Personal Data Protection Law

EKİP SAĞLIK HİZMETLERİ TİCARET ANONİM ŞİRKETİ PERSONAL DATA PROTECTION LAW NO. 6698 INFORMATION TEXT ON THE PROTECTION OF PERSONAL DATA

• Data Controller

In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), your personal data may be processed by Duygu Hospital, as the data controller, within the scope explained below.

• Your Collected Personal Data
• Your credentials
• Your passport information
• Your driver’s license information
• Your address information
• Your contact information
• Your visual data
• Your patient protocol number assigned to you by Duygu Hospital
• Your financial information such as payment invoicing
• Your insurance and social security institution information
• If you communicate via communication channels, your voice recording
• Your hospital camera recording information
• Your health information such as analysis results, imaging, examination data, prescription information within the scope of medical diagnosis and treatment
• Your data regarding sexual life within the scope of medical diagnosis and treatment
• Your complaints, comments and opinions
• Your biometric data information
• If you use our valet service, your vehicle license plate information
• Navigation information and IP information obtained through our website and mobile application

Method and Legal Reason for Data Collection

Duygu Hospital patient data can be processed verbally, automatically or non-automatically, through the channels listed below, in accordance with the KVKK, the General Law on Health Services, the Decree Law on the Organization and Duties of the Ministry of Health and its Subsidiaries, the Private Hospitals Regulation, the Ministry of Health regulations and other legislative provisions. It collects data in written, electronic form or in accordance with the law upon your sharing with us with your own consent, and processes it within the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK. Your personal data is obtained completely or partially by automatic means or by non-automatic methods provided that it is part of the data recording system.

Your identity, contact, address, invoice/cheque/bill information is processed in accordance with the conditions specified in Article 5 of the KVKK in order to ensure that our service delivery processes are carried out in accordance with the legislation and that the data controller can fulfill its legal obligations during the establishment of the contract.

Your visual and audio personal data are collected through cameras placed in the hospital in accordance with the law, in order to fulfill our legal obligation to ensure the security of the hospital.

If your health data is for the purpose of carrying out medical diagnosis, treatment and care services, planning and management of health services by persons who are under the obligation of confidentiality within the scope of Article 6/3 of the Law, the establishment of a contract within the scope of Article 5/2(c) of the Law. Personal data of the parties to the contract are processed based on the legal reason that processing is necessary, provided that it is directly related to the performance of the contract.

Your health data is processed by persons who are under the obligation of confidentiality within the scope of Article 6/3 of the Law, for the purpose of carrying out medical diagnosis, treatment and care services, and planning and management of health services.

Your health data is used for the purpose of carrying out medical diagnosis, treatment and care services, planning and management of health services by persons who are under the obligation of confidentiality within the scope of Article 6/3 of the Law, and your personal data is processed for the purposes of the Institution’s obligation within the scope of Article 5/2(ç) of the Law. It is processed based on legal reasons.

• Purposes of Processing Personal Data

Your collected personal data may be processed for the following purposes (“Purposes”) and within the personal data processing conditions specified in Articles 5 and 6 of the Law, within the scope of the purposes of carrying out the necessary work by our business units and carrying out the relevant business processes in order to benefit you from the products and services offered by our Institution. :

• Protection of public health, preventive medicine, medical diagnosis, treatment and care services,
• Evaluation of the patient,
• Carrying out inpatient or outpatient treatment of the patient,
• Carrying out patient care
• Carrying out surgical activities,
• Conducting the necessary tests and examinations and carrying out the relevant processes,
• Providing appointment reminders, changes and other information regarding service delivery,
• Supply of medicines and related materials,
• Carrying out drug preparation processes and checking whether drugs are administered appropriately,
• Laboratory, imaging, etc. within the scope of diagnosis and treatment studies carried out on the patient. carrying out its activities,
• Execution of accounting and finance processes,
• Archiving/storing data regarding the health and financial services provided in accordance with the legislation,
• Receiving and evaluating requests and complaints,
• If you have your explicit consent, sending you advertising messages regarding our marketing processes, informing you about campaigns, measuring and increasing patient satisfaction,
• Planning and execution of patient relationship management processes,
• Follow-up and execution of legal affairs,
• Fulfilling official institution requests,
• Execution of information security processes,
• Fulfillment of mutual obligations arising from the service contract,
• Planning and management of internal operations by the hospital management,
• Ensuring venue security,
• Fulfillment of obligations stipulated in the legislation
• Sharing of Personal Data with Third Parties and Purpose of Sharing

By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with the KVKK and relevant health legislation, you will be able to process your personal data for the purposes stated above, in accordance with the rules regarding the transfer of personal data specified in Articles 8 and 9 of the Law, Health Services No. 3359. Institutions or organizations permitted by the Basic Law, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations, the Private Hospitals Regulation, the Regulation on the Processing and Ensuring the Privacy of Personal Health Data and other relevant legislative provisions The Ministry of Health and its affiliated units private insurance companies SSI , institutions such as EGM, General Directorate of Population, judicial authorities , authorized legal representatives, business partners from whom we receive consultancy such as law firms, tax consultants and auditors, our shareholders, with whom we receive services and cooperate, such as laboratories, medical centers, ambulances, medical devices and health service providers within the framework of contractual relations in order to carry out our activities. We transfer it to organizations..

1. Rights of the Data Owner Under Article 11 of the KVKK

In accordance with the Personal Data Protection Law

• To learn whether personal data about you is being processed by contacting the data controller,
• Requesting information if personal data has been processed, learning the purpose of processing personal data and whether they are used for their intended purpose,
• Knowing the third parties to whom personal data is transferred domestically or abroad, if any,
• Requesting correction of personal data if they have been processed incompletely or incorrectly, requesting deletion or destruction of personal data if the reasons requiring processing are eliminated,
• In cases of correction/deletion/destruction/anonymization, requesting that the correction or deletion/destruction/anonymization be notified to third parties to whom personal data has been transferred,
• Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,
• If you suffer damage due to the processing of personal data contrary to the legislation, you have the right to request compensation for the damage.

For the exercise of these rights and your requests, provided that your identity is verified, you can send them in writing to our address below, by using your registered e-mail (KEP) address, secure electronic signature, mobile signature or your e-mail address that you have previously notified us and is in our records. In case of your application, all of our evaluations will be made in line with the relevant provisions stipulated in the KVKK , and we may request some confirmatory information from you in order to confirm that the applicant is the right person. In this context, all information that may be requested will be requested only to determine who the real data owner is and to share the results of the application with the correct person. In accordance with the Communiqué on Application Procedures and Principles to the Data Controller, applications must be made in Turkish. If your request will be answered in writing, no fee will be charged for this transaction up to ten pages, and a processing fee of 1 Turkish Lira may be charged for each page exceeding ten pages.

• Possible Changes in Our Data Security and Disclosure Text

Our company takes appropriate technical and administrative measures regarding data security within the scope of KVKK. If there is a change in the Information Text on the Purposes of Processing of Personal Data, Legal Reasons, Collection Methods and Transfer, and Processing of Personal Data , changes may be made when necessary in order to fulfill the new legal requirements that have come into force. In such a case, this text will be announced to you again in its most current form.

10-Contact Information

EKIP HEALTH SERVICES TRADE JOINT STOCK COMPANY

Address :

Electronic mail :

Telephone :