INFORMATION NOTICE UNDER THE PERSONAL DATA PROTECTION LAW

This notice is prepared in accordance with the Law on Protection of Personal Data No. 6698 and other relevant legislation, as a requirement of the law, to inform you, our patients (data subjects) who are defined as “related persons” under the law, about the collection, recording, storage, processing, updating, transfer, destruction, and anonymization of your personal data (including sensitive personal data) by our healthcare institution, Dr. İlayda Maral, as the “data controller” and the rights and obligations of the parties involved.

Data Controller

Our healthcare institution, in the processing of your personal data, acts as the “data controller” as defined in Article 3 of the Law No. 6698, determining the purposes and means of processing and storing your personal data. As the data controller, our institution is responsible for establishing and managing the data recording system and implementing administrative and technical measures for data security. In this regard, we would like to inform you that your data may also be processed by third parties acting as “data processors” as defined in Article 3 of the Law.

Processed Personal Data

Personal data is defined in the Law No. 6698 as any information that identifies or can identify a person. This includes your name, surname, Turkish ID number, contact information, date of birth, gender, etc.

However, the law aims to protect personal data beyond these. Sensitive personal data, which could lead to discrimination or harm if disclosed, is also protected by the law. This includes data such as race, ethnicity, political opinions, philosophical or religious beliefs, judicial records, biometric and genetic data, and health data.

Additionally, visual and auditory data (photos, video recordings, voice recordings) obtained through surveillance systems in our workplace, clinics, and vehicles, are also processed as personal data in accordance with Articles 5 and 6 of the Law.

Furthermore, your personal data, which you have shared with us through phone calls, electronic correspondence, verbal consultations, forms submitted electronically or physically, website forms, emails, faxes, letters, and other communications via our employees, customer service channels, social media, or search engines like Google, is collected and processed by our healthcare institution.

We strive to collect the minimum necessary personal data, and these data will be processed and stored in accordance with legal and ethical principles. We will take all necessary precautions to prevent unauthorized access to your personal data and ensure its protection.

Purpose and Methods of Collecting Personal Data

Your personal data is collected by our healthcare institution for legal reasons and purposes, including ensuring the security of the legal, commercial, medical, administrative, and therapeutic processes between you and our institution, preventing unlawful actions like theft and fraud, and ensuring the safety of these processes. Your data may be collected via documents and information you provide, as well as through surveillance cameras in our facilities and vehicles.

Legal Grounds for Processing Personal Data

The personal data we collect will be processed in compliance with the law, particularly for ensuring the security of legal, commercial, medical, administrative, and therapeutic processes, preventing unlawful actions, and fulfilling obligations under national and international regulations. Your data will be processed based on consent or other legal grounds as defined by the law.

Transfer of Personal Data

Your personal data may be shared with third parties that are legally authorized to request or process personal data, such as government institutions, health authorities, law enforcement agencies, courts, and other legal entities, in accordance with the relevant regulations.

Sensitive personal data will not be shared with third parties unless required by law or with your explicit consent.

Retention of Personal Data

Personal data will be stored for the duration necessary to fulfill the purposes for which they were collected and in accordance with legal retention periods. After this period, the data will be deleted, destroyed, or anonymized in compliance with the Law No. 6698.

Your Legal Rights

As a personal data subject, under Article 11 of the Law, you have the right to:

• Learn whether your personal data has been processed,
• Request information about the processing of your personal data,
• Learn the purposes of processing your data and whether it is being used for those purposes,
• Know the third parties to whom your personal data has been transferred,
• Request the correction of incomplete or incorrect data,
• Request the deletion or destruction of your personal data under certain conditions,
• Object to the processing of your data in automated systems, and
• Request compensation for damages caused by the unlawful processing of your personal data.

You can exercise these rights by submitting a written request to our healthcare institution as per the procedures outlined in the Law, including through a secure electronic signature or by using other legal methods.

Contact Information: Address: Adalet Mah. Manas Blv. No:39 Folkart B Block Office D:3311 35530 İzmir
Email Address: dr***********@gm***.com