Personal Data Protection Law No. 6698, your personal data may be processed by our Company, in its capacity as Data Controller, by recording, storing, updating, transferring and/or classifying it as explained below, limited only to our commercial activities, in order to carry out medical health services, fulfill the requirements of our commercial activities, ensure customer satisfaction at the maximum level, and quickly resolve your questions and problems.
We would like to point out that, in accordance with the Laws and Regulations issued by our Company to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and to protect personal data, our Company takes all technical and administrative measures to ensure the appropriate level of security in order to prevent your personal data from being processed unlawfully, to prevent it from being accessed unlawfully, and to ensure its preservation.
This policy on the protection of personal data covers our Company's legal entity, partners and managers, employees, customers and third parties.
METHODS OF OBTAINING YOUR PERSONAL DATA
- Use of certain sections of our company website
- Bazı formların doldurulması
- İnternet sitemizdeki e-mail adresi veya telefon yoluyla şirketimize ulaşılması esnasında tarafınızdan paylaşım yapılması
- Your personal data is obtained for the purpose of implementing existing company policies and procedures, including, but not limited to, using our website or sharing data with our company via e-mail or mobile applications. However, the methods mentioned are examples and the collection of your personal data is not limited to them.
YOUR PERSONAL DATA PROCESSED BY OUR COMPANY
Your data, which is processed by our company as the data controller and is considered personal data in accordance with the Personal Data Protection Law No. 6698, is shown below.
- Identity data such as your name and surname, TR ID number, passport number or temporary TR ID number if you are not a Turkish citizen, place and date of birth, marital status, gender, and a photocopy of your submitted TR ID Card, Passport or Driver's License,
- Your contact data such as address, telephone number, e-mail address,
- Your data such as profession, bank account and IBAN number
- Your private health insurance data and Social Security Institution data for the purpose of financing and planning health services,
- Your navigation information, IP address, browser information obtained during the use of our website and mobile application
In addition to your personal data listed above, your special personal data listed below, but not limited to them, are also processed.
- Your health data obtained during the execution of medical diagnosis, treatment and care services such as test results, examination data, prescription information
- Your image records taken with the closed circuit camera system during your visit to our clinics
- Intraoral – Before and After photos
- Panoramic X-ray and tomography images
- Patients' Anamnesis Information-Treatment Plans
OUR PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
Your personal data;
- Informing you about your appointment,
- Verification of your identity,
- Verification of your relationship with contracted institutions,
- Financing health services, covering examination, diagnosis and treatment expenses, sharing your requested information with private insurance companies,
- Invoicing,
- Conducting analysis for the purpose of improving health services and providing training to our employees,
- Carrying out quality improvement activities,
- Answering all your questions and complaints regarding your health services,
- Taking all necessary technical and administrative measures within the scope of your data security,
- Participating in campaigns and providing campaign information,
- Measuring, improving and researching patient satisfaction,
It is processed within the framework of the Personal Data Protection Law No. 6698, Health Services Fundamental Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Subsidiaries, Private Hospitals Regulation, Regulation on the Processing of Personal Health Data and Protection of Privacy, Ministry of Health regulations and other legislative provisions.
Your health data, which is among your private data, is processed by our doctors who are under the obligation of confidentiality, for the purpose of protecting public health, providing preventive medicine, medical diagnosis, treatment and care services.
Our company processes your data primarily within the scope of the explicit consent it has received from you. However, in cases where it is not mandatory to obtain explicit consent in the KVKK Law No. 6698, it is also processed without your specific consent in the cases listed in Article 5 of the KVKK Law No. 6698.
Data regarding people's race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and clothing, association, foundation or union membership, health, sexual life, criminal conviction and security measures, as well as biometric and genetic data are special personal data.
METHOD OF COLLECTING AND STORING YOUR PERSONAL DATA
Your personal data that you share with our company may be collected by automatic or non-automatic methods, in offices, branches, on the website, orally, in writing or electronically. Your personal data will be stored in electronic and/or physical media. Our company implements the necessary business process design and technical security infrastructure developments to ensure that your personal data provided and stored by our company are not exposed to unauthorized access, manipulated, lost or damaged in the environments where they are stored.
Your personal data will be processed by taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and will be stored and processed during the legal retention period or, if such a period is not foreseen, for the period required by the purpose of processing. When this period expires, your personal data will be removed from our Company's data flows by deletion, destruction or anonymization methods.
TRANSFER OF YOUR DATA DOMESTIC AND ABROAD
Your personal data may be processed within the framework of the Personal Data Protection Law No. 6698, the Health Services Fundamental Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Subsidiaries, the Private Hospitals Regulation, the Regulation on the Processing of Personal Health Data and the Protection of Privacy, the Ministry of Health regulations and other relevant legislation and for the purposes explained above;
- The Ministry of Health, its affiliated units and family medicine centres,
- Private insurance companies (health, pension, life insurance and similar),
- The Social Security Institution,
- The General Directorate of Security and other law enforcement authorities,
- The General Directorate of Population and Citizenship Affairs,
- The Turkish Pharmacists’ Association,
- Judicial authorities,
- With laboratories, medical centers, institutions providing medical devices and health services in the country or abroad with which we cooperate for medical diagnosis and treatment,
- The healthcare institution to which you are referred or at which you apply,
- Your authorized legal representatives,
- Regulatory and supervisory authorities and official bodies,
- Your employer where billing is to be made to your employer,
- It may be shared with your suppliers, support service providers and business partners whose services you benefit from or cooperate with.
- Your personal data cannot be transferred to third parties within the country without your explicit consent.
Your personal data may be transferred abroad with your explicit consent. It cannot be transferred without your consent. However, Personal Data No. 6698 One of the conditions specified in the second paragraph of Article 5 and the third paragraph of Article 6 of the Law on Protection of Personal Data is present and in the foreign country to which the personal data will be transferred; a) If there is sufficient protection, b) In case there is not sufficient protection, data controllers in Turkey and the relevant foreign country undertake to provide adequate protection in writing and the data can be transferred abroad without seeking the express consent of the relevant person, provided that the Board has permission. PERIOD OF STORAGE OF YOUR PERSONAL DATA In order to fulfill the obligations arising from the nature of the commercial activity between you and our company and to enforce workplace rules, your personal data will be retained for the period necessary for the purpose for which they are processed. In addition, if the processed data is processed due to a contract concluded later, the Company will be able to store personal data in case of any dispute that may arise from the employment contract or commercial contract, limited to the purpose of providing the necessary defenses within the scope of the dispute and for a period of 10 (ten) years from the termination of the business and commercial relationship, determined in accordance with the relevant legislation. PRINCIPLES ON WHICH OUR COMPANY PROCESSES YOUR DATA Our company observes the following principles when processing your data: OUR PRECAUTIONS AND COMMITMENTS REGARDING DATA SECURITY Our company is committed to protecting your data, which it processes in accordance with the Personal Data Protection Law No. 6698, in a safe and reasonable manner. It carries out technical and administrative measures using various methods and security technologies to ensure the appropriate level of security in order to prevent unlawful processing and access of your personal data and to ensure the protection of your personal data. In addition, your special personal data is processed by taking adequate measures determined by the Board. The Company will not disclose the personal data it has obtained to anyone else in violation of this clarification text and the provisions of the Personal Data Protection Law No. 6698, and will not use it for purposes other than processing. STORING YOUR PERSONAL DATA IN SECURE ENVIRONMENTS Our company takes the technical and administrative measures listed below, in line with its technological and financial means, to keep your personal data in secure environments and to prevent it from being destroyed, lost or changed for unlawful purposes. Accordingly: PROTECTION OF YOUR SPECIAL PERSONAL DATA Due to the special nature of some personal data, the law has also introduced some regulations regarding the processing and protection of such data. PROCESSING TIME AND DESTRUCTION METHODS OF YOUR PERSONAL DATA When determining the storage period of your personal data, our company takes into account the applicable legislation and the purposes of processing the data subject to the process. In accordance with the legislation, your processed personal data, KVKK art. When the purpose requiring processing in accordance with 7/f.1. no longer exists and/or all periods, including the statute of limitations, in which we are obliged to process your data in accordance with the legislation, expire, your personal data will be deleted, destroyed or anonymized by us and will continue to be used. Deletion: Deletion of your personal data is the process of making your personal data inaccessible and unusable for the relevant users in any way. Destruction: Destruction of your personal data is the process of making your personal data inaccessible, irretrievable and unusable by anyone. Anonymization: Anonymization of your personal data means making it impossible for your personal data to be associated with an identified or identifiable natural person in any way, even if it is matched with other data. Our company will destroy your personal data using these methods. In addition, our Company will perform the necessary checks every six months and destroy your personal data that does not need to be stored using the above methods in accordance with the regulation on Deletion, Destruction or Anonymization of Personal Data. ÇAMLIK AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ
