MEDIC ANTALYA MEDİKAL ÖZEL AĞIZ VE DİŞ SAĞLIĞI HİZMETLERİ A.Ş, acting as the Data Controller within the scope of the Law No. 6698 on the Protection of Personal Data and relevant legislation, your personal data may be processed in accordance with the Special Clinic Regulation and the regulations of the Ministry of Health and other relevant legislation as explained below.

As MEDIC ANTALYA MEDİKAL ÖZEL AĞIZ VE DİŞ SAĞLIĞI HİZMETLERİ A.Ş ( “MEDIC ANTALYA”), acting as the Data Controller, we would like to inform you within the framework of the Law No. 6698 on the Protection of Personal Data, the Regulation on Personal Health Data and other relevant legislation in line with the principle of confidentiality of private life and the security of your personal data.

Personal Data

Any information relating to an identified or identifiable natural person

Special Category Personal Data

Data related to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data

Processing of Personal Data

Any operation performed on data such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, in whole or in part, through automatic means or non-automatic means, provided that it is part of any data recording system

Data Controller

MEDIC ANTALYA MEDİKAL ÖZEL AĞIZ VE DİŞ SAĞLIĞI HİZMETLERİ A.Ş (“MEDIC ANTALYA”) as the legal entity responsible for establishing and managing the data recording system, which determines the purposes and means of processing personal data

Data Processor

Natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller

1 – Processed Personal Data

Identity information: Including but not limited to your name, surname, T.C. number, passport number, and other identity data that can identify you, as well as your gender and date of birth, and if you have communicated with us through a social media account and shared this information, your pseudonyms/nicknames used on this platform,

Contact Information: Your address, landline and mobile phone numbers, email address, letter or other communication data, Instagram and other social media account information,

Voice and video recordings: Recordings made by security cameras located at the entrance of our clinic building, medical imaging records,

Financial and Insurance Data: Your bank account number, IBAN number, credit card information, financial data necessary for the issuance of invoices, SGK or private insurance data,

Health Information: Records of all kinds of medical procedures performed in our center during the medical diagnosis and treatment process, including but not limited to your laboratory results, test results, examination data, appointment information, prescription information, medical imaging information, previous health data to the extent necessary, treatment history, patient protocol number, all kinds of health data obtained during the diagnosis and/or treatment process,

Electronic Communication Channels: Data you have shared with us through our website, Instagram account, Facebook, LinkedIn accounts, cookie data,

In addition to those mentioned here, it is also possible to obtain and process other personal data directly provided by you, limited to the purposes specified below, to conduct the medical diagnosis and treatment process, make necessary planning, communicate with you, provide you with information on topics that may concern you, inform you about campaigns and innovations, fulfill our obligations arising from contracts and legislation.

2 – Purposes of Processing Personal Data

Your personal data may be processed by MEDIC ANTALYA MEDİKAL ÖZEL AĞIZ VE DİŞ SAĞLIĞI HİZMETLERİ A.Ş for the following purposes:

• Fulfilling our legal obligations under the Basic Law on Health Services No. 3359, the Decree-Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Private Clinic Regulation, the Law No. 6698 on the Protection of Personal Data, the Regulation on the Processing and Protection of the Confidentiality of Personal Health Data and other relevant legislation;
• Protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing,
• Providing you with personalized medicine and/or medical supplies and/or devices,
• Notifying you about your appointment, providing information and/or appointment reminders, confirming your information if you make an appointment,
• Fulfilling legal and regulatory requirements,
• Sharing and responding to information obtained from the Ministry of Health and other public institutions and organizations as required by legislation,
• Sharing information and verifying identity with contracted institutions/organizations, primarily private insurance companies, within the scope of the financing of health services,
• Issuing invoices for the services we provide,
• Analyzing your use of health services to improve and enhance the health services we provide to you, storing your health data, and responding to your questions or complaints about our services,
• Providing necessary information in line with the demands and inspections of regulatory and supervisory institutions, official authorities,
• Maintaining information about your health data that is required to be kept by the relevant legislation,
• Ensuring compliance with internal policies and principles,
• Conducting special promotion and information activities for you and ensuring your benefit, communicating with you for the purpose of providing information about our services

In addition to these, for conducting, developing, planning, and managing the financing of medical diagnosis, treatment, and care services, increasing patient satisfaction, researching, and related reasons.

3 – Transfer of Personal Data

Your personal data may be transferred to persons/institutions and/or organizations permitted by the provisions of the Basic Law on Health Services No. 3359, the Decree-Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Private Clinic Regulation, the Law No. 6698 on the Protection of Personal Data, the Regulation on the Processing and Protection of the Confidentiality of Personal Health Data, and other relevant legislation; private insurance companies, banks, funds, foundations; our affiliated subsidiaries; auditors; consultants; business partners; domestic/foreign institutions with which we have a contractual relationship to carry out our activities and/or to which we provide services; and other real and/or legal third parties, ensuring that all necessary technical and administrative measures are taken to ensure an appropriate level of security.

4 – Method and Legal Grounds for Collecting Personal Data

Your personal data may be collected, processed, and transferred in accordance with the personal data processing principles, conditions, and purposes specified in Articles 4, 5, and 6 of the Law No. 6698 and the purposes specified in this text. Your personal data may be collected, processed, and transferred by MEDIC ANTALYA MEDİKAL ÖZEL AĞIZ VE DİŞ SAĞLIĞI HİZMETLERİ A.Ş, varying depending on the service provided and the commercial activities of our Company; automatically or non-automatically, through MEDIC ANTALYA MEDİKAL ÖZEL AĞIZ VE DİŞ SAĞLIĞI HİZMETLERİ A.Ş units and departments, website, social media platforms, mobile applications and similar means, verbally, in writing, or electronically. The personal data you provide verbally, in writing, and/or electronically within the scope of the contract will be processed. Your personal data will be processed and stored for the period necessary for the purpose of processing or for the period required by the relevant legislation, provided that it is not used for purposes other than those specified in the Personal Data Protection Information, and all necessary information security measures will be taken. At the end of the period necessary for the purpose of processing or when the purpose for which it is processed no longer exists, your personal data will be anonymized and continue to be used by MEDIC ANTALYA MEDİKAL ÖZEL AĞIZ VE DİŞ SAĞLIĞI HİZMETLERİ A.Ş. All necessary technical and administrative measures are taken to ensure that your personal data is not processed unlawfully, accessed unlawfully, and stored securely.

5 – Cases in Which Personal Data May Be Processed Without Explicit Consent Under the KVKK:

According to Article 5 of the KVKK and Article 7 of the Regulation, the following personal data may be processed without your explicit consent in the following cases:

• When explicitly provided for by law,
• When it is necessary to protect the life or physical integrity of the data subject or another person who is unable to express their consent due to actual impossibility or whose consent is not legally valid,
• When it is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract,
• When it is necessary for the data controller to fulfill its legal obligation,
• When the data subject has made their personal data public,
• When it is necessary for the establishment, exercise, or protection of a right,
• When it is necessary to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Personal health data may be processed without the explicit consent of the data subject for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, by persons or authorized institutions and organizations that are under the obligation of confidentiality.

6 – Rights of the Personal Data Owner under Article 11 of the Law No. 6698

Article 20 of the Constitution states that everyone has the right to be informed about their personal data concerning them. Accordingly, Article 11 of the KVKK also includes “the right to request information” among the rights of the personal data owner. Our clinic, in this context, provides the necessary information in case the personal data owner requests information in accordance with Article 20 of the Constitution and Article 11 of the Law No. 6698. Under Article 11 of the Law No. 6698, personal data owners have the right to:

• Learn whether personal data is processed or not,
• Request information if personal data is processed,
• Learn the purpose of processing personal data and whether it is used in accordance with its purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request correction of personal data if it is incomplete or incorrectly processed and request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Request deletion or destruction of personal data in the event that the reasons for processing no longer exist, despite being processed in accordance with the provisions of the Law No. 6698 and other relevant laws, and request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
• Request compensation for the damage arising from the unlawful processing of personal data.

In addition, you can always notify us of changes and/or updates to your personal data by emailing info@medicantalya.com or by applying in person to Fener Mah. Bülent Ecevit Bulvarı Duru İş Merkezi No:62 Muratpaşa/ANTALYA.

Click to Application Form

7 – How Long Will Your Personal Data Be Processed?

In accordance with the KVKK, your personal data processed for the purposes specified in this Information and Consent Text will be deleted, destroyed, or anonymized by us when the purpose requiring processing as per Article 7/f.1 of the KVKK ceases to exist and/or when the statute of limitations for us to process your data expires in accordance with the relevant legislation.

8 – Changes and Updates

This information text has been prepared within the scope of the Law No. 6698 on the Protection of Personal Data and other relevant legislation. Necessary changes will be made to the information text in line with changes in the relevant legal legislation and/or the personal data processing purposes and policies of MEDIC ANTALYA MEDİKAL ÖZEL AĞIZ VE DİŞ SAĞLIĞI HİZMETLERİ A.Ş. Changes to the information text and the updated text will become effective immediately upon notification to you.