KVKK
KVKK
KAĞAN CİNGÖZ OFFICE CLARIFICATION TEXT ON THE PROCESSING AND PROTECTION OF PERSONAL DATA OF SERVICE RECIPIENTS (PATIENTS)
KAĞAN CİNGÖZ Medical Practice located at İstasyon Mahallesi Edirne Caddesi No:102 Kırklareli/Merkez provides health services to the clients who receive health services from it and
The Clinic shows utmost sensitivity to the confidentiality and security of patient data. As a clinic, through this clarification text, the Law No. 6698 on the Protection of Personal Data, Personal Health Data
Adults or minors under the age of 18 within the scope of the Regulation on Processing and Ensuring Privacy and the Communiqué on the Procedures and Principles to be Followed in Fulfilment of the Disclosure Obligation
patients, parents and legal representatives of minor patients under the age of 18, relatives of patients who apply to the Clinic within the scope of emergency service, counsellors, health, aesthetic and beauty services
We are obliged to inform you for what purpose the personal data of the applicants to the Clinic will be processed and to whom they will be transferred, the method and legal reason for collection, and your rights.
A. DEFINITIONS WITHIN THE FRAMEWORK OF THE LAW ON THE PROTECTION OF PERSONAL DATA
In this text;
Personal Data : Information belonging to an identified or identifiable natural person, Sensitive Personal Data : Race, ethnic origin, political opinion, philosophical
belief, religion, sect, other beliefs, appearance and dress, association, foundation or trade union membership, criminal conviction and security measures, health, sexual life, biometric and genetic data, Personal Data
Processing : Obtaining, recording, storing, storing, maintaining, changing, reorganising, disclosing personal data,
after collection, including the transfer, assignment, making available, classification, prevention of use, until erasure, destruction or anonymisation
all kinds of activities carried out in the process,
KVKK : Law No. 6698 on the Protection of Personal Data,
Data Controller : It refers to KAĞAN CİNGÖZ EXAMINATION OFFICE, which determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system. In this context, by taking all necessary technical and administrative measures in its capacity as data controller, Kinik
your personal data; The Constitution, international conventions to which our country is a party, KVKK and the regulations of the Ministry of Health, in particular, all legislation on the protection of personal data and privacy
within the limits stipulated in Article 4 of the LPPD; being in compliance with the law and good faith, being accurate and up-to-date when necessary, being processed for specific, explicit and legitimate purposes, being processed for processing purposes
in accordance with the principles of being connected, limited and proportionate, and being kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed. (You can also review our Policy regarding the retention period.)
B. FOR WHAT PURPOSE IS YOUR PERSONAL DATA PROCESSED?
Your personal data in the following categories in accordance with Articles 4 and 10 of the KVKK;
Identity Data; To carry out operational activities in diagnosis and treatment processes, profession
to determine whether you have a disease or not, to be able to identify and verify your identity,
Contact Data; Follow-up and reminder of appointments and notify you when necessary
To be able to provide you with information, to provide you with information, to carry out the campaign processes, to receive the information we are obliged to receive
obtaining legal approvals and storing them in digital environment, electronic commercial message permissions obtained
To be able to inform you electronically within the scope,
Financial Data; Making and tracking payments by you, issuing invoices, health
1
Within the scope of financing services, private insurance companies, especially contracted
sharing the information requested by institutions/organisations and performing authentication,
Sensitive Personal Data; Protection of public health, preventive medicine, medical diagnosis, treatment and care
services, supply of medicines and/or medical supplies and/or devices specific to treatment, activities in accordance with the legislation
appropriate execution, execution of the processes of management of the relationship with you, management of treatment processes, treatment
aftercare and controls are carried out,
Visual Data; To be able to follow the course of treatment, to be a requirement of the work in diagnosis and diagnosis,
To be able to use it as favourable evidence in a possible court process, to ensure physical space security,
Data Processing Data; to enable you to use our website more effectively, easily and quickly, to make the site
customise their services and activities in line with your needs, and provide third party websites to you
to provide you with a more useful and appropriate service offer and to enable you to benefit from our services and activities
to make the necessary improvements, to work with regulatory and supervisory institutions to ensure that online visitor data
as stipulated and required by legal regulations, such as processing in accordance with the relevant legislation
fulfil our legal obligations
In terms of all data, upon request to authorised persons, institutions and organisations and within the scope of audit
to provide information, to fulfil our archiving obligation, to fulfil our operational
activities and security, and to ensure that contractual processes
6
for the purposes of its execution, taking the necessary security measures, in the physical archives in the Clinic or in the physical archives in the Clinic or in the physical archives in the Clinic or in the physical archives in the Clinic by taking the necessary security measures.
We store it in closed system digital servers.
PERSONAL DATA
CATEGORISATION OF THE TYPES OF PERSONAL DATA RECEIVED WITHIN THIS SCOPE
Credentials
Name, Surname, Turkish Republic Identity Number and/or passport number and/or temporary Turkish Republic
ID number, date of birth, marital status, gender, health insurance, occupation,
insurance card number, signature, workplace registration and/or patient identification number
other identification data that can identify you
Contact Information Address, telephone number and e-mail address
Financial Information
Personal data owner; bank account information, IBAN number, credit card information,
billing and invoice information, your data regarding private health insurance and Social
Paying organisation information such as Security Institution
Special Qualified Personal
Data 1
Medical reports, diagnostic data, blood group, hereditary history, pregnancy or breastfeeding
state, laboratory results, test results, examination data, doctor's analyses and
comments, appointment information, prescription information, health reports, continuing health
problems, medications, biopsy samples, surgical history, disease
including, but not limited to, medical diagnosis, treatment and care services
any and all kinds obtained during and/or as a result of the execution of
health data and sexual life data.
Visual Data Photograph (before-after), image collected from camera recording
data 1
Information - Processing Data
Device information, log records and IP data (source and destination point information),
regarding your visit to the internet address; connection/exit date and time
information, use of cookies
C. METHOD OF DATA COLLECTION AND LEGAL GROUNDS FOR COLLECTION
Your data; patient registration and appointment procedures, camera records kept in the physical area of the Clinic, printed treatment
follow-up forms, Clinic owner, doctors, nurses, secretaries, other health workers who are employees
records, examinations, medical test/examination results, patient protocol book kept by
records, the Clinic's website, e-mail, telephone and other online and/or offline electronic
communication channels such as communication platforms or social media channels, on the website
your online online journeys within the scope of treatment and care during working hours
written or visual records received and any past reports and surgery records shared by you,
The data can be collected by means of documents including photographs, laboratory and test results.
The processing activity carried out by the Clinic in accordance with the provisions of KVKK 5/2 and 6/3;
It is stipulated in the laws in terms of all data received, to fulfil our legal obligations
for the fulfilment, establishment, exercise or protection of your right and for the service between you and the Clinic
being directly related to the conclusion or performance of the contract, being necessary and obligatory,
Provided that your identity, communication, financial, data processing data do not violate your fundamental rights and freedoms
1 The text of the layered illumination of the camera recordings can be found on the boards in the clinic waiting room.
also available.
6
It is mandatory within the scope of the legitimate interests of the Clinic,
Sensitive personal data and visual data; by the Clinic, which has a confidentiality obligation, public
Protection of health, preventive medicine, medical diagnosis, treatment and care services,
the legal grounds that it is mandatory for the planning and management of health services and financing
is realised on the basis of 2 .
D. TO WHOM IS YOUR PERSONAL DATA TRANSFERRED 5 ?
Identity, contact and financial data by the secretariat to perform the clinical patient registration,
if you start a treatment process, your health data will be sent to an authorised doctor or healthcare professional
to the patient system, for which services are received by the assistant,
Lawyers, auditors, contracted banks, third parties from whom we receive services (such as financial advisors)
Official institutions and organisations including the Ministry of Health, SSI and District Health Directorate
Your identity and contact information in order to fulfil our legal obligation,
In order to inform you by SMS in accordance with the explicit consent you have given, the Message
Management System,
Necessary for the creation of evidence in a possible court proceeding and to reach the material reality
in the event that the courts 4 7 ,
Legal obligations of the Clinic to your proxies and representatives specially authorised by you
within the scope, if necessary, limited to the request, in accordance with Article 8 of the KVKK and in accordance with the specified legal
Within the scope of reasons and purposes, it can also be transferred with your explicit consent if necessary.
In order to fulfil your requests within the scope of your requests within the scope of private health insurance
The forms will be hand-delivered to you and the Clinic will send them to the insurance companies.
no direct transfer is made.
If you give your explicit consent, your photographs before and after treatment can be used to identify you.
It may be shared on social media or on the website by using imagery that will prevent it.
E. WHAT ARE YOUR RIGHTS WITHIN THE SCOPE OF PROCESSING?
Regarding your personal data;
a. To learn whether your personal data is being processed or not,
b. Request information if your personal data has been processed,
c. To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
d. To know the third parties to whom your personal data are transferred domestically or abroad,
e. To request correction of your personal data in case of incomplete or incorrect processing,
f. To request the deletion / destruction of data within the framework of the conditions stipulated in Article 7 of the KVKK,
g. To request notification of the transactions made pursuant to (e) and (f) to third parties to whom the data are transferred,
h. By analysing your processed data exclusively through automated systems, the person's
do not object to a result that is unfavourable to him/her,
3 The data contained in the patient protocol book physically kept in these automations are processed. Complaint
or the details of the diagnosis are not included, and the examination, control and control are limited to the purpose of the visit.
etc. processing and notifications are made in this way. At the same time, systems such as Medula, e-pulse
notifications are made within the framework of legal obligation
4 With the utmost respect for your privacy and limited if relevant and connected with court proceedings
and, to the extent necessary, sharing will be made by requesting a confidentiality decision if necessary.
6
i. In case you suffer damage due to unlawful processing of your personal data
you have the right to demand that it be remedied.
You may submit your requests within the scope of your rights in writing by registered letter with return receipt requested, in person or through a notary public
or if you have an e-mail address that you have previously notified to us and registered in our system, this mail
You can contact us by using your address (bilgi@drkagancingoz.com). Same
destruction and/or correction of third parties to whom your data is or may be transferred
you can request to be informed about your request. In this context, the destruction selected by the Clinic
you can request the Clinic's interest in why the method was chosen. Your request for destruction and correction
and which method is appropriate according to the circumstances of the concrete case
will be evaluated and finalised within 30 days at the latest. Procedures and Principles of Application to the Data Controller
As stated in the Communiqué, your requests in your application are free of charge
will be answered, but if the answer to your application is given in writing, the first ten pages
1 TL for each page and if the answer is given on a recording medium such as flash memory, the recording medium
You may be charged a fee not exceeding the cost of your application. Your application is not due to an error on our part.
the fee will be refunded to you. The clinic will only ask you to contact the applicant and the data subject
requesting some verifying information in order to be matched and to share the results with the right person
will be carried out.
For all details regarding our personal data processing, storage and transfer operations, see Data Storage and Destruction
Policy and Personal Data Processing Policy and by contacting us.
As the Clinic, if there are links to other sites within the website, the Clinic's confidentiality
principles will be applied only on our digital platform on the website, other linked
We would like to remind you that we do not have any responsibility for the sites. This lighting
text on the website, Explicit Consent Text, Personal Data Processing Policy, Cookie Policy and Data Retention
and Disposal Policy.
6
CLINICAL SERVICE RECIPIENT EXPLICIT CONSENT TEXT
As the data controller of KAĞAN CİNGÖZ MUAYENEHANESI, with this form, I hereby declare that I have read and approved
Health within the scope of the ‘Clarification Text on Processing and Protection of Personal Data of Patients’
I have been informed about the transfer of my data and hereby accept the request for approval with this consent form
I declare that I have given my consent;
Medical reports, diagnostic data, blood group, hereditary history, pregnancy or breastfeeding, laboratory
results, test results, examination data, doctor's analyses and comments, appointment information, prescription information,
medical reports, permanent health problems, medications, biopsy samples, surgical history, disease
including, but not limited to, during the execution of medical diagnosis, treatment and care services
(Special Categories) Personal Data obtained from all kinds of documents obtained as a result of and/or as a result of these
My health data from the category; Regular registration of the patient, diagnosis and treatment processes
the patient system by the Clinic in order to keep and follow up the records of the patient in accordance with the truth
system and therefore transferring these data to the patient system and also to Official Institutions
and I give my explicit consent to the transfer of my visual data to 3rd parties.
My visual data was analysed by using certain images in the form of pre-treatment - post-treatment.
my photographs in such a way that they cannot be recognised on social media accounts or on the website
I give my explicit consent to be shared.
In order to notify the campaign processes and to remind the appointment and registration procedures in advance
I authorise the transfer of my communication data to the message management system to receive electronic messages within this scope and
I have explicit consent.
All necessary administrative and technical measures are taken to ensure the security of my health data, open
I can withdraw my consent at any time in a way that does not create any unfavourable situation and that I can withdraw my explicit consent
If I withdraw, other personal/special categories of personal data for which your explicit consent is not required for processing
in terms of my data listed in the provisions 5/2 and 6/3 of the Law No. 6698 on the Protection of Personal Data
I have been informed that it will be processed within the scope of exceptions.
Clarification and explicit consent texts were sent to me by the Clinic before the processing activity
I hereby declare that I have been informed, have read and understood the information and have given my consent of my own free will.