Protection of Personal Data

Note: This text is a draft; it must be reviewed and approved by your legal counsel before publication.

Data Controller

Pursuant to Personal Data Protection Law No. 6698, your personal data is processed by the data controller Özel Egekent Hastanesi may be processed within the scope explained below.

Address: Sırakapılar Mahallesi, 495. Sokak No:27 Merkezefendi / Denizli.

Processed Personal Data

Depending on the nature of the services provided, the following categories of personal data are processed by our hospital:

• Identity data: information such as first name, surname, Turkish ID number, date of birth, and gender.
• Contact data: phone number, e-mail address, and full postal address.
• Health data (special category): diagnosis, treatment, examination, laboratory and imaging results, medical history, and prescription information.
• Financial data: invoice, payment, bank, and insurance account information.
• Visual and audio data: security camera footage and call center voice recordings.

Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Carrying out diagnosis, treatment, and care processes.
• Scheduling appointments and managing patient registration procedures.
• Fulfilling legal obligations arising from legislation.
• Carrying out billing and collection processes.
• Measuring and improving the quality of the health services provided.

Transfer of Personal Data

In accordance with the conditions set out in Articles 8 and 9 of the KVKK (Personal Data Protection Law) and the relevant legislation, your personal data may be shared domestically with the following parties:

• The Social Security Institution (SGK).
• Private and complementary health insurance companies.
• The Ministry of Health and authorized public institutions and organizations.
• Contracted laboratories and medical service providers.

Method of Collection and Legal Basis

Your personal data is collected through both physical and electronic channels during your application to our hospital and throughout the course of your care. This data is processed on the legal grounds set out in the processing conditions under Articles 5 and 6 of the KVKK and within the framework of the relevant health legislation.

Rights of the Data Subject (Article 11)

Pursuant to Article 11 of the KVKK, by applying to the data controller you have the following rights:

• To learn whether your personal data is being processed.
• To request information about such processing if it has taken place.
• To learn the purpose of processing and whether the data is used in accordance with that purpose.
• To know the third parties, whether domestic or abroad, to whom the data is transferred.
• To request the correction of your data if it has been processed incompletely or inaccurately.
• To request the erasure or destruction of your data within the framework of the conditions stipulated by law.
• To request that any rectification, erasure or destruction be notified to third parties to whom the data has been transferred.
• To object to an adverse outcome arising against you as a result of the processed data being analyzed exclusively through automated systems.
• To claim compensation for the damage in the event that you suffer harm due to the unlawful processing of your data.

Application

You may submit your requests regarding the rights specified above, together with documents verifying your identity, to our email address info@egekenthastanesi.com and thereby apply to our hospital. Your applications will be concluded within the periods stipulated by the relevant legislation.