PROTECTION OF PERSONAL DATA

DISCLOSURE TEXT ON THE PROTECTION OF PERSONAL DATA

Data Controller: Or. Jin Özel Sağlık Hizm. Medikal San. Tic. Ltd. Şti.

This disclosure text has been prepared by Or. Jin Özel Sağlık Hizm. Medikal San. Tic. Ltd. Şti. in its capacity as data controller within the scope of the Personal Data Protection Law No. 6698 (KVKK) and relevant legislation, pursuant to Article 10 of the KVKK titled "Disclosure Obligation of the Data Controller," to inform you about the identity of the data controller, the method and legal basis for collecting your personal data, the purposes for which this data will be processed, to whom and for what purposes it may be transferred, the data processing period, and your rights listed in Article 11 of the KVKK.

Purposes of Processing Your Personal Data

As the data controller, Or. Jin Özel Sağlık Hizm. Medikal San. Tic. Ltd. Şti. processes your personal data for the following purposes: protection of public health, conducting medical diagnosis, treatment and care services, providing preventive medicine, conducting healthcare services, sharing requested information with the Ministry of Health and other public institutions and organizations in accordance with relevant legislation, providing you with information regarding your appointment when you make an appointment, planning and managing the hospital's internal operations, conducting analyses to improve healthcare services, ensuring financing of healthcare services, billing, verifying your relationship with contracted institutions, responding to your questions or complaints regarding our services, procurement of medicines and medical devices, conducting advertising-campaign-promotion processes, and as necessary for the data controller to fulfill its legal obligations. This data is obtained verbally, visually, in writing, or electronically through call centers, switchboards, internet, mobile applications, physical spaces, and similar channels depending on the nature of the service provided.

In this context, for the purposes listed above, your personal health data in particular, as well as your name, surname, TC identity number, your parents' names, profession, passport number or temporary TC identity number if you are not a Turkish citizen, place and date of birth, marital status, gender information, skin/family/serial number information, liable identity number, telephone number of your relative to be called in emergencies, information about your spouse's name-surname/profession/blood type/telephone number/email address/address, marriage date, vehicle license plate, personal data of your companion, personal data related to your referral information and photocopies of your TC Identity Card or driver's license that you present, your address, telephone number, contact data related to your email address, your financial data related to payment and billing (IBAN, account number), your laboratory and imaging results, test results, examination and consultation data, operation data, palm, examination, diagnosis, medical report information, accepted clinic, institutional information, type of treatment, vaccination tracking information, provision date, follow-up/treatment type, follow-up to be connected, co-payment exemption information, additional fee exemption status, association/foundation/union membership, judicial event record, harmful habits information, material/drug information you have used, monitoring/result/complaint information, prescription information, and other health and sexual life data obtained during the conduct of medical diagnosis, treatment and care services, your responses and comments that you share to evaluate our services, closed-circuit camera system image recordings taken through security cameras at entrance doors, building exterior, building interior, emergency service, dining hall, cafeteria, waiting room, parking lot, security booth and floor corridors during your hospital visit and for the purpose of ensuring building security, closed-circuit system sound recordings taken through security cameras at the emergency service counter, patient admission/discharge units, patient admission counters, intensive care unit and for the purpose of ensuring building security, your data related to private health insurance for the purpose of financing and planning healthcare services, and your Social Security Institution data may be processed in accordance with the provisions of Articles 5 and 6 of the KVKK.

Transfer of Personal Data

Your personal data may be shared within the framework of the Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliated Organizations, Personal Data Protection Law No. 6698, Private Hospitals Regulation, Regulation on Processing Personal Health Data and Protection of Privacy, Ministry of Health regulations and other legislative provisions and for the purposes explained above with: Ministry of Health, sub-units affiliated with the ministry and family medicine centers, Social Security Institution, judicial authorities, law enforcement, regulatory and supervisory institutions and official authorities, private insurance companies (health, pension, life insurance and similar), your institution in case your billing will be made to the institution where you work, lawyers, consultants, auditors we work with, including legal representatives and third parties from whom we receive consultancy and whom we authorize, laboratories located domestically with which we cooperate for medical diagnosis and treatment, ambulance, medical device and healthcare service providing institutions, relevant healthcare institution when you need to be referred, representatives you have authorized.

Method and Legal Basis for Personal Data Collection

Your personal data is obtained in accordance with Personal Data Protection Law No. 6698, Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliated Organizations, Private Hospitals Regulation, Regulation on Processing Personal Health Data and Protection of Privacy, Ministry of Health regulations and other legislative provisions, depending on the nature of the service provided, verbally, visually, in writing or electronically through call centers, switchboards, internet, physical spaces and similar channels. Furthermore, according to paragraph 3 of Article 6 of Personal Data Protection Law No. 6698, personal data related to health and sexual life can only be processed for the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of healthcare services financing by persons or authorized institutions and organizations under confidentiality obligation without seeking the explicit consent of the data subject.

Data Security

According to Article 12 of Law No. 6698, the data controller is obliged to take all necessary technical and administrative measures to ensure an appropriate level of security to prevent unlawful processing of personal data, prevent unlawful access to personal data, and ensure the preservation of personal data. Your personal data is protected by technical and administrative measures, and necessary security measures are provided at a level appropriate to possible risks by utilizing technological possibilities. Your personal data is processed only for the period required for processing, and after the expiration of the periods, it is deleted, destroyed or anonymized.

Your Rights as Personal Data Subject According to Law

Within the framework of the provisions in Article 11 of Personal Data Protection Law No. 6698, you have the following rights: to learn whether your personal data is processed, to request information about this if your personal data has been processed, to learn the purpose of processing your personal data and whether they are used in accordance with their purpose, to know third parties to whom your personal data has been transferred domestically or abroad, to request correction if your personal data has been processed incompletely or incorrectly, to request deletion or destruction of your personal data in accordance with the conditions stipulated in Personal Data Protection Law No. 6698, to request that the correction of your personal data processed incompletely or incorrectly or the deletion or destruction of your personal data be notified to third parties to whom your personal data has been transferred, to object to the results that emerge to your detriment through analysis of your processed data exclusively through automatic systems in cases where you believe that an adverse result has emerged as a result of automatic processing, to request compensation for damages in case you suffer damage due to unlawful processing of your personal data.

You may submit your requests for exercising the above-mentioned rights in writing to Or. Jin Özel Sağlık Hizm. Medikal San. Tic. Ltd. Şti. at the address Karşıyaka Mah. 906.sk No:5 Altınordu/ORDU according to the Communiqué on Procedures and Principles for Application to Data Controller.