Baran Kul Clinic

Clarification Text

PERSONAL DATA PROTECTION LAW CLARIFICATION TEXT

By BARAN KUL (hereinafter referred to as "BARAN KUL"), your personal data can only be processed within the framework described below and in accordance with the regulations of the Ministry of Health and other legislation, as the Data Controller within the scope of the Law on Protection of Personal Data No. 6698 (the "Law") and the relevant legislation. .

1. Obtaining Personal Data

Your personal data by BARAN KUL; for the purposes of records related to your applications to our health institutions, medical diagnosis, planning and management of health services and financing; verbal, written, visual or electronic media, through the e-mails you send, the website and similar channels.

Your identity information: Your name, surname, citizenship number, passport number or temporary citizenship number, place and date of birth, marital status, gender and other identification data that can identify you,

Your Contact Information: Your address, telephone number, e-mail address and other contact data,

Your accounting information: Your financial data such as your bank account number, IBAN number, credit card information only on the slip, billing and billing information,

Your Visual Data; Before/After photos, video recordings taken for preoperative illumination and information, video taken during the surgery, photos for tracking the recovery phase

Your Data Regarding Physical Space Security; Your in-office camera records in order to ensure the physical security of the clinic,

Your Health Information: All kinds of health information and data obtained during or as a result of medical diagnosis, treatment and care services, including but not limited to patient medical reports, diagnostic data, laboratory results, test results, examination data, appointment information,

Your health data, including but not limited to external institution laboratory and imaging results, test results, examination data, that you submit for inclusion in your file

Your health data and other personal data that you send or enter to all websites belonging to BARAN KUL,

2. Processing of Personal Data, Processing Tools

All kinds of personal data obtained by BARAN KUL (including but not limited to sensitive personal data) may be processed for the following purposes:

• Confirming your identity,
• Planning and management of medical diagnosis, health services and financing,
• Planning and managing the internal functioning of the clinic and daily operations,
• Analyzing for the purpose of improving health services,
• Informing you about the appointment if you make an appointment,
• Fulfilling legal and regulatory requirements,
• Invoicing for our services,
• Sharing the requested information with the Ministry of Health and relevant public institutions and organizations in accordance with the relevant legislation,
• Taking all necessary technical and administrative measures within the scope of data security of our clinic's systems and applications,
• Analyzing your use of health services and storing your health data in order to develop and improve the health services we offer you,
• Providing the necessary information in line with the requests and inspections of regulatory and supervisory institutions and official authorities,
• Sharing the images of the person on the social media accounts of the clinic, if the data owner gives permission,
• Preserving information about your health data, which must be kept in accordance with the relevant legislation, and without being limited to these, the execution, development, planning and management of health services and financing, increasing patient satisfaction, research and similar purposes.

3. Transfer of Personal Data

Subject to the conditions in the Law on the Protection of Personal Data,

Your personal data, including BARAN KUL and the General Directorate of Security and other law enforcement agencies, Courts and all kinds of judicial authorities, central and other third parties, your authorized representatives, lawyers, tax and financial advisors, within the scope of the law and other legislation and for the purposes mentioned above. It can be shared with our business partners and other third parties with whom we cooperate to develop or carry out health services for the above-mentioned purposes, upon request or within the scope of our notification and/or reporting obligation imposed on us, including third parties, regulatory and supervisory institutions, official authorities. Your personal data is transferred abroad within the scope of situations such as whatsapp, gmail, data storage in the cloud.

4. Method of Obtaining Personal Data and Legal Reason

Depending on the nature of the service provided, your personal data is collected verbally, visually, in writing or electronically from the internet, mobile applications, physical places and similar channels, within the scope of the above-mentioned purposes.

Your personal data is collected in all kinds of verbal, written or electronic media, in accordance with the provisions of the relevant legislation, for the purposes mentioned above and for the purpose of providing health services within the determined legal framework, and in this context, BARAN KUL to fulfill its contractual and legal obligations fully and properly, and is processed.

In addition, the legal reasons for the processing of your personal data mentioned above: Law No. 1219 on the Practice of Medicine and Medical Arts, the cases clearly stipulated in the Health Services Basic Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Health Practice Communiqué , Fulfillment of our legal obligations arising from the relevant secondary legislation such as the Patient Rights Regulation and medical diagnosis”, the planning and management of health services and financing, the Regulation on the Processing of Personal Health Data and the Protection of Privacy and the regulations of the Ministry of Health and other legislation provisions. It can be stored in both digital and physical environment by being transferred to the physical archives and/or information systems of the company.

5. Your Rights Regarding the Protection of Personal Data

As a personal data owner, by applying to our Health Institution within the scope of Article 11 of the Personal Data Law, to learn whether personal data is processed in accordance with the legislation related to your processed personal data; requesting information on personal data if it has been processed; access and request personal health data; learning the purpose of processing personal data and whether they are used in accordance with its purpose; to know the third parties to whom personal data is transferred in the country or abroad; to request correction of personal data in case of incomplete or incorrect processing; request the deletion or destruction of personal data; to request notification of the third parties to whom personal data has been transferred, regarding the correction of personal data and/or the deletion or destruction of personal data in case of incomplete or incorrect processing of personal data; We inform you that you have the right to object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems, and to demand that the damage be remedied by us in case personal data is damaged due to unlawful processing.

Your right to learn whether personal data is processed or not, and your right to request information if personal data has been processed; If you exercise your right to access and request personal health data, to learn the purpose of processing personal data and whether they are used in accordance with its purpose, or to know the third parties to whom personal data is transferred in the country or abroad, the relevant information will be sent to you in a clear and understandable way, in writing or in writing. electronically, via the contact information provided by you.

6. Security Measures Taken Regarding Your Personal Data

Our Health Institution, which, as a data controller, carries out data processing activities such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of your personal data;

a) To prevent the unlawful processing of your personal data,

b) To prevent unlawful access to personal data,

c) It is responsible for taking all kinds of technical and administrative measures to ensure the protection of personal data and to ensure the appropriate level of security, and takes these measures to the maximum extent possible. In addition, additional security measures, which are determined by the Personal Data Protection Board and are not limited to the following, are also taken in the processing of sensitive personal data.

Our employees are trained on information security, patient privacy, protection of personal data, corporate policies and procedures are written on personal data security, personal data is destroyed when the purpose of use is no longer valid, our systems containing personal data are routinely audited, contracts are made with data processors, up-to-date software are used, we have a security network designed against cyber attacks, access to systems containing personal data is limited, antivirus and anti-spam programs are used, tests are carried out to identify system weaknesses, there is a corporate reporting system about problems, evidence is collected in case of abuse of systems, Personal Data Protection Agency' and a criminal complaint is made to the Prosecutor's Office. Fire, flood, etc. Protection measures have been taken against natural disasters and these environments are kept locked and entrances / exits are under control.

7. Complaint and Communication

In case you have rights or requests that you want to use within the scope of the above articles, you can send a file in "word or pdf" format addressed to BARAN KUL with a secure e-signature and send it to barankul.muhasebe@gmail.com e-mail address, or by courier with a petition bearing your wet signature. You can apply to the address “Bahçelievler Mahallesi D-100 Yanyol Sokak No 14/809 Bahçelievler/Istanbul”.