PRIVACY POLICY
KVKK – WEBSITE GENERAL INFORMATION TEXT ON THE PROTECTION OF PERSONAL DATA
Data Controller: EZAY AĞIZ VE DENTAL HEALTH HİZMETLERİ TİCARET LİMİTED ŞİRKETİ
Address: Kozyatağı Mahallesi Şemsettin Günaltay Caddesi No: 54 D:1 34742 Kadiköy / Istanbul
The personal and sensitive personal data you share is processed in a limited and proportionate manner in accordance with the Personal Data Protection Law (KVKK) and in connection with the service and activity purposes we fulfill within the scope of medical legislation. Please also read the Patient Information TEXT prepared for our patients.
Procedure and Legal Basis for Collecting Your Personal Data
Your personal data may be collected verbally, in writing, via WhatsApp, or electronically. When you fill out the form in the contact us section on our website, we will be collecting data related to the purpose. Your personal data, including examination information, health data, treatment records, various written and verbal agreements, petitions, interviews, business cards, and all documents obtained during litigation or enforcement proceedings, are processed depending on the specific situation requiring the healthcare services provided. We do not process any data through the website, and internet access logs (IP address, timestamp, and traffic information) may be kept by the domain provider IT company under Law No. 5651. Cookies are not used on our website. This implementation is intended to provide information about the website address, contact information, and service areas.
This data may be obtained through automated methods such as text messages, WhatsApp-like correspondence, email, the internet, disks, CDs, DVDs, memory cards, telephones, and similar electronic or internet-based tools, as well as non-automated methods such as forms, contracts, notifications, and judicial or administrative decisions.
We have signed a cooperation protocol with the private hospitals, laboratories, medical consumable suppliers, and patient record database service providers with whom we collaborate, and they have undertaken confidentiality commitments under the Personal Data Protection Law. Unsolicited resume submissions for job applications will not be processed. If you wish to create a CV database, explicit consent will be required.
Legal reasons for processing your personal data:
- a) Processing your data, such as identity and address information, is required by law for taxation purposes.
- b) It is necessary for our practice to fulfill its legal obligations under health legislation to keep, store, and share information with authorized authorities.
- c) It is necessary for the performance of the contract.
- d) It is necessary for the protection, exercise, and establishment of our rights and receivables.
- e) Explicit consent, where necessary.
Purpose of Processing Your Personal Data
Your personal data will be processed in accordance with the principles set forth in Article 4/2 of the Personal Data Protection Law and within the scope of activities envisaged within the framework of health-related legislation; to ensure your benefit from the services provided; and to comply with the obligations imposed by the legislation, such as keeping files, storing information, reporting, taxation, and other obligations.
Your personal data is stored for periods specified in legislation, or in the absence of regulations, for a period commensurate with the purpose, in accordance with legitimate interests and explicit consent practices. Afterward, digital data is irreversibly deleted, while paper data is shredded and destroyed. Any request for deletion by the data subject will be fulfilled immediately, provided it does not violate legislation.
Retention periods are detailed in our personal data retention and destruction policy. Generally, the retention period is 10 years for contracts, 10 years for labor law, 10 years for tax records, and 30 years for health records from the end of service.
Transfer of Your Personal Data
In principle, your personal data is not transferred abroad. However, it should be noted that your data may be inadvertently transferred abroad during the use of patient registration systems and appointment databases, email services such as Gmail, and services provided abroad, such as WhatsApp. Data of foreign citizens/residents who contact us from abroad may need to be shared with their own address or with addresses abroad for international insurance transactions and health tourism.
Your Personal Data may be transferred to domestic institutions and organizations, as well as regulatory and supervisory bodies, Social Security Institution (SGK), Provincial Health Directorates, courts, prosecutors’ offices, administrative authorities, and other official bodies and authorities in accordance with the above-mentioned purposes, the KVKK, and other legislation.
Relevant Person Whose Personal Data is ProcessedYour Rights
In accordance with Article 11 of the Personal Data Protection Law and other applicable legislation;
- To learn whether your personal data is being processed,
- To request information if your personal data has been processed,
- To learn the purpose of processing your personal data and whether it is being used in accordance with its intended purpose,
- To know the third parties to whom your personal data has been transferred, whether domestically or internationally,
- To request correction of your personal data if it is incomplete or inaccurate,
- To request the deletion or destruction of your personal data within the framework of the conditions stipulated in the Personal Data Protection Law,
- To request the correction of incomplete or inaccurate data and the deletion or destruction of your personal data, and to request notification of this to third parties to whom your personal data has been transferred,
- To object to the analysis of processed data exclusively through automated systems, leading to a detrimental outcome,
- To request compensation for any damages you incur due to the unlawful processing of your personal data. You have.
Procedures and Principles to Follow When Submitting Your Requests
As the data subject, you can submit your rights as outlined above, along with a written explanation of the right you wish to exercise, or by other means determined by the Personal Data Protection Board. You can send your request in a clearly and understandable manner, including a signed application, by mail to “Kozyatağı Mahallesi Şemsettin Günaltay Caddesi No:54 D:1 34742 Kadiköy / Istanbul.”
Should the matters constituting the basis of your application relate to you personally, your identity and address information must be included in your application. Identity verification will be limited to the information we hold. If you are applying on behalf of someone else, you must apply with a special power of attorney. Although there is no specific format for the application, you can use the application form on our website. Writing your request clearly will ensure a clear response.