IDENTITY OF THE DATA CONTROLLER

Law No. 6698 on the Protection of Personal Data (“Personal Data Protection Lawpursuant to the law, the entity with the title of "Data Controller" Dentist – Can Tokman (“ClinicalYour personal data may be processed by [Company Name] within the scope described below.

YOUR PERSONAL DATA THAT IS PROCESSED

In accordance with the Personal Data Protection Law (KVK Law) and secondary regulations, your personal data listed below will be processed within the scope of the purposes and legal grounds stated in this privacy notice. 

  • Identity Card (Name, Surname, Turkish National Identity Number, Date of Birth)
  • Contact Information (Address, Phone Number, Email)
  • Customer Transactions (Billing Information, Treatment Fee)
  • Finance (Receipt Details, IBAN, Bank Information)
  • Visual and Audio Recordings (Social Media Photos and Videos)
  • Health Information (Blood Type Information, Allergy Information, Medical History Information, Information on Medications Currently Used, Information on Past Illnesses, Treatment Risk Information, Treatment Information, Information on Previously Applied Treatments, COVID-19 Information)

PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

  • "Explicit consent" as regulated in Article 5/1 of the Personal Data Protection Law. Based on legal grounds, your personal data in the category of visual and audio recordings may be processed for the purpose of sharing them on social media accounts, which are online public platforms, within the scope of conducting advertising, marketing and promotional activities for treatment products and/or services.
  • Article 5/2 (a) of the Personal Data Protection Law stipulates "being explicitly provided for in the laws". Based on legal grounds, your personal data will be processed for the purposes of fulfilling the obligations and establishing the rights arising from the legislation to which our Clinic is subject, primarily the Basic Law on Health Services, the Regulation on Private Health Institutions Providing Oral and Dental Health Services, the legislation of the Ministry of Health, the Turkish Code of Obligations, and the Tax Procedure Law, as well as the preparation of legal declarations and notifications.
  • "Establishment or performance of the contract" as regulated in Article 5/2 (c) of the Personal Data Protection Law. Based on legal grounds, your personal data will be processed for the purposes of establishing the contractual relationship you are a party to, scheduling your appointment, creating offers for your treatment requests and subsequently carrying out payment and collection transactions, performance of the contract, fulfillment and continuation of obligations, ensuring necessary communication within the scope of contractual relationships, and developing and implementing business strategies.
  • Article 5/2 (c) of the Personal Data Protection Law organized “so that the data controller can fulfill its legal obligations” Your personal data will be processed based on legal grounds for the following purposes: preparing legal declarations and notifications; making notifications to authorized public institutions and organizations, primarily the Ministry of Health, regarding patient registration, treatment, and diagnosis procedures carried out by the Clinic; complying with the retention periods stipulated in the legislation to which our Clinic is subject and fulfilling other obligations stipulated in the relevant legislation; and fulfilling the requests of courts and public institutions and organizations requesting information, as well as legal obligations.
  • “The establishment, exercise or protection of a right” as defined in Article 5/2 (e) of the Personal Data Protection Law. Based on legal grounds, your personal data will be processed for the purposes of providing evidence in potential disputes, obtaining legal advice, and receiving technical support.
  • Article 5/2 (f) of the Personal Data Protection Law organized by the "data controller" legitimate interest" Based on legal grounds, your personal data may be processed for the purposes of conducting service quality standards processes, carrying out internal clinical operational activities, internal audits, investigations, ensuring business security, data backup and secure storage.
  • Processing of health data as regulated in Article 6/3 of the Personal Data Protection Law. Based on legal grounds, your health information may be processed without your explicit consent by persons bound by an obligation of confidentiality for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing, scheduling your requested appointment, conducting disease diagnosis and treatment processes, preparing treatment plans, performing operations related to your treatments, and providing our services to you.

METHOD OF COLLECTING PERSONAL DATA

Your personal data is collected by our Clinic through various channels, physically or electronically, either directly from you or from third parties whom you have informed us about for the purpose of transmitting it to our Clinic.

TRANSFER OF YOUR PERSONAL DATA

Your collected personal data may be transferred within the framework of the personal data processing conditions stipulated in Articles 8 and 9 of the Personal Data Protection Law.

  • Article 5/2 (a) of the Personal Data Protection Law stipulates "being explicitly provided for in the laws". Based on legal grounds, your personal data may be transferred to a financial advisor, the Ministry of Health, the Revenue Administration, and other authorized public institutions and organizations for the purposes of fulfilling the obligations and establishing the rights arising from the legislation to which our Clinic is subject, primarily the Basic Law on Health Services, the Regulation on Private Health Institutions Providing Oral and Dental Health Services, the legislation of the Ministry of Health, the Turkish Code of Obligations, and the Tax Procedure Law, as well as for the preparation of legal declarations and notifications.
  • The legal basis of "establishment and performance of the contract" as stipulated in Article 5/2 (c) of the Personal Data Protection Law. Based on this, your personal data may be transferred to contracted banks for payment and collection transactions.
  • KArticle 5/2 (c) of the VK Law organized"data processing is necessary in order to fulfill the legal obligation" data processing condition Accordingly, your personal data may be transferred to authorized public institutions and organizations, primarily the Ministry of Health, for the purposes of preparing legal declarations and notifications, making notifications within the scope of patient registration, treatment and diagnosis procedures, fulfilling requests from courts and public institutions and organizations requesting information, and complying with legal obligations.
  • Article 5/2 (e) of the Personal Data Protection Law organizedfor the establishment, exercise or protection of a right Based on the data processing conditions, your personal data may be transferred to law firms and other consultants for purposes such as providing evidence in potential disputes, obtaining legal advice and technical support.
  • “Legitimate interest” as defined in Article 5/2(f) of the Personal Data Protection Law Based on the data processing conditions, your personal data may be transferred to service providers whose servers are located within the country for the purposes of conducting communication activities, carrying out storage and archiving processes, providing corporate e-mail services, and providing electronic or physical data storage, backup services or systems.
  • Processing of health data as regulated in Article 6/3 of the Personal Data Protection Law. Based on legal grounds, your special categories of personal data may be transferred to persons bound by confidentiality, authorized public institutions and organizations for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and their financing, conducting disease diagnosis and treatment processes, performing operations related to your treatments, planning treatment, and providing our services to you.
  • Based on the legal ground of "explicit consent" stipulated in Article 6/2 of the Personal Data Protection Law; Your sensitive personal data may be transferred to domestic service providers of patient tracking programs acting as data processors for the purposes of creating and tracking your patient record electronically, recording diagnosis and treatment information, information about treatments and operations, and information about medical procedures, and providing electronic data storage, backup services or systems. These service providers do not have the authority to store or use your personal data for any other purpose and will always be obligated to keep your personal data secure and confidential.
  • "Explicit consent" as defined in Article 8/1 of the Personal Data Protection Law. Depending on the data processing conditions, your personal data may be transferred to third parties through social media accounts (Instagram, Facebook, Twitter, etc.) within the scope of advertising, marketing and promotional activities of products and/or services.
  • "Explicit consent" as defined in Article 9/1 of the Personal Data Protection Law. Depending on the data processing conditions, your personal data may be transferred to foreign-based service providers via social media accounts (Instagram, Facebook, Twitter, etc.) for the purposes of advertising, marketing and promotional activities of products and/or services.
  • Based on the "explicit consent" data processing requirement stipulated in Article 9/1 of the Personal Data Protection Law.Your personal data may be transferred abroad. If you contact our clinic via WhatsApp and share personal data, the personal data you share for the purpose of conducting communication activities may be transferred abroad because WhatsApp's servers are located abroad. abroad (Whatsapp USA LLC) Personal data may be transferred. It is important to note that if you contact our clinic via the WhatsApp application, whose servers are located abroad, you are assumed to be aware that your personal data will be transferred abroad. Your personal data is not stored within the application you use to contact our clinic. For more information, you can read WhatsApp's privacy policy.

STORAGE OF YOUR PERSONAL DATA

Your personal data will be stored and destroyed within the specified period, based on one of the data processing conditions specified in Articles 5 and 6 of the Personal Data Protection Law (KVKK) and in accordance with the general principles stated in Article 4 of the KVKK, particularly for the period stipulated in the relevant legislation or necessary for the purpose, taking into account the periods specified in the Storage and Destruction Policy regulated according to Article 7 of the KVKK.

YOUR RIGHTS REGARDING YOUR PERSONAL DATA

As a data subject:

  • To find out whether your personal data is being processed,
  • You have the right to request information regarding the processing of your personal data.
  • To learn the purpose for which your personal data is processed and whether it is being used appropriately for that purpose,
  • Knowing the third parties to whom your personal data is transferred, whether domestically or internationally.
  • You have the right to request the correction of your personal data if it is incomplete or inaccurate, and to request that this correction be notified to third parties to whom your personal data has been transferred.
  • Even if your personal data has been processed in accordance with Law No. 6698 and other relevant laws, you have the right to request the deletion or destruction of your personal data if the reasons requiring its processing cease to exist, and to request that this action be notified to third parties to whom your personal data has been transferred.
  • You have the right to object to an outcome that is unfavorable to you, resulting from the analysis of processed data exclusively through automated systems.
  • You have the right to claim compensation for damages you have suffered as a result of the unlawful processing of your personal data.

APPLICATION TO THE DATA CONTROLLER

As data subjects, you may submit your requests regarding your rights in writing or in accordance with Article 13, paragraph 1 of the Personal Data Protection Law. Notification Regarding the Procedures and Principles for Applications to the Data ControllerIf you submit your request to our Clinic using the methods specified in the Official Gazette (https://www.resmigazete.gov.tr/eskiler/2018/03/20180310-6.htm), our Clinic will process your request free of charge as soon as possible, and no later than thirty days, depending on the nature of the request. However, if the process requires additional costs, the Clinic will charge the fee specified in the tariff determined by the Personal Data Protection Authority.

To exercise your rights mentioned above, you can submit your request, including the necessary information to identify you and your explanations regarding the right you wish to exercise as specified in Article 11 of the Personal Data Protection Law, by filling out the application form on our website and sending a signed printed copy to our address, delivering it in person, or sending it to our address via a notary public.

Our clinic's contact information is as follows:

Dentist – Can Tokman

Address: Abdi İpekçi Cad. Reasürans Han 2, Nr.: 61, Etage 6, Teşvikiye – Istanbul

Telephone: +90 212 234 9234

Email Address: info@khaki-dotterel-266706.hostingersite.com