As Uğur Toka Göz Sağlık Medikal Tarım Ürünleri Ticaret ve Sanayi Anonim Şirketi (hereinafter referred to as “Hospital”), in the capacity of Data Controller, Personal Data Protection Law No. 6698 (“Law”) and the relevant legislation in contact with Uğur Göz Hospital. This clarification text (“Clarification Text”) has been prepared for the purpose of informing you (“Relevant Person”), as a Person, about the collection, processing and transfer of your personal data.
1. Personal Data Collected by the Hospital
We have to collect various information from our patients within the framework of the health services we provide. The said information is collected in accordance with the data processing principles and conditions in the Law No. 6698 in any case. Within the scope of the purposes of processing the personal data we collect from you, the information below may include:
- Your name and your surname,
– T.C. your identity information, passport number,
– Your place of birth and date of birth,
– your gender,
– Your address,
- Your telephone number,
- E-Mail Address,
– Your patient number assigned to you by the hospital,
– Payment and billing information and your other financial data,
– Your private health insurance or Social Security Institution data,
– Your biometric data within the scope of services financed by the Social Security Institution,
– Your genetic data if you need to be tested for pathology,
– Your health data, including but not limited to your examination, x-ray and tomography data, prescription information,
– Your closed-circuit camera system image recording during your visit to our hospital,
– Your health data and identity information that you share when you use the online services on our website,
– Your other data that you share when you contact us via e-mail, call center or other channels.
2. How We Collect Your Personal Data and Its Legal Reasons
Your personal data, in line with the purposes set out in Article 5,
It is collected in order to be presented to the hospital and in this context, to fulfill its contractual and legal responsibilities completely and accurately. Your collected personal data can be processed and transferred for the purposes specified in Articles 4 and 5 of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.
Within the framework of the above-mentioned legal reasons, your personal data, any verbal (any kind of statement, etc.), written (tests, job application form, contact forms, patient consent form, etc.) or interviews with the call center via electronic media, Your identity document is collected via the website, social media areas, our institution's website, mobile applications and existing camera recording systems.
3. Terms of Processing Your Personal Data
According to the Law, in the presence of one of the following conditions, it is possible to process personal data without seeking the explicit consent of the person concerned:
1- It is clearly stipulated in the laws,
2- It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally valid,
3- Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract,
4- It is mandatory for the data controller to fulfill its legal obligation, 5- The data subject has been made public by himself,
6- Data processing is mandatory for the establishment, exercise or protection of a right,
7- Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
3 a. Conditions of Processing of Your Private Personal Data
According to Article 6 of the Law, sensitive personal data includes “race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions. Conviction and security measures, as well as biometric and genetic data are special quality personal data.“ It is forbidden to process sensitive personal data without the explicit consent of the person concerned.
Personal data other than health and sexual life listed above may be processed without seeking the explicit consent of the person concerned, in cases stipulated by the laws. Personal data related to health and sexual life are only for the purpose of protecting public health, performing preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, by persons or authorized institutions and organizations under the obligation of secrecy without seeking the explicit consent of the person concerned. can be processed. In the processing of special categories of personal data, it is also obligatory to take adequate measures determined by the Board.
4. Purposes of Processing Your Personal Data
Planning and execution of activities required to customize your personal data, products and services offered by the Hospital according to the tastes, usage habits and needs of the persons concerned, within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law, to recommend and promote them to the relevant persons, To carry out the necessary work by the business units to benefit the persons concerned from the products and services and to carry out the relevant business processes, To carry out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Hospital and to carry out the related business processes, To plan the commercial and / or business strategies of the Hospital and its execution are processed for the purposes of ensuring the legal, technical and commercial-occupational safety of the Hospital and the related persons who have a business relationship with this Hospital.
5. For What Purposes Your Personal Data Will Be Processed
• Our relevant business units for the necessary work for real and/or legal third persons, institutions and organizations (employees, visitors, patients, suppliers, business partners, etc.) that have a relationship with the hospital to benefit from the products and services of our hospital and/or its centers and units affiliated to our hospital. can be made by
• Ensuring the life and property security and legal and commercial security of real and/or legal third party institutions and organizations in the centers and units of the Hospital, where the hospital works are carried out,
• Storage of camera images Ensuring discipline, security and inspections in case you are physically present in the centers and units of the Hospital, where the hospital works are carried out,
• Turkish Commercial Code No. 6102, Turkish Code of Obligations No. 6098, Law No. 6502 on the Protection of Consumers, Law No. 6698 on the Protection of Personal Data, Tax No. 213
Procedural Law, Social Insurance and General Health Insurance Law No. 5510, Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Regulation No. 29399 on the Development and Evaluation of Quality in Health, Regulation on Private Hospitals, Personal Fulfilling the legal and regulatory requirements arising from the Health Data Processing and Protection of Privacy Regulation, the Regulation on Archive Services and all related laws and secondary regulations, and taking necessary measures in this context,
• Execution of inspection and/or regulation duties to be carried out by authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions,
• Fulfillment of information and document requests by judicial bodies and/or administrative authorities,
• To list, report, verify and analyze the use of products and services offered in our Hospital and in all centers and units affiliated with the Hospital, to produce statistical and scientific information on this subject, to develop our products and services accordingly, to increase satisfaction with our products and services, and in this context, to make customizations for the user,
• To carry out market research, promotion and necessary information regarding our products and services, to evaluate complaints and suggestions, and to contact you directly through the communication channels shared with the Hospital,
• Planning and managing the financing of all services provided, invoicing,
• Carrying out risk management and quality improvement activities,
• Offers, promotions, exemptions, etc. offered by contracted private insurance companies and/or other institutions within the framework of agreements. fulfillment of rights and obligations,
• Taking all necessary technical and administrative measures for the system and applications within the scope of data security,
• Protection of public order and health,
• Execution and management of health services such as medical diagnosis, treatment and care, supply of medical supplies
6. For What Purpose and To Whom Your Processed Personal Data Can Be Transferred
Detailed information about the transfer of your collected and processed personal data is available in VERBIS under the headings of "Data Transfer Recipient Groups" and "Information to be Transferred to Foreign Countries". In line with the purposes of fulfilling the administrative and economic affairs of our Institution, ensuring and controlling the physical security in the buildings of our Institution, conducting legal, financial and administrative compliance processes, fulfilling financial, legal and administrative works; It is shared with the following institutions and organizations permitted by the relevant legislation provisions:
• To the Ministry of Health, sub-units and family medicine centers affiliated to the Ministry,
• Private insurance companies within the scope of financing health services, covering examination, diagnosis and treatment expenses,
• To the Social Security Institution,
• To the General Directorate of Security and other law enforcement officers,
• General Directorate of Population and Citizenship Affairs,
• To the Pharmacists Association of Turkey,
• To judicial authorities,
• Laboratories, medical centers, ambulances, medical devices and institutions that provide health services with which you cooperate for medical diagnosis and treatment,
• To the health institution to which you were referred or to which you applied yourself,
• Legal representatives you have authorized,
• Hospital lawyers, tax consultants and auditors, third parties from whom consultancy is received, who are legally or under a contractual obligation to keep confidential in case of possible legal dispute,
• Regulatory and supervisory institutions and official authorities,
• To the workplace doctor in case the billing will be made to the employer,
• Hospital affiliates and subsidiaries within the legal limits in terms of the continuity of the services you receive,
• In accordance with the legislation, services you receive, complementary services, new services, etc. To our business partners who provide bulk SMS and e-mail to provide information on the issues.
7. Transfer of Your Processed Personal Data Abroad
Detailed information about the transfer of your collected and processed personal data is available in VERBIS under the headings of "Data Transfer Recipient Groups" and "Information to be Transferred to Foreign Countries". When your data is transferred abroad, it is transferred to countries that are accepted as safe countries. The transfer of your data is done for the purpose of providing medical needs and this process is carried out according to Article 9 of the KVKK.
8. Your Legal Rights and Usage of Your Processed Personal Data
8.a. Legal Rights
The right to request information about personal data is regulated in Article 11 of the KVKK to the natural persons ("Relevant Person") or their legal representatives, defined as the data subject within the scope of the Personal Data Protection Law No. 6698 (KVKK). .
Article 11 of KVKK
(1) Everyone, by applying to the data controller;
a) Learning whether personal data is processed or not,
b) If personal data has been processed, requesting information about it,
c) Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
ç) To know the third parties to whom personal data is transferred in the country or abroad,
d) Requesting correction of personal data in case of incomplete or incorrect processing,
e) Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,
f) Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,
g) Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
ğ) To request the compensation of the damage in case of loss due to the unlawful processing of personal data,
has rights.
Pursuant to Article 13 of the KVKK, if the person concerned submits his or her requests regarding the processing of his personal data to the Hospital, it will be finalized within thirty days at the latest from the date of receipt by us in accordance with Article 6 of the Communiqué on Application and Procedure Principles to the Data Controller. However, if the transaction requires a separate cost according to Article 7 of the Communiqué, a fee will be charged.
8.b. Use of the Right of Application
Application Method: Personal Application
Address for Application: Şazibey Mh. City Cd. No:15 Onikisubat/Kahramanmaras
Information to be Specified in the Application Submission: “Information Request Under the Law on the Protection of Personal Data” will be written on the envelope.
Application Method: Registered Mail with Return
Address for Application: Şazibey Mh. City Cd. No:15 Onikisubat/Kahramanmaras
Information to be Specified in the Application Submission: “Information Request under the Law on Protection of Personal Data” will be written on the envelope.
Application Method: Notification via Notary Public
Şazibey Mh. City Cd. No:15 Onikisubat/Kahramanmaras
Information to be Specified in the Application Submission: “Information Request under the Law on Protection of Personal Data” will be written on the envelope.
Ugur Eye Hospital
