Method of Collection and Legal Basis for Your Personal Data

Your personal data may be collected verbally, in writing, via WhatsApp, or electronically. When you fill out the contact form on our website, a data collection activity related to this purpose will also be performed. Your personal data is processed depending on the specific circumstances requiring the provided health services, including: examination information, health data, treatment records, various written and verbal contracts, petitions, interviews conducted, business cards, all kinds of documents obtained during the pursuit of lawsuits or enforcement proceedings. No data is processed by us through the website; however, internet access may be subject to log recording (IP address and time stamp, traffic information) kept by the domain provider’s IT company under Law No. 5651. Cookies are not used on our website. The website has been implemented for the purpose of providing information about the address, contact details, and areas where services are offered.

This data may be obtained through automated methods such as short message service (SMS), WhatsApp or similar correspondence, electronic mail, internet, disk, CD, DVD, memory card, telephone, and similar electronic or internet-based tools, as well as non-automated methods such as forms, contracts, notifications, and judicial or administrative authority decisions.

Cooperation protocols are established, and confidentiality commitments are obtained under the LPPD with private hospitals, laboratories, medical consumables suppliers, and patient record database service providers we coordinate with. Resumes sent without being requested for job applications are not processed. An explicit consent application will be carried out if a CV bank is intended to be created.

The legal reasons for processing your personal data are:

a) The necessity of processing data such as identity and address information due to tax legislation requirements, b) The necessity for our practice to fulfill legal obligations arising from health legislation, such as maintaining and storing files and sharing information with competent authorities, c) The necessity for the performance of the contract, d) The necessity for our practice to protect, use, and establish our rights and receivables, e) Explicit consent, where required.

Purpose of Processing Your Personal Data

Your personal data will be processed within the framework of the principles specified in Article 4/2 of the LPPD and the activities foreseen within the scope of health-related legislation, for the purposes of enabling you to benefit from the provided services, and complying with the obligations imposed by the legislation, such as maintaining files, storing information, reporting, taxation, and other obligations.

Your personal data is stored for a period proportionate to the purpose, depending on the durations specified in the legislation, or on legitimate interests and explicit consent practices if there is no regulation in the legislation, after which digital data is irreversibly deleted, and paper-based data is destroyed by shredding. In case of a deletion request from the data subject, it will be fulfilled immediately, provided it does not violate the legislation.

Retention periods are planned in detail in our personal data retention and destruction policy. Generally, the contract period is applied as 10 years, labor law as 10 years, tax records as 10 years, and health records as 30 years from the end of the service.

Transfer of Your Personal Data

In principle, your personal data is not transferred abroad. However, it should be known that your data may inadvertently circulate abroad during the use of services provided from abroad, such as the patient registration system and database used for appointments, email services like Gmail, and services like WhatsApp. The data of foreign nationals/residents who contact us from abroad may need to be shared with them or with addresses abroad for foreign insurance transactions and health tourism procedures.

Your personal data may be transferred to domestic institutions and organizations, and in cases stipulated in the relevant legislation, to regulatory and supervisory institutions, SSI (Social Security Institution), Provincial Health Directorates, courts, prosecutors’ offices, administrative authorities, and other official authorities and bodies, in accordance with the purposes mentioned above and the provisions of the LPPD and other legislation.

Your Rights as the Data Subject Whose Personal Data is Processed

Within the framework of Article 11 of the LPPD and other current legislation, you have the right to:

• Learn whether your personal data is being processed,

• Request information if your personal data has been processed,

• Learn the purpose of the processing of personal data and whether they are used in accordance with their purpose,

• Know the third parties to whom your personal data is transferred domestically or abroad,

• Request the correction of your personal data if it is incomplete or incorrectly processed,

• Request the deletion or destruction of your personal data within the conditions stipulated in the LPPD legislation,

• Request that the third parties to whom your personal data has been transferred be notified of the correction of incomplete or incorrect data or the deletion or destruction of your personal data,

• Object to the emergence of a result against you through the analysis of the processed data exclusively by automated systems,

• Demand compensation for damages if you suffer damage due to the unlawful processing of your personal data.

Procedures and Principles to be Followed When Asserting Your Requests

As the data subject whose personal data is concerned, you can send your requests regarding the rights mentioned above, including your written explanations regarding the right you wish to exercise, clearly and understandably stating the matter requested in the application, by physically signed mail to the address: “Altunizade, Mahir İz Cd. No:43, Üsküdar/İstanbul,” or by other methods determined by the Personal Data Protection Board.

The matters constituting the basis of your application must relate to your person, and your application must include your identity and address information. Identity verification will be limited to the information we hold. If you are applying on behalf of someone else, you must apply with a power of attorney containing specific authorization. Although there is no special format for the application, you may use the application form available on our website; writing your request clearly will ensure a clear answer.