Personal Data Protection (KVKK) Privacy Notice

Assoc. Prof. Dr. Muharrem Taşkoparan’s practice acts as the Data Controller. This notice explains how we collect, process and transfer your personal data. It follows Personal Data Protection Law No. 6698 (“KVKK”) and relevant legislation.

In this notice, “Relevant Person” refers to you as a person in contact with the practice.

1 - Personal data we process

We collect and process the following categories of personal data:

(a) Name, surname, Republic of Turkey (“T.R.”) identification number, T.R. For non-citizens, passport number or temporary Turkish Republic ID number. Identity data such as identification number, place and date of birth, marital status, gender,
(b) Contact data such as address, telephone number, e-mail address,
(c) Special personal data obtained during the execution of medical diagnosis, treatment and care services such as examination, diagnosis, examination data and test, laboratory and imaging results, prescription information,
(d) Medical data regarding previous examinations, diagnoses and examinations that you have submitted with your own consent or obtained lawfully from the Ministry of Health system within the scope of providing preventive medicine services,
(e) Data regarding private health insurance and Social Security Institution data for the purpose of financing and planning health services,
(f) Financial data such as bank account number depending on possible payments,
(g) Answers and comments shared for the purpose of evaluating the services received,
(h) Closed circuit camera system images and audio recordings taken during the clinic visit,

2 - Purposes of processing

We process your personal data for the following purposes:

(a) Protection of public health, preventive medicine, medical diagnosis, treatment and care services,
(b) Sharing information requested by the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,
(c) Sharing requested medical information with private insurance companies within the scope of financing health services and covering examination, diagnosis and treatment expenses,
(d) Invoicing for the services you receive,
(e) Planning and managing the internal functioning of the institution,
(f) Monitoring and preventing abuse and unauthorized transactions through cameras and ensuring spatial security
(g) Answering all your questions and complaints regarding the health services you have received, measuring, increasing and researching patient satisfaction,
(h) Providing information about the services you receive, complementary services and new services

3 - Collection methods and legal basis

Collection methods

First, we collect personal data through these methods:

(a) Data entry into Hospital/Doctor's Office management software,
(b) Forms prepared electronically or printed,
(c) Security camera recordings with or without sound,

Legal grounds under Article 5

We rely on the following grounds in Article 5 of KVKK to achieve the purposes above:

(a) The law expressly provides for processing, or processing is necessary for the controller’s legal obligations;
(b) Processing is necessary for the parties to a contract and directly relates to its establishment or performance;

(c) Processing is necessary for the controller’s legitimate interests, provided it does not harm the data subject’s fundamental rights and freedoms.

Relevant legislation

(1) Health Services Basic Law No. 3359,
(2) Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations,
(3) Private Hospitals Regulation,
(4) Emergency Health Regulation,
(5) Patient Rights Regulation,
(6) Regulation on Personal Health Data,
(7) Regulation on Private Health Institutions Providing Outpatient Diagnosis and Treatment Services

Legal ground under Article 6

In addition, Article 6 covers processing by persons under confidentiality obligations and authorized institutions and organizations. The purposes include protecting public health, preventive medicine, medical diagnosis, treatment and care. They also include planning health services and their financing.

Retention

The practice retains personal data for as long as necessary. The retention period is no shorter than the periods in relevant laws and legislation. In addition, we consider contractual obligations and possible legal disputes. We may retain data as evidence, to assert rights or to establish a defense.

4 - Transfer of personal data

Transfers follow the processing purposes in section 2 of this notice. In addition, we comply with the transfer conditions in relevant laws. We take the necessary administrative and technical measures.