Prof. Dr. Suna ÖZDEMİR Specialist in Obstetrics and Gynecology

Ataköy 7-8-9-10. Section District Çobançeşme E-5 Service Road Ataköy Towers Block B No:76 Bakırköy/Istanbul

Information Notice on the Protection and Processing of Personal Data in Accordance with the Law No. 6698 on the Protection of Personal Data

Dear visitor,

Information has been one of our most important assets throughout history, becoming the greatest source of wealth, wisdom, and, most importantly, technology. Information is sometimes stored on our desks, in books, on paper, or in specially designed systems. Most importantly, information resides in the minds of employees. In today’s world, the collection of personal data has become inevitable for the continuation of services provided by institutions, the effective delivery of public services to the public, and the development, distribution, and marketing of goods and services. Therefore, the collected personal data must be protected in the necessary manner, regardless of the environment.

The purpose of this information text on the Protection and Processing of Personal Data is to inform individuals related to our clinic, including those who benefit from our products and services or contact our clinic for this purpose, our employees, job applicants, and business partners, in accordance with the relevant laws and regulations, that the necessary measures have been taken to prevent the unlawful disclosure, access, transfer, or any security deficiencies that may occur in personal data, to ensure the highest level of security for the protection of the personal data of the relevant individuals as the data controller, and to fulfill the obligation of informing the relevant person within the scope of the obligation to inform in accordance with Article 12 of the Law on the Protection of Personal Data, published and/or to be published, in accordance with the legislation.

  1. Data Controller

In accordance with the Law on the Protection of Personal Data No. 6698, the data controller for the processing of your personal data is “Prof. Dr. Suna ÖZDEMİR,” the owner of the clinic registered with the Bakırköy Tax Office with tax number 1860225290 and located at “Ataköy 7-8-9-10. Section District Çobançeşme E-5 Service Road Ataköy Towers Block B No:76 Bakırköy/Istanbul.”

As the data controller, your personal data may be recorded, stored, retained, rearranged, shared with institutions authorized to request these personal data in accordance with the law, transferred, classified, deleted upon the request of the data subject, and processed in the ways specified in the Law, within the framework of the purposes that require the processing of personal data within the limits prescribed by the relevant laws and regulations, including the Law on the Protection of Personal Data No. 6698.

  1. Personal Data to be Processed

The personal data to be processed by the data controller are your data, as defined in the Personal Data Protection Law, which means “any kind of information about an identified or identifiable real person.” In the same Law, special category personal data refers to “data related to a person’s race, ethnicity, political opinion, philosophical belief, religion, sect or other beliefs, clothing and dressing, association, foundation or union membership, health, sex life, criminal conviction and security measures, and biometric and genetic data.”

Our clinic may obtain, classify, record, and retain personal or special category personal data of patients/visitors with their consent, either in whole or in part, in line with the purpose of obtaining personal data or for the period stipulated by the relevant laws, depending on the purpose for which personal data is obtained.

In this context, the personal data categories processed by us, including but not limited to, are as follows:

  • Identity data: Name, surname, Turkish ID number, SGK (Social Security Institution) registration number, signature, marital status, identity card serial and order number, date of birth, place of birth, identity, driver’s license, passport copy.
  • Contact data: Phone number, email address, residential address.
  • Financial data: Bank account number, IBAN, credit card information, billing information.
  • Insurance data: Data related to private health insurance for financing and planning health services, and data from the Social Security Institution.
  • Special category personal data (Your health data): Your laboratory results, test results, examination data, appointment information, check-up information, measurements, drawings, various patterns, prescription information, and any other health and sexual life-related personal data obtained during the provision of medical diagnosis, treatment, and care services, or as a result of these services.
  • Family and close relative data: In necessary cases, the names, surnames, and contact information of relatives who are required for medical history.

Regarding the personal data of your family members that you will share with us, it is your responsibility to inform your family members and obtain their explicit consent if necessary.

  1. Purpose of Processing Personal Data

The personal data and, in cases of explicit consent, special category personal data processed by the data controller are processed within the scope of the purposes and legal grounds specified below, and only to the extent required by these purposes, and are processed in accordance with the personal data processing conditions specified in Articles 5 and 6 of the Law and the principles and periods specified in our clinic’s VERBIS (Data Controllers Registry Information System) record.

In this context, the purpose of processing your personal data is:

  • Fulfillment of legal obligations,
  • Verification of your identity as required by the services provided by our clinic,
  • Protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing,
  • Sharing of information requested by the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,
  • Planning and management of the internal operations and daily operations of the clinic,
  • Measurement, improvement, and research of patient satisfaction,
  • Provision of drugs and medical devices,
  • Informing you about your appointments if you make an appointment,
  • Analysis and research for the purpose of improving healthcare services,
  • Participation in campaigns and providing campaign information by our clinic,
  • Designing and transmitting special content, tangible and intangible benefits on the web and mobile channels,
  • Billing purposes, among others.
  1. Method of Collecting Personal Data and Legal Basis

Your personal data may be collected electronically through various methods based on Information Technologies, verbally, in writing, or electronically, including but not limited to call centers, websites, social media platforms, mobile applications, and similar means. In addition, personal data are processed within the framework of the general principles stipulated in Article 4 of the Law, including the principles specified below.

Mandatory Principles to Be Followed in Processing Personal Data:

  • Processing in accordance with the law and integrity,
  • Ensuring that personal data is accurate and up-to-date when necessary,
  • Processing for specific, explicit, and legitimate purposes,
  • Processing in connection with the purpose for which they are processed, limited, and measured,
  • Retaining personal data for the period prescribed by the relevant legislation or required for the purpose for which they are processed,
  • The legal conditions specified in Article 5 of the Law must be met for personal data to be processed.

Conditions for Processing Personal Data:

  • Explicit consent of the person concerned,
  • Processing of personal data that is directly related to the establishment or performance of a contract,
  • Fulfillment of a legal obligation,
  • The person concerned has made his/her personal data public,
  • Processing is necessary for the establishment, use, or protection of a right,
  • Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned,
  • Processing of personal data, except for special category personal data, for purposes such as planning and management of health services and their financing by individuals or authorized institutions and organizations, and carrying out the financing operations.

The collection and processing of your personal data within the framework of the principle of explicit consent, in accordance with Article 5/1-(a) of the Law, is based on your explicit consent, which you have voluntarily provided during your visit to our clinic, the use of our website or mobile application, or other communication channels. Your explicit consent is obtained within the scope of the relevant legislation, and the processing of your personal data without your explicit consent is out of the question, except for the cases stipulated in the relevant legislation.

  1. Transfer of Personal Data

Your personal data collected by our clinic may be transferred, in accordance with the Law on the Protection of Personal Data and within the framework of the purposes and principles specified in this Information Text, to third parties, private/public institutions and organizations that are authorized to request and obtain personal data for the realization of the purposes of processing personal data by the data controller, including but not limited to the Ministry of Health, General Directorate of Health Services, private health insurance companies, and other authorized institutions, within the framework of legal permissions.

  1. The Rights of the Personal Data Owner

As a data subject, you have the following rights in accordance with Article 11 of the Law on the Protection of Personal Data:

a. To learn whether your personal data is processed or not, b. If your personal data has been processed, to request information about it, c. To learn the purpose of processing your personal data and whether they are used appropriately for their purpose, d. To know the third parties in Turkey and abroad to whom your personal data has been transferred, e. To request correction of your personal data in case of incomplete or incorrect processing, f. To request the deletion or destruction of your personal data in accordance with the conditions stipulated in Article 7 of the Law, g. To request notification of the actions taken as a result of correcting, deleting, or destroying your personal data to third parties to whom your personal data has been transferred, h. To object to the occurrence of a result against you by analyzing your personal data exclusively through automated systems, i. To request compensation for the damage you have suffered due to the unlawful processing of your personal data.

You can exercise your rights listed above by filling out the “Application Form for Data Owners” at www.ataturkmedicalcenter.com and submitting it to our clinic in person, by notarizing, or by using your registered email address, secure electronic signature, mobile signature, or the email address you provided to our clinic before.

The application form can be accessed at www.ataturkmedicalcenter.com. Your applications made through the methods mentioned above will be evaluated and concluded within thirty days at the latest, depending on the nature of the request. In case of a negative response to your application, the response will be notified in writing or electronically, and the reasons for the rejection will be explained.

  1. Measures for the Protection of Personal Data

Our clinic has taken technical and administrative measures to protect personal data from unauthorized access, accidental loss, and damage, and to ensure that personal data is processed in accordance with the law. These measures include but are not limited to:

  • Ensuring that personal data is processed in accordance with the law and integrity,
  • Ensuring that personal data is accurate and up-to-date when necessary,
  • Processing for specific, explicit, and legitimate purposes,
  • Processing in connection with the purpose for which they are processed, limited, and measured,
  • Retaining personal data for the period prescribed by the relevant legislation or required for the purpose for which they are processed.

As the data controller, our clinic ensures that necessary administrative and technical measures are taken to ensure the appropriate level of security for the prevention of unlawful processing of personal data, and in case personal data are transferred to third parties, the necessary contractual measures are taken to ensure that the data processor also provides this level of security.

In addition, our clinic will continue to take all necessary technical and administrative measures to ensure the appropriate level of security for the processing of personal data within the framework of Article 12 of the Law on the Protection of Personal Data.

  1. Contact Information

For your questions, requests, or complaints regarding the processing of your personal data, you can send an email to the address veri@ataturkmedicalcenter.com or submit your written request to the address “Ataköy 7-8-9-10. Section District Çobançeşme E-5 Service Road Ataköy Towers Block B No:76 Bakırköy/Istanbul” with a wet signature.

Our clinic will evaluate your requests as soon as possible and free of charge, depending on the nature of your request, and respond to you within the legal period specified in the Personal Data Protection Law No. 6698.

As the data subject, I accept that I have read the Clarification Text regarding the Protection and Processing of Personal Data in accordance with the Law No. 6698 on the Protection of Personal Data, that I have been informed in accordance with Article 10 of the Law, and that I have been informed about the personal data categories, processing purposes, legal grounds for processing, and other rights I have as the data subject in accordance with Article 11 of the Law, and I hereby explicitly consent to the processing of my personal data within the scope of the purposes and principles specified in this Information Text.

Signature: __________________________ Name-Surname: __________________________ Date: __________________________

Please note that this is a sample privacy notice, and the specific details and wording may vary depending on local laws and regulations. It is important to consult with legal counsel to ensure that your privacy notice complies with all applicable data protection laws in your jurisdiction.