KVKK Information Text

KVKK Information Text

As Ayşe Sezim ŞAFAK, we take measures to protect your personal data within the scope of the Law on the Protection of Personal Data No. 6698 (“KVKK” or “Law”). We process your Personal Data within the scope of the KVKK and relevant legal legislation and with the reasons and methods explained below as the “data controller”.

Ayşe Sezim ŞAFAK Personal Data Processing Information Text has been prepared in accordance with the article titled “Data Controller’s Information Obligation” in Article 10 of the KVKK, in order to inform you in the most transparent way about the identity of the data controller, the method and legal reason for collecting your personal data, the purpose for which this data will be processed, to whom and for what purpose it can be transferred, the data processing period and your rights listed in Article 11 of the KVKK. The explanations made for “Your Personal Data” in the information text also cover your “Special Personal Data”.

This disclosure text has been prepared by Ayşe Sezim ŞAFAK, as the data controller, in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Disclose, in order to ensure that data owners are informed during the process of obtaining personal data. Ayşe Sezim ŞAFAK includes informative information regarding the purposes for which personal data of data owners can be processed, to whom and for what purposes the processed personal data can be transferred, the method and legal reasons for collecting personal data, and the rights of the data rights holder.

In accordance with the Law on the Protection of Personal Data No. 6698, your personal data may be processed by our Company, as the Data Controller, by recording, storing, updating, transferring and/or classifying your data in the manner we will explain below, limited to our commercial activities, in order to carry out medical health services, to ensure maximum customer satisfaction, and to quickly resolve your questions and problems.

In accordance with the Laws and Regulations issued by our Company to protect the fundamental rights and freedoms of individuals, especially the right to privacy, and to protect personal data, our Company takes all technical, administrative and legal measures to ensure the appropriate level of security in order to prevent the unlawful processing of your personal data, to prevent unlawful access to it and to ensure its preservation.

The personal data that we will process as the data controller are listed below, but not limited to those specified here.

METHODS OF OBTAINING YOUR PERSONAL DATA

Your personal data is obtained for the purpose of implementing current company policies and procedures, including, but not limited to, using certain sections of our company’s website,

Filling in certain forms,

Sharing by you while reaching our company via the e-mail address on our website or by phone,

Using our website or sharing data with our company via e-mail or mobile applications. However, the methods specified are examples and the methods of obtaining your data are not limited to these.

YOUR PERSONAL DATA PROCESSED BY OUR COMPANY

The data processed by our company as the Data Controller and considered as personal data in accordance with the Law No. 6698 on the Protection of Personal Data are shown below. However, the specified data is not limited to these.

• Your identity data such as your name and surname, TR identity number, passport number or temporary TR identity number if you are not a Turkish citizen, place and date of birth, marital status, gender and a photocopy of your submitted TR identity card, passport or driver’s license,
• Your communication data such as address, telephone number, e-mail address, 2
• Your data such as occupation, bank account and IBAN number,
• Your data regarding private health insurance for the purpose of financing and planning health services and your Social Security Institution data,
• Your navigation information obtained during the use of our website, IP address, browser information.

In addition to the personal data listed above, the following special personal data are also processed, but are not limited to these.

• Your health data obtained during the execution of medical diagnosis, treatment and care services such as test results, examination data, prescription information,
• Your image records taken with the closed circuit camera system during your visit to our clinics,
• Your intraoral – Before and After photographs,
• Your panoramic x-ray and tomography images, Your anamnesis information and your treatment plans.

PURPOSES AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

Your Personal Data;

• Providing information about your appointment,
• Confirming your identity,
• Confirming your relationship with contracted institutions,
• Financing health services, covering my examination, diagnosis and treatment expenses, sharing your requested information with private insurance companies,
• Invoicing,
• Conducting analysis for the purpose of improving health services, providing training to our employees,
• Performing your quality development activities,
• Responding to all kinds of questions and complaints regarding your health services,
• Taking all necessary technical and administrative measures within the scope of your data security,
• Participation in campaigns and providing campaign information,
• Measuring, increasing and researching patient satisfaction,

It is processed within the framework of the Personal Data Protection Law No. 6698, Health Services Fundamental Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, Private Hospitals Regulation, Regulation on Processing of Personal Health Data and Protection of Privacy, Ministry of Health regulations and other legislation provisions.

Your health data, which is your special data, is processed by our doctors who are under the obligation of confidentiality for the purpose of protecting public health, providing preventive medicine, medical diagnosis, treatment and care services.

Our company primarily processes your data within the scope of the explicit consent it has obtained from you. However, in cases where obtaining explicit consent is not mandatory in the KVKK Law No. 6698, it is processed without your specific consent in the cases listed in Article 5 of the KVKK Law No. 6698.

Data related to the race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures of individuals, as well as biometric and genetic data are special personal data. Special personal data is limited to these. Your Special Personal Data specified above cannot be processed without your explicit consent. It is also processed without your specific consent in the cases listed in Article 6 of the KVKK Law No. 6698.

METHOD OF COLLECTION AND STORAGE OF YOUR PERSONAL DATA

Your personal data that you share with our company may be collected by automatic or non-automatic methods, offices, branches, website, verbally, in writing or electronically. Your personal data will be stored in electronic and/or physical environments.

Your personal data will be processed by taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and will be stored and processed for the legal retention period or, if no such period is foreseen, for the period required by the purpose of processing.

TRANSFER OF YOUR DATA HOMELAND AND ABROAD

Your personal data will be processed within the framework of the Personal Data Protection Law No. 6698, the Health Services Fundamental Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Private Hospitals Regulation, the Regulation on the Processing and Protection of Privacy of Personal Health Data, the Ministry of Health regulations and other relevant legislation provisions and for the purposes explained above;

The Ministry of Health, sub-units of the Ministry and family medicine centers,

Private insurance companies (health, retirement, life insurance and similar),

• Social Security Institution,
• General Directorate of Security and other law enforcement agencies,
• General Directorate of Population, Turkish Pharmacists Association,
• Judicial authorities,
• Laboratories, medical centers, medical device and health service providers located in Turkey or abroad with whom we cooperate for medical diagnosis and treatment,
• The health institution to which you are referred or applied if you are referred,
• Your authorized legal representatives,
• Regulatory and supervisory institutions and official authorities,
• Your employer if your invoicing will be made to your employer,
• Your suppliers, support service providers and business partners whose services you benefit from or with whom you cooperate.

Your personal data cannot be transferred to third parties in the country without your explicit consent. However, if one of the conditions specified in the second paragraph of Article 5 of the Law on the Protection of Personal Data No. 6698 and, provided that sufficient measures are taken, in the third paragraph of Article 6, can be transferred without your explicit consent.

Your personal data can be transferred abroad if you have your explicit consent. If you do not have your consent, it cannot be transferred. However, if one of the conditions specified in the second paragraph of Article 5 and the third paragraph of Article 6 of the Law on the Protection of Personal Data No. 6698 exist and in the foreign country to which the personal data will be transferred; a) There is sufficient protection, b) In the absence of sufficient protection, provided that the data controllers in Turkey and the relevant foreign country undertake in writing to provide sufficient protection and the Board’s permission, the data can be transferred abroad without the explicit consent of the relevant person.

YOUR RIGHTS PURSUANT TO ARTICLE 11 OF THE LPPD NO. 6698

• By applying to our company, you have the right to;
• Learn whether your personal data has been processed,
• Request information if processed,
• Learn the purpose of processing and whether it is used in accordance with its purpose,
• Know the third parties to whom it was transferred domestically / abroad,
• Request correction if it has been processed incompletely / incorrectly,
• Request deletion / destruction within the framework of the conditions stipulated in Article 7 of the KVKK,

Request notification of the transactions made pursuant to clauses (5) and (6) above to the third parties to whom it was transferred.

In accordance with Article 13, paragraph 1 of the KVKK Law, you can submit your request to our Company regarding the exercise of your rights specified above in writing or through other methods determined by the Personal Data Protection Board.

In order to exercise your rights specified above, you can apply to our Company using the contact information we provide below with the necessary information identifying your identity.

• By filling out the “Application Form According to the Law on the Protection of Personal Data” on the website https://aysesezim.com,
• By filling it out in person at our address SAHRAYICEDIT MAH. ATATURK CAD. NO: 69 IC KAPI NO: 236 KADIKÖY / İstanbul and submitting it to us,
• By sending it through a notary. We will finalize your request, which you have submitted to our Company, the Data Controller, through the above methods, free of charge within 30 (thirty) days at the latest. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board must be paid by you.

As the Data Controller, we may accept your request or reject it by explaining the reason and inform you of our response in writing or electronically. If your request in your application is accepted, we will fulfill the necessary as the Data Controller.

STORAGE PERIOD OF YOUR PERSONAL DATA

In order to fulfill the obligations arising from the nature of the commercial activity between you and our Company and to implement the workplace rules, your personal data will be stored for the period necessary for the purpose for which they are processed.

In addition, if the processed data is processed due to a contract concluded later, the Company may store personal data for the period of 10 (ten) years from the end of the business and commercial relationship, limited to the purpose of establishing the necessary defenses within the scope of the dispute in the event of any dispute that may arise from the employment contract or commercial contract, and as determined in accordance with the relevant legislation.

PRINCIPLES BASED BY OUR COMPANY WHEN PROCESSING YOUR DATA

Our company observes the following principles when processing your data:

• Processing your personal data in accordance with the law and the rule of honesty,
• Processing personal data accurately,
• Processing has a specific scope,
• Processing is carried out for legitimate purposes,
• Processing is related to the purpose for which the data was collected or reprocessed, limited and proportionate,
• Your data is up-to-date,
• Protecting your data for the period necessary for the purpose for which it is processed.

OUR PRECAUTIONS AND COMMITMENTS REGARDING DATA SECURITY

Our company undertakes to protect your data, which it processes in accordance with the Personal Data Protection Law No. 6698, in a secure and reasonable manner. In order to prevent your personal data from being processed and accessed illegally and to ensure the preservation of your personal data, it carries out technical and administrative measures to ensure the appropriate level of security by using various methods and security technologies. In addition, your special personal data is processed by taking sufficient measures determined by the Board. The company will not disclose the personal data it obtains to anyone else in violation of this disclosure text and the provisions of the Personal Data Protection Law No. 6698 and will not use it for purposes other than processing.