Personal Data Protection

Patient Information Text within the Scope of Personal Data Protection Law

Data Controller: Assoc. Prof. CELALETTIN SEVER
Address: Acıbadem Mahallesi. Çeçen Sok. Akasya Acıbadem Kent Etabı. B-2 Blok. Kat:13 No: 178 Üsküdar / Istanbul.

Dear patient,
As the “Data Controller,” your personal data/special category data that you have shared with us will be processed in accordance with the Law on the Protection of Personal Data numbered 6698 (KVKK), in a manner that is relevant, limited, and proportionate to the purpose.

What are our legal grounds for processing your personal data?

In accordance with the 1219 Law on Medical Profession, Regulation on Patient Rights, Biomedical Agreement, Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, Law No. 6698 on the Protection of Personal Data, Regulation on Personal Health Data, Regulation on Private Health Institutions Offering Outpatient Diagnosis and Treatment Services, and other relevant legislation, we may collect and process the information detailed below during the examination-treatment-control process.

As stated in Article 6 paragraph 3 of KVKK, personal data related to health and sexual life can be processed without the explicit consent of the data subject by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protecting public health, preventive medicine, the provision of medical diagnosis, treatment and care services, planning and management of health services and financing.

Under the Tax Procedure Law, information such as your identity, address, date, and type of service received is processed during billing processes. Pricing information provided to you is also recorded.

Financial information and service details are stored for the performance of the contract.

In case of legal disputes, we may retain your data processed during the payment, examination, and treatment process to establish or protect a right.

Under the legitimate interest legal basis, your data is processed for satisfaction surveys, functional database maintenance of patient records, appointment scheduling, celebration of special days, and monitoring the effectiveness of treatment through before-and-after photographs, coordination with hospitals for surgery dates.

For the purpose of informing about newly introduced healthcare services, your data is processed based on the legal basis of explicit consent due to the service of the patient registration system database and appointment program being serviced from abroad via WhatsApp, Instagram, and email, etc.

What personal data do we obtain?

Primary and special category personal data obtained for the execution of all medical diagnosis, examination, treatment, and care services, including but not limited to:

Identity data such as your name, surname, ID number, passport number if you are not a Turkish citizen, place and date of birth, marital status, gender information,

Contact data such as your address, phone number, email address,

Health and sexual life-related data obtained during the execution of medical diagnosis, treatment, and care services such as laboratory and imaging results, test results, examination data, prescription information, type of surgery, surgery date, examination date, where the medical procedure was performed, allergies,

alcohol and tobacco use habits, previous illnesses, blood type, infectious disease information, medications used, etc.,

Responses and comments shared during satisfaction survey processes to evaluate our services,

Navigation traffic information, IP address, timestamp obtained during the use of our website (which are compulsorily processed by the company providing web services under Law No. 5651),

Visual photographs and videos before and after treatment to monitor the effectiveness of treatment.

How do we collect your personal data?

To provide you with high standards of service, we obtain your personal data through verbal, written, visual, or electronic channels such as physical means, WhatsApp, email, the contact section of our website, cameras, etc., depending on the nature of the service provided.

For what purposes are your personal data processed?

Your personal data, including special category personal data, may be processed for the following purposes:

Execution of medical diagnosis, treatment, and care services,

Sharing requested information with the Ministry of Health and other public institutions and organizations in accordance with relevant legislation,

Fulfillment of legal and regulatory requirements,

Financing of your healthcare services,

Notification about your appointment via our Secretariat and Digital Channels,

Verification of your identity to fulfill our registration obligations,

Planning and management of our healthcare service,

Coordination for scheduling your hospital appointments,

Arranging follow-up examination appointments,

Evaluation of your satisfaction within the scope of legitimate interest,

Within the scope of legal obligation during billing processes,

Implementation of all necessary technical and administrative measures for data security,

Celebration of important days within the scope of legitimate interest,

Provision of information about newly introduced healthcare and aesthetic services,

Ensuring visual control before and after treatment to evaluate treatment effectiveness,

Provision of personalized medicine/medical supplies, etc.,

Coordination through a Health Tourism company if you have reached us in this scope.

How are your personal data protected?

Administrative, technical, and physical measures are taken to protect your personal data.

Measures are implemented to ensure that your data is securely stored and not used for purposes other than its intended use, and to prevent unauthorized access and sharing.

Policies and processes recommended by the Board are reviewed in accordance with the essence of KVKK, and our staff has received professional training on this subject.

Technical requirements for computers and programs are researched to provide top-level protection.

Physical areas are equipped with lock and authorization applications. You can find more detailed information on protection in our storage and destruction policy.

What is the retention period?

Your health data must be kept for at least 20 years in accordance with relevant legislation. The Ministry of Health has planned to keep the health data in the file plan for 99-101 years. We have decided to keep the treatment data for 10 years from the end of our treatment relationship with you based on the process of our clinic. Considering the need to control past procedures during ongoing check-ups or other medical interventions, we have determined this period. Your data whose storage period has expired will be destroyed during the first periodic destruction period (periodic destruction is performed every 6 months). If you request the destruction of personal data whose storage period has not expired, it will not be fulfilled if the relevant legislation’s period has not expired.

What are your rights regarding your personal data being processed?

You can exercise your rights under Article 11 of the Law on the Protection of Personal Data regarding your personal data being processed.
Learn whether your personal data is processed,

Request information if your personal data has been processed,

Learn the purpose of processing your personal data and whether they are used appropriately for that purpose,

Learn the third parties in the country or abroad to whom your personal data is transferred,

Request correction of your personal data if it is incomplete or incorrectly processed, and request notification of this correction to third parties to whom your personal data has been transferred,

Request deletion, destruction, or anonymization of your personal data in accordance with the relevant legislation, even if it has been processed in compliance with Law No. 6698 and other relevant laws, and request notification of this process to third parties to whom your personal data has been transferred,
Object to a result against you arising from the analysis of your processed data exclusively through automated systems,

Request compensation if you suffer damage due to the unlawful processing of your personal data.

We will conclude your application within the shortest time possible and at the latest within thirty (30) days in accordance with Article 13 of Law No. 6698 based on your application’s nature.

You can directly submit your requests regarding the processing of personal data to us.

For your application to be the subject of personal data as you, the applicant, it must include your identity and address information. Identity verification will be limited to the information we have. If someone else will apply on your behalf, they must have special authorization with a power of attorney (including lawyers). There is no specific format for the application, but you can use the application form on our website. Clearly stating your request will ensure a clear response.

In addition, in cases requiring consultation for medical diagnosis and treatment, sharing with colleagues by my doctor, and also by Asst. Prof. Celalettin Sever reaching me by mobile devices, internet, or post at my address I ACCEPT WITH MY OPEN CONSENT.