INFORMATION ON THE PROTECTION OF PERSONAL DATA (KVKK / GDPR)
As the Private Practice of Op. Dr. Meral Sönmezer, we attach great importance to the security of your personal data. In accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) and the “Regulation on the Processing and Privacy of Personal Health Data”, we would like to inform you about our mutual rights and obligations regarding the recording, archiving, and processing of your personal information necessary to provide you with health services.
1. Processing of Your Personal Data and Data Controller
Acting as the Data Controller, Op. Dr. Meral Sönmezer informs you that we will record and process your personal information within the scope of the conditions stipulated in the Personal Data Law. This data includes, but is not limited to:
Identity Information: Your name, surname, TR Identity number, passport number.
Contact Information: Address, phone number, email.
Financial Data: Payment and billing information.
Health Data: Patient protocol number, laboratory results, test results, examination data, check-up information, prescription details.
Insurance Data: Private health insurance or Social Security Institution (SGK) data.
2. Purpose and Legal Reason for Processing Personal Data
Your personal data is processed for the following purposes:
Confirming your identity and your relationship with contracted institutions.
Planning and managing the internal functioning of the clinic.
Informing you about your appointment if you make one.
Billing and invoicing for services rendered.
Responding to your questions or complaints regarding our services.
Supplying medicines and medical devices.
Fulfilling legal obligations regarding health documentation.
3. Transfer of Your Personal Data
Your personal data may be shared with authorized authorities and 3rd parties within the scope of Public Health and Preventive Medicine services and subject to the conditions in the Personal Data Law.
Parties with whom data may be shared include, but are not limited to:
Government Authorities: TR Ministry of Health, Provincial Health Directorates, Public Health Centers.
Digital Systems: The e-Nabız (Personal Health Record System) and similar systems established by authorities.
Financial & Insurance Partners: Social Security Institution (SGK) for patients under SGK coverage, and your Insurance Company if you use private insurance.
Service Providers: Laboratories, medical centers, auditors, consultants, and domestic/foreign organizations with whom we cooperate to carry out our activities.
4. Method of Personal Data Collection
Your personal data is collected verbally, in writing, or electronically (via website, WhatsApp, phone, or physical forms) within the scope of the purposes stated above.
5. Security Measures Taken Regarding Your Personal Data
As the Data Controller, our clinic takes all necessary technical and administrative measures to ensure the appropriate level of security to: a) Prevent unlawful processing of your personal data. b) Prevent unlawful access to personal data. c) Ensure the preservation of personal data.
In addition, extra security measures determined by the Personal Data Protection Board are taken in the processing of sensitive personal data (health data).
6. Your Rights as a Data Subject
In accordance with Article 11 of the Personal Data Law (KVKK), by applying to our clinic, you have the right to:
Learn whether your personal data is being processed.
Request information if your personal data has been processed.
Learn the purpose of processing your personal data and whether it is used in accordance with its purpose.
Know the third parties to whom personal data is transferred domestically or abroad.
Request correction of personal data if it is incomplete or incorrectly processed.
Request the deletion or destruction of personal data within the framework of the conditions stipulated in the legislation.
Request notification of the correction, deletion, or destruction processes to the third parties to whom personal data has been transferred.
Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems.
Demand compensation for damages if you suffer damage due to unlawful processing of personal data.