PROTECTION OF PERSONAL DATA CLARIFICATION TEXT
CLARIFICATION TEXT ON THE COLLECTION AND PROCESSING OF PERSONAL DATA
As Istanbul Retina Institute Private Eye Health Services Limited Company, located at “Esentepe Hakkı Yeten Cad. Unimed Center No:19/7 Fulya 34394 Şişli/Istanbul,” we provide health services. As a data controller within the scope of the Personal Data Protection Law No. 6698 (KVKK), we place great importance on the privacy and security of your personal data. We hereby declare that your personal data is processed and stored in compliance with the KVKK and the relevant legislation.
1. Method of Collecting, Processing, and Purposes of Processing Personal Data
Method of Collection:
Your personal data is collected verbally, in writing, or electronically, through automatic or non- automatic methods, in accordance with the legal reasons specified in Articles 5 and 6 of the Personal Data Protection Law (KVKK), to provide you with higher standards of health services.
Processed Personal Data:
The personal data processed includes:
Identity Data:Your name, surname, Turkish Republic identification number, passport number or temporary Turkish Republic identification number, place and date of birth, marital status, gender, protocol number specific to our clinic, and signature.
Contact Data: Your address, phone number, email address, and other contact information.
Health Data:All health data obtained during the execution of medical diagnosis, examination, treatment, and care services, such as health reports and blood type.
Financial Data: Your payment and billing information, such as IBAN, invoice details, tax number, and data related to private health insurance.
Visual and Audio Data: Audio and digital information that may be acquired by us at various times.
Purposes of Processing:
Your personal data may be processed for the following purposes:
-Verification of your identity.
-Responding to your appointment requests and providing information regarding appointments.
-Execution and improvement of medical diagnosis, treatment, and care services.
-Carrying out billing processes for the health services provided.
-Fulfilling legal obligations with the Ministry of Health and other public institutions.
-Necessary sharing with relevant insurance companies and judicial authorities within the scope of
professional liability insurance.
-Providing information regarding your questions and complaints.
-Monitoring and preventing fraud and unauthorized transactions.
-Ensuring necessary technical and administrative measures for data security.
-Managing information security and physical security processes.
-Archiving in accordance with the retention obligations required by relevant legislation.
-Development of scientific and academic studies.
-Planning and management of health services financing.
2. Legal Grounds for Processing Personal Data:
Your data is processed in accordance with the principles outlined in Article 4 of the Personal Data Protection Law (KVKK) and based on the legal grounds specified in Articles 5(2) and 6(3) of the KVKK. The legal grounds for processing your personal data are as follow
For personal data:
- Explicitly stipulated by laws (KVKK Article 5/2-a).
- Inability to obtain consent due to factual impossibility (KVKK Article 5/2-b).
- Necessity for the establishment or performance of a contract (KVKK Article 5/2-c).
- Necessity for compliance with a legal obligation (KVKK Article 5/2-ç).
- Necessity for the establishment, exercise, or protection of a legal right (KVKK Article 5/2-e).
For special categories of personal data:
-Necessity for the protection of public health, preventive medicine, medical diagnosis, treatment and
care services, and for the planning, management, and financing of healthcare services, by persons or
authorized institutions and organizations that are under an obligation of confidentiality (KVKK Article
6/3-e).
-Necessity for the fulfillment of legal obligations in the areas of employment, occupational health and safety, social security, social services, and social assistance (KVKK Article 6/3-f).
3. Transfer of Personal Data
Your personal data may be shared with the following individuals and institutions in accordance with legal regulations, the purposes outlined above, and the fundamental principles stipulated in the KVKK:
-Medical Diagnosis and Treatment Collaboration: Laboratories and other healthcare providers with whom
we collaborate for medical services.
-Public Institutions: The Ministry of Health and other public institutions and organizations.
-Private Insurance Companies: Insurance companies that provide services under your private health
insurance coverage.
-Entities Providing Services for Our Operations: Business partners, suppliers, IT service providers,
and other service providers with whom we have contractual relationships.
-Other Natural or Legal Third Parties: Other third parties deemed necessary for the provision of
healthcare services.
-Judicial Authorities: Courts and judicial authorities.
-Authorized Public Institutions and Organizations: Authorized supervisory bodies and regulatory
authorities.
-Lawyers and Consultancy Services: Our authorized lawyers and third-party consultants, if necessary.
Additionally, your personal or special categories of personal data may be shared via the email address you specify or physically with the individuals you designate, only upon your request.
4. Your Rights Regarding the Protection of Personal Data
In accordance with Article 11 of the KVKK and relevant legislation, as a data subject, you have the following rights:
-To learn whether your personal data is being processed.
-To request information if your personal data has been processed.
-To learn the purpose of processing your personal data and whether they are used in accordance with
that purpose.
-To know the third parties to whom your personal data is transferred, whether domestically or abroad.
-To request the correction of your personal data if it is incomplete or inaccurately processed.
-To request the deletion or destruction of your personal data.
-To request notification of the actions taken regarding the correction, deletion, or destruction of
your personal data to third parties to whom the data has been transferred.
-To object to a result that arises against you through the analysis of your processed data
exclusively by automated systems.
-To lodge a complaint with the Authority through the KVKK Complaint Module regarding any issues
related to us.
You can submit your applications by filling out the "Personal Data Subject Application Form" available on our website at https://www.istanbulretina.com/ either in person to the address mentioned above or via electronic mail to the email addresses provided in the application form. Our company will respond to your application as soon as possible and within a maximum of thirty days. However, if the process requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.
You may extend your requests regarding protection of personal data by sending us the Application
Form.