PERSONAL DATA PROCESSING DISCLOSURE TEXT

“Disclosure Text”

In accordance with the provisions of the Law on the Protection of Personal Data No. 6698 (KVKK) and the European Union General Data Protection Regulation (GDPR), Dentist Derya Elik and the clinic she operates, located at Alaybey Mah. Şehit Asım Aksoy Cad. Ulusoy No:41 A Karşıyaka-İZMİR (hereinafter referred to as "Doctor/Clinic/Employer"), as the Data Controller, will process your personal data as described below. Your personal data will be recorded, stored, updated, disclosed to third parties in cases permitted by law, transferred, classified, and processed as specified in KVKK and GDPR. We are informing you of our mutual rights and obligations within the framework of the aforementioned legal regulations.

As part of the legal regulations, we inform you that we will record and archive the personal information required to establish the Doctor-Patient relationship and provide healthcare services (such as diagnosis, treatment, and care) for the benefit of the patient and public health. We are obligated to register all necessary patient information, such as identity, address, phone number, medical history, and other essential details for providing healthcare services to you, in accordance with the Private Hospitals Law, Private Hospitals Regulation, Health Implementation Communiqué, Patient Rights Regulation, and other legislation. We are also required to document all records and documents that will be part of a medical patient file, either electronically or on paper. Moreover, your personal data may be shared with authorized institutions, including the Ministry of Health of the Republic of Turkey, Provincial Health Directorates, Public Health Centers, the Social Security Institution, and, if applicable, your private health insurance company. It may also be shared with authorized persons or systems like e-nabız (e-health) when requested by these authorities.

PURPOSES, METHODS, AND LEGAL REASONS FOR PROCESSING PERSONAL DATA

Your personal data is processed to establish and fulfill the Doctor-Patient relationship and the terms of the contract, to use in services we may offer you, to identify the information of the party involved, including identity, address, tax number, and personal health data, and to arrange all records and documents required by law or to serve as evidence for transactions made in electronic or paper form. Your personal data is also processed to fulfill the obligations imposed by legislation, competent authorities, and other authorities regarding information storage, reporting, and informing, and for marketing and statistical purposes to improve service quality. Special categories of personal data are processed in the context of communication, information sharing, and other processes as part of the contractual relationship.

Information related to your blood type, laboratory and imaging results, tests, allergies, chronic diseases, venereal diseases, infectious diseases, past surgeries or operations, e-nabız records, medications, COVID-19 status, medical treatments, prescriptions, harmful habits, body analysis, death information, and other health data necessary for treatments and procedures will be processed to create a patient file. These data are essential to carry out preventive healthcare, diagnosis, treatment, and medical care services, manage post-diagnosis and treatment follow-ups, communicate with you, manage appointment processes, and handle patient satisfaction and demand management. Additionally, your personal data will be processed to fulfill legal and contractual obligations, preserve health data required by law, obtain consultation from other specialist doctors when necessary, fulfill legal obligations related to health tourism regulations, and plan transfers, accommodations, and interpreter services for patients visiting under health tourism.

Failure to provide the relevant personal data may result in the inability to fulfill the legal obligations imposed on the doctor and the clinic, leading to potential failure in treatment and/or recovery processes.

TRANSFER OF PERSONAL DATA

Your personal data and sensitive personal data collected for the above purposes may be shared with third parties such as other specialist doctors for consultations, employees under insurance, suppliers, financial and tax advisors, auditors, legal advisors, database providers, clinical management software service providers, web consultants, interpreters, data protection officers, IT consultants, travel agencies, authorized public institutions and organizations, and judicial authorities. These data will be shared to the extent necessary, under confidentiality agreements, and by taking all required technical and administrative security measures as mandated by the law.