We request your explicit consent regarding the matters set out below, except in cases where your personal data — detailed in the Clarification/Information Text on the Processing of Personal Data by Prof. Dr. Mutlu Demiray (the “Data Controller”) — are processed and transferred to the extent necessary for the performance of a contract, where expressly stipulated by law, where mandatory for us to fulfil our legal obligations, and for the purposes of protecting public health, preventive medicine, carrying out medical diagnosis, treatment and care services, and the planning and management of healthcare services and their financing:
Collection and Processing of Personal Data and Processing Purposes
I have been informed, by reading the Clarification Text on the Processing of Personal Data, that my personal data are obtained — depending on the nature of the service provided — verbally, in writing, visually or electronically through channels such as the Call Center, the internet, mobile applications, physical premises and similar channels, in order to provide me with services at high standards.
In this context, my principal general and special categories of personal data obtained — first and foremost the personal health data required for, and obtained in the course of, carrying out all medical diagnosis, examination, treatment and care services — are listed below:
- Identity data such as my name, surname, Turkish ID number, or — if I am not a Turkish citizen — my passport number or temporary Turkish ID number, place and date of birth, marital status and gender; and the copy of the Passport, Turkish ID Card or Driver's License I submit,
- Contact data such as my address, telephone number and e-mail address,
- Financial data such as my bank account number and IBAN,
- Health data and data concerning my sexual life obtained during the provision of medical diagnosis, treatment and care services, such as the laboratory and imaging results, test results, examination data and prescription information that I myself provide to be followed in my file,
- Responses and comments I share in order to evaluate your services,
- My closed-circuit camera system image and audio recordings taken during my visit to your clinic,
- Voice call recordings kept if I contact your Call Center,
- My private health insurance data and Social Security Institution data, for the purpose of financing and planning healthcare services,
- My vehicle license plate data, if I make use of the parking and valet service,
- My browsing information, IP address and browser information obtained during the use of your website, and the medical documents, surveys, form information and location that I transmit of my own consent
I have been informed that my personal data and special categories of personal data listed above may be processed for the following purposes:
- Protection of public health, preventive medicine, medical diagnosis, treatment and care services,
- Sharing of requested information with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,
- Fulfillment of legal and regulatory requirements,
- By the Patient Services, Financial Affairs and Marketing departments: financing of my healthcare services, covering of examination, diagnosis and treatment expenses, and sharing of requested information with private insurance companies within the scope of eligibility inquiries,
- Being informed about my appointment via your Call Center and Digital Channels,
- Verification of my identity by the Patient Services, your Healthcare Professionals and Call Center departments,
- Analysis carried out to improve healthcare services by the Quality, Patient Experience and Information Systems departments,
- Provision of training to your employees by the Human Resources and Quality departments,
- Monitoring and prevention of abuse and unauthorized transactions by the Audit and Information Systems departments,
- Carrying out of risk management and quality improvement activities by the Quality, Patient Experience and Information Systems departments,
- Invoicing in return for your services by the Patient Services, Financial Affairs and Marketing departments,
- Verification of my relationship with institutions contracted with your clinic by the Patient Services, Financial Affairs and Marketing departments,
- Responding to any questions and complaints regarding the healthcare services provided/to be provided to me, by the Clinic Management, Patient Experience, Patient Rights and Call Center departments,
- Taking all necessary technical and administrative measures within the scope of data security of your clinic's systems and applications, by the Clinic Management and Information Systems departments,
- Participation in campaigns and provision of campaign information by the Marketing, Media and Communications, and Call Center departments; design and delivery of special content and tangible and intangible benefits on web and mobile channels,
- Measuring, increasing and researching patient satisfaction by the Clinic Management, Patient Rights and Patient Experience departments,
- For the purpose of carrying out education and training activities by the educational institutions with which the institution cooperates.
I have been informed in detail that my “Personal and Special Categories of Data” mentioned above may be stored in physical and electronic archives within the Data Controller and external service providers with great care and in compliance with the provisions of the legislation.
Transfer of Personal Data
Within the framework of Health Services Fundamental Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, the Personal Data Protection Law No. 6698, the Private Hospitals Regulation, the Regulation on the Processing of Personal Health Data and the Protection of Privacy, the Ministry of Health regulations and other legislative provisions, and for the purposes explained above, my personal data may be shared with:
- The Ministry of Health, its sub-units and family medicine centers,
- Private insurance companies (health, pension, life insurance and the like),
- The Social Security Institution,
- The General Directorate of Security and other law enforcement agencies,
- The General Directorate of Civil Registration (Population),
- The Turkish Pharmacists' Association,
- Judicial authorities,
- Laboratories, medical centers, ambulances, medical device and healthcare providers located in Turkey or abroad with which you, as the Data Controller, cooperate for medical diagnosis and treatment,
- Another healthcare institution to which I am referred, or to which I apply myself, in case of referral,
- The legal representatives I have authorized,
- Third parties from whom you receive consultancy, including the lawyers, tax advisors and auditors you work with,
- Regulatory and supervisory authorities and official bodies,
- My employer, for this purpose, if my invoicing is to be made to the employer,
- Suppliers, support service providers, archiving service providers and business partners whose services your company benefits from or with whom you cooperate (I know that I may obtain more detailed information by applying to our clinic in writing).
Method and Legal Basis for Collecting Personal Data
I have been informed that my personal data are collected and processed in any verbal, written, visual or electronic medium, for the purposes set out above and in order to lawfully carry out all kinds of business within the Data Controller's field of activity, and in this context for the Data Controller to fully and duly fulfil its contractual and legal obligations.
The legal basis for the collection of this personal data is:
- Personal Data Protection Law No. 6698,
- Health Services Fundamental Law No. 3359,
- Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates,
- The Private Hospitals Regulation,
- The Regulation on the Processing of Personal Health Data and the Protection of Privacy,
- The Ministry of Health regulations and other legislative provisions.
Furthermore, as stated in Article 6(3) of the Law, I am aware that personal data relating to health and sexual life may be processed without seeking my explicit consent — only for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and the planning and management of healthcare services and their financing — by persons under an obligation of confidentiality or by authorized institutions and organizations.
Your Rights Regarding the Protection of Personal Data
Pursuant to the Law and the relevant legislation, I have been informed that I have the right to:
- Learn whether my personal data are processed,
- Request information if my personal data have been processed,
- Access and request my personal health data,
- Learn the purpose of processing my personal data and whether they are used in accordance with that purpose,
- Know the third parties to whom my personal data are transferred at home or abroad,
- Request the correction of my personal data if they have been processed incompletely or incorrectly,
- Request the deletion or destruction of my personal data,
- Request that the correction of my personal data and/or their deletion or destruction be notified to the third parties to whom my personal data have been transferred,
- Object to a result against me arising from the analysis of my processed data exclusively by automated systems,
- Demand compensation for damages in the event that I suffer damage due to the unlawful processing of my personal data.
I may submit my requests under the Law by filling out the “Data Subject Application Form” available at the “mutludemiray.com” website;
- I may deliver it in person to the address Bahçelievler mah. Eski Londra asfaltı cad. NEF Bahçelievler sitesi. C1 blok D3 Bahçelievler İstanbul,
- I may transmit it to drdemmiray@gmail.com with a secure electronic or mobile signature, via a registered electronic mail (KEP) address or via my e-mail address registered in your system.
That I have read and understood the Clarification/Information Text on the Processing of Personal Data prepared by the (“Data Controller”);
That I have been informed about the processing purposes of my personal data detailed in the Clarification Text on the Processing of Personal Data, the institutions, organizations, companies and healthcare professionals to which they are transferred, the collection methods and legal bases, my rights regarding the protection of my personal data, data security and my right to apply;
The storage, processing and transfer of my Personal and Special Categories of Data — except where they are processed and transferred to the extent necessary for the performance of a contract, where expressly stipulated by law, where mandatory for the Data Controller to fulfil its legal obligation, and for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and the planning and management of healthcare services and their financing — in accordance with the matters set out in the Clarification/Information Text on the Processing of Personal Data,
I ACCEPT, WITH MY EXPLICIT CONSENT.