GDPR Certification

In order to protect the fundamental rights and freedoms of individuals, particularly the privacy of private life, and to regulate the obligations of real and legal persons processing personal data and the principles they must follow, under the scope of the Law No. 6698 on the Protection of Personal Data (“KVKK”), as OP.DR.CAN ZELIHA GÜL, as the “Data Controller,” your personal data may be processed only within the scope and purposes described below in accordance with the Law No. 3359 on Basic Health Services, Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliated Institutions, Private Hospitals Regulation, Law No. 6698 on the Protection of Personal Data, Regulation on the Processing and Privacy of Personal Health Data, Health Ministry regulations, and other relevant legislation.

1) Definitions Related to KVKK

In the application of KVKK;

Data Subject: Refers to the real person whose personal data is processed,

Data Controller: Refers to the real or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system,

Data Processor: Refers to the real or legal person who processes personal data on behalf of the data controller based on the authority given by the data controller,

Personal Data: Refers to any information relating to an identified or identifiable real person,

Sensitive Personal Data: Refers to data regarding individuals’ race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, dress and clothing, association, foundation, or union membership, health, sexual life, criminal conviction, and security measures, as well as biometric and genetic data,

Processing of Personal Data: Refers to any operation performed on personal data, whether fully or partially automatic or non-automatic, including collection, recording, storage, preservation, alteration, rearrangement, disclosure, transfer, takeover, making available, classification, or use,

Board: Refers to the Personal Data Protection Board,

Institution: Refers to the Personal Data Protection Institution,

Data Recording System: Refers to the system in which personal data is structured according to specific criteria and processed,

Anonymization: Refers to the process of rendering personal data unrelated to an identified or identifiable real person even by matching with other data.

2) Processed Personal Data

Including your health data, your personal and sensitive personal data such as name, surname, Turkish Republic Identification Number and/or passport number and/or temporary Turkish Republic Identification Number, place and/or date of birth, marital status, gender, health insurance information, occupation, insurance card number, workplace registration and/or patient identification number, and other identity information that can identify you; your address, telephone number, email address, and other contact information; voice call records kept according to call center standards; personal data obtained through e-doctor and similar online systems, emails, letters, or other means of communication when you contact us; financial data such as bank account number, IBAN number, credit card information, billing, and invoice data; data related to private health insurance for financing and planning health services and information about paying institutions like Social Security Institution; health data including but not limited to patient medical reports, diagnosis data, biometric and genetic data, laboratory results, test results, examination data, doctor analysis and comments, appointment information, prescription information, obtained during the execution of medical diagnosis, treatment, and care services and/or as a result of these services; notifications such as surveys, thank-you letters, satisfaction results; your vehicle license plate information if you use the parking lot; images obtained from continuously recorded camera records in common areas as required by legislation in our clinic; your health data, IP address, cookies, and other personal data sent and/or entered through all websites and online services of our clinic are covered within the scope of “Personal Data” and can be processed in connection with the purposes specified in Article 4 by the Data Controller and transferred to the persons, institutions, and organizations specified in Article 5.

3) Collection of Personal Data:

Your personal data will be processed within the scope of the Personal Data Protection Law’s (KVKK) 5th and 6th articles and other related legislation to benefit from the services provided by OP.DR.CAN ZELIHA GÜL and its staff, to conduct necessary scientific and promotional activities, and to carry out relevant processes.

4) Processing and Purposes of Personal Data

The personal data collected within the scope of the services you receive is processed for the following purposes:

Fulfilling our legal obligations as stated in the Law No. 3359 on Basic Health Services, Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliated Institutions, Private Hospitals Regulation, Regulation on the Processing and Privacy of Personal Health Data, and other relevant regulations,
Preserving public health, preventive medicine, execution of medical diagnosis, treatment and care services, planning and management of health services and financing,
Planning and managing internal operations,
Providing information regarding your appointments if you make one,
Identification and verification of your identity for your safety,
Inquiry of your entitlement with contracted institutions, sharing information related to health service for financial reconciliation requested by institutions,
Providing you with special medication, medical supplies or devices,
Invoicing,
Sharing the information obtained from the Ministry of Health and other public institutions and organizations in accordance with the legislation and responding to their requests,
Responding to your questions or complaints related to our services,
Analyzing your use of health services for the development of our services,
Compliance with internal policies and principles,
Preserving information regarding health data required by relevant legislation,
Conducting promotion and information activities, contacting you for informational purposes related to our services,
Execution of risk management and quality improvement activities,
Compliance with legal and regulatory requirements,
Without limitation to the above, carrying out medical diagnosis, treatment, and care services, contributing to scientific studies, planning and managing health services and their financing, increasing patient satisfaction, investigating and related reasons.

However, your personal data will not be used for any commercial purposes other than the mentioned activities and the requirements of relevant legislation.

Personal health data may be processed without obtaining explicit consent from the data subject by persons or authorized institutions or organizations under the obligation of secrecy for the protection of public health, preventive medicine, execution of medical diagnosis, treatment, and care services, planning, and management of health services and financing, in accordance with the relevant health legislation.

5) Situations Where Personal Data Can Be Processed Without Explicit Consent According to KVKK

In accordance with Article 5 of KVKK and Article 7 of the Regulation, the following personal data can be processed without your explicit consent:

In cases explicitly prescribed by laws,
When it is necessary to process personal data belonging to the data subject, who is unable to disclose his/her consent due to the actual impossibility or whose consent is not legally valid, for the protection of life or physical integrity,
When processing personal data of parties to a contract is necessary, provided that it is directly related to the conclusion or performance of the contract,
When it is necessary to fulfill a legal obligation,
When personal data is made public by the data subject,
When data processing is mandatory for the establishment, exercise, or protection of a right,
Provided that it does not harm your fundamental rights and freedoms, it is mandatory to process data for the legitimate interests of our clinic.

6) To Whom and for What Purposes Personal Data Can Be Transferred

By taking all necessary technical and administrative measures to

ensure an adequate level of security in accordance with the KVKK and relevant health legislation, your personal data may be transferred to institutions or organizations allowed by the provisions of the Law No. 3359 on Basic Health Services, Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliated Institutions, Private Hospitals Regulation, Regulation on the Processing and Privacy of Personal Health Data, and other relevant legislation; private insurance companies; our direct/indirect national/international scientific study partners; e-doctor and similar online intermediary systems; auditors; consultants; business partners; national/international organizations, and other third parties with whom we have a contractual relationship or cooperation to conduct our activities.

7) Personal Data Collection Method and Legal Basis

Your personal data is collected through all kinds of verbal, written, or electronic media, membership form, or other means in line with the purposes stated in Section 3 above. Your personal data collected for this legal reason can be processed and transferred within the scope of the purposes and principles set forth in the 5th and 6th articles of the Law on the Protection of Personal Data.

When the purpose requiring the processing of Personal Data is eliminated and/or the retention periods required for processing your data according to the legislation have expired, your Personal Data will be deleted, destroyed, or anonymized.

8) Rights of the Personal Data Subject Listed in Article 11 of the Law on the Protection of Personal Data

Except for the cases stipulated under the title of ‘Exceptions’ in Article 28 of this law, you can exercise your rights specified in Article 11 of the KVKK by applying to OP.DR.CAN ZELIHA GÜL.

Within this scope;

Learning whether your personal data is processed,
Requesting information if your personal data has been processed,
Learning the purpose of processing your personal data and whether they have been used appropriately for their purpose,
Knowing the third parties to whom your personal data is transferred domestically or abroad,
Requesting the correction of your personal data if it is incomplete or inaccurately processed and requesting notification of the transaction made in this context to third parties to whom your personal data is transferred,
Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7/f.1 of the KVKK and requesting the notification of the transaction made in this context to third parties to whom your personal data is transferred,
Objecting to the occurrence of a result against you due to the analysis of your processed data exclusively through automated systems,
Requesting the remedy of the damage if you incur damage due to the illegal processing of your personal data.

9) Application

You can submit your requests related to your Personal Data by filling out the Contact Form on our website and delivering it in writing to the address mentioned in the last section, or you can send it to opdrcanzelihagul@gmail.com via your previously notified and registered email address in our system. We recommend that you do not send your applications by regular mail (PTT) or cargo/courier to avoid loss and proof difficulties.

Your requests addressed to us will be concluded free of charge within the shortest possible time and no later than thirty (30) days depending on the nature of the request. In case any cost arises due to the fulfillment of your requests, we may charge the fees determined by the Personal Data Protection Board from you.

As a result of the applications received, we may accept or reject your requests and inform you of the reasons for the rejection in writing or electronically.

If your requests are rejected, you are not satisfied with the response, or you do not receive any response, you may file a complaint with the Personal Data Protection Board within thirty (30) days from the date of notification of the response, or within thirty (30) days from the last day of the thirty-day period if no response has been received.

Data Controller Identity Information

Data Controller: Op. Dr. Can Zeliha GÜL

Tel: +90 530 641 23 08

Email: drcanzelihagul@gmail.com

Op. Dr. Can Zeliha Gül

Hello. How can I help you? You can send your questions immediately via WhatsApp.

We use cookie technology on our website. You can find detailed information about our use of cookies and instructions on how to turn off our use of cookies during your visit to our website, on our “Cookie Policy” page.