KVKK Disclosure Statement

Identity of the Data Controller

This disclosure statement has been prepared by DOC Oral and Dental Health Clinic in its capacity as data controller, in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”).

Personal Data Collected and Purposes of Collection

The following personal data may be collected and processed by our clinic:

• Your first name, surname, Turkish ID number, passport number or temporary Turkish ID number
• Your place and date of birth, marital status, gender, address, telephone number, e-mail address and other contact details
• Your financial data, such as billing information
• Audio and/or digital information obtained by us from time to time through electronic or non-electronic methods
• Video and/or audio camera footage that may be or has been obtained during your visit to our clinic
• Your general and special categories of personal data, in particular your personal health data, obtained during the patient registration process and the provision of medical diagnosis, examination, treatment and care services
• The necessary details and information provided by patients, including health and identity data, and other information that may be submitted through our website and processed by our clinic

Purposes of processing personal data

• Fulfilment of our legal obligations under Law No. 3359 on Basic Health Services, Decree Law No. 663 on the Organisation and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Hospitals, the Regulation on the Processing of Personal Health Data and the Protection of Privacy, and other relevant legislation
• Protection of public health, preventive medicine, medical diagnosis, treatment and care services
• Planning and financing of health services
• Billing of our services
• Confirmation of your appointment if you have made one
• Informing patients about relevant campaigns and announcements by telephone, SMS, e-mail or other means
• Planning of internal operations relating to medical devices, clinic layout and patient needs
• Monitoring and prevention of misuse and/or unauthorised transactions
• Scientific research studies
• Being able to respond to all your questions and complaints regarding our health services
• Taking and implementing all necessary technical and administrative measures within the scope of data security for our clinic systems
• Detailed analysis of the use of health services in order to raise the standard of the services we provide, and the storage of your health data in accordance with the relevant legislation

This information may also be processed for similar purposes, including measuring patient satisfaction.

With which institutions and organisations may your personal data be legally shared?

• The Ministry of Health, its affiliated units and affiliated medical and health centres
• The General Directorate of Security and other law enforcement agencies
• The General Directorate of Population and Citizenship Affairs
• The Turkish Pharmacists' Association
• Judicial authorities
• Laboratories, medical centres, ambulances, medical device suppliers and organisations providing health services with which we cooperate for medical diagnosis and treatment purposes in Türkiye or abroad
• Health institutions to which the patient is referred or which the patient applies to on their own initiative
• Your authorised legal representatives
• Third parties from whom we receive consultancy; the lawyers, financial advisers and auditors we work with
• Regulatory and supervisory bodies and official authorities
• Your employer
• Suppliers, support service providers, archiving service providers and business partners from whom we receive services or with whom we cooperate (for more detailed information you may make a written application to our clinic)

Method and Legal Basis of Collecting Personal Data

Your personal data may be collected and processed by the Private DOC Oral and Dental Health Clinic in verbal, written, visual or electronic environments for the purposes stated above and for the fulfilment of our contractual and legal obligations within the legal framework. The data is collected and processed so that we can fulfil our contractual and legal obligations adequately and completely.

The legislation relating to the collection of this data from our patients is as follows:

• Law No. 6698 on the Protection of Personal Data (KVKK)
• Law No. 3359 on Basic Health Services
• Decree Law No. 663 on the Organisation and Duties of the Ministry of Health and its Affiliated Institutions
• The Regulation on Private Hospitals
• The Regulation on the Processing of Personal Health Data and the Protection of Privacy
• Ministry of Health regulations and similar legal provisions

Your Rights Regarding the Protection of Your Personal Data

In accordance with the Law and the relevant legislation, you have the following rights:

• To learn whether your personal data is being processed
• To request information about this if your personal data has been processed
• To access and request your personal health data
• To learn the purpose of processing your personal data and whether it is used in accordance with that purpose
• To know the third parties to whom your personal data is transferred, whether domestically or abroad
• To request the correction of your personal data if it has been processed incompletely or incorrectly
• To request the deletion or destruction of your personal data
• In the case of incomplete or incorrect processing, to request that the correction and/or deletion or destruction be notified to the third parties to whom your personal data has been transferred
• To object to an adverse outcome arising against you as a result of the processed data being analysed exclusively by automated systems
• To claim compensation for the damage if you suffer harm due to the unlawful processing or unauthorised sharing of your personal data

Data Security and the Right to Apply

Your personal data is carefully protected and used within all available technical and administrative means; it is stored at a level of security deemed appropriate against possible risks.

To make an application within the scope of the personal data protection legislation, you may request a copy of the “Application Form under the Law on the Protection of Personal Data” and submit the completed form to us through the channels below. Your application is evaluated in accordance with the KVKK and the relevant legislation, and you are responded to as soon as possible.