PERSONAL DATA PROTECTION LAW CLARIFICATION TEXT
By Coolest Clinic Health Tourism Trade Limited Company (hereinafter referred to as "COOLEST CLINIC"), as Data Controller within the scope of the Law on Protection of Personal Data No. 6698 (the "Law") and relevant legislation, your personal data will only be processed within the framework described below and in accordance with the regulations of the Ministry of Health and may be processed in accordance with other legislation.
1. Obtaining Personal Data
Your personal data by COOLEST CLINIC; for the purposes of records related to your applications to our health institutions, planning and management of health tourism services and financing; verbal, written, visual or electronic media, e-mails you send, forms on the website (Medical history form), social media accounts of the institution and similar channels.
Your identity information: Your name, surname, citizenship number, passport number or temporary citizenship number, place and date of birth, marital status, gender and other identification data that can identify you,
Your Contact Information: Your address, telephone number, e-mail address and other contact data,
Your accounting information: Your financial data such as your bank account number, IBAN number, credit card information only on the slip, billing and billing information,
Your Visual Data; Before/After photos, video recordings taken for preoperative illumination and information, video taken during the surgery, photos for tracking the recovery phase
Your Data Regarding Physical Space Security; Your in-office camera records in order to ensure the physical security of the clinic,
Your Health Information: All kinds of information obtained during or as a result of medical diagnosis, treatment and care services, including but not limited to patient medical reports, patient medical history data, diagnostic data, your laboratory results, test results, examination data, appointment information. your health information and data,
Your health data, including but not limited to external institution laboratory and imaging results, test results, examination data, that you submit for inclusion in your file
Your health data and other personal data that you send or enter to all websites of COOLEST CLINIC,
2. Processing of Personal Data, Processing Tools
Any personal data obtained by COOLEST CLINIC (including but not limited to sensitive personal data) may be processed for the following purposes:
• Confirming your identity,
• Planning and management of health tourism services and financing,
• Planning and managing the internal functioning of the clinic and daily operations,
• Analyzing to improve health tourism services,
• Informing you about the appointment if you make an appointment,
• Fulfilling legal and regulatory requirements,
• Invoicing for our services,
• Taking all necessary technical and administrative measures within the scope of data security of our clinic's systems and applications,
• Analyzing your use of health services and storing your health data in order to develop and improve the health tourism services we offer you,
• Providing the necessary information in line with the requests and inspections of regulatory and supervisory institutions and official authorities,
• Sharing the images of the person on the social media accounts of the clinic, if the data owner gives permission,
• Preserving the information about your data that must be kept as per the relevant legislation and planning and management of health tourism services and financing, without being limited to these, increasing patient satisfaction,
3. Transfer of Personal Data
Subject to the conditions in the Law on the Protection of Personal Data,
Your personal data, including COOLEST CLINIC and the General Directorate of Security and other law enforcement agencies, Courts and all kinds of judicial authorities, central and other third parties, your authorized representatives, lawyers, tax and financial advisors, within the scope of law and other legislation and for the purposes mentioned above. It can be shared with our business partners and other third parties with whom we cooperate to develop or carry out health services for the above-mentioned purposes, upon request or within the scope of our notification and/or reporting obligation imposed on us, including third parties, regulatory and supervisory institutions, official authorities. Your personal data is transferred abroad within the scope of situations such as whatsapp, gmail, data storage in the cloud.
4. Method of Obtaining Personal Data and Legal Reason
Depending on the nature of the service provided, your personal data is collected verbally, visually, in writing or electronically from the internet, mobile applications, physical places and similar channels, within the scope of the above-mentioned purposes.
Your personal data is collected in all kinds of verbal, written or electronic media, in accordance with the provisions of the relevant legislation, for the purposes mentioned above and for the purpose of providing the health services within the determined legal framework and in this context, to fulfill the contractual and legal obligations of COOLEST CLINIC fully and properly, and is processed.
In addition, the legal reasons for the processing of your personal data mentioned above: Law No. 1219 on the Practice of Medicine and Medical Arts, the cases clearly stipulated in the Health Services Basic Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Health Practice Communiqué Fulfillment of our legal obligations arising from related secondary legislation such as Turkish Commercial Code, Tax Procedure Law, Regulation on International Health Tourism and Tourist Health, SGK Law, Labor Law, Patient Rights Regulation and medical diagnosis”, planning and management of health services and financing, It can be processed within the framework of the Regulation on the Processing and Privacy Protection of Personal Health Data and the regulations of the Ministry of Health and other legislation, transferred to the physical archives and/or information systems of COOLEST CLINIC and kept in both digital and physical environment. will be able to.
5. Your Rights Regarding the Protection of Personal Data
As a personal data owner, by applying to our Health Institution within the scope of Article 11 of the Personal Data Law, to learn whether personal data is processed in accordance with the legislation related to your processed personal data; requesting information on personal data if it has been processed; access and request personal health data; learning the purpose of processing personal data and whether they are used in accordance with its purpose; to know the third parties to whom personal data is transferred in the country or abroad; to request correction of personal data in case of incomplete or incorrect processing; request the deletion or destruction of personal data; to request notification of the third parties to whom personal data has been transferred, regarding the correction of personal data and/or the deletion or destruction of personal data in case of incomplete or incorrect processing of personal data; We inform you that you have the right to object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems, and to demand that the damage be remedied by us in case personal data is damaged due to unlawful processing.
Your right to learn whether personal data is processed or not, and your right to request information if personal data has been processed; If you exercise your right to access and request personal health data, to learn the purpose of processing personal data and whether they are used in accordance with its purpose, or to know the third parties to whom personal data is transferred in the country or abroad, the relevant information will be sent to you in a clear and understandable way, in writing or in writing. electronically, via the contact information provided by you.
6. Security Measures Taken Regarding Your Personal Data
Our Health Institution, which, as a data controller, carries out data processing activities such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of your personal data;
a) To prevent the unlawful processing of your personal data,
b) To prevent unlawful access to personal data,
c) It is responsible for taking all kinds of technical and administrative measures to ensure the protection of personal data and to ensure the appropriate level of security, and takes these measures to the maximum extent possible. In addition, additional security measures, which are determined by the Personal Data Protection Board and are not limited to the following, are also taken in the processing of sensitive personal data.
Our employees are trained on information security, patient privacy, protection of personal data, corporate policies and procedures are written on personal data security, personal data is destroyed when the purpose of use is no longer valid, our systems containing personal data are routinely audited, contracts are made with data processors, up-to-date software are used, we have a security network designed against cyber attacks, access to systems containing personal data is limited, antivirus and anti-spam programs are used, tests are carried out to identify system weaknesses, there is a corporate reporting system about problems, evidence is collected in case of abuse of systems, Personal Data Protection Agency' and a criminal complaint is made to the Prosecutor's Office. Fire, flood, etc. Protection measures have been taken against natural disasters and these environments are kept locked and entrances / exits are under control.
7. Complaint and Communication
In case you have any rights or requests that you want to use within the scope of the above articles, you can send a file in "word or pdf" format addressed to COOLEST CLINIC with a secure e-signature to the e-mail address firstname.lastname@example.org, or by courier a letter bearing your wet signature. You can apply with a petition to the address “Bahçelievler Mahallesi D-100 Yanyol Sokak No 14/703 Bahçelievler/Istanbul”.