Dear Patient,

This Informational Text has been prepared to inform you about the processing of your personal data and your legal rights in accordance with Article 10 of the Personal Data Protection Law. Please read carefully. Your consent and approval will be obtained after this information.

Personal data: Any information relating to an identified or identifiable natural person.

Special categories of personal data: Data regarding a person’s race, ethnic origin, political opinion, philosophical belief, religion, sect, or other beliefs; clothing and attire; membership in associations, foundations, or unions; health; sexual life; criminal convictions and security measures; as well as biometric and genetic data.

Processing of personal data: Any operation performed on personal data, whether automated or not, including collection, recording, storage, preservation, modification, rearrangement, disclosure, transfer, acquisition, making available, classification, or preventing the use of such data.

Data controller: The natural or legal person who determines the purposes and means of processing personal data, is responsible for establishing and managing the data recording system.

Data processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority granted by them.

Patient: Refers to any individual receiving health services from Özel Çınarlı Hospital, either as an outpatient or inpatient.

As Özel Çınarlı Maternity and Women’s Diseases Hospital Health Facilities Management Joint Stock Company (Mersis No: 0685004944700018) (“Özel Çınarlı Hospital”), we have obligations as the Data Controller under the Personal Data Protection Law No. 6698 and all relevant legislation (“KVKK”). Rules and practices have been developed for the appropriate processing of personal data for which we are the data controller.

As stated in Article 4 of KVKK, your personal data will be processed in connection with the purposes requiring processing, within the framework of laws, contracts, legal reasons, and the legitimate interests of Özel Çınarlı Hospital; it will be recorded, stored, preserved, rearranged, shared with authorized institutions, and shared or processed with domestic or foreign natural and legal persons when the necessary conditions are met, in a limited and proportionate manner.

The personal data processed at Özel Çınarlı Hospital and their processing purposes are specified in the table below.

Data Type Description
Identity Identifying information used for patient identification and records, including ID number, series number, wallet number, passport number, country of citizenship, name, surname, country of birth, city of birth, birth date, gender, marital status, father’s name, mother’s name, place of birth, and other identification details (province, district, neighborhood, book number, family order number, order number, household number, page number, registration number, issued by, reason for issuance, date of issuance, previous surname).
Contact Telephone number, address, and email address used to communicate with the patient and authorized individuals.
Legal Process Information in correspondence with judicial authorities, information in lawsuit proceedings and files.
Customer Transaction Invoices for transactions carried out at the hospital, payment receipts, and requests.
Physical Space Security Entry and exit record information of patients and visitors, camera recordings.
Processing Security IP address information of patients and visitors, website entry and exit information, password information, internet access logs.
Visual and Auditory Records Patient photographs.
Social Media Photos and videos shared on social media applications and internet pages, such as Instagram @ozelcinarlihastanesi and Facebook @Özel-Çınarlı-Hastanesi-432998320092399.
Marketing Survey records requested and approved by the Ministry of Health.

Special Categories of Personal Data

Data Type Description
Clothing and Attire Measurements such as height and weight taken during outpatient visits, diagnosis, and treatment stages.
Health Information All health-related information about the patient, including previous, current, applied, and planned treatment information, blood type, physical examination findings, laboratory analysis, radiology and other imaging results, diagnoses, treatments applied, operations performed, and prescriptions.
Biometric Data Palm print used for patient identification in SGK transactions, retina tests performed to check newborns’ visual fields, and heel prints taken after birth.
Sexual Life All information related to the patient’s sexual life.
Genetic Genetic data related to the patient and their born/unborn children.
Religion Religion information on the ID card.

The personal data we request from you and the data you share with us during your visits for outpatient services, diagnosis, treatment, and childbirth are processed.

Your personal data is collected through various means, such as documents prepared according to the Health Quality Standards, hospital information management system applications, examinations, telephone or face-to-face interviews, laboratory analyses, imaging and diagnostic systems, camera systems, scanners, and through information sent via PTT and courier companies for the necessary documents.

The processing of your personal data will be carried out to fulfill all obligations regarding your health-related transactions; to ensure occupational health and safety and information security; to organize all records and documents in electronic or paper format; to comply with the obligations of information retention, reporting, and informing imposed by legislation, relevant regulatory bodies, and other authorities, and for any other legitimate reasons, including those specified in laws and related legislation.

In accordance with Article 5, Paragraph 1 of KVKK, we will obtain your explicit consent for the processing of your personal data.

However, you should be aware that personal data may be processed without obtaining the explicit consent of the data subject in the presence of any of the following conditions:

a. If explicitly provided for in laws.

b. If it is mandatory to protect the life or bodily integrity of a person who is unable to express consent due to physical impossibility or whose consent is not legally valid.

c. If it is necessary to process personal data of the parties to a contract directly related to the establishment or performance of a contract.

d. If it is mandatory for the data controller to fulfill a legal obligation.

e. If it has been made public by the relevant person.

f. If it is necessary for the establishment, use, or protection of a right.

g. If it is necessary to process personal data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

According to Law No. 5651, internet access used in Özel Çınarlı Hospital is recorded under the responsibility of the hospital. These records are kept for at least two years.

Your personal data is processed in accordance with tax procedures and shared with the Revenue Administration.

Information processing and sharing are carried out with banks during payment transactions.

Your identity, contact, and health information are processed and shared with life and health insurance companies.

If you request information via SMS, your phone number will be shared with communication companies. Notification messages are personalized and sent for appointment reminders, transaction results, and notifications. Commercial messages may be sent with your prior consent.

Your identity and contact information are shared with cargo and logistics companies.

Camera recordings are made for physical security purposes, and these records are kept for two (2) months, under the legitimate interests of our hospital.

Photographers authorized or approved by our hospital may share your identity and contact information to capture photos and video footage of special occasions (before, during, and after childbirth). These photos or videos may be shared on our Facebook and Instagram social media accounts with your request or consent. Photos and videos shared on social media may involve the transfer of your data abroad due to the location of the relevant systems.

Additionally, in the event of a legal request, your personal data may be shared with the company’s lawyers, state and public institutions, legal courts, and the UYAP information system.

Processing of special categories of personal data as per Article 6 of KVKK is prohibited without your explicit consent.

However, personal data regarding health, genetics, biometrics, and sexual life may be processed without explicit consent under the condition that sufficient precautions are taken, by individuals or authorized institutions and organizations under an obligation of confidentiality for the protection of public health, preventive medicine, medical diagnosis, treatment, and care services, and for the planning and management of health services and their financing, as determined by the KVKK Board.

According to relevant articles of the Health Services Fundamental Law, Health Application Regulation, Social Security and General Health Insurance Law, Regulation on Personal Health Data, Patient Rights Regulation, Private Hospitals Regulation, and Regulation on Private Health Institutions Providing Outpatient Diagnosis and Treatment, we are required to process and record your personal information.

Your health data processed in the context of the health services you will receive must be shared with the Ministry of Health, Provincial Health Directorates, and inspectors.

All your personal data regarding your health status and medical records will be processed in accordance with the provisions of KVKK and the Patient Rights Regulation. All your personal data will also be processed in the Social Security Institution and its Medula information system due to health legislation.

Any medical intervention and surgery you undergo at Özel Çınarlı Hospital will be recorded and archived as data.

During events affecting public health, information such as HES code may be requested when you enter our hospital. You may be asked to use protective equipment such as masks during your stay.

The religious information on the back of identity cards is only processed in photocopies taken for archiving purposes for inpatients and has no other processing purpose.

Measurements such as height and weight taken during outpatient visits, diagnosis, and treatment stages or the measurements of newborns will be processed under clothing and attire.

Your biometric data, such as palm prints, will be processed to ensure patient identification for health services.

Your special categories of personal data regarding health, sexual life, and genetics will be processed and shared as required by law and medical practice.

Your Rights: You have the following rights according to Article 11 of KVKK regarding your personal data:

  • To learn whether personal data is processed or not.
  • To request information if personal data has been processed.
  • To learn the purpose of processing personal data and whether they are used in accordance with this purpose.
  • To know the third parties to whom personal data has been transferred, domestically or abroad.
  • To request the correction of personal data if it is incomplete or incorrectly processed.
  • To request the deletion or destruction of personal data under the conditions specified in Article 7 of KVKK.
  • To request notification of the transactions made according to (d) and (e) to third parties to whom the personal data has been transferred.
  • To object to the occurrence of a result against the individual by analyzing the processed data exclusively through automated systems.
  • To request compensation for the damage arising from the unlawful processing of personal data.

Application Methods: You can submit your requests regarding your rights as listed above to us through the following methods:

Your requests will be responded to within thirty days at the latest.

Contact Information:

This document is shared with you in accordance with the Personal Data Protection Law.

ÖZEL ÇINARLI DOĞUMEVİ VE KADIN HASTALIKLARI HASTANESİ SAĞLIK TESİSLERİ İŞLETMELERİ ANONİM ŞİRKETİ

Kişisel Verinin Koruması ile İlgili Dökümanlar