Clarification Text Under the Personal Data Protection Law
In accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”), Law No. 3359 on Basic Health Services, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Affiliated Institutions, Ministry of Health regulations, and other relevant legislation, Dr. Fatma Horasan’s Clinic provides the following information regarding the collection and processing of your personal data, including sensitive personal data, in compliance with the law while you benefit from our health services and other services.
As the Data Controller, Dr. Fatma Horasan’s Clinic may record, store, update, share, transfer, classify, and process your personal data, including sensitive personal data, as described in this Clarification Text and as permitted and/or required by legislation or agreements. This may include sharing with third parties (such as the close relatives of the service recipient, or the public and/or private legal entities with which the service recipient is insured/working, other public and/or private legal entities, third parties with whom our clinic cooperates or with whom we have service agreements for the purposes specified in the relevant legislation) as required.
Sensitive personal data, including health data, can be processed without obtaining explicit consent for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, and may be processed by individuals or authorized institutions and organizations bound by confidentiality. Additionally, all sensitive personal data may be processed only if adequate measures determined by KVKK are taken, as required by law.
Your personal data is collected by Dr. Fatma Horasan’s Clinic through verbal, written, visual, or electronic means, including but not limited to our website, verbal, written, and similar channels, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing.
Processed Personal Data and Their Processing Purposes
Including health data and other sensitive personal data, the following types of personal data are processed by Dr. Fatma Horasan’s Clinic for the purposes connected to, limited to, and proportionate to the following:
Identity Information: Your name, surname, T.C. identification number, passport number or temporary T.C. identification number, place and date of birth, marital status, gender, insurance or patient protocol number, and other identification data that can identify you;
Contact Information: Your address, phone number, email address, and other contact details obtained when you contact us via email, letter, or other means;
Accounting Information: Your bank account number, IBAN number, credit card details, billing information, health insurance data, Social Security Institution data, and Private Health Insurance data;
Physical Security of the Facility: Camera recordings of your image taken for security and monitoring purposes when you visit the clinic,
Health Information: Laboratory results, test results, examination data, appointment information, prescription details, and all health and sexual life-related personal data obtained during or as a result of the provision of medical diagnosis, treatment, and care services, including but not limited to, personal data collected in connection with your job application to Dr. Fatma Horasan’s Clinic and employment-related personal data if you are an employee or affiliated worker of Dr. Fatma Horasan’s Clinic.
Dr. Fatma Horasan’s Clinic may process all personal data obtained for the purposes mentioned above; verifying your identity, protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, managing the clinic's operations and daily functions, providing medication, informing you about your appointment if you make one, risk management and quality improvement activities, evaluating and researching health services development, fulfilling legal and regulatory requirements, verifying relationships with institutions that have agreements with the clinic, billing for health services, sharing information with insurance companies for health services financing, sharing information with the Ministry of Health and relevant public institutions and organizations, responding to any questions or complaints about our services, ensuring data security with all necessary technical and administrative measures, analyzing your use of health services for improvement, providing necessary information to regulatory and supervisory institutions and official authorities, training and development of our staff, monitoring and preventing abuse and unauthorized actions, retaining health data as required by law, ensuring financial reconciliation with institutions we have agreements with, measuring patient satisfaction, and not limited to these purposes.
Providing medical diagnosis, treatment, and care services, developing health services, planning and managing health services financing, increasing patient satisfaction, research, and similar purposes.
Cases Where Explicit Consent is Not Required Under KVKK
Your personal data may be processed without your explicit consent in the following cases:
Explicitly foreseen by laws,
When it is mandatory for the protection of the life or physical integrity of a person who is unable to express their consent due to physical impossibility, or whose consent is not legally valid,
When it is necessary for the processing of personal data directly related to the establishment or performance of a contract,
When it is necessary to fulfill our legal obligations,
When personal data has been made public by the data subject themselves,
When it is necessary for the establishment, exercise, or protection of a right,
When it is necessary for the processing of personal data for legitimate interests, provided it does not harm the fundamental rights and freedoms of the data subject.
Additionally, personal data related to health and sexual life can be processed without your explicit consent for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing.
Explicitly Provided by Laws
It is mandatory to protect the life or bodily integrity of a person who is unable to express consent due to physical impossibility or whose consent is not legally valid.
It is necessary to process personal data related to the parties of a contract directly concerning the establishment or performance of the contract.
It is necessary to fulfill our legal obligations.
It is necessary if the data has been made public by the data subject themselves.
It is mandatory to process data for the establishment, use, or protection of a right.
It is necessary for our legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject.
Additionally, personal data related to health and sexual life may be processed by Dr. Fatma Horasan's Clinic without your explicit consent, solely for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and the planning and management of health services and their financing.
Transfer of Your Personal Data
Your personal data, related to our service users, may be shared with third parties such as private insurance companies, the Ministry of Health and its subordinate units, the Social Security Institution, the General Directorate of Security and other law enforcement agencies, the General Directorate of Population, the Turkish Pharmacists' Association, courts and all judicial authorities, central and other third parties, authorized representatives, attorneys appointed by you, tax and financial advisors and auditors, and other consulting third parties. This is necessary for performing required work, ensuring legal, technical, and commercial security, and for the purposes outlined in Articles 8 and 9 of the Law. Your personal data may be transferred to domestic third parties within the scope of the purposes and conditions specified in the Law.
Management and Legal Grounds for Collection and Processing of Your Personal Data
Your personal data is collected in any form—oral, written, visual, or electronic—necessary for the above-mentioned purposes and to provide health services within the established legal framework. It is obtained to enable Dr. Fatma Horasan's Clinic to fulfill its contractual and legal obligations fully and appropriately.
Rights of Data Subjects Under the Law
At any time, you can apply to Dr. Fatma Horasan's Clinic to:
Learn whether your personal data is being processed, the purpose of processing, and whether it is being used in accordance with that purpose. If processed, you can request information about it.
Learn about the third parties within and outside the country with whom your information has been shared, in accordance with the Law.
If you believe your information is incomplete or inaccurate, you can request its correction.
Request the deletion or destruction of your information under the conditions specified in Article 7 of the Law.
Request that the third parties to whom your information has been transferred (as mentioned in items (c) and (d)) be informed of your requests and carry out the same actions.
Object to any result that may arise against you due to the analysis of your information by automated systems.
If you believe your information has been unlawfully recorded or used, and you have suffered damage as a result, you can request compensation for the damage.
If your application for these purposes incurs an additional cost, you will be required to pay the fee determined by the Communiqué on the Principles and Procedures for Application to the Data Controller issued by the Personal Data Protection Board. There will be no charge for the first 10 (ten) pages of the written response to your application, but a processing fee of 1 TL will be charged for each page beyond 10 (ten) pages. If the response to your application is provided on a recording medium such as a CD or USB flash drive, you will be charged for the cost of the recording medium.
Your requests in the application will be concluded as soon as possible and within a maximum of 30 (thirty) days, depending on the nature of the request. To exercise your rights under the Law, you can submit your application in writing, in Turkish, to Dr. Fatma Horasan's Clinic, and for more detailed information, you can visit the website of the Personal Data Protection Authority.
Submitting Your Applications:
You can submit your application by completing the application form available on this site and sending a signed hard copy either in person or via notary to the address: Şair Eşref Bulvarı Şair Apt. No:82/1 K.2 D.5 Alsancak – İzmir.
As a data subject, to exercise your rights as mentioned above, your application should include explanations related to the right you wish to exercise. It is required that the request is clear and understandable, and if the request concerns someone other than yourself, you must present a notarized power of attorney for representation.
In your application, it is mandatory to include elements such as full name, signature, T.C. identity number, residence or workplace address, email address, phone and fax numbers, as per the “Communiqué on the Principles and Procedures for Application to the Data Controller.” Applications lacking these elements will be rejected by the clinic.
The clinic reserves the right to make changes to this privacy notice due to reasons arising from the Law, secondary regulations, and Board decisions. Any changes or updates to the privacy notice will become effective immediately upon notification to you.
Dr. Fatma Horasan