Within the scope of the healthcare services provided to you by Dr. Aslıhan Çevik, we would like to inform and enlighten you regarding your personal data that you have provided to us, pursuant to Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”). We hereby state that we exercise the utmost care with respect to the confidentiality and security of all personal data you provide to us, and that all necessary technical and administrative security measures have been taken to protect such data.
DATA CONTROLLER AND REPRESENTATIVE
In the capacity of data controller, as Dr. Aslıhan Çevik, we may, for the purposes set out below, process your personal data in accordance with the law and the principle of good faith; record, store, preserve, classify and update them; and, in cases permitted by the legislation and/or limited to the purposes for which they are processed, disclose/transfer them to third parties.
PERSONAL DATA TO BE PROCESSED
Your Identity Information (Your name and surname)
Your Contact Information (Your telephone number, e-mail address)
Your Health Information (Your examination data, diagnosis and operation information, medical history, family medical history, laboratory results, medical imaging results, test results, examination appointment information, prescription information, medication information, vaccination and medication use information, and all other special categories of personal data such as all consultations and written communications carried out in digital media during pre-examination counselling, diagnosis, treatment and follow-up processes, which you have submitted to us via the contact form or by e-mail)
Your Visual and Audio Records (Such as photographs and/or videos taken before, during and/or after medical procedures),
Website navigation information, IP address, browser information and medical documents, surveys and form information that you transmit to us with your explicit consent.
PURPOSE OF PROCESSING PERSONAL DATA
Your personal data are processed on the basis of your explicit consent and/or in accordance with the conditions and purposes for processing personal data set out in Articles 5 and 6 of KVKK and Articles 6 and 9 of the GDPR, as well as the legal regulations to which we are subject. Considering the services provided by Dr. Aslıhan Çevik, your personal data may be processed for the following purposes:
To fulfil the requirements of the procedures relating to the services we provide, and to ensure that the data subjects benefit from the services offered within the scope of service performance,
To fulfil our legal obligations set out in the Basic Law on Health Services No. 3359, the Decree Law No. 663 on the Organisation and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Health Institutions Providing Outpatient Diagnosis and Treatment, the Regulation on the Processing of Personal Health Data and Ensuring its Privacy, and other relevant regulations;
To protect public health, to provide preventive medicine, medical diagnosis, treatment and care services, and to plan and manage healthcare services and their financing,
To respond to all questions and complaints regarding the healthcare services you receive,
To measure, increase and assess patient satisfaction,
To inform you about the services you receive, complementary services and new services,
To inform you about your appointment in cases where you have made an appointment,
To fulfil information sharing, reporting and notification obligations required by public institutions and all authorities under the applicable legislation,
To fulfil obligations regarding the retention of information and documents arising from the legal regulations,
For the education and information of other patients and the public, for promotion, growth, scientific research and training purposes, based on your explicit consent,
And, without being limited to these, to process your data within the scope of the conditions and purposes of processing personal data specified in Articles 5 and 6 of Law No. 6698.
METHOD AND LEGAL BASIS OF COLLECTING PERSONAL DATA
Your personal data will be collected by us, within the scope of the above-mentioned purposes, in all verbal, written or electronic media (via the website, e-mail, or by sending direct messages to or commenting on posts on our social media accounts).
The personal data we collect by the methods set out above may be processed on the basis of your explicit consent, or, even in cases where your explicit consent is not present, if at least one of the conditions listed below is fulfilled.
Where the laws and regulations in force in the Republic of Türkiye require such processing (e.g. the Code of Obligations, Commercial Code, Labour Law, Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organisation and Duties of the Ministry of Health and its Affiliated Institutions, Regulation on Private Health Institutions Providing Outpatient Diagnosis and Treatment, Regulation on the Processing of Personal Health Data and Ensuring its Privacy, etc.)
Where it is necessary to protect your life or physical integrity, or that of another person, and you are unable to express your consent due to actual impossibility,
Where it is necessary for the performance of a contract concluded with you (for the purposes of carrying out your follow-up after medical diagnosis and treatment processes, communicating with you directly, and managing appointment processes),
Where processing your personal data is necessary for the fulfilment of our legal obligations,
Where your personal data have been made public by you,
Where processing is necessary for the establishment, exercise or protection of our legal or contractual rights,
Provided that it does not harm your fundamental rights and freedoms, where the processing of your personal data is necessary for our legitimate interests (for the purposes of ensuring patient satisfaction and managing requests and demands).
Your special categories of personal data are collected, stored and processed on the basis of the following legal grounds:
Where your explicit consent is present,
In the case of special categories of personal data other than those relating to health and sexual life, in circumstances provided for by law, without requiring explicit consent.
Your personal data relating to health and sexual life may be processed by Dr. Aslıhan Çevik without your explicit consent only for the purposes of protecting public health, providing preventive medicine, carrying out your medical diagnosis, treatment and care services, and planning and managing the financing of the healthcare services you receive.
PARTIES TO WHOM PROCESSED PERSONAL DATA MAY BE TRANSFERRED AND PURPOSE OF TRANSFER
Your personal data may be shared, within the framework of the conditions for processing personal data set out in Articles 8 and 9 of Law No. 6698 and for the purposes specified above, with the Ministry of Health and its affiliated units, the Social Security Institution, private insurance companies, your authorised representatives, attorneys, regulatory and supervisory institutions, private hospitals with which we cooperate for operations requiring surgery, and our service providers from whom we receive information technology support (such as server, hosting, software and cloud computing services).
Your personal data will be protected as a professional secret and kept confidential within the framework of the Personal Data Protection Law No. 6698 and the relevant legislation, and will not be shared with third parties/institutions/organisations except in cases of legal obligation.
Your photograph and video data may be published on social media and on the website based on your explicit consent.
RIGHTS OF THE DATA SUBJECT WHOSE PERSONAL DATA ARE PROCESSED
We hereby inform you that, as the owner of personal data, you have the following rights pursuant to Article 11 of the Law:
To learn whether your personal data are being processed,
To request information if your personal data have been processed,
To learn the purpose of processing your personal data and whether they are used in accordance with that purpose,
To know the third parties to whom your personal data are transferred, at home or abroad,
To request the rectification of your personal data if they are incomplete or inaccurate,
To request the deletion or destruction of your personal data,
To request that third parties to whom personal data have been transferred be informed of any rectification, deletion or destruction of personal data,
To object to any result arising to your detriment from the analysis of your personal data exclusively by means of automated systems,
To request compensation for any damage you may suffer due to the unlawful processing of your personal data.
Pursuant to Article 4 of the Law on the Processing of Personal Data No. 6698, the personal data that we collect and process must be accurate and, where necessary, kept up to date. Therefore, if any change occurs in your personal data, you may notify us of your current and accurate personal information by using the methods set out below.
IF YOU WISH TO CONTACT US REGARDING YOUR REQUESTS
If a written application is to be made;
You may submit a wet-signed copy of the “KVKK Application Form” available on our website www.draslihancevik.com, together with a document proving your identity, in person, or by proxy with a notarised power of attorney showing that you are authorised to apply regarding the rights listed in Article 11, or you may send it via a notary to the address Nuh Kuyusu Cad. No:265 Altunizade / İstanbul.
If an electronic application is to be made;
Pursuant to Article 5 of the “Communiqué on the Principles and Procedures for the Application to the Data Controller”, you may send your request to the e-mail address info@draslihancevik.com using your secure electronic signature, mobile signature, or the e-mail address that you have previously notified to us and which is registered in our systems.
Your requests submitted to us will be answered, depending on the nature of your request, as soon as possible and at the latest within thirty days, either in writing or in electronic form.
Annex: Application Form
