KVKK

Within the scope of the Personal Data Protection Law No. 6698 (“KVKK”), enacted to protect fundamental rights and freedoms, especially the right to privacy, and to regulate the obligations of real and legal persons processing personal data, Prof. Dr. Hasan Turhan, acting as the “Data Controller,” may process your personal data only for the purposes and within the scope explained below, in accordance with the Basic Law on Health Services No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliates, the Regulation on Private Hospitals, the Law No. 6698 on the Protection of Personal Data, the Regulation on the Processing and Protection of Personal Health Data, Ministry of Health regulations, and other relevant legislation.

1) Definitions Under KVKK

For the purposes of KVKK:

Data Subject: The natural person whose personal data is processed,

Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system,

Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller,

Personal Data: Any information relating to an identified or identifiable natural person,

Sensitive Personal Data: Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect, appearance, association, foundation or union membership, health, sexual life, criminal convictions, security measures, as well as biometric and genetic data,

Processing of Personal Data: Any operation performed on personal data such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of use, whether fully or partially automated or non-automated provided that it is part of a data recording system,

Board: The Personal Data Protection Board,

Authority: The Personal Data Protection Authority,

Data Recording System: The recording system in which personal data is processed according to specific criteria,

Anonymization: Rendering personal data incapable of being associated with an identified or identifiable natural person, even by matching with other data.

2) Processed Personal Data

Your personal and sensitive personal data, primarily including your health data; identity information such as name, surname, Turkish ID number and/or passport number and/or temporary Turkish ID number, place and/or date of birth, marital status, gender, health insurance information, occupation, insurance card number, workplace registration and/or patient ID number; contact details such as address, telephone number, email address; call center voice recordings; personal data obtained through e-doctor systems, email, letters, or other communication tools; financial data such as bank account number, IBAN, credit card information, invoice details; private health insurance data and Social Security Institution data; medical reports, diagnosis data, biometric and genetic data, laboratory and test results, examination findings, physician analyses and comments, appointment and prescription information; feedback such as surveys and complaints; vehicle plate information when using parking facilities; security camera recordings; and data submitted through websites including IP address and cookies may be processed proportionately and transferred to the persons and institutions stated in Section 5.

3) Collection of Personal Data

Your personal data is processed within the conditions set forth in Articles 5 and 6 of the Law for the purposes of benefiting from healthcare services, conducting scientific and promotional activities, and managing related processes.

4) Processing of Personal Data and Purposes

Your personal data may be processed for the following purposes:

• Fulfillment of legal obligations under relevant healthcare legislation,
• Protection of public health and execution of diagnosis and treatment services,
• Planning and management of healthcare services and financing,
• Internal operational planning and management,
• Providing appointment-related information,
• Verification of identity for security purposes,
• Financial reconciliation with contracted institutions,
• Provision of medicines or medical devices,
• Billing processes,
• Responding to inquiries and complaints,
• Improving healthcare services and patient satisfaction,
• Compliance with legal and regulatory requirements.

Your personal data will not be used for commercial purposes outside the scope defined above and relevant legislation.

5) Situations Where Personal Data May Be Processed Without Explicit Consent

In accordance with Article 5 of KVKK, your personal data may be processed without explicit consent in cases explicitly provided by law, when necessary to protect life or physical integrity, when required for the performance of a contract, to fulfill legal obligations, when made public by the data subject, or when necessary for the establishment or protection of a legal right.

6) Transfer of Personal Data

Your personal data may be transferred to authorized public institutions, private insurance companies, scientific partners, auditors, consultants, business partners, and service providers within the framework of legal provisions and with necessary technical and administrative security measures.

7) Method and Legal Basis for Data Collection

Your personal data is collected verbally, in writing, or electronically through forms and other channels for the purposes stated above and processed in accordance with Articles 5 and 6 of KVKK.

8) Rights of the Data Subject Under Article 11 of KVKK

You have the right to learn whether your personal data is processed, request information, learn the purpose of processing, know third parties to whom data is transferred, request correction or deletion, object to automated processing results, and claim compensation in case of unlawful processing.

9) Application

You may submit your requests regarding personal data by completing the Application Form available at www.hasanturhan.com.tr and sending it in writing or via your registered email address to info@hasanturhan.com.tr.

10) Complaint

If your request is rejected or not answered within the legal period, you may file a complaint with the Personal Data Protection Board within the legal time limits.

Data Controller Identity Information

Data Controller: Prof. Dr. Hasan Turhan

Email: info@hasanturhan.com.tr