Professional and Safe Approach to ENT Treatment
Prof. Dr. Fuat Büyüklü Disclosure Text
Clarification Text
Clarification Text on the Personal Data Protection and Processing Policy in accordance with the Personal Data Protection Law No. 6698
Dear visitor,
Information has been among our most important assets throughout history and has been the greatest source of wealth, wisdom and most importantly technology. Information is sometimes stored on our desk, sometimes in books, sometimes on paper, and sometimes in specially designed systems. Most importantly, information is in the minds of employees. Today, collecting personal data has become inevitable in order to maintain the services provided by institutions, to provide public services effectively to the public, and to develop, distribute and market goods and services. Personal data collected for these reasons must be protected appropriately, regardless of the environment.
The purpose of the information text on the Protection and Processing of Personal Data is to ensure that all personal data belonging to all natural persons associated with our Practice, including those who benefit from our Practice’s products and services or contact our Practice to benefit from them, our employees, employee candidates and business partners, are In accordance with the laws and regulations, in accordance with Article 12 of the Personal Data Protection Law, the necessary measures have been taken to prevent unlawful disclosure of personal data, unlawful access to and transfer of personal data, or security deficiencies that may occur in any way, and in this context, as the data controller, , within the scope of fulfilling its obligation to inform in accordance with Article 10 of the Law, that it takes administrative and technical measures, carries out inspections or has them carried out, to ensure the highest level of security required for the protection of the personal data of the relevant person in accordance with the legislation published and/or to be published. is to inform the person.
- Data Controller
In accordance with the Personal Data Protection Law No. 6698, the data controller for the processing of your personal data is “Beytepe Mah. 5339. St. Ear Nose and Throat Diseases Specialist Prof. is the owner of the practice located at “No:7 Çankaya/Ankara” and registered to Doğanbey/Ankara Tax Office with tax number 1940255366. Dr. Adnan Fuat Büyüklü.
As data controller; Your personal data that is requested by visiting our workplace and/or our website, or by calling our call center, in a limited and measured manner, in connection with the purpose of processing, and/or shared with us directly and/or indirectly for the purchase of products or services. , within the framework of the purpose that requires processing; can be recorded, stored, maintained, rearranged, shared with institutions authorized to request such personal data by law, transferred to domestic or international third parties in the cases and conditions stipulated by the Law, transferred, classified, deleted upon the request of the relevant person, and the Law We declare that it may be processed in the ways listed.
- Personal Data to be Processed
Your personal data to be processed by the data controller is your data, which means “all kinds of information regarding an identified or identifiable natural person” as defined in the KVKK. Again, within the scope of the same Law, special personal data is defined as “person’s race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and attire, association, foundation or union membership, health, sexual life, criminal conviction and security.” It refers to “data related to measures and biometric and genetic data”.
Our practice may obtain, classify and record personal or special personal data in whole or in part, with the consent of patients/visitors, and retain it according to the purpose for which the personal data was obtained or for the period stipulated by the relevant legal provisions.
In this regard, your personal data categories and contents processed, including but not limited to the following, are as follows:
Identity data | Name and surname, ID number, SSI registry number, signature, marital status, identity card serial and sequence number, date of birth, place of birth, ID, driver’s license, passport photocopy |
Contact data | Telephone number, e-mail address, residence address |
Financial data | Your bank account number, IBAN number, credit card information, billing information |
Transaction security | IP, Mac ID, Access details |
Insurance Data | Your private health insurance data and Social Security Institution data for the purpose of financing and planning health services. |
Special personal data (Your health data) | Obtained during or as a result of the execution of medical diagnosis, treatment and care services, including but not limited to your laboratory results, test results, examination data, appointment information, check-up information, measurements, drawings, various molds, prescription information. All your personal data regarding your health and sexual life. |
Family and relative data | When necessary, patient relatives’ name and surname, contact information, family health information if necessary for patient history. |
It is your responsibility to inform your family members about the personal data of your family members that you will share with us and to obtain their explicit consent, if necessary.
- Purpose of Processing Personal Data
Your personal data and, in case of explicit consent, your personal data and, in case of explicit consent, your special personal data will be processed by the data controller in line with the purposes and legal reasons stated below and, if necessary, for similar purposes and reasons, within the personal data processing conditions specified in KVKK Article 5 and Article 6, and our practice. It is processed for limited purposes and conditions in accordance with the principles and periods specified in the VERBIS record.
In this context, the purpose of processing your personal data is:
o Fulfilling our legal obligations,
o Confirming your identity as a service requirement provided by our practice,
o Protection of public health, preventive medicine, medical diagnosis, execution of treatment and care services, planning and management of health services and their financing,
o Sharing the requested information with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,
o Planning and managing the internal functioning of the practice and daily operations,
o Measuring, increasing and researching patient satisfaction,
o Supply of medicines and medical devices,
o Being able to inform you about the appointment if you make an appointment,
o Conducting analysis and research for the purpose of improving health services,
o Participating in campaigns and providing campaign information by our practice,
o Designing and delivering special content, tangible and intangible benefits on web and mobile channels,
o Invoicing can be listed under the headings.
- Collection Method and Legal Reason for Personal Data
Your personal data can be collected verbally, in writing or electronically, including GSM technologies, through various methods based on Information Technologies, call center, website, social media channels, mobile applications and similar means.
In addition, for the purposes of processing personal data, based on and limited to at least one of the personal data processing conditions stipulated in Articles 5 and 6 of the Law, especially the principles specified in Article 4 of the Law, and our company’s VERBIS registration. Personal data is processed in accordance with the specified general principles and periods.
Mandatory Principles to be Followed in the Processing of Personal Data
o Processing in accordance with the Law and the Rules of Honesty
o Ensuring that Personal Data is Accurate and Up to Date when Necessary
o Processing for Specific, Clear and Legitimate Purposes
o Being Related to the Purpose for which they are Processed, Limited and Proportionate
o Preservation for the Period Envisaged in the Relevant Legislation or Necessary for the Purpose for which they are Processed
Conditions for Processing Personal Data
According to Article 5 of the Law, personal data cannot be processed without the explicit consent of the relevant person. Explicit Consent of the Personal Data Owner must be related to a specific subject and must be expressed with free will based on being informed. If one of the following conditions is met, it is possible to process personal data without the explicit consent of the relevant person.
- Clearly Provided in Laws
- Failure to Obtain Explicit Consent of the Person Relevant Due to Actual Impossibility
- Being Directly Involved in the Establishment or Performance of a Contract
- Fulfillment of the Legal Obligations of the Data Controller
- It has been made public by the relevant person himself.
- Data Processing Is Necessary for the Establishment or Protection of a Right
- Data Processing is Necessary for the Legitimate Interests of the Data Controller
Processing of Special Personal Data
In Article 6 of the Law, data regarding individuals’ race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, appearance and attire, membership of associations, foundations or unions, health, sexual life, criminal convictions and security measures. Biometric and genetic data are defined as special personal data and it is stipulated that the processing of special personal data is prohibited without the express consent of the person concerned. According to this; Special categories of personal data are processed by the data controller in accordance with the principles set out in this Information Text and by taking all necessary administrative and technical measures, including the procedures and principles to be determined by the Board, and if the following conditions are met:
- Special categories of personal data other than health and sexual life: may be processed without the explicit consent of the data owner in cases clearly stipulated by law. In all other cases and situations, the explicit consent of the data owner will be obtained in order to process such special personal data.
- Special personal data regarding health and sexual life: can only be disclosed to the person concerned or authorized institutions and organizations for the purpose of protecting public health, preventive medicine, medical diagnosis, execution of treatment and care services, planning and management of health services and their financing. It may be processed without consent.
Your personal data, other than health and sexual life, which are considered to be your special personal data, can only be transferred to the natural or legal persons listed above without your explicit consent, in cases stipulated by law. Your personal data regarding health and sexual life can only be used for the protection of public health, preventive medicine, medical diagnosis, execution of treatment and care services, planning and management of health services and financing, as well as the Personal Data Protection Law No. 6698, as well as the Health Services Fundamental Law No. 3359, 21.06.2019. In order to fulfill our legal obligations in the Regulation on Personal Health Data dated 11.01.2019 and other relevant legislation, it may be transferred to the real or legal persons listed above without your explicit consent. Electronic Medical Records and Electronic Health records are also included in this scope.
In all other cases and situations, the explicit consent of the data owner will be obtained in order to process such special personal data. In the processing of special categories of personal data, it is also essential to take adequate measures determined by the Board.
Deletion, Destruction or Anonymization of Personal Data
According to Article 7 of the Law, even though personal data has been processed in accordance with the provisions of this Law and other relevant laws, if the reasons requiring processing are eliminated, personal data is deleted, destroyed or made anonymous by the data controller ex officio or upon the request of the relevant person. In this context, our Practice retains personal data only for the period specified in the relevant legislation or for the period that is compulsory and necessary for the purpose for which they are processed. If the period expires or the reasons requiring processing disappear, personal data will be destroyed by the destruction methods (deletion and/or destruction and/or anonymization) determined in accordance with the periodic destruction periods or the application of the data subject, if any. Personal data processing activities are carried out in accordance with the general principles specified in Article 4 of Law No. 6698.
- Transfer of Personal Data
Regarding the transfer of personal data, parallel regulations are stipulated in the Law regarding the Processing of Personal Data. According to Article 8 of the Law:
Personal data cannot be transferred without the explicit consent of the relevant person. Even if there is no explicit consent of the personal data owner, if one or more of the conditions stated below are present, personal data may be transferred to third parties by our Practice, by taking necessary care and by taking all necessary security measures using the methods prescribed by the Board. Relevant activities regarding the transfer of personal data are clearly foreseen by law,
o The transfer of personal data by our Practice is directly related to and necessary for the establishment or performance of a contract,
o Transfer of personal data is mandatory for our Practice to fulfill its legal obligations,
o Transfer of personal data by our Practice in a limited way for the purpose of publicization, provided that it has been made public by the data owner,
o Transfer of personal data by our Practice is mandatory for the establishment, use or protection of the rights of our Practice or the data owner or third parties,
o It is mandatory to transfer personal data for the legitimate interests of our Practice, provided that it does not harm the fundamental rights and freedoms of the data owner,
o It is necessary for a person who is unable to express his/her consent due to actual impossibility or whose consent is not given legal validity, to protect his or someone else’s life or physical integrity.
According to Article 9 of the Law; Personal data cannot be transferred abroad without the explicit consent of the relevant person.
- Rights of Personal Data Owner
As a personal data owner within the scope of KVKK Article 11;
o Learning whether your personal data is being processed or not,
o Requesting information if your personal data has been processed,
o Learning the purpose of processing personal data and whether they are used for their intended purpose,
o Knowing the third parties to whom your personal data is transferred at home or abroad,
o Requesting correction of your personal data if it has been processed incorrectly or incompletely, and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
o Requesting the deletion or destruction of your personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, and requesting that the action taken in this context be notified to third parties to whom your personal data has been transferred,
o Object to the emergence of a result against you by analyzing your processed data exclusively through automatic systems,
o If you suffer damage due to unlawful processing of your personal data, you have the right to request compensation for the damage.
In accordance with the 1st paragraph of Article 13 of KVKK, as personal data owners, you can submit your requests regarding your rights to our Practice in writing or by other methods determined by the Personal Data Protection Board. You can access the application information text and application form, which explains the channels and procedures through which you will submit your application, on our website (www.fuatbuyuklu.com) or request it from us.
If the personal data owner submits his request regarding rights to us in accordance with the procedure, the relevant request will be finalized free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board. In cases where the application is rejected, the response is found to be insufficient, or the application is not responded to in due time; You can file a complaint with the Personal Data Protection Board within thirty days from the date you learned our answer and probably within sixty days from the date of application.
Information and clarification for our visitors/patients who are citizens of the European Union and other foreign countries can be provided with the English translation of the text or with the help of a translator upon request.
The Information Text on the Processing of Personal Data, prepared in accordance with the current Law No. 6698 and other relevant legislation as of the date of publication, is presented to your information.
Regards.
Data Controller
Ear Nose and Throat Diseases Specialist
Adnan Fuat Büyüklü, MD, Prof.
