Protection of Personal Data

Information Regarding the Personal Data Protection Law
The purpose of the Personal Data Protection Law No. 6698 is to protect the fundamental rights and freedoms of individuals, primarily the right to privacy, in the processing of personal data, and to regulate the obligations of natural and legal persons who process personal data, as well as the procedures and principles they must comply with.

As the Data Controller, Tülay Akkol Oral and Dental Health Polyclinic may process your personal data within the scope of the Personal Data Protection Law No. 6698 (“Law”) and the relevant legislation, solely within the framework described below and in compliance with the Regulation on Private Hospitals, the regulations of the Ministry of Health, and other applicable legislation.

Method of Collecting Your Personal Data
Your personal data is collected by Tülay Akkol Oral and Dental Health Polyclinic for the purposes of protecting public health, preventive medicine, maintaining records related to your applications to our healthcare institutions, conducting medical diagnosis, treatment and care services, and planning and managing healthcare services and their financing. Such data may be obtained verbally, in writing, visually, or electronically; from records shared when benefiting from private insurance companies; from the records of other healthcare institutions in case of referral; through emails you send, call center voice recordings, our website, and other verbal, written, or similar communication channels.

Including but not limited to your health data,
Your special categories of personal data and general personal data may be processed by Tülay Akkol Oral and Dental Health Polyclinic in a manner that is relevant, limited, and proportionate to the purposes stated in this article, including but not limited to the following:

• Your identity information: name, surname, Turkish ID number, passport number or temporary Turkish ID number, place and date of birth, marital status, gender, insurance and/or patient protocol number, and other identification data that may identify you,
• Your contact information: address, telephone number, email address, and other communication data,
• Your personal data obtained when you contact us via email, letter, or other means, including voice call recordings maintained in accordance with call center standards by customer representatives or patient services,
• Your financial data such as bank account number, IBAN number, credit card information appearing only on transaction slips, billing and invoice information,
• Your private health insurance data and Social Security Institution data for the purpose of financing and planning healthcare services,
• Your health information: all kinds of medical information and data obtained during or as a result of medical diagnosis, treatment, and care services, including but not limited to medical reports, diagnosis data, biometric and genetic data, laboratory and test results, examination data, appointment details, and prescription information,
• Your feedback such as surveys completed by patients, thank-you letters, complaints, and satisfaction results,
• Your vehicle license plate information if you use the parking facility,
• Your images obtained from camera recordings continuously recorded in common areas of our clinic as required by legislation,
• Your health data and other personal data that you submit or enter on all websites belonging to Tülay Akkol Oral and Dental Health Polyclinic,
• If you apply for a job at Tülay Akkol Oral and Dental Health Polyclinic, your resume and other personal data obtained for this purpose; and if you are an employee or related employee, all kinds of personal data related to your employment contract.

Purposes and Legal Grounds for Processing Your Personal Data
Within the scope of the legislation regarding healthcare services, which constitute a public service, and pursuant to the provisions of Law No. 6698; as the data controller, Tülay Akkol Oral and Dental Health Polyclinic may process your special categories of personal data only for the following purposes:

• Protection of public health, preventive medicine, execution of medical diagnosis, treatment and care services, and planning and management of healthcare services and their financing,
• Planning and management of the operations of our clinics,
• Informing you about your appointment if you have scheduled one,
• Sharing requested information with the Ministry of Health and relevant public institutions and organizations in accordance with applicable legislation,
• Analyzing the healthcare services you receive and storing your health data for the purpose of improving and developing healthcare services,
• Verifying your identity,
• Taking all necessary technical and administrative measures to ensure data security of the systems and applications used,
• Preserving information regarding your health data that must be retained in accordance with relevant legislation,
• Providing necessary information to regulatory and supervisory institutions and official authorities in line with their requests and audits,
• Sharing requested information with private insurance companies within the scope of financing healthcare services,
• Carrying out risk management and quality improvement activities,
• Measuring patient satisfaction and responding to all your questions and complaints within the scope of our healthcare services.

Without limitation to the above, your personal data may also be processed for purposes such as conducting, developing, and improving medical diagnosis, treatment, and care services; planning and managing healthcare services and their financing; increasing patient satisfaction; and carrying out related research and development activities. During data processing, no violation of your personal rights will be permitted.

In accordance with relevant legislation, your personal information will be recorded in the system, stored, classified, processed, transferred, updated, and, where permitted by law, shared only upon the request of official institutions (such as Courts, Public Prosecutor’s Offices, Ministries, etc.).

Transfer of Personal Data

• Your personal data, within the scope of Law No. 6698 and other relevant legislation and for the purposes stated above, may be shared with:
• The Social Security Institution,
• Private insurance companies,
• The Ministry of Health and its affiliated units,
• The General Directorate of Security and similar law enforcement authorities,
• The General Directorate of Civil Registration,
• The Turkish Pharmacists’ Association,
• Chief Public Prosecutor’s Offices, Courts, and all judicial authorities,
• Laboratories, centers, and similar third parties with whom we cooperate for medical diagnosis,
• Our institution’s lawyers in case of a potential legal dispute,
• Representatives of official institutions authorized to audit our institutions,
• Other public authorities authorized by law, and will not be shared with any other persons or institutions.

Your Rights Regarding the Protection of Personal Data

• In accordance with relevant legislation regarding your personal data, you have the right to:
• Learn whether your personal data is processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used in accordance with its purpose,
• Know the third parties to whom it has been transferred and request correction if it is incomplete or incorrectly processed,
• Request the deletion or destruction of personal data within the framework of Article 7 of Law No. 6698, without prejudice to legal obligations regarding the retention and preservation of patient records required by healthcare legislation,
• Request notification of the correction, deletion, or destruction to third parties to whom the data has been transferred,
• Object to the emergence of a result against you through analysis by exclusively automated systems,
• Request compensation for damages in case you suffer damage due to unlawful processing of your personal data.

Data Security
As Tülay Akkol Oral and Dental Health Polyclinic, we attach the highest level of importance to the protection and security of your personal data. We ensure full compliance with all technical and administrative security controls required under information security standards and procedures. In all products and services we provide, we act with the awareness that personal data security is a priority, and we implement the necessary security measures by taking into account technological possibilities and all potential risks, demonstrating the utmost diligence in this regard.