KVKK

Clarification/Information on the Processing of Personal Data

As Medisam Health, we attach great importance to the security of your personal data. With this awareness, we show great sensitivity to processing and preserving all kinds of personal data belonging to you in the best possible way and with care. With the awareness of this responsibility, we process your personal data as Data Controller within the scope of the Law No. 6698 on the Protection of Personal Data and the relevant legislation within the framework specified below.

Collection, Processing and Processing Purposes of Personal Data
In order to provide you with high standards of service, we obtain your personal data verbally, in writing, visually or electronically through the Call Center, internet, mobile applications, physical locations and similar channels depending on the nature of the service provided.

In this context, the main general and special categories of personal data, especially personal health data, which are necessary for the execution of all medical diagnosis, examination, treatment and care services and obtained for this purpose, are listed below;

• Identity data such as your name, surname, ID number, passport number or temporary  ID number if you are not a ID, place and date of birth, marital status, gender information and a photocopy of your ID Card or Driver’s License,
• Your contact data such as your address, telephone number, e-mail address,
• Your financial data such as your bank account number, IBAN number,
• Your health and sexual life data obtained during the execution of medical diagnosis, treatment and care services such as your laboratory and imaging results, test results, examination data, prescription information that you submit for follow-up in your file,
• Your responses and comments you shared in order to evaluate our services,
• Your closed circuit camera system image and sound recording taken during your visit to our hospitals,
• Your voice call records kept if you contact our Call Center,
• Your data on private health insurance for the purpose of financing and planning of health services and your Social Security Institution data,
• Browsing information, IP address, browser information obtained during the use of our website, and medical documents, surveys, form information and location data that you transmit with your consent,
• Permission to share the information you provide for job applications with our business partners if there is no vacant position.

Your personal data listed above and your sensitive personal data may be processed for the following purposes;

• Protection of public health, preventive medicine, medical diagnosis, treatment and care services,
• Sharing the information requested with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,
• Fulfillment of legal and regulatory requirements,
• Financing your healthcare services, covering your examination, diagnosis and treatment expenses by Patient Services, Financial Affairs and Marketing departments, and sharing the information requested with private insurance companies within the scope of eligibility inquiry,
• Informing you about your appointment through our Call Center and Digital Channels,
• Confirmation of your identity by our Patient Services, Health Professionals and Call Center departments,
• Planning and management of the internal functioning of the organization by the Hospital Management,
• Analysis by Quality, Patient Experience, Information Systems departments to improve health services,
• Providing training to our employees by the Human Resources and Quality departments,
• Monitoring and prevention of fraud and unauthorized transactions by Audit and Information Systems departments,
• Fulfillment of risk management and quality improvement activities by Quality, Patient Experience, Information Systems departments,
• Invoicing for our services by Patient Services, Financial Affairs, Marketing departments,
• Confirmation of your relationship with the institutions contracted with our hospital by the Patient Services, Financial Affairs and Marketing departments,
• Hospital Management, Patient Experience, Patient Rights, Call Center departments can respond to all your questions and complaints regarding our health services,
• Taking all necessary technical and administrative measures within the scope of data security of our hospital’s systems and applications by Hospital Management, Information Systems departments,
• Participation in campaigns and providing campaign information by Marketing, Media and Communications, Call Center departments, designing and communicating special content, tangible and intangible benefits on web and mobile channels,
• Measuring, increasing and researching patient satisfaction by Hospital Management, Patient Rights, Patient Experience departments,
• Fulfillment of education and training activities by educational institutions with which the institution cooperates.

Your aforementioned “Personal and Sensitive Data” may be kept in physical and electronic archives within Red Crescent Health and external service providers with great care and in compliance with the provisions of the legislation.

Transfer of Personal Data
Your personal data, within the framework of the Basic Law on Health Services No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations, the Law on the Protection of Personal Data No. 6698, the Regulation on Private Hospitals, the Regulation on the Processing of Personal Health Data and the Protection of Privacy and the regulations of the Ministry of Health and other legislation provisions and for the purposes described above;

• Ministry of Health, sub-units affiliated to the ministry and family medicine centers,
• Private insurance companies (health, pension, life insurance and similar),
• Social Security Institution,
• General Directorate of Security and other law enforcement agencies,
• General Directorate of Population,
• Pharmacists Association
• Judicial authorities
• Laboratories, medical centers, ambulances, medical devices and health service providers in abroad with which we cooperate for medical diagnosis and treatment,
• The health facility to which the patient is referred or to which the patient presents himself/herself,
• Your authorized legal representatives,
• Third parties we consult, including lawyers, tax advisors and auditors we work with,
• Regulatory and supervisory bodies and government authorities,
• With domestic or foreign systems and/or the group of companies to which our Hospital is affiliated,
• With your employer,

It may be shared with our suppliers, support service providers, archive service providers and business partners (for more detailed information, you can obtain information by applying to our company in writing.

Method and Legal Grounds for Collecting Personal Data
Your personal data are collected and processed in all kinds of verbal, written, visual or electronic media for the above-mentioned purposes and in order to carry out all kinds of works within the scope of Medisam Health field of activity within the legal framework and in this context, in order for Medisam Health to fully and properly fulfill its contractual and legal obligations. The legal reason for collecting your personal data;

• Law No. 6698 on the Protection of Personal Data,
• Basic Law No. 3359 on Health Services,
• Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations,
• Regulation on Private Hospitals,
• Regulation on Processing and Protection of Privacy of Personal Health Data,
• Ministry of Health regulations and other legislative provisions.

In addition, as stated in Article 6, paragraph 3 of the Law, personal data related to health and sexual life can only be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, without seeking the explicit consent of the person concerned.

Your Rights for the Protection of Personal Data
In accordance with the Law and relevant legislation;

• To learn whether personal data is processed or not,
• Request information if personal data has been processed,
• Access to and request for personal health data,
• To learn the purpose of processing personal data and whether they are used for their intended purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing,
• Request deletion or destruction of personal data,
• In case personal data is incomplete or incorrectly processed, to request that third parties to whom personal data is transferred be notified of the transactions regarding the correction and/or deletion or destruction of personal data,
• To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
• In case of damage due to unlawful processing of personal data, you have the right to demand compensation for the damage.

Data Security and Right to Application
Your personal data is meticulously protected within the technical and administrative possibilities and the necessary security measures are provided at a level suitable for possible risks, taking into account the technological possibilities. You can submit your requests within the scope of the Law by filling out the Personal Data Protection Law Application Form at the web address “www.medisamhealth.com”;

• He can send it through a notary public,
• You can send it to info@medisamhealth with secure electronic or mobile signature, via registered e-mail address or your electronic e-mail address registered in our system.

Explicit Consent Form on the Processing of Personal Data
Except for the processing and transfer of your personal data, which is detailed in the Clarification / Information Text on the Processing of Personal Data by Medisam Health, to the extent necessary for the performance of the contract, expressly stipulated in the law, mandatory for us to fulfill our legal obligation and for the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing; We request your explicit consent regarding the following issues;

Collection, Processing and Processing Purposes of Personal Data
I have been informed by reading the Clarification/Information text on the Processing of Personal Data that you obtain my personal data verbally, in writing, visually or electronically through the Call Center, internet, mobile applications, physical locations and similar channels, depending on the nature of the service provided, in order to provide me with high standards of service. In this context, my personal health data, which is necessary for the execution of all medical diagnosis, examination, treatment and care services and obtained for this purpose, and my personal health data obtained for this purpose, and my main general and special quality personal data obtained are listed below;

• Identity data such as my name, surname, ID number, passport number or temporary  ID number. Place and date of birth, marital status, gender information and a copy of my ID Card or Driver’s License,
• My contact data such as my address, telephone number, e-mail address,
• Financial data such as my bank account number, IBAN number,
• My health and sexual life data obtained during the execution of medical diagnosis, treatment and care services, such as my laboratory and imaging results, test results, examination data, prescription information, which I submit myself for follow-up in my file,
• The responses and comments I have shared in order to evaluate your services,
• My closed circuit camera system video and audio recording taken during my visit to your hospitals,
• Voice call recordings kept in case I contacted your Call Center,
• My data on private health insurance for the purpose of financing and planning of health services and my Social Security Institution data,
• Vehicle license plate yield if I use the parking lot and valet service,
• My browsing information, IP address, browser information obtained during the use of your website, and medical documents, surveys, form information and location data that I voluntarily transmit,
• The information I provided during my job application.

I have been informed that my personal data listed above and my sensitive personal data may be processed for the following purposes;

• Protection of public health, preventive medicine, medical diagnosis, treatment and care services,
• Sharing the information requested with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,
• Fulfillment of legal and regulatory requirements,
• Financing my health services, covering my examination, diagnosis and treatment expenses, sharing the information requested by the Patient Services, Financial Affairs and Marketing departments with private insurance companies within the scope of the eligibility inquiry,
• To be informed about my appointment through your Call Center and Digital Channels,
• Confirmation of my identity by Patient Services, your Health Professionals and Call Center departments,
• Planning and management of the internal functioning of the organization by the Hospital Management,
• Analysis by Quality, Patient Experience, Information Systems departments to improve health services,
• Providing training to your employees by the Human Resources and Quality departments,
• Monitoring and prevention of fraud and unauthorized transactions by Audit and Information Systems departments,
• Fulfillment of risk management and quality improvement activities by Quality, Patient Experience, Information Systems departments,
• Invoicing for your services by Patient Services, Financial Affairs, Marketing departments,
• Confirmation of my relationship with the institutions contracted with your hospital by the Patient Services, Financial Affairs, Marketing departments,
• To be able to respond to all my questions and complaints regarding the health services provided/to be provided to me by the Hospital Management, Patient Experience, Patient Rights, Call Center departments,
• Taking all necessary technical and administrative measures within the scope of data security of your hospital’s systems and applications by Hospital Management, Information Systems departments,
• Participation in campaigns and providing campaign information by Marketing, Media and Communications, Call Center departments, designing and communicating special content, tangible and intangible benefits on web and mobile channels,
• Measuring, increasing and researching patient satisfaction by Hospital Management, Patient Rights, Patient Experience departments,
• In order to fulfill the education and training activities by the educational institutions with which the institution cooperates.

I have been informed in detail that my aforementioned “Personal and Special Qualified Data” can be kept in physical and electronic archives within the Red Crescent Health Hospitals and Medical Centers and external service providers with great care and in compliance with the provisions of the legislation.

Transfer of Personal Data
My personal data, Basic Law No. 3359 on Health Services, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations, Law No. 6698 on the Protection of Personal Data, Regulation on Private Hospitals, Regulation on the Processing of Personal Health Data and Protection of Privacy, and the regulations of the Ministry of Health and other legislation and for the purposes described above;

• The Ministry of Health, sub-units affiliated to the ministry and family medicine centers,
• Private insurance companies (health, pension, life insurance and similar),
• With the Social Security Institution,
• The General Directorate of Security and other law enforcement agencies,
• With the General Directorate of Population,
• With the Pharmacists Association,
• With the judicial authorities,
• Laboratories, medical centers, ambulances, medical devices and health service providers in abroad with which Medisam Hospital cooperate for medical diagnosis and treatment,
• If I am referred, to the health institution to which I was referred or to another health institution to which I applied,
• With the legal representatives I have authorized,
• Third parties with whom you receive advice, including lawyers, tax advisors and auditors with whom you work,
• With regulatory and supervisory bodies and government authorities,
• Domestic or foreign systems and/or your branches within the group of companies to which your Hospital is affiliated,

If my invoicing is to be made to my employer, I will communicate with my employer for this purpose,
It may be shared with suppliers, support service providers, archive service providers and business partners (I know that I can obtain information by applying to our hospital in writing for more detailed information) whose services you benefit from or cooperate with as a company.

Method and Legal Grounds for Collecting Personal Data
I have been informed that my personal data is collected and processed in all kinds of verbal, written, visual or electronic media for the purposes stated above and in order to carry out all kinds of work within the scope of Medisam Health field of activity within the legal framework and in this context, in order for Medisam Health to fully and properly fulfill its contractual and legal obligations.

The legal reason for collecting my personal data;

• Law No. 6698 on the Protection of Personal Data,
• Basic Law No. 3359 on Health Services,
• Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations,
• Regulation on Private Hospitals,
• Regulation on Processing and Protection of Privacy of Personal Health Data,
• Ministry of Health regulations and other legislative provisions.

In addition, as stated in Article 6, paragraph 3 of the Law, I am aware that personal data relating to health and sexual life can only be processed for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, by persons under the obligation of confidentiality or authorized institutions and organizations without seeking my explicit consent.

Your Rights for the Protection of Personal Data
In accordance with the Law and relevant legislation;

• To learn whether my personal data is being processed,
• Request information if my personal data has been processed,
• Access to and request for my personal health data,
• To learn the purpose of processing my personal data and whether they are used for their intended purpose,
• To know the third parties to whom my personal data is transferred domestically or abroad,
• To request correction of my personal data in case of incomplete or incorrect processing,
• Request deletion or destruction of my personal data,
• In case my personal data is incomplete or incorrectly processed, to request that third parties to whom my personal data is transferred be notified of the transactions regarding the correction of these and/or the deletion or destruction of my personal data,
• To object to the emergence of a result to my detriment by analyzing my processed data exclusively through automated systems,
• I was informed that I have the right to demand compensation for damages in case I suffer damage due to unlawful processing of my personal data.