KVKK – GENERAL INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

a) Data Controller and Representative

  • In accordance with the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data may be processed by our Institution as the data controller within the scope described below.

b) Purpose of Processing Personal Data

  • Your collected personal data will be processed by the Institution for the purpose of carrying out activities;
  • Necessary actions by relevant business units to perform the Institution’s activities and the execution of related business processes,
  • Actions by relevant units to provide you with healthcare services and the execution of related processes,
  • Planning and execution of the Institution’s human resources policies and processes,
  • Planning and carrying out activities required for offering, recommending, and promoting services provided by the Institution,
  • Ensuring the legal, technical, and commercial-security of the Institution and related parties in business relations,
  • All within the scope of personal data processing conditions stipulated in Articles 5 and 6 of Law No. 6698.

c) Recipients of Processed Personal Data and Purpose of Transfer

  • Your personal data may be transferred and processed domestically or internationally to our business partners, suppliers, legally authorized public institutions, private individuals or organizations, and third parties strictly for the purposes specified above and within the conditions set forth in Articles 8 and 9 of Law No. 6698.

d) Method and Legal Basis of Collecting Personal Data

  • Your personal data is collected by our Institution through call centers, website, mobile applications, and physically at our hospitals and polyclinics, either fully or partially by automated means, or manually as part of the data recording system. These personal data will be processed within the scope of the personal data processing conditions stated in Articles 5 and 6 of Law No. 6698.

e) Rights of the Data Subject under Article 11 of Law No. 6698

  • If data subjects submit requests regarding their rights, the Institution shall conclude the request free of charge as soon as possible and at the latest within thirty days. If the processing requires additional costs, the fee specified by the Personal Data Protection Board will apply.
  • Within this scope, data subjects have the right to:
    • Learn whether their personal data is being processed,
    • Request information if their personal data has been processed,
    • Learn the purpose of processing and whether it is used in accordance with its purpose,
    • Know third parties, domestic or abroad, to whom their personal data is transferred,
    • Request correction of incomplete or inaccurate personal data and that such correction be communicated to third parties to whom the data has been transferred,
    • Request deletion or destruction of personal data if the reasons for processing no longer exist, even if processed lawfully, and communicate such actions to third parties where applicable,
    • Object to automated processing resulting in adverse outcomes for themselves,
    • Claim compensation for damages arising from unlawful processing of personal data.