DISCLOSURE TEXT WITHIN THE SCOPE OF THE PERSONAL DATA PROTECTION LAW
This text has been prepared, as a requirement of the Personal Data Protection Law No. 6698 and the other relevant legislation, for the purpose of providing disclosure regarding the processes of collection, recording, storage, processing, updating, transfer, destruction and anonymization of the personal data (including special categories of personal data) of you, our patients (data subjects), defined as the “relevant person” in the said law and legislation, by our health institution Dr. Şule Bilgin Neurology Clinic and sulekocyigit.com, which hold the capacity of “data controller” under the same Law and legislation, as well as the mutual rights and obligations of the parties in connection with these processes.
- Data Controller
In the processes of processing the personal data of you, our patients/clients, our health institution determines the purposes and means of processing and storing your personal data by acting as the “data controller” defined in Article 3 of the Law No. 6698.
As the data controller, our health institution is obliged to establish and manage the data recording system and to take the administrative and technical measures relating to data security. In this scope, we would like to state that it may also have your data processed by third parties holding the capacity of “data processor” defined in Article 3 of the Law.
- Personal Data Processed
Personal data, defined in the Law No. 6698 as “any kind of information that makes a person identified or identifiable”, is data such as a person’s name and surname, T.R. identity number, contact information, date of birth and gender.
Undoubtedly, the personal data intended to be protected by the said Law is not limited to these. Special categories of personal data, which, if learned, may cause discrimination against or the victimization of the relevant person, are also under the protection of the Law. Such data includes a person’s race, ethnic origin, political opinion, philosophical or religious thoughts and beliefs, criminal record information, biometric and genetic data, as well as health data.
On the other hand, in addition to the personal information listed above, your audiovisual data (photographs, video recordings, audio recordings) obtained by capturing sound and images in the workplaces, polyclinics, clinics and vehicles belonging to our health institution is also processed by us as your personal data within the limits set out in Articles 5 and 6 of the Law.
In addition to these, as a patient/client of our health institution, along with the personal data you have transmitted to us by various methods such as telephone conversation, electronic correspondence and oral interview, the following are also collected by our Company / health institution: the forms you submit to us by filling them in electronically or physically, the contact forms located on our websites or on the websites of third parties that you fill in to get in touch with us, the various contracts/forms you have signed with us, the mail, faxes and letters you have sent to us, and your personal data specified through our employees, our customer service channels, social media channels, the use of search engines such as Google, etc., membership agreements and other agreements, campaigns, applications and forms.
We hereby notify you that our health institution will endeavour to keep the personal data requested from you to the minimum possible level, that this data will be processed for explicit and legitimate purposes and in accordance with the law and the rules of good faith, that all kinds of measures to prevent your data from falling into the hands of unauthorized persons will be taken without hesitation, that the utmost attention will be paid to its protection, that for this purpose the said data will be checked periodically, that the said data will be retained for a period appropriate to the purpose for which it is processed, and that it will be destroyed at the end of this period.
Your collected and processed personal data and special categories of personal data will be stored by our health institution in a secure environment that is not open to public access, and will absolutely not be shared with third parties unless authorized or legally required. In this context, special care will also be shown for the security and confidentiality of your special categories of personal data defined above.
- The Purposes and Methods of Collecting Personal Data
The personal data of our patients / clients is collected by our health institution, within the scope of various legal grounds and processing purposes, by automatic means through the information and documents submitted to us and by means of the Closed-Circuit Camera Recording System located in our health institution’s areas of activity, workplaces and vehicles, for purposes such as ensuring the security of the legal, commercial, medical, administrative and treatment-related business and transactions carried out by our patients / clients with our health institution, and preventing unlawful acts such as theft and fraud.
- The Processing of Your Personal Data, Its Legal Grounds and Processing Purposes
Your personal data collected by our health institution is processed for the purpose of fulfilling the obligations arising from all relevant national/international legislation, primarily the Law on Private Security Services, and the secondary regulations published on the basis thereof by the national/international competent authorities (BTK, BDDK, TCMB, MASAK, TBB, etc.), as well as from all contracts to which it is a party; for purposes such as ensuring the security of the legal, commercial, medical, administrative and treatment-related business and transactions of our health institution and of the persons with whom it is in a business relationship, and preventing unlawful acts such as theft and fraud; and in accordance with the principles in Article 4 of the Law, within the processing conditions set out in Articles 5 and 6 of the same Law.
- The Persons to Whom Your Personal Data Is Transferred and the Purposes of Transfer
Your personal data collected by our health institution may be shared, for the purposes explained in this text, with private and public institutions and organizations that have the permission, right and authority to request and process personal information as permitted by the legislation and/or within the scope of the said legislation or the contracts to which we are a party (the Republic of Turkey Ministry of Health, Provincial Health Directorates, District Health Directorates, Health Institutions, Laboratories and Centres, Law Enforcement, Courts, Ministries, Chief Public Prosecutor’s Offices, the BDDK, MASAK, the SGK, judicial and administrative authorities, other official institutions and organizations and persons), within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of the Law No. 6698.
Your special categories of personal data, on the other hand, apart from the exceptions arising from the Law, may not be shared with third parties without your explicit consent.
- The Period of Processing of Your Personal Data
Your personal data collected by our health institution will be processed, within the scope of the purposes explained in this text and except for obligations arising from legal regulations, for the maximum period necessary for the purpose for which it is processed and in any case for the statutory limitation periods. After the expiry of the said period, your personal data will be deleted, destroyed or anonymized pursuant to Article 7 of the Law.
- Your Legal Rights
As a personal data subject, within the scope of the provisions of Article 11 of the Law, by applying to our Company / health institution as the data controller, you have the right to:
- Learn whether your personal data is being processed,
- Request information regarding this if your personal data has been processed,
- Learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
- Know the third parties to whom your personal data is transferred domestically or abroad,
- Request the correction of your personal data in the event that it has been processed incompletely or incorrectly, and request that the procedure carried out in this scope be notified to the third parties to whom the personal data has been transferred,
- Request the deletion or destruction of personal data within the framework of the conditions set out in Article 7 of the Law (the case where the reasons requiring the processing of your personal data cease to exist even though it has been processed in accordance with the Law and the provisions of other relevant laws), and request that the procedure carried out in this scope be notified to the third parties to whom the personal data has been transferred,
- Object to the emergence of a result against you by analyzing your processed data exclusively by means of automatic systems,
- Request the compensation of the damage in the event that you suffer damage due to the unlawful processing of your personal data.
The exceptional cases set out in Article 28 of the Law are reserved.
Pursuant to Article 13, paragraph 1 of the KVKK, you may transmit your request regarding the exercise of the rights stated above to our Company in writing, by the personal application of the Applicant, through a Notary, or by being signed by the Applicant with a “secure electronic signature” as defined in the Electronic Signature Law No. 5070 and sent to our Company’s e-mail address.
Address: Mansuroğlu Mah. 1593/1 sok. No:2, A blok K:8 D:88 Lider Centrio, Bayraklı/İzmir
E-mail Address: in**@**********it.com
