ON THE PROTECTION OF PERSONAL DATA
CLARIFICATION TEXT
Op. Dr. Serpil Kırım In the capacity of data controller, with the principle of protecting the privacy of private life in the first place; the personal data of our customers will be recorded, classified, stored, updated and processed in accordance with the Law within the scope of the Personal Data Protection Law No. 6698 (“Law“), and will be processed within the framework of the processing conditions listed in the Law, and will be transferred to third parties in cases and to the extent permitted by the legislation.
This Clarification Text has been prepared in accordance with the relevant legislation in force and the rules set forth in the regulations, communiqués, resolutions and guidelines published by the Board, primarily the Law. In the event that the Law or other relevant legislation is amended after the date of publication of the Clarification Text and the Clarification Text becomes incompatible with such amendment, the amended provisions and rules shall be applicable. All communiqués, decisions and guidelines published by the Board are followed by me/us and the rules stipulated in the Clarification Text are kept up to date.
- DATA OWNER/INTERESTED PERSON
The data subjects within the scope of this Clarification Text are the patients and their relatives whose personal data are processed.
- IDENTITY OF THE DATA CONTROLLER AND REPRESENTATIVE
In accordance with the Law, your personal data will be collected and processed by Op. Dr. Serpil Kırım as the data controller within the scope described below. For your questions regarding the processing of your personal data, you can contact Op. Dr. Serpil Kırım Contact Person via [email protected].
- PURPOSES OF PROCESSING PERSONAL DATA, LEGAL REASONS FOR PROCESSING AND COLLECTION METHODS
Op. Dr. Serpil Kırım will be able to record, store, update, transfer to third parties, classify and process your personal data in accordance with and to the extent determined under the title of “conditions for processing personal data” in Articles 5 and 6 of the Law. Op. Dr. Serpil Kırım clearly reveals the purposes of processing personal data and processes personal data within the scope of purposes related to these activities in line with business activities.
Your Personal Data collected through the channels and methods specified in this Clarification Text are processed by Op. Dr. Serpil Kırım for the following purposes and legal reasons:
| Data Processing Activity: Execution of Patient Registration, Appointment and Call Center Line Activities | |
| Processed Personal Data | Purposes of Processing Personal Data |
| – Name-Surname
– Name-Surname of Patient’s Relative (If the procedures are carried out by the Patient’s Relative) – Telephone Number – Patient’s Relative Phone Number (If the Transactions are carried out by the Patient’s Relative) – Email Information – E-Mail Information of the Patient’s Relative (If the Transactions are carried out by the Patient’s Relative) – Fever, Hes Code and Cough Information (Due to Covid-19 Pandemic Process), – Information on the Week of Pregnancy / Pregnancy Complaint Information – Call Center Records – Requests and Complaints |
Execution of Identification and Verification Procedures, Creating Appointments, Cancellation and Change of Appointments, Informing About Appointments, Execution of Appointment Processes via Call Center, Reminders Regarding Incomplete Appointments, Planning and Management of Daily Operations, Execution of Activities in Compliance with Legislation, Follow-up of Requests and Complaints, Execution of Patient Relationship Management Processes, Execution of Communication Activities, Execution of Storage and Archive Activities, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Grounds for Processing Personal Data
|
Your personal data may be collected by Op. Dr. Serpil Kırım in line with the realization of the above-mentioned purposes, especially as specified in Article 5 of the KVKK;
– It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of the contract is committed on the basis of legal grounds. |
| Methods of Collecting Personal Data | Your personal data mentioned above are collected through the call center line, electronic forms and various communication tools on our website, various websites that provide appointment services that we have contracted with, mobile applications of websites and call center lines. |
| Data Processing Activity: Provision of Health Services | |
| Processed Personal Data | Purposes of Processing Personal Data |
| – Name-Surname
– T.C. Identity Number – Gender, Nationality, Marital Status – Place/Date of Birth – Identity Serial No./Validity Date – Mother Name, Father Name – Identity Volume No./Sequence No. – Passport Number/ Validity Period/Country of Issue – Blood Pressure, Height, Weight Information – Pregnancy History – Chronic Disease, Allergy Information – Menstruation Information – Examination, Prescription Data – Diagnosis, Diagnosis, Treatment, Investigation, Laboratory, Test Information – Social Security Institution Data – Data on Private Health Insurance – Hospital Selection Information – Denture/Piercing Information – Knowledge of Religious Needs in the Birth Procedure – Baby’s birth information, height-weight, type of surgery, suture materials, etc. |
Execution of Identification and Verification Procedures, Protection of Public Health, Preventive Medicine, Medical Diagnosis, Necessary Treatment and Care Services, Sharing Information Requested by the Ministry of Health and Other Public Institutions and Organizations in accordance with the Relevant Legislation, Providing Drug Supply, Planning and Managing Daily Operations, Evaluating the Patient, Performing Outpatient Treatment, Performing Necessary Tests and Execution of Related Processes, Conducting Laboratory, Imaging, etc. Activities within the Scope of Diagnosis and Treatment Studies Conducted on the Patient, Archiving / Storing Data on Health and Financial Services Provided, Providing Information to Authorized Persons, Institutions and Organizations. Execution of Laboratory, Imaging, etc. Activities, Archiving / Storing Data on Health and Financial Services Provided in accordance with the Legislation, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Grounds for Processing Personal Data
|
Your personal data may be collected by Op. Dr. Serpil Kırım in line with the realization of the above-mentioned purposes, especially as specified in Article 5 of the KVKK;
– Carrying out medical diagnosis, treatment and care services is committed on the basis of legal grounds. |
| Methods of Collecting Personal Data | Your personal data mentioned above are collected through the call center line, various communication tools, informed consent forms, examination forms. |
| Data Processing Activity: Execution of Patient Discharge and Finance/Accounting Transactions | |
| Processed Personal Data | Purposes of Processing Personal Data |
| – Name-Surname
– Bank Account Information – Credit Card Number – Invoice Information – Receipt Information – Signature |
Execution of Finance and Accounting Activities, Execution of Activities in Accordance with the Legislation, Planning and Management of Health Financing, Confirmation of Relationship with Contracted Institutions, Archiving / Storing Data on Health and Financial Services Provided in Accordance with the Legislation, Execution of Invoicing Processes of Services |
| Legal Grounds for Processing Personal Data
|
Your personal data may be collected by Op. Dr. Serpil Kırım in line with the realization of the above-mentioned purposes, especially as specified in Article 5 of the KVKK;
– It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of the contract – It is mandatory for the data controller to fulfill its legal obligation are processed on the basis of legal grounds. |
| Methods of Collecting Personal Data | Your personal data mentioned above are collected through ÖSS forms and releases. |
| Data Processing Activity: Execution of Website Activities | |
| Processed Personal Data | Purposes of Processing Personal Data |
| – IP
– User Traffic Information |
Execution of Website Activities, Execution of Storage and Archive Services, Execution of Information Security Processes, Creating and Tracking Visitor Records, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Grounds for Processing Personal Data
|
Your personal data may be collected by Op. Dr. Serpil Kırım in line with the realization of the above-mentioned purposes, especially as specified in Article 5 of the KVKK;
– Explicitly stipulated in the law is committed on the basis of legal grounds. |
| Methods of Collecting Personal Data | Your personal data mentioned above are collected through our website. |
| Data Processing Activity: Ensuring Physical Space Security | |
| Processed Personal Data | Purposes of Processing Personal Data |
| – Camera Recordings | Ensuring the Security of Data Controller Operations, Ensuring the Security of Physical Space, Execution of Storage and Archive Activities, Providing Information to Authorized Persons, Institutions and Organizations |
Your personal data may be collected by Op. Dr. Serpil Kırım in line with the realization of the above-mentioned purposes, especially as specified in Article 5 of the KVKK;
is committed on the basis of legal grounds. |
|
| Methods of Collecting Personal Data | Your personal data mentioned above are collected by CCTV cameras. |
| Data Processing Activities: Execution of Legal Action Activities | |
| Processed Personal Data | Purposes of Processing Personal Data |
| – Information in Correspondence with Judicial and Administrative Authorities
– Information within the Scope of Cease and Desist Notice – Contract Information – Information in Case File |
Execution of Activities in accordance with the Legislation, Execution of Goods / Service Sales Processes, Execution of Contract Processes, Providing Information to Authorized Persons, Institutions and Organizations, Follow-up and Execution of Legal Affairs |
| Legal Grounds for Processing Personal Data | Your personal data may be collected by Op. Dr. Serpil Kırım in line with the realization of the above-mentioned purposes, especially as specified in Article 5 of the KVKK;
– Explicitly stipulated in the law, – It is mandatory for the data controller to fulfill its legal obligation, are processed on the basis of legal grounds. |
| Methods of Collecting Personal Data | Your personal data mentioned above are collected through powers of attorney, contracts, printed and electronic petitions/documents. |
- TRANSFER OF PERSONAL DATA
Personal data belonging to data subjects may only be shared with our suppliers and business partners, private insurance companies, domestic laboratories, imaging centers, medical centers, ambulance, medical device and health service providers, hospitals, the health institution to which the patient is referred or to which the patient himself/herself applies, The information is shared with the second physician for the purpose of obtaining the opinion of the second physician, authorized legal representatives, third parties including lawyers and auditors from whom we receive consultancy, your employer, the relevant institution if the invoicing is made to the institution where the patient is employed, your companions with the intention of continuing the patient’s care outside the hospital, authorized public institutions and organizations, companies providing information technologies and archive services limited to the documents and purposes requested by the relevant public institutions and organizations.
- SHARING PERSONAL DATA WITH THIRD PARTIES ABROAD
Your personal data; storing information regarding your identity, contact and health data through various programs whose infrastructure is located abroad, the system infrastructures or cloud systems used for storage and archive activities are located abroad, private insurance companies, etc. The e-mail contact addresses sent to the relevant persons and the e-mail service infrastructures belonging to us are kept in data centers located abroad, the physician you request a second opinion from is located abroad, in case a second opinion is requested from a physician in the country, the health data of the patient is transmitted through telephone applications whose infrastructure is located abroad, and the information specified in the contact form on the website is automatically transmitted to e-mail data centers whose infrastructure is located abroad.
- YOUR RIGHTS UNDER THE LAW
As personal data owners, you may submit your requests regarding your rights by filling out the Data Owner Application Form (based on the Communiqué on the Procedures and Principles of Application to the Data Controller) shared at http://www.drserpilkirim.com/ or in writing with another document containing your mandatory information written in the application form or by using the registered electronic mail (KEP) address, secure electronic signature, mobile signature or the electronic mail address previously notified to Op. Dr. Serpil Kırım by the person concerned and registered in Op. Dr. Serpil Kırım’s system. Dr. Serpil Kırım’s system in a way that your identity can be confirmed by using the e-mail address previously notified to Op. Dr. Serpil Kırım by the relevant person and registered in Op. Dr. Serpil Kırım’s system, to the following address of Op. Dr. Serpil Kırım, Barbaros Hayrettin Paşa Mahallesi 1992 Sokak Vetro City No: 16 Kat: 1 Daire: 34 Esenyurt-İstanbul or to the contact address [email protected], the request will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, Op. Dr. Serpil Kırım will charge the fee in the tariff determined by the Personal Data Protection Board. In this context, personal data owners;
- Learn whether personal data is being processed,
- Request information if their personal data has been processed,
- To learn the purpose of processing personal data and whether they are used for their intended purpose,
- To know the third parties to whom personal data are transferred domestically or abroad,
- To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
- Although it has been processed in accordance with the provisions of the Law and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
- To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
- In case of damage due to unlawful processing of personal data, to demand compensation for the damage
rights.
Op. Dr. Serpil Kırım assures that in the event of any change in the applicable legislation and any incompatibility between this Clarification Text on the Protection of Personal Data and the said change, the provisions of the legislation will apply.
Data Controller : Op. Dr. Serpil Kırım
Address : Barbaros Hayrettin Paşa Mahallesi 1992 Sokak Vetro City No:16 Kat:1 Daire:34 Esenyurt-Istanbul
Telephone : 0530 567 59 56
