 |
Information Notice of Dr. Nur Bayraktar Practice under the Law on the Protection of Personal Data
This text has been prepared in order to inform you, our patients (data subjects), who are defined as the “data subject” in the Law No. 6698 on the Protection of Personal Data, which was published in the Official Gazette dated 07/04/2016 and entered into force as a requirement of the recognition in our Constitution of the protection of personal data as one of the fundamental human rights, and in the relevant legislation, about the processes of collection, recording, storage, processing, updating, transfer, destruction and anonymization of your personal data (including special categories of personal data) by our company / healthcare institution Dr. Nur Bayraktar Muayenehanesi, which has the capacity of “data controller” under the said Law and legislation, and about the mutual rights and obligations of the parties in relation to these processes.
1. Data Controller
In the processes where the personal data of you, our patients/clients, are processed, our company / healthcare institution acts as the “data controller” as defined in Article 3 of Law No. 6698 and determines the purposes and means of processing and storing your personal data.
As the data controller, our company / healthcare institution is obliged to establish and manage the data recording system and to take administrative and technical measures regarding data security. In this context, we would like to state that your data may also be processed by third parties who have the capacity of “data processor” as defined in Article 3 of the Law.
2. Personal Data Processed
Within the meaning of Law No. 6698, personal data are defined as “any information relating to an identified or identifiable natural person”. Personal data include such information as a person’s name and surname, national ID number, contact details, date of birth and gender.
Undoubtedly, the personal data that the said Law aims to protect are not limited to these. Special categories of personal data which, if learned, may lead to discrimination or harm for the data subject are also under the protection of the Law. Such data include information relating to a person’s race, ethnic origin, political opinion, philosophical or religious beliefs, criminal records, biometric and genetic data and health data.
In addition, besides the personal data listed above, your visual and audio data (photographs, video recordings, audio recordings) obtained by taking sound and images in the workplaces, polyclinics and other practice areas and vehicles of our company / healthcare institution are also processed by us as your personal data within the limits set out in Articles 5 and 6 of the Law.
Furthermore, in addition to the personal data you have transmitted to us as a patient/client of our company / healthcare institution via various means such as telephone calls, electronic correspondence and verbal meetings, the personal data you provide to us electronically or physically through forms, the contact forms you fill out on our websites or on third-party websites in order to contact us, the various contracts/forms you sign with us, the mail, fax and letters you send to us, the information you provide via our employees, customer service channels, social media channels, the use of search engines such as Google, membership agreements and other agreements, campaigns and applications are also collected by our company / healthcare institution.
We would like to inform you that our company / healthcare institution will make every effort to request from you only the minimum amount of personal data possible; that these data will be processed for explicit and legitimate purposes and in compliance with the law and the rules of good faith; that all necessary measures will unhesitatingly be taken to prevent your data from falling into the hands of unauthorized persons; that the protection of your data will be given the utmost attention; that, for this purpose, such data will be periodically checked; that your data will be retained for a period appropriate to the purpose for which they are processed; and that, at the end of this period, they will be destroyed.
Your personal data and special categories of personal data collected and processed by our company / healthcare institution will be stored in a secure environment that is not open to public use and, unless there is no consent or a legal obligation, will not be shared with third parties under any circumstances. In this regard, special care will be taken to ensure the security and confidentiality of your special categories of personal data as defined above.
3. Purposes and Methods of Collecting Personal Data
The personal data of our patients/clients are collected by our company / healthcare institution for various legal reasons and purposes of processing, for objectives such as ensuring the security of the legal, commercial, medical, administrative and therapeutic transactions and operations carried out by our patients/clients with our company, and preventing unlawful acts such as theft and fraud. These data are collected through the information and documents submitted to us and by automatic means via the Closed-Circuit Camera Recording System located in the fields of activity, workplaces and vehicles of our company / healthcare institution.
4. Processing of Your Personal Data, Legal Grounds and Purposes of Processing
Your personal data collected by our company / healthcare institution are processed, in order to fulfil the obligations arising from the Law on Private Security Services in particular, all other relevant national/international legislation, secondary regulations issued based on these by national/international competent authorities (BTK, BDDK, TCMB, MASAK, TBB, etc.) and all contracts to which our company / healthcare institution is a party, and for purposes such as ensuring the security of the legal, commercial, medical, administrative and therapeutic transactions and operations of our company / healthcare institution and of the persons with whom it has business relations, and preventing unlawful acts such as theft and fraud, in accordance with the principles set out in Article 4 of the Law and within the processing conditions specified in Articles 5 and 6 of the same Law.
5. Persons to Whom Your Personal Data Are Transferred and Purposes of Transfer
Your personal data collected by our company / healthcare institution may, for the purposes explained in this text, be shared, within the scope permitted by the legislation and/or the legislation or contracts to which we are a party that grant the right and authority to request and process personal data, with private and public institutions and organizations (the Ministry of Health of the Republic of Türkiye, Provincial Health Directorates, District Health Directorates, Healthcare Institutions, Laboratories and Centers, Law Enforcement Authorities, Courts, Ministries, Public Prosecutor’s Offices, BRSA, MASAK, SSI, judicial and administrative authorities, and other official institutions, organizations and persons) within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698. Your special categories of personal data, on the other hand, may not be shared with third parties without your explicit consent, except for exceptions arising from the Law.
6. Retention Period of Your Personal Data
Your personal data collected by our company / healthcare institution will, for the purposes explained in this text, be processed for the maximum period necessary for the purpose for which they are processed and, in any case, for the statutory limitation periods, except for obligations arising from legal regulations. After the expiry of the said periods, your personal data will be deleted, destroyed or anonymized in accordance with Article 7 of the Law. Our destruction procedure will be carried out in compliance with the Law on the Protection of Personal Data (KVKK).
