INFORMATION TEXT REGARDING THE COLLECTION, PROCESSING, SHARING, AND TRANSFER OF PERSONAL DATA WITHIN THE SCOPE OF LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA (KVKK)
This information text has been prepared to inform patients and their relatives, whose personal data (including sensitive health data) have been processed, about their rights concerning their processed data, in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”), the Regulation on the Processing of Personal Health Data and Protection of Privacy, the Health Services Basic Law No. 3359, Ministry of Health regulations, and other relevant legislative provisions.
Purpose of Collection and Processing of Personal Data
Your personal data is obtained by Assoc. Prof. Dr. Serkan Doğan through written, verbal, visual, or electronic media, call centers, websites, and other channels to ensure the protection of public health, preventive medicine, medical diagnosis, treatment and care services, and the planning and management of healthcare services and financing. Your special categories of personal data, primarily your health data, and your general personal data are processed by the relevant clinic in a limited and proportional manner, in connection with the purposes stated in this article, including but not limited to the following:
- Identity Information: Your name, surname, T.R. Identity Number, passport number, or temporary T.R. Identity Number, place and date of birth, marital status, gender, insurance or patient protocol number, and other identity data that can identify you.
- Financial Data: Your bank account number, IBAN, credit card information, and billing information.
- Health Financing Data: Your private health insurance data and Social Security Institution data for the purpose of financing and planning health services.
- Health and Other Personal Data: Your health data and related personal data sent or entered on the www.doktorserkandandogan.com website.
- Contact Information: Your address, phone number, email address, and other contact data; your voice call recordings kept by customer representatives or patient services as required by call center standards, and personal data obtained when you contact us via email, letter, or other means.
The personal data of Patients and Patient Relatives may be processed for the purposes specified below within the scope of the relevant legislation:
- Promotional Sharing on public platforms such as social media accounts (Twitter, Instagram, Facebook, Youtube), the website, Written Media (newspapers, magazines), Visual Media, and Auditory Media (TV, radio), and in the fields of Internet and New Media.
- Sharing anonymized data for scientific research purposes.
- Verifying your identity.
- Protecting public health, preventive medicine, medical diagnosis, treatment, and care services, and the planning and management of healthcare services and financing.
- Sharing requested information with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation.
- Procurement of medicine.
- Viewing your analysis and examination results.
- Informing you about your appointment if you have scheduled one.
- Performing risk management and quality improvement activities.
- Performing analysis to improve healthcare services.
- Sharing requested information with private insurance companies within the scope of financing your healthcare services, covering examination, diagnosis, and treatment expenses, and eligibility inquiries by Patient Services, Financial Affairs, and Marketing departments.
- Fulfilling legal and regulatory requirements.
- Sharing requested information with private insurance companies within the scope of financing healthcare services.
- Conducting physicians’ activities related to sample cases and clinical research for the treatments they perform.
- Performing risk management and quality improvement activities by Quality, Patient Experience, and Information Systems departments.
- Invoicing for our services and confirming your relationship with contracted institutions by Patient Services, Financial Affairs, and Marketing departments.
- Your Personal Data obtained and processed in accordance with the relevant legislation may be transferred to the physical archives and/or information systems of Assoc. Prof. Dr. Serkan Doğan and kept securely in both digital and physical environments.
Your Rights Regarding the Protection of Personal Data
The personal data of the Data Provider is processed based on the legal grounds stipulated in KVKK Article 5, Clause 2, Subsections: a) “Expressly provided for by law,” c) “Being necessary for the conclusion or fulfillment of a contract,” e) “Being mandatory for the establishment, exercise, or protection of a right,” and f) “Being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.”
Data Subject Rights: Real persons whose personal data are processed under Law No. 6698 have the following rights pursuant to Article 11 of the Law:
- To learn whether his/her personal data are processed.
- To request information if his/her personal data have been processed.
- To learn the purpose of the processing of personal data and whether they are used in accordance with their purpose.
- To know the third parties to whom personal data are transferred, domestically or abroad.
- To request the rectification of personal data if they are incomplete or incorrectly processed, and to request notification of the transaction carried out within this scope to third parties to whom the personal data has been transferred.
- To request the erasure or destruction of personal data in the event that the reasons for its processing cease to exist, despite being processed in accordance with the provisions of the KVKK and other relevant laws, and to request notification of the transaction carried out within this scope to third parties to whom the personal data has been transferred.
- To object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems.
- To demand the compensation of the damage in case of suffering damage due to the unlawful processing of personal data.
Data Security
Your personal data is protected in full compliance with all technical and administrative security controls required by information security standards and procedures. These security measures are provided at a level appropriate to the potential risk, taking technological capabilities into account.
Complaints and Contact
Your personal data is diligently protected within technical and administrative capabilities, and the necessary security measures are provided at a level appropriate to the possible risks, considering technological capabilities. You can submit your requests under the scope of the Law:
- Via Notary Public,
- To info@androest.com with a secure electronic or mobile signature, via a registered electronic mail address (KEP) or your e-mail address registered in our system, or
- You can submit your requests under the scope of the Law via the “Contact” section on the https://androest.com/ website.