PRIVACY NOTICE REGARDING PROCESSING OF PERSONAL DATA
In compliance with the Law on Protection of Personal Data No. 6698 (“KVKK“), its related regulations, notices, guidelines, and secondary regulations and practices, as well as the decisions of the Personal Data Protection Board, we, Bengi Kaya Mert, an orthodontic specialist, as the “Data Controller” with the tax identification number of 5310320971 registered in the Mecidiyeköy Tax Office and located at Teşvikiye Mah. Şakayık Sok. Ihlamur Palas No:42/7 Şişli, Istanbul, are committed to ensuring the maximum level of security for your personal data. Accordingly, we process your personal data within the limits prescribed by the Law and in the manner explained below.
METHOD, LEGAL BASIS, AND PROCESSING PURPOSE OF YOUR PERSONAL DATA
Your personal data is collected through direct verbal, written, or electronic communication from you to the Clinic, through the Health Ministry, Insurance Companies, or their databases, through interviews, and through mobile applications and software used during activities, either entirely or partially through automatic means or non-automatic means by being a part of any data recording system.
Within this scope, your personal data written below is processed in connection with the following processing purposes, limited and proportionate, in compliance with the general fundamental principles
specified in the Law on the Protection of Personal Data (KVKK) Article 4 and with the matching legal basis:
PERSONAL DATA TO BE PROCESSED
Your Personal Data and Special Categories of Personal Data listed below will be processed by the Orthodontist in accordance with the fundamental principles envisaged by the Law on the Protection of Personal Data (“KVKK”) Article 4, in line with the Personal Data Processing Conditions and Purposes specified in Articles 5 and 6 of KVKK, and within the scope of the purposes stated in this Privacy Notice. The processing of your data will be carried out lawfully, with a purpose-related, limited and proportional approach, in compliance with the principles of justice and transparency, and with accurate and up-to-date information. All necessary technical and administrative measures prescribed by the legislation will be taken to ensure the security of your data.
The following data is collected within this scope as personal data:
Contact Data: Information that can be used to reach the individual (phone number, address, email).
Identity Data: Information related to the individual’s identity (name, surname, ID number, mother’s name, father’s name, place of birth, date of birth, gender, ID serial number, ID copy, tax number, nationality, signature).
Health Data: Information related to the individual’s health (blood type, medical history, check-up results, consultation report, surgical information, treatment method applied, type of illness, medication used, dental x-rays, medical values, test results).
Financial Data: Information related to the individual’s financial information (bank account number, IBAN).
Customer Transaction Data: Information related to the individual’s customer transaction data (invoice).
Visual and Audio Recordings Data: Information related to the individual’s visual and audio recordings (photographs, video recordings).
THE PURPOSE OF PROCESSING PERSONAL DATA
We process your personal data in accordance with the Personal Data Protection Law (KVKK) for various purposes, including creating a patient file, being able to carry out your examination, preventive medicine, medical diagnosis, treatment, medical applications, and care services, performing follow-up checks after medical diagnosis and treatment processes, managing any complications that may arise, communicating with you one-on-one, managing appointment processes, ensuring patient satisfaction and managing requests, fulfilling legal and contractual obligations, storing information about your health data that needs to be kept in accordance with relevant legislation for specified periods, obtaining consultation services from other relevant specialists when necessary to carry out your treatment correctly, fulfilling legal obligations in accordance with the legislation within the scope of International Health Tourism, planning the transfer, accommodation, and interpreter services of Health Tourist patients/clients coming within the framework of tourism, hearing about innovations in medical treatment and practices, providing information to third parties about the medical services provided, planning and managing health services and financing, ensuring workplace safety, fulfilling responsibilities arising from the legal relationship established between the doctor and the patient, fulfilling financial and administrative obligations, providing technical and commercial security, and fulfilling public obligations. All of these purposes are in accordance with KVKK and are carried out by the Orthodontist.
TRANSFER OF YOUR PERSONAL DATA AND TO WHOM AND FOR WHAT PURPOSES IT WILL BE TRANSFERRED
By taking all necessary technical and administrative measures to ensure an appropriate level of security in accordance with KVKK and related legislation, we will only use your Personal Data for the purposes specified above when it is necessary.
- To provide diagnosis and treatment services, official institutions (such as the Ministry of Health, Provincial Health Directorates, etc.),
- Persons, institutions, and/or organizations permitted by other relevant legislation,
- Lawyers or law firms for the purpose of pursuing legal matters,
- Certified public accountants for the execution of financial and accounting transactions,
- Our direct and indirect domestic shareholders,
- Consultants,
- Partners who provide appointment services, mobile application service providers, and other service providers with whom we do business,
- Domestic/foreign organizations with whom we contractually receive services from and/or provide services to and collaborate with to carry out our activities.
- According to Article 8 of the Personal Data Protection Law (KVKK) and the conditions listed in the second paragraph of Article 5 of the KVKK, along with the fulfillment of the explicit consent condition within the framework of the personal data processing conditions and purposes stated in Article 9, personal data may be transferred.
DATA OWNER AGE LIMIT WITHIN THE FRAMEWORK OF LEGISLATION
Under the scope of KVKK, patients/consultants who have reached the age of 18 or older can provide their personal data processing consent themselves. However, for patients/consultants who are under this age limit, their consent must be given by their legal representatives.
In cases where the patient is under 18 years of age or information cannot be obtained from the patient in any way, the patient’s parent, guardian, or close relative’s name, surname, and signature are processed for the purposes of following up on the patient’s diagnosis and treatment processes, as well as carrying out business and communication activities, based on the reasons of being required by the law under KVKK Article 5/2/a-c provisions and for fulfilling legal obligations.
RIGHTS OF DATA SUBJECTS
- By applying to the Clinic whenever you wish;
- Learning whether your personal data is processed,
- If your personal data has been processed, requesting information about it,
- Learning the purpose of processing your personal data and whether it is used in accordance with the purpose,
- Knowing the third parties to whom your personal data is transferred, in the country or abroad,
- Requesting correction of your personal data if it is incomplete or incorrectly processed,
- Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
- Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) of Article 11 of the Law, to third parties to whom your personal data has been transferred,
- Objecting to the emergence of a result against you by analyzing your processed data exclusively through automated systems,
- In case you suffer damage due to unlawful processing of your personal data, you can request the compensation of the damage and request the use of your rights.
You can exercise your rights and make requests related to the enforcement of the law by filling out and signing the application form which you can obtain from our office or through the website https://www.bengikayamert.com/basvuru-formu. Once you have completed the form with wet ink signature, you can send it to the address Teşvikiye Mah. Şakayık Sok. Ihlamur Palas No:42/7 Şişli, Istanbul via a notary public, registered mail or by submitting it in person. Alternatively, you can sign the application form electronically using your mobile signature or secure electronic signature and send it to bengikayamert@hs01.kep.tr using your KEP address. If the clinic needs to respond in writing to your request, they will provide a response for the first ten pages at no cost. For every page above ten, a processing fee of one Turkish lira will be charged. If the response is provided in a recording medium such as a CD or flash drive, the fee charged by the clinic cannot exceed the cost of the recording medium.
If you are a data subject and wish to exercise your rights as listed above, you will need to submit an application that includes a clear and comprehensible explanation of your request, as well as any supporting documents necessary to authenticate your identity or authority to act on behalf of someone else. The application must contain your full name, signature, national ID number, residential or business address, email address, and phone and fax numbers, as well as details about the nature of your request, as required by the regulations on the “Principles and Procedures for Data Controllers’ Applications”. Any applications that do not include these required elements will be rejected by the clinic.
Orthodontist expert Bengi Kaya Mert reserves the right to make changes to this information text at any time due to reasons arising from the KVKK, secondary regulations, and Board decisions. Any changes to the information text will take effect immediately as of the date on which the updated text is communicated to you.
| Full Name of Patient |
| Date |
| Signature |
| Close Relative/Guardian/Caretaker of Patient |
| Full Name |
| Date |
| Signature |
