INFORMATION AND DISCLOSURE TEXT UNDER THE PERSONAL DATA PROTECTION LAW NO. 6698 (KVKK)

As “SPECIALIST DR. ŞULE BİLGİN”, we show the utmost care for the processing and protection of your personal data. In accordance with the Personal Data Protection Law, the Basic Law on Health Services, the Regulation on Personal Health Data, the Regulation on Patient Rights and the relevant legislation, as the data controller, all kinds of technical and administrative measures necessary to prevent the unlawful processing of personal data, to prevent unlawful access to personal data and to ensure the safekeeping of personal data are taken.

Pursuant to Article 10 of the Personal Data Protection Law, we inform you by means of the policies created to cover our patients and patients’ relatives and by means of this disclosure text.

This disclosure text has been prepared by SPECIALIST DR. ŞULE BİLGİN in the capacity of data controller within the scope of Article 10 of the Personal Data Protection Law (the “Law”), Article 5/8 of the Regulation on Personal Health Data and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation.

1- Data Controller:

“SPECIALIST DR. ŞULE BİLGİN”, resident at MANSUROĞLU MAHALLESİ 1593/1 SOK NO:2 DAİRE:88 LİDER CENTRİO BAYRAKLI /İZMİR, with Tax No. 5740242891, hereinafter referred to as the “PRACTICE”.

It processes your personal data in the capacity of “Data Controller” as defined in Article 3 of the Personal Data Protection Law.

2- The Purposes for Which Personal Data Will Be Processed:

Your personal data collected in accordance with the Personal Data Protection Law, the Basic Law on Health Services, the Regulation on Personal Health Data, the Regulation on Patient Rights and the relevant legislation is obtained, recorded, stored, modified, rearranged and processed wholly or partly by automatic means or by non-automatic means provided that it is part of a data recording system, in accordance with the principles set out in the law.

Within the scope of the “PRACTICE” activities, your personal data is processed in accordance with Articles 4, 5 and 6 of the Law and the relevant legislation for the following purposes:

▪ Protection of public health, preventive medicine, carrying out medical diagnosis, treatment and care services, and ensuring the planning and management of the financing of health services,

▪ Pursuant to the relevant legislation to which we are subject, sharing the information we obtain regarding health services with the Ministry of Health and other relevant public institutions and organizations, responding to the requests of institutions, making the necessary notifications to the relevant public institutions and organizations, and fulfilling legal obligations,

▪ Fulfilling our legal obligations set out in the Basic Law on Health Services No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Health Institutions Providing Outpatient Diagnosis and Treatment, the Regulation on Personal Health Data and other relevant regulations,

▪ Ensuring the safekeeping of data that must be retained pursuant to the legislation within the scope of the health service we provide,

▪ Verifying your identity, confirming your legal connection with contracted institutions within the scope of the health services provided, and ensuring invoicing and financial reconciliation,

▪ Protection of public health, preventive medicine, carrying out medical diagnosis, treatment and care services,

▪ Being able to provide information to prosecutors’ offices, courts and relevant public officials upon request and pursuant to the legislation in matters concerning public security and in legal disputes,

▪ Taking appointments, creating appointments, making the necessary notifications, ensuring the satisfaction of patients and patients’ relatives, following up request and complaint processes, and carrying out the examinations and evaluations required by the health services provided, within the scope of our health services,

▪ Providing health and consultancy services, including preventive health services,

▪ Ensuring the procurement of medical drugs, materials or devices, and the carrying out of invoicing and payment transactions related to the services provided;

▪ Having information and consent forms filled in,

▪ Planning and managing the internal operations of the practice, improving services, carrying out analysis, risk management and evaluation of quality processes,

▪ Issuing a self-employment receipt in return for the services we provide;

▪ Improving the practice services, continuing development activities, carrying out the finance and accounting, administrative, legal and technical business processes of the practice, and carrying out risk management and quality improvement processes,

▪ The obligation to provide proof as evidence in a possible legal dispute with patients,

▪ Carrying out the processes necessary for you to fill in the physical forms, and ensuring the transaction security of the relevant persons,

▪ Monitoring the security of our patients, visitors and relevant third parties by means of a closed-circuit camera recording system, ensuring legal, technical and commercial work security, and preventing conduct by third parties that may constitute a crime,

▪ Ensuring that invoicing and payment transactions related to the services provided are carried out;

As the practice of SPECIALIST DR. ŞULE BİLGİN, the personal data obtained from you will, above all, be used for the purpose of providing you with an effective, safe and quality health service. Among the general purposes of use of your personal data are verifying your identity, enabling doctor-patient communication, protecting public health, planning and effectively carrying out preventive medicine, medical diagnosis, treatment and care services, planning and managing the financing of health services, planning and managing the internal operations and daily operations of our practice, and the procurement of drugs and materials. In the event that you make an appointment with our practice, we will use your contact data for the purpose of being able to inform you about the appointment.

In line with the purposes written above, and limited to the practice activities, your personal data written below is processed.

▪ Your Identity Information (T.R. identity number, your name and surname, place and date of birth, your mother’s and father’s name, your marital status, your gender, passport, patient number for patients, patient protocol number)

▪ Your Contact Information (Your telephone numbers, contact address, your e-mail address)

▪ Financial Information (Invoicing and payment information, bank account number, IBAN number, credit card information, private insurance information within the scope of financial payment, policy information, General Health Insurance information, financial information obtained within the scope of the notifications to be made to the SGK and the Ministry of Health,)

▪ Legal Transaction Information (identity and contact information entered into the system in the legal notifications that must be made to police headquarters for the purpose of identity verification in a possible legal dispute, and personal information contained in the minutes and forms kept in cases of tort, legal dispute and other situations that arise during visits to our practice,)

▪ Health Information (In the case of patients, your personal data processed within the scope of the activities of protecting public health, preventive medicine, and carrying out medical diagnosis, treatment and care services; examination, all kinds of laboratory, imaging and test results, patient diagnosis, identification, treatment, prescription and drug information, doctor’s analyses and comments, diagnosis and prescription information, health reports, nutrition and diet information and all health information obtained within the scope of health services, medical board reports, and personal data relating to diagnosis and treatment procedures are processed)

3- To Whom and For What Purpose the Processed Personal Data May Be Transferred

Your personal data processed by our practice will, where necessary, be transferred to public institutions and organizations, natural persons and private law legal entities for the purposes written below, in accordance with the relevant legislation to which our practice is subject and Articles 8 and 9 of the Personal Data Protection Law. Your personal data may be kept in both digital and physical media by being transferred to the physical archive and/or information systems within our practice / Serdar Özler.

Retention Period

Your Personal Data will be processed in accordance with the legislation on the protection of personal data, primarily the KVKK, and with the periods required by other legislation (within legal periods such as statute of limitations periods, and periods relating to legitimate interest), and in any case as long as the legitimate purposes above have not ceased to exist.

After the period has elapsed, your personal data will be deleted, destroyed and/or anonymized by the Practice, or upon your request, by the methods within the scope of the Personal Data Protection Law and the relevant regulations. You may withdraw at any time the consent you have given for the processing of personal data other than data that must be processed by law.

Transfer of Data Abroad:

In accordance with the principles set out in Article 4/2 of the Personal Data Protection Law, with regard to the personal data processed belonging to the relevant persons, by obtaining explicit consent texts, or in the cases provided for in Articles 5/2 and 6/3 of the Law, without seeking explicit consent, in accordance with the rules in Article 9 of the Law, after foreign countries with adequate protection to be determined by the Personal Data Protection Board (the “Board”) are announced, only to persons and organizations resident in those countries, and for countries determined and announced not to have adequate protection, provided that the data controllers in Turkey and in the relevant foreign country undertake adequate protection in writing and the necessary permissions are obtained from the Personal Data Protection Board for the relevant transfer, your personal data may be transferred, limited to the practice activities. Within the limits envisaged by the legislation, taking all necessary measures, within the scope of your legal relationship and activity with our practice, limited to the purpose of transfer for the protection of public health, preventive medicine, carrying out medical diagnosis, treatment and care services, and planning and managing health services and their financing in a manner compliant with the legislation, your personal information belonging to the relevant persons, such as identity, contact, transaction security, service recipient/customer transaction information, financial information, visual and auditory data, health information, sexual life information, genetic data, protocol number and patient number, may be transferred abroad by means of the applications used, software programs, website, mobile applications and social media accounts.

The Method and Legal Grounds of Collecting Personal Data:

Your personal data is processed and collected, in line with the services we provide and the personal data processing purposes stated above, by means of receiving patient applications, carrying out registration procedures, drawing up printed forms, carrying out medical diagnosis, treatment and health services within the scope of health services, and processing accounting, finance, financial and legal transaction information, wholly or partly by automatic means or by non-automatic means provided that it is part of a data recording system.

Your personal data and your special categories of personal data are processed based on the explicit consent of the relevant person, in accordance with the legal regulations to which our practice is subject. In addition, your personal data is processed, without seeking explicit consent, based on the legal grounds written below. Accordingly, your personal data is processed for the following reasons:

▪ Because it is expressly provided for in the laws,

▪ Because it is necessary for the protection of the life or bodily integrity of the person himself/herself or of another person, who is unable to express his/her consent due to actual impossibility or whose consent is not given legal validity.

▪ Provided that it is directly related to the establishment or performance of the contracts between our practice and natural and legal persons, it being necessary to process the personal data of the parties to the contract,

▪ The personal data having been made public by the relevant person himself/herself,

▪ Data processing being mandatory for the establishment, exercise or protection of a right,

▪ Data processing being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person,

It is processed, collected and transferred limited to the purposes stated, in accordance with Articles 5 and 6 of the Personal Data Protection Law and Article 5/1-h of the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation. Your personal data is retained and stored for as long as the period written in the relevant legislation within the scope of the practice activities.

Rights of the Personal Data Subject (Right of Application):

You may submit your requests within the scope of Article 11 “regulating the rights of the relevant person” of the Personal Data Protection Law, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, to us as data controller;

“PRACTICE” MANSUROĞLU MAHALLESİ 1593/1 SOK NO:2 DAİRE:88 LİDER CENTRİO BAYRAKLI /İZMİR

by filling in the APPLICATION FORM located at https://sulekocyigit.com/ as the relevant person who is the personal data subject, and delivering a signed copy of the form in person to the practice address together with documents identifying you, or by using secure electronic signature, mobile signature or the e-mail address you have notified to our practice and which is registered in our practice’s system to send an e-mail to su*****@***oo.com, by your personal application, by an application you will make through a Notary, or by the methods determined by the Personal Data Protection Authority.

Pursuant to Article 11 of the Law, everyone, by applying to the data controller, has the right to, with regard to himself/herself:

Learn whether personal data is being processed,
Request information regarding this if personal data has been processed,
Learn the purpose of processing personal data and whether it is used in accordance with its purpose,
Know the third parties to whom personal data is transferred domestically or abroad,
Request the correction of personal data in the event that it has been processed incompletely or incorrectly,
Request the deletion or destruction of personal data within the framework of the conditions set out in Article 7 of the KVKK,
Request that the correction, deletion or destruction of personal data be notified to the third parties to whom the personal data has been transferred,
Object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively by means of automatic systems,
Request the compensation of the damage in the event that he/she suffers damage due to the unlawful processing of personal data.

Pursuant to Article 13/1 of the KVK Law No. 6698, in order to exercise the rights stated above, you must submit your applications to our practice in writing or by the methods written above as determined by the KVK Authority. Our practice will conclude your requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board will be charged. In this scope, if the relevant person’s application is responded to in writing, no fee will be charged for up to ten pages, and a transaction fee of 1 TL will be charged for each page over ten pages. If the response to be given to the application is provided in an electronic recording medium such as a CD or flash drive, the fee that may be requested by our practice will not exceed the cost amount required by the recording medium.

Pursuant to Article 10, titled “The Data Controller’s Disclosure Obligation”, of the Personal Data Protection Law No. 6698, I have read and understood this Disclosure Text prepared regarding by whom and for what purpose my personal data will be processed, to whom and for what purpose the processed personal data may be transferred, the method and legal grounds of collecting personal data, and my rights set out in Article 11 of the Law, and I have been informed in detail on this matter by the “PRACTICE”, which holds the capacity of data controller.