This text has been prepared for the purpose of clarifying the processes of receiving, recording, storing, processing, updating, transferring, destroying and anonymizing and the mutual rights and obligations of the parties involved in these processes of the personal data (including special categories of personal data) of our patients (data owners) defined as the “relevant person” in the Law on the Protection of Personal Data numbered 6698 entered into force by having issued in the Official Gazette dated 07/04/2016 and other relevant legislation by our company / health institution (Assoc. Prof. Andaç Aykan Clinic) having the title of “data controller” in the same law and legislation and regarding the mutual rights and obligations of the parties involved in these processes.
1. DATA CONTROLLER
Our company / health institution determines the processing and storage purposes and means of your personal data by acting as a ‘data controller’ defined in the 3rd article of the Law numbered 6698 in the processes of processing the personal data of you patients/clients. Our company / health institution, as the data controller, is obliged to establish and manage the data recording system and to take administrative and technical measures regarding data security. In this context, we would like to point out that you can also process your data to the third parties having the title of “data processor” defined in the 3rd article of the Law.
2. PROCESSED PERSONAL DATA
The personal data defined as “all kinds of information that brings a person specific or identifiable” in the Law numbered 6698 are data such as the person’s name, surname, RFT ID No, contact information, date of birth, and gender.
Undoubtedly, the personal data intended to be protected by the aforementioned Law are not limited to these. The personal data of a special nature, which, if learned, can cause discrimination or victimization of the person concerned, are also under the protection of the Law. The person’s race, ethnicity, political opinion, philosophical or religious thoughts and beliefs, forensic information, biometric and genetic data, and health data are included in such data.
On the other hand, in addition to your personal information listed above as well as your audio-visual data (photograph, video recording, sound recording, camera recording) obtained by taking sound and images in workplaces, polyclinics, clinics and vehicles belonging to our company / health institution are processed by us as your personal data within the limits set in the 5th and 6th articles of the Law. Besides these, in addition to your personal data that you have transmitted to us by various methods such as telephone conversation, electronic correspondence, verbal interview by you as the patient/client of our company/health care institution and the forms you submit to us by filling out electronically or physically, contact forms that you fill in to contact us taking place in our websites or the websites belonging to the third parties, various agreements/forms you have signed with us and mails, faxes and letters you send to us, our employees, our customer service channels, social media channels, use of search engines such as Google etc., membership agreements and other agreements, campaigns, applications, your personal data that you specify in the forms are also collected by our company / health institution.
We declare that our company / health institution will endeavor to keep your personal data requested by you at the minimum possible level, that this data will be processed for clear and legitimate purposes and in accordance with the law and honesty rules, that all measures will be taken without hesitation to prevent your data from falling into the hands of unauthorized persons, that the utmost attention will be paid to the protection, that the data in question will be checked periodically for this purpose, that your said data will be retained for a period suitable for the purpose for which they were processed, and that it will be destroyed at the end of this period.
Your collected and processed personal data and sensitive personal data will be stored by our company / our health institution in a secure environment that is not open to public use, and will not be shared with third parties unless there is permission or a legal obligation. In this context, special attention will be paid to the security and confidentiality of your sensitive personal data defined above.
3. PURPOSES AND METHODS OF COLLECTING PERSONAL DATA
The personal data of our patients / clients are collected by our company / health institution automatically through the information and documents submitted to us and through the Closed Circuit Camera Recording System in the fields of activity, workplaces and vehicles of our company / health institution, for the purposes such as ensuring the security of legal, commercial, medical, administrative and therapeutic work and transactions performed by our patients / clients with our company, preventing illegal acts such as theft and fraud, within the scope of various legal reasons and processing purposes.
4. PROCESSING YOUR PERSONAL DATA, THEIR LEGAL REASONS AND PURPOSES OF PROCESSING
Your personal data collected by our company / health institution is processed by all relevant national/international legislation and national/international authorized authorities (BTK, BRSA, CBRT, MASAK, TBB, etc.), especially the Law on Private Security Services of our company / health institution, for the fulfillment of obligations arising from the secondary regulations published on the basis of these, as well as all contracts to which it is a party, for purposes such as ensuring the security of legal, commercial, medical, administrative and therapeutic business and transactions of our company / health institution and the persons with whom it has business relations, preventing unlawful acts such as theft and fraud and in accordance with the principles in 4th article of the Law, within the scope of processing the conditions taking place in the 5th articles the same Law.
5. PERSONS TO WHOM TRANSFERRING YOUR PERSONAL DATA IS TRANSFERRED AND TRANSFER PURPOSES
Your personal data collected by our company / health institution will be able to be shared, for the purposes described in this text, permitted by the legislation and/or within the scope of the said legislation or the agreements to which it is a party, within the frame of the private and public institutions and organizations (RFT Ministry of Health, Provincial Health Directorates, District Health Directorates, Health Institutions, Laboratories and Centers, Law Enforcement Forces, Courts, Ministries, Chief Public Prosecutor’s Offices, BRSA, MASAK, SGK, judicial and administrative authorities, other official institutions and organizations and individuals) that have permission, rights and authority to request and process personal information and the personal data processing conditions and purposes specified in the 8th and 9th articles of the Law numbered 6698.
Your sensitive personal data, on the other hand, will not be shared with third parties without your explicit consent, with the exception of exceptions arising from the Law.
6. PROCESSING TIME OF YOUR PERSONAL DATA
Your personal data collected by our company / health institution will be processed for the maximum period required for the purpose for which they are processed, and possibly for the legal statute of limitations, within the scope of the purposes described in this text, except for the obligations arising from the legal regulations. After the expiry of the specified period, your personal data will be deleted, destroyed or anonymized in accordance with the 7th article the Law.
7. YOUR LEGAL RIGHTS
As the personal data owner, by applying to our company / health institution, which is the data controller, within the scope of the provisions of the 11th article of the Law, you have the rights
• to learn whether your personal data is processed or not,
• if your personal data has been processed, to request information about it,
• to learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
• to know the third parties to whom your personal data is transferred at home or abroad,
• to request correction of your personal data in case of incomplete or incorrect processing and to request the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• to request the deletion or destruction of your personal data and to notify the third parties to whom the personal data has been transferred, within the framework of the conditions stipulated in the 7th article of the Law (in case the reasons requiring the processing of your personal data disappear, although it has been processed in accordance with the provisions of the Law and other relevant laws),
• to object to the emergence of a result against you by analyzing your processed data exclusively through automated systems, and
• to request the compensation of the damage in case you suffer damage due to the unlawful processing of your personal data. The exceptional cases stipulated in the 28th article of the Law are reserved.
You can submit your requests regarding these rights by filling out the “Application Form” available at www.kvkk.gov.tr and using the methods in this form. Your request will be concluded as soon as possible, and in any case within thirty (30) days at the latest, free of charge as a rule, but exceptionally, if it requires an additional cost, against a fee in the tariff determined by the Personal Data Protection Board.
(Assoc. Prof. Andaç Aykan)
Data Controller : (Assoc. Prof. Andaç Aykan Clinic)
Data Supervisor : Andaç Aykan
Telephone : 0 (212) 963 42 42
Address : Harbiye, Abdi İpekçi Cd. No 2 D:aire 14, 34367 Şişli/İstanbul
E-mail : info@aykanclinic.com
Internet Address : andacaykan.com
Patient / Client
Name – Surname – Signature
