Estevia Özel Sağlık Hizmetleri Ltd. Şti. will act as the COMPANY, responsible for data processing under the Law No. 6698 on the “Processing of Personal Data” (referred to as KVKK). This information notice has been prepared within the framework of Article 10 of the KVKK titled “Obligation of the Data Controller to Inform”. During the collection of your personal data, the COMPANY transparently explains to you as the data subject the purposes for which your personal data will be processed, to whom and for what purpose your processed personal data may be transferred, the method and legal basis for collecting your personal data, and your rights listed in Article 11 of the relevant law. Your personal data collected by the COMPANY as the data controller will be collected, processed, stored, updated in case of changes, transferred to third parties in cases listed in the law, and classified under the conditions explained below, provided that it does not violate the legislation. The explanations made in the Information Notice for “Your Personal Data” also cover your “Special Categories of Personal Data”.
1. PERSONAL DATA COLLECTED FROM YOU AS THE CONCERNED PERSON
The requested personal data are not based on the condition of providing any service.
For Patients to be Examined or Treated:
I) Your Identification Information:
If you are a Turkish citizen:
1. Your name, surname, T.C. identification number, gender, date of birth, identification number
If you are not a Turkish citizen:
2. Your name, surname, nationality, temporary identification number or passport number, gender, date of birth,
II) Your Contact Information:
3. Your address in Turkey
4. Your Mobile Phone number, email address,
(THE DATA LISTED ABOVE IN ITEMS 1-2-3-4 ARE PROCESSED ACCORDING TO KVKK ARTICLE 5/1 WHEN YOU PROVIDE YOUR EXPLICIT CONSENT.)
III) Test/Analysis Results Obtained During Examination and Treatment
5. Your laboratory and imaging results, dental X-rays, test results, examination data, prescription information, past illnesses, permanent illnesses, blood group, health data obtained during the provision of medical diagnosis, treatment, and care services, recorded in your patient follow-up file created within the COMPANY to monitor the process (PROCESSED FOR THE PURPOSE OF CARRYING OUT MEDICAL DIAGNOSIS, TREATMENT, AND CARE SERVICES IN ACCORDANCE WITH KVKK 6/3f.)
6. Your financial data such as payment and billing information,
7. Your private health insurance and SGK data,
8. Your data related to your private health insurance and social security data for the purpose of financing and planning health services,
9. Your social security data within the scope of services financed by the SGK,
(THE DATA LISTED ABOVE IN ITEMS 5-6-7-8-9 ARE PROCESSED FOR THE PURPOSE OF FULFILLING LEGAL OBLIGATIONS IN ACCORDANCE WITH KVKK 5/Ç.)
10. Your comments, responses, and evaluations on websites and social media accounts established in the name of the COMPANY. (PROCESSED DUE TO BEING PUBLICLY DISCLOSED BY THE RELEVANT PERSON IN ACCORDANCE WITH KVKK 6/D.)
11. Recordings taken during your visits related to examination and treatment processes carried out within the COMPANY (A QR code is available under each camera in our hospital, which directs you to this information notice.)
12. Your personal data and location information that you shared with us in the forms and surveys you filled out on the website established in the name of the COMPANY.
For Visitors;
13. Your relationship to the patient,
14. Recordings taken during your visits to the COMPANY (A QR code is clearly visible below each camera in our hospital, which directs you to this information notice.)
For Employees and Physicians,
Data Collected During Job Applications
15. Your name, surname, gender,
16. Your undergraduate and associate degree education information,
17. Your field of expertise,
18. Your Mobil Phone number, email address,
19. Your foreign language proficiency level,
(THE DATA LISTED ABOVE IN ITEMS 11-12-13-14-15-16-17-18-19 ARE PROCESSED ACCORDING TO KVKK ARTICLE 5/1 WHEN YOU PROVIDE YOUR EXPLICIT CONSENT.)
Data Collected from Employees and Doctors
20. Your name, surname, gender, T.C. identification number, copy of your ID or passport
21. Your address
22. Your Mobil Phone number, email address,
23. Your bank account number/IBAN number where the salary will be deposited (financial data),
24. Your health report showing that you have no condition preventing you from practicing your profession,
25. Your field of expertise,
(THE DATA LISTED ABOVE IN ITEMS 20-21-22-23-24-25 ARE PROCESSED ACCORDING TO KVKK 6/Ç FOR THE PURPOSE OF FULFILLING LEGAL OBLIGATIONS.)
2. Purposes of Processing Your Personal Data
• Personal data is processed under KVKK Article 5/1 if you provide explicit consent.
• Personal data is processed under KVKK Article 5/1(ç) to fulfill legal obligations.
• Personal data is processed under KVKK Article 5/1(d) if it has been made public by the individual concerned.
• If you apply for a job with the COMPANY, your personal data will be processed during the recruitment process and afterwards to verify that your experience, knowledge, and skills meet the required criteria.
• Fulfillment of contractual and/or statutory obligations for COMPANY employees,
• Ensuring the security of COMPANY assets and/or resources,
• Execution of contracts signed between parties and ensuring the authority control of signing parties, planning commercial and/or business strategies in accordance with COMPANY procedures and/or relevant legislation, ensuring and maintaining commercial business security,
• Ensuring the accuracy and updating the data collected by the COMPANY from visitors, patients, employees, doctors, and business partners,
• Planning and execution of talent and career development activities for employees and doctors working within the COMPANY,
• Creation and follow-up of visitor and patient records by the COMPANY, and ensuring the discipline, security, and supervision of the company premises,
• Informing authorized public institutions and organizations as required by legislation in cases where public safety is necessary,
• Fulfillment of necessary tasks and transactions in favor of the parties to the extent that it is mandatory due to the provision of services or another business relationship such as employer-employee relations with contracted legal entities,
• Execution of necessary operational activities within the company,
• Ensuring human resources management,
• Taking necessary steps for making, implementing, and realizing commercial decisions,
• Planning and management of internal operations by the Company Management,
• Conducting analyses to improve health services by the Quality, Patient Experience, and Information Systems departments.
The data may be processed entirely or partially automatically or by non-automatic means provided that it is part of any data recording system.
3. To Whom and for What Purposes Your Personal Data May Be Transferred
Your personal data may be transferred within the framework of the provisions of the Basic Health Services Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Private Hospitals Regulation, the Regulation on the Processing and Protection of the Privacy of Personal Health Data, the regulations of the Ministry of Health, Articles 8 and 9 of the KVKK No. 6698, and other legislative provisions for the purposes specified in Article 2 above to:
- The Ministry of Health, its subordinate units, and family medicine centers,
- Private insurance companies,
- The Social Security Institution,
- The General Directorate of Security and other law enforcement agencies,
- The General Directorate of Population and Citizenship Affairs,
- The Turkish Pharmacists’ Association,
- Judicial authorities (courts and enforcement offices),
- Domestic laboratories, medical centers, ambulances, providers of medical devices, and healthcare institutions with which the COMPANY cooperates for medical diagnosis and treatment,
- The healthcare institution to which the patient is referred or which the patient visits themselves,
- Legal representatives to whom you have expressly given authority,
- Lawyers, tax consultants, and auditors with whom the COMPANY cooperates, and other third-party consultants,
- Regulatory and supervisory institutions and official authorities,
- Suppliers whose services the COMPANY utilizes or cooperates with,
- Cloud service providers with servers located within the country for the storage of personal data.
NO DATA IS TRANSFERRED ABROAD.
4. Methods and Legal Reasons for Collecting Your Personal Data
Your personal data is collected in accordance with Articles 5 and 6 of the KVKK, either wholly or partially automatically, or through non-automatic means as part of any data recording system, in electronic or physical environments. The legal basis for collecting and processing your personal data as detailed in
Article 1 is:
- Regulation on Private Hospitals,
- Regulation on the Processing and Protection of the Privacy of Personal Health Data,
- Basic Health Services Law No. 3359,
- Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions,
- Regulations of the Ministry of Health, Turkish Code of Obligations No. 6098,
- Execution and Bankruptcy Law No. 2004, Labor Law No. 4537,
- Social Insurance and General Health Insurance Law No. 5510,
- Turkish Commercial Code No. 6102,
- Turkish Penal Code No. 5237 and other legislative provisions.
5. Rights of the Data Subject (Relevant Person)
According to Article 11 of the KVKK “Rights of the Relevant Person” and the additional clause of Article 20 of the Turkish Constitution “Privacy of Private Life” dated 07/05/2010, as a relevant person, you have the right to apply to the COMPANY to:
- Learn whether your personal data is being processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
- Know the third parties to whom your personal data is transferred domestically or abroad,
- Request the correction of your personal data if it has been incompletely or incorrectly processed,
- Request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
- Request the notification of the transactions made pursuant to subparagraphs (d) and (e) of Article 11 of the KVKK to third parties to whom your personal data has been transferred,
- Object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
- Demand the compensation of the damage if you suffer damage due to the unlawful processing of your personal data.
6. Application to the COMPANY as a Data Subject (Relevant Person)
Applications you make to the COMPANY as a personal data owner (Relevant Person) will be answered positively or negatively with justification within 30 days by the COMPANY. Applications are generally free of charge, but the COMPANY reserves the right to charge costs if the process incurs unusually high expenses.
Ways to apply:
Personally deliver to our address: Kemerağzı Mah. Yaşar Sobutay Bulv. Tekin Plaza No:304/23 Aksu/Antalya.
Alternatively, you can send it to our KEP address at hs01.kep.tr with a secure electronic or mobile signature, to our registered email address, or via the contact form on our website at https://www.esteviaclinic.com/tr/ana-sayfa/
7. COMPANY Information (Data Controller)
Company Name: Estevia Özel Sağlık Hizmetleri Ltd. Şti.
Contact Information
Address: Kışla Mah. Güllük Cad, 202 Selekler Çarşısı No: 2, 07040 Muratpaşa/Antalya
Phone: +90 530 311 00 74
KEP Address: estevia@hs01.kep.tr
Email Address: info@esteviaclinic.com
Website: https://www.esteviaclinic.com/tr/ana-sayfa/
For detailed information, please don’t hesitate to get in contact with our COMPANY.
Name Surname: ______________________________________ Signature: ________ Date: _______________
Write “I confirm that I fully understood the text”: _____________________________________________________
What is your relationship to the minor patient? __________________________
Name Surname of the Relative: ________________________________
Signature: ________ Date: ________
Write ” I confirm that I fully understood the text “: _____________________________________________________
TRANSLATOR
Name Surname: _______________________________
Signature: ____________ Date: _____________
I have been told by the patient/relative of the patient that all the information I translated has been understood.
(A copy of the form will be provided to them).