INFORMATION TEXT WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA
DATA CONTROLLER:
ASV Private Health, Private Education Services, Tourism and Medical Trade Ltd. Co.
(Private Markasya Oral and Dental Health Clinic)
Toros Mah. 805 Sk. Kurgu 1 Plaza No:14/1 Konyaaltı/Antalya
(Mersis No: 0091053148300001)
This Information Text on the Protection of Personal Data is prepared by ASV Private Health, Private Education Services, Tourism and Medical Trade Ltd. Co. (Private Markasya Oral and Dental Health Clinic) as the data controller, in order to fulfill our obligation to inform our Patients, Patient Relatives, Patient Guardians/Representatives, Employees, Supplier Representatives, Supplier Employees, Business Partners, and Third Parties within the scope of the Law No. 6698 on the Protection of Personal Data (KVKK).
As ASV Private Health, Private Education Services, Tourism and Medical Trade Ltd. Co. (Private Markasya Oral and Dental Health Clinic), we show the necessary sensitivity and take the required measures regarding the processing, storage, and transfer of your personal data within the framework of our healthcare services, in accordance with the Law No. 6698 on the Protection of Personal Data (KVKK) and related legislation.
This “Information Text within the Scope of the Law on the Protection of Personal Data” has been prepared in accordance with Article 10 of the KVKK, titled “Obligation of the Data Controller to Inform,” to transparently inform you about the identity of the data controller, the method and legal reason for collecting your personal data, the purposes for which these data will be processed, to whom and for what purposes they may be transferred, the data processing period, and your rights listed in Article 11 of the KVKK. Your personal data will be:
- Processed in accordance with the law and the rules of honesty,
- Processed in connection with, limited to, and proportionate to the purposes of processing,
- Processed accurately and kept up to date,
- Processed for specific, explicit, and legitimate purposes,
- Retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
2. YOUR PROCESSED PERSONAL DATA
Your personal data are collected, transferred, and stored securely in accordance with the Personal Data Protection Law, using automatic, semi-automatic, or non-automatic methods, verbally or in writing, via email, WhatsApp, direct delivery by the relevant person, printed forms, or electronically, in order to fulfill our legal obligations and to provide you with better service in our business activities.
2.1. If You Are an Employee of Our Clinic
Detailed information regarding the personal data processed for our employees has been provided to them. If your employment contract with the company has ended, you may exercise your rights regarding your processed personal data by using one of the application methods specified in this Information Text.
2.2. If You Are a “PATIENT” of Our Clinic
Table: Processed Personal Data, Purposes, and Legal Grounds
| Processed Personal Data | Purposes of Processing | Legal Grounds |
|---|---|---|
| Identity (Name, Surname, Date of Birth) | Execution of disease diagnosis and treatment processes, management of patient relations, execution of contract processes; obtaining personal data directly from the patient for the patient card | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 6/3: For the protection of public health, preventive medicine, medical diagnosis, treatment and care services, and management of health services and their financing, personal data may be processed without explicit consent by persons or authorized institutions and organizations under confidentiality obligation |
| Contact (Home address, Work address, Email, Phone number) | Execution of disease diagnosis and treatment processes, management of patient relations, execution of contract processes; obtaining personal data directly from the patient for the patient card | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 6/3: As above |
| Health Information (Blood type, Medications used, Medical history) | Execution of disease diagnosis and treatment processes, management of patient relations, execution of contract processes; obtaining personal data directly from the patient for the patient card | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 6/3: As above |
| Identity (Name, Surname, Date of Birth) | Storage and archiving of information in the patient card | KVKK Art. 5/2(a): Based on explicit provision in the law |
| Contact (Home address, Work address, Email, Phone number) | Storage and archiving of information in the patient card | KVKK Art. 5/2(a): Based on explicit provision in the law |
| Health Information (Blood type, Medications used, Medical history) | Storage and archiving of information in the patient card | KVKK Art. 5/2(a): Based on explicit provision in the law |
| Identity (Name, Surname, Date of Birth, Gender, Nationality) | Execution of disease diagnosis and treatment processes, execution of contract processes, compliance with legislation; entering personal data obtained from the patient into the Dr. Dentes patient registration program | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 6/3: As above |
| Contact (Phone number) | Execution of disease diagnosis and treatment processes, execution of contract processes, compliance with legislation; entering personal data obtained from the patient into the Dr. Dentes patient registration program | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 6/3: As above |
| Finance (Payment information) | Execution of disease diagnosis and treatment processes, execution of contract processes, compliance with legislation; entering personal data obtained from the patient into the Dr. Dentes patient registration program | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 6/3: As above |
| Health Information (Treatment, Diagnosis, Radiological images) | Execution of disease diagnosis and treatment processes, execution of contract processes, compliance with legislation; entering personal data obtained from the patient into the Dr. Dentes patient registration program | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 6/3: As above |
| Visual/Audio Records (Photograph) | Execution of disease diagnosis and treatment processes, execution of contract processes, compliance with legislation; entering personal data obtained from the patient into the Dr. Dentes patient registration program | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 6/3: As above |
| Processed Personal Data | Purposes of Processing | Legal Grounds |
|---|---|---|
| Identity (Name, Surname, Date of Birth, Gender, Nationality) | Storage and archiving of Dr. Dentes patient registration records | KVKK Art. 5/2(a): Based on explicit provision in the law; KVKK Art. 6/3: As above |
| Contact (Phone number) | Storage and archiving of Dr. Dentes patient registration records | KVKK Art. 5/2(a): Based on explicit provision in the law; KVKK Art. 6/3: As above |
| Finance (Payment information) | Storage and archiving of Dr. Dentes patient registration records | KVKK Art. 5/2(a): Based on explicit provision in the law; KVKK Art. 6/3: As above |
| Health Information (Treatment, Diagnosis, Radiological images) | Storage and archiving of Dr. Dentes patient registration records | KVKK Art. 5/2(a): Based on explicit provision in the law; KVKK Art. 6/3: As above |
| Visual/Audio Records (Photograph) | Storage and archiving of Dr. Dentes patient registration records | KVKK Art. 5/2(a): Based on explicit provision in the law; KVKK Art. 6/3: As above |
| Identity (Name, Surname, Turkish ID number, Vaccination, Gender) | Recording personal data obtained from the patient into the Protocol Book for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law; KVKK Art. 6/3: As above; Law on the Practice of Medicine and Its Branches, Art. 72 |
| Contact (Address) | Recording personal data obtained from the patient into the Protocol Book for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law; KVKK Art. 6/3: As above; Law on the Practice of Medicine and Its Branches, Art. 72 |
| Health Information (Diagnosis) | Recording personal data obtained from the patient into the Protocol Book for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law; KVKK Art. 6/3: As above; Law on the Practice of Medicine and Its Branches, Art. 72 |
| Identity (Name, Surname, Turkish ID number, Vaccination, Gender) | Sharing personal data in the Protocol Book with the Provincial Health Directorate for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law; Law on the Practice of Medicine and Its Branches, Art. 72 |
| Contact (Address) | Sharing personal data in the Protocol Book with the Provincial Health Directorate for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law; Law on the Practice of Medicine and Its Branches, Art. 72 |
| Health Information (Diagnosis) | Sharing personal data in the Protocol Book with the Provincial Health Directorate for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law; Law on the Practice of Medicine and Its Branches, Art. 72 |
| Identity (Name, Surname, Turkish ID number, Vaccination, Gender) | Storage and archiving of personal data in the Protocol Book | KVKK Art. 5/2(a): Based on explicit provision in the law; Law on the Practice of Medicine and Its Branches, Art. 72 |
| Contact (Address) | Storage and archiving of personal data in the Protocol Book | KVKK Art. 5/2(a): Based on explicit provision in the law; Law on the Practice of Medicine and Its Branches, Art. 72 |
| Health Information (Diagnosis) | Storage and archiving of personal data in the Protocol Book | KVKK Art. 5/2(a): Based on explicit provision in the law; Law on the Practice of Medicine and Its Branches, Art. 72 |
| Identity (Name, Surname, Turkish ID number, Date of Birth) | Execution of patient treatment processes, contract processes, and compliance with legislation; entering personal data obtained from the patient into the HSYS records | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 5/2(a): Based on explicit provision in the law; Basic Law on Health Services, Art. 3/f |
| Contact (Address, Phone number) | Execution of patient treatment processes, contract processes, and compliance with legislation; entering personal data obtained from the patient into the HSYS records | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 5/2(a): Based on explicit provision in the law; Basic Law on Health Services, Art. 3/f |
| Health Information (Diagnosis, Treatment, Family Physician) | Execution of patient treatment processes, contract processes, and compliance with legislation; entering personal data obtained from the patient into the HSYS records | KVKK Art. 5/2(c): Based on the establishment or performance of a contract; KVKK Art. 5/2(a): Based on explicit provision in the law; Basic Law on Health Services, Art. 3/f |
| Identity (Name, Surname, Turkish ID number, Date of Birth) | Online transfer of HSYS records to the Ministry of Health for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law |
| Contact (Address, Phone number) | Online transfer of HSYS records to the Ministry of Health for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law |
| Health Information (Diagnosis, Treatment, Family Physician) | Online transfer of HSYS records to the Ministry of Health for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law |
| Identity (Name, Surname, Turkish ID number, Date of Birth) | Storage and archiving of HSYS records for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law |
| Contact (Address, Phone number) | Storage and archiving of HSYS records for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law |
| Health Information (Diagnosis, Treatment, Family Physician) | Storage and archiving of HSYS records for compliance with legislation | KVKK Art. 5/2(a): Based on explicit provision in the law |
| Identity (Name, Surname, Turkish ID number) | Obtaining information for invoice issuance for the purposes of compliance with legislation, finance and accounting processes, and patient diagnosis/treatment processes | KVKK Art. 5/2(a): Based on explicit provision in the law; Tax Procedure Law, Art. 230/1, 5th Clause and Art. 232/1 |
| Contact (Address, Phone number) | Obtaining information for invoice issuance for the purposes of compliance with legislation, finance and accounting processes, and patient diagnosis/treatment processes | KVKK Art. 5/2(a): Based on explicit provision in the law; Tax Procedure Law, Art. 230/1, 5th Clause and Art. 232/1 |
| Identity (Name, Surname, Turkish ID number) | Storage and archiving of invoices | KVKK Art. 5/2(a): Based on explicit provision in the law; Turkish Commercial Code, Art. 68 |
| Contact (Address, Phone number) | Storage and archiving of invoices | KVKK Art. 5/2(a): Based on explicit provision in the law; Turkish Commercial Code, Art. 68 |
| Identity (Name, Surname, Turkish ID number) | Transfer of invoices issued in the name of the patient to the Tax Office for the purposes of service sales processes, compliance with legislation, and finance and accounting processes | KVKK Art. 5/2(a): Based on explicit provision in the law; Tax Procedure Law, Art. 230/1, 5th Clause and Art. 232/1 |
| Contact (Address, Phone number) | Transfer of invoices issued in the name of the patient to the Tax Office for the purposes of service sales processes, compliance with legislation, and finance and accounting processes | KVKK Art. 5/2(a): Based on explicit provision in the law; Tax Procedure Law, Art. 230/1, 5th Clause and Art. 232/1 |
| Identity (Name, Surname, Turkish ID number, Date of Birth) | Obtaining personal data in the patient consent form for the purposes of patient diagnosis/treatment processes and compliance with legislation | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation; Patient Rights Regulation, Art. 15 |
| Health Information (Diagnosis, Treatment, and other health data) | Obtaining personal data in the patient consent form for the purposes of patient diagnosis/treatment processes and compliance with legislation | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation; Patient Rights Regulation, Art. 15 |
| Identity (Name, Surname, Turkish ID number, Date of Birth) | Storage and archiving of personal data in the patient consent form | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation; KVKK Art. 5/2(e): For the establishment, exercise, or protection of a right |
| Health Information (Diagnosis, Treatment, and other health data) | Storage and archiving of personal data in the patient consent form | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation; KVKK Art. 5/2(e): For the establishment, exercise, or protection of a right |
| Identity (Name, Surname, Country of origin) | Obtaining patient photographs and videos and identity information for marketing, advertising, and social media management purposes | Explicit consent of the patient |
| Visual/Audio Records (Photograph, video) | Obtaining patient photographs and videos and identity information for marketing, advertising, and social media management purposes | Explicit consent of the patient |
| Identity (Name, Surname, Country of origin) | Sharing patient photographs and videos and identity information on the clinic’s social media accounts for marketing, advertising, and social media management purposes | Explicit consent of the patient |
| Visual/Audio Records (Photograph, video) | Sharing patient photographs and videos and identity information on the clinic’s social media accounts for marketing, advertising, and social media management purposes | Explicit consent of the patient |
| Identity (Name, Surname, Country of origin) | Storage of patient photographs and videos and identity information for marketing, advertising, and social media management purposes | Explicit consent of the patient |
| Visual/Audio Records (Photograph, video) | Storage of patient photographs and videos and identity information for marketing, advertising, and social media management purposes | Explicit consent of the patient |
| Physical Space Security (Camera recording) | Ensuring physical space security and conducting storage and archiving activities; obtaining and storing security camera recordings | KVKK Art. 5/2(f): Provided that it does not harm the fundamental rights and freedoms of the data subject, processing is necessary for the legitimate interests of the data controller |
3. METHOD AND LEGAL BASIS FOR COLLECTING YOUR PERSONAL DATA
Your personal data are collected through automatic, semi-automatic, or non-automatic methods, verbally or in writing, via email, WhatsApp, direct delivery by the relevant person, printed forms, or electronically. Your personal data are collected, stored, and transferred for the following purposes:
- To fulfill our legal obligations,
- For the establishment and performance of contracts,
- For reasons stipulated by law,
- For our legitimate interests, provided that your fundamental rights and freedoms are not harmed,
- For the establishment, exercise, or protection of a right,
- For the protection of public health, preventive medicine, medical diagnosis, treatment and care services, and the planning and management of health services and their financing,
- In cases where explicit consent is required by law, with your explicit consent.
4. PURPOSES OF PROCESSING PERSONAL DATA
Your personal data will be processed for the purposes listed above, in accordance with the Turkish Commercial Code No. 6102, Turkish Code of Obligations, Personal Data Protection Law No. 6698, Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on the Processing and Protection of the Privacy of Personal Health Data, Ministry of Health regulations, and all relevant laws and secondary regulations. This includes fulfilling legal and regulatory requirements, taking necessary measures, conducting audits or regulatory duties by authorized public institutions and professional organizations, and responding to requests for information and documents from judicial or administrative authorities. In accordance with Article 5 and Article 6, paragraph 3 of Law No. 6698 (personal data related to health and sexual life may only be processed without explicit consent for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and the planning and management of health services and their financing, by persons or authorized institutions and organizations under confidentiality obligation), your personal data will be processed within the conditions and purposes of personal data processing.
5. TO WHOM AND FOR WHAT PURPOSES YOUR PERSONAL DATA MAY BE TRANSFERRED
In accordance with KVKK and relevant legislation, by ensuring an appropriate level of security and taking all necessary technical and administrative measures, your personal data may be transferred, only when necessary and for the purposes stated above, to:
- Authorized public institutions and organizations, for the purpose of conducting activities in compliance with legislation and providing information to authorized persons, institutions, and organizations, and only to the extent necessary.
- Real persons or private legal entities from whom we receive services or with whom we cooperate as a clinic, for the purpose of conducting business activities, procurement and sales processes, and only to the extent necessary.
- Our business partners (Financial Advisor, Law Office), for the purpose of conducting activities in compliance with legislation, legal activities, and finance and accounting activities, and only to the extent necessary.
- Our suppliers (Dental laboratory), for the purpose of conducting procurement activities, and only to the extent necessary.
- Due to legal regulations in our country, the above-mentioned personal data may be shared periodically or upon request with authorities explicitly authorized by law. In addition, if requested by a court order or an administrative authority explicitly authorized by law, your personal data may be shared with authorized persons or institutions.
IF YOU ARE A “PATIENT RELATIVE” OF OUR CLINIC
Processed Personal Data, Purposes, and Legal Grounds:
| Processed Personal Data | Purposes of Processing | Legal Grounds |
|---|---|---|
| Identity (Name, Surname) | To obtain patient relative information for the execution of financial operations, contract processes, and communication activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Contact (Phone number) | To obtain patient relative information for the execution of financial operations, contract processes, and communication activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Finance (Bank information) | To obtain patient relative information for the execution of financial operations, contract processes, and communication activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Identity (Name, Surname) | To store patient relative information for the execution of communication and archiving activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Contact (Phone number) | To store patient relative information for the execution of communication and archiving activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Finance (Bank information) | To store patient relative information for the execution of communication and archiving activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
Method and Legal Basis for Collecting Your Personal Data:
Your personal data are collected verbally or in writing, via email, WhatsApp, direct delivery by the relevant person, printed forms, or electronically, for the purpose of establishing and performing contracts.
Purposes of Processing Personal Data:
Your personal data will be processed for the above purposes, in accordance with the Turkish Code of Obligations, Turkish Commercial Code, Personal Data Protection Law No. 6698, and all relevant laws and secondary regulations, to fulfill legal and regulatory requirements, take necessary measures, conduct audits or regulatory duties by authorized public institutions and professional organizations, and respond to requests for information and documents from judicial or administrative authorities, within the conditions and purposes of personal data processing specified in Articles 5 and 6 of Law No. 6698.
To Whom and For What Purposes Your Personal Data May Be Transferred:
In accordance with KVKK and relevant legislation, by ensuring an appropriate level of security and taking all necessary technical and administrative measures, your personal data may be shared, only when necessary and for the purposes stated above, with judicial authorities, the General Directorate of Security, and other law enforcement agencies.
7. IF YOU ARE A “PATIENT GUARDIAN/REPRESENTATIVE” OF OUR CLINIC
Processed Personal Data, Purposes, and Legal Grounds:
| Processed Personal Data | Purposes of Processing | Legal Grounds |
|---|---|---|
| Identity (Name, Surname) | To obtain patient guardian/representative information for the execution of financial and accounting operations, contract processes, and communication activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Contact (Phone number) | To obtain patient guardian/representative information for the execution of financial and accounting operations, contract processes, and communication activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Finance (Bank information) | To obtain patient guardian/representative information for the execution of financial and accounting operations, contract processes, and communication activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Identity (Name, Surname) | To store patient guardian/representative information for the execution of communication and archiving activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Contact (Phone number) | To store patient guardian/representative information for the execution of communication and archiving activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Finance (Bank information) | To store patient guardian/representative information for the execution of communication and archiving activities | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
Method and Legal Basis for Collecting Your Personal Data:
Your personal data are collected verbally or in writing, via email, WhatsApp, direct delivery by the relevant person, printed forms, or electronically, for the purpose of establishing and performing contracts.
Purposes of Processing Personal Data:
Your personal data will be processed for the above purposes, in accordance with the Turkish Code of Obligations, Turkish Commercial Code, Personal Data Protection Law No. 6698, and all relevant laws and secondary regulations, to fulfill legal and regulatory requirements, take necessary measures, conduct audits or regulatory duties by authorized public institutions and professional organizations, and respond to requests for information and documents from judicial or administrative authorities, within the conditions and purposes of personal data processing specified in Articles 5 and 6 of Law No. 6698.
To Whom and For What Purposes Your Personal Data May Be Transferred:
In accordance with KVKK and relevant legislation, by ensuring an appropriate level of security and taking all necessary technical and administrative measures, your personal data may be transferred, only when necessary and for the purposes stated above, to:
- Authorized public institutions and organizations, for the purpose of conducting activities in compliance with legislation and providing information to authorized persons, institutions, and organizations, and only to the extent necessary.
- Real persons or private legal entities from whom we receive services or with whom we cooperate as a clinic, for the purpose of conducting business activities, procurement and sales processes, and only to the extent necessary.
- Our business partners (Financial Advisor, Law Office), for the purpose of conducting activities in compliance with legislation, legal activities, and finance and accounting activities, and only to the extent necessary.
- Our suppliers (Dental laboratories, etc.), for the purpose of conducting procurement activities, and only to the extent necessary.
- Due to legal regulations in our country, the above-mentioned personal data may be shared periodically or upon request with authorities explicitly authorized by law. In addition, if requested by a court order or an administrative authority explicitly authorized by law, your personal data may be shared with authorized persons or institutions.
IF YOU ARE A “BUSINESS PARTNER” OF OUR CLINIC
Processed Personal Data, Purposes, and Legal Grounds:
| Processed Personal Data | Purposes of Processing | Legal Grounds |
|---|---|---|
| Identity (Name, Surname, Turkish ID number, Tax number, Title) | To obtain business partner information for the execution and supervision of business activities, procurement of goods/services, communication, finance and accounting operations, and contract processes | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Contact (Phone number, Email address, Business address, Fax, Registered email address) | To obtain business partner information for the execution and supervision of business activities, procurement of goods/services, communication, finance and accounting operations, and contract processes | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Finance (Bank IBAN) | To obtain business partner information for the execution and supervision of business activities, procurement of goods/services, communication, finance and accounting operations, and contract processes | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Legal Transaction (Signature, signature circular) | To obtain business partner information for the execution and supervision of business activities, procurement of goods/services, communication, finance and accounting operations, and contract processes | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Identity (Name, Surname, Turkish ID number, Tax number, Title) | To transfer information to authorized persons, institutions, and organizations | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Contact (Phone number, Email address, Business address, Fax, Registered email address) | To transfer information to authorized persons, institutions, and organizations | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Finance (Bank IBAN) | To transfer information to authorized persons, institutions, and organizations | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Legal Transaction (Signature, signature circular) | To transfer information to authorized persons, institutions, and organizations | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Identity (Name, Surname, Turkish ID number, Tax number, Title) | Storage and archiving of business partner information | KVKK Art. 5/2(f): Provided that it does not harm the fundamental rights and freedoms of the data subject, processing is necessary for the legitimate interests of the data controller |
| Contact (Phone number, Email address, Business address, Fax, Registered email address) | Storage and archiving of business partner information | KVKK Art. 5/2(f): Provided that it does not harm the fundamental rights and freedoms of the data subject, processing is necessary for the legitimate interests of the data controller |
| Finance (Bank IBAN) | Storage and archiving of business partner information | KVKK Art. 5/2(f): Provided that it does not harm the fundamental rights and freedoms of the data subject, processing is necessary for the legitimate interests of the data controller |
| Legal Transaction (Signature, signature circular) | Storage and archiving of business partner information | KVKK Art. 5/2(f): Provided that it does not harm the fundamental rights and freedoms of the data subject, processing is necessary for the legitimate interests of the data controller |
| Physical Space Security (Camera recording) | Ensuring physical space security and conducting storage and archiving activities; obtaining and storing security camera recordings | KVKK Art. 5/2(f): Provided that it does not harm the fundamental rights and freedoms of the data subject, processing is necessary for the legitimate interests of the data controller |
Method and Legal Basis for Collecting Your Personal Data:
Your personal data are collected through automatic, semi-automatic, or non-automatic methods, verbally or in writing, via email, WhatsApp, direct delivery by the relevant person, printed forms, or electronically, for the purposes of fulfilling our legal obligations, establishing and performing contracts, and for the legitimate interests of our clinic.
Purposes of Processing Personal Data:
Your personal data will be processed for the above purposes, in accordance with the Turkish Commercial Code No. 6102, Turkish Code of Obligations, Personal Data Protection Law No. 6698, Income Tax Law, Occupational Health and Safety Services Regulation, Law No. 5651, and all relevant laws and secondary regulations, to fulfill legal and regulatory requirements, take necessary measures, conduct audits or regulatory duties by authorized public institutions and professional organizations, and respond to requests for information and documents from judicial or administrative authorities, within the conditions and purposes of personal data processing specified in Articles 5 and 6 of Law No. 6698.
To Whom and For What Purposes Your Personal Data May Be Transferred:
In accordance with KVKK and relevant legislation, by ensuring an appropriate level of security and taking all necessary technical and administrative measures, your personal data may be transferred, only when necessary and for the purposes stated above, to authorized public institutions and organizations, real persons or private legal entities, our suppliers, our business partners, and other persons, institutions, or organizations permitted by relevant legislation. Due to legal regulations in our country, the above-mentioned personal data may be shared periodically or upon request with authorities explicitly authorized by law. In addition, if requested by a court order or an administrative authority explicitly authorized by law, your personal data may be shared with authorized persons or institutions.
9. IF YOU ARE A “SUPPLIER EMPLOYEE” OF OUR CLINIC
Processed Personal Data, Purposes, and Legal Grounds:
| Processed Personal Data | Purposes of Processing | Legal Grounds |
|---|---|---|
| Identity (Name, Surname, Turkish ID number) | To obtain supplier employee information for the execution of training activities, business activities, occupational health and safety activities, contract processes, and procurement processes | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Contact (Phone number, Email address, Business address, Fax, Registered email address) | To obtain supplier employee information for the execution of training activities, business activities, occupational health and safety activities, contract processes, and procurement processes | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Professional Experience (Profession, Occupational physician certificate date and number) | To obtain supplier employee information for the execution of training activities, business activities, occupational health and safety activities, contract processes, and procurement processes | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Education Data (Diploma information) | To obtain supplier employee information for the execution of training activities, business activities, occupational health and safety activities, contract processes, and procurement processes | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Personnel (Position) | To obtain supplier employee information for the execution of training activities, business activities, occupational health and safety activities, contract processes, and procurement processes | KVKK Art. 5/2(c): Based on the establishment or performance of a contract |
| Identity (Name, Surname, Turkish ID number) | To transfer information to authorized persons, institutions, and organizations for compliance with legislation and procurement processes | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Contact (Phone number, Email address, Business address, Fax, Registered email address) | To transfer information to authorized persons, institutions, and organizations for compliance with legislation and procurement processes | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Professional Experience (Profession, Occupational physician certificate date and number) | To transfer information to authorized persons, institutions, and organizations for compliance with legislation and procurement processes | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Education Data (Diploma information) | To transfer information to authorized persons, institutions, and organizations for compliance with legislation and procurement processes | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Personnel (Position) | To transfer information to authorized persons, institutions, and organizations for compliance with legislation and procurement processes | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Identity (Name, Surname, Turkish ID number) | Storage and archiving of training records and other procurement-related data | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Contact (Phone number, Email address, Business address, Fax, Registered email address) | Storage and archiving of training records and other procurement-related data | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Professional Experience (Profession, Occupational physician certificate date and number) | Storage and archiving of training records and other procurement-related data | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Education Data (Diploma information) | Storage and archiving of training records and other procurement-related data | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Personnel (Position) | Storage and archiving of training records and other procurement-related data | KVKK Art. 5/2(ç): Based on the data controller’s legal obligation |
| Visual/Audio Records (Photograph, camera, video) | For training and meeting activities, obtaining and storing photographs and video recordings with the explicit consent of the data subject | Explicit consent of the data subject |
| Physical Space Security (Camera recording) | Ensuring physical space security and conducting storage and archiving activities; obtaining and storing security camera recordings | KVKK Art. 5/2(f): Provided that it does not harm the fundamental rights and freedoms of the data subject, processing is necessary for the legitimate interests of the data controller |
Method and Legal Basis for Collecting Your Personal Data:
Your personal data are collected through automatic, semi-automatic, or non-automatic methods, verbally or in writing, via email, WhatsApp, direct delivery by the relevant person, printed forms, or electronically, for the purposes of fulfilling our legal obligations, establishing and performing contracts, for the legitimate interests of our clinic, and, where required by law, with your explicit consent.
Purposes of Processing Personal Data:
Your personal data will be processed for the above purposes, in accordance with the Turkish Commercial Code No. 6102, Turkish Code of Obligations, Personal Data Protection Law No. 6698, Income Tax Law, Occupational Health and Safety Services Regulation, Law No. 5651, and all relevant laws and secondary regulations, to fulfill legal and regulatory requirements, take necessary measures, conduct audits or regulatory duties by authorized public institutions and professional organizations, and respond to requests for information and documents from judicial or administrative authorities, within the conditions and purposes of personal data processing specified in Articles 5 and 6 of Law No. 6698.
To Whom and For What Purposes Your Personal Data May Be Transferred:
In accordance with KVKK and relevant legislation, by ensuring an appropriate level of security and taking all necessary technical and administrative measures, your personal data may be transferred, only when necessary and for the purposes stated above, to authorized public institutions and organizations, real persons or private legal entities, our suppliers, our business partners, and other persons, institutions, or organizations permitted by relevant legislation. Due to legal regulations in our country, the above-mentioned personal data may be shared periodically or upon request with authorities explicitly authorized by law. In addition, if requested by a court order or an administrative authority explicitly authorized by law, your personal data may be shared with authorized persons or institutions.
CAMERA RECORDINGS IN OUR CLINIC
Processed Personal Data, Purposes, and Legal Grounds:
| Processed Personal Data | Purposes of Processing | Legal Grounds |
|---|---|---|
| Physical Space Security (Camera recording) | Ensuring physical space security, managing emergency situations, ensuring the security of movable property and resources, ensuring the security of data controller operations, providing information to authorized persons, institutions, and organizations, and conducting storage and archiving activities by obtaining and storing security camera recordings | KVKK Art. 5/2(f): Provided that it does not harm the fundamental rights and freedoms of the data subject, processing is necessary for the legitimate interests of the data controller |
Method and Legal Basis for Collecting Your Personal Data:
Your personal data are collected automatically and electronically. Your personal data are collected, stored, and transferred for the legitimate interests of our company.
To Whom and For What Purposes Your Personal Data May Be Transferred:
In accordance with KVKK and relevant legislation, by ensuring an appropriate level of security and taking all necessary technical and administrative measures, your personal data may be transferred, only when necessary and for the purposes stated above, to authorized public institutions and organizations within the scope of Article 28/1 of KVKK, upon request. Apart from our legal obligations, your personal data are not transferred to third parties.
11. RETENTION PERIOD OF YOUR PERSONAL DATA
Your personal data are processed only for the period necessary to fulfill the purposes explained in this Information Text, and in any case, in accordance with legal periods, workplace practices, and commercial customs. After the expiration of these periods, your data are deleted, destroyed, or anonymized. If there are changes in the legal periods for data processing, the new periods will be taken as a basis. If you would like detailed information about the retention periods of your personal data, you can contact us through the addresses provided in the section on the rights of the data subject.
12. YOUR RIGHTS REGARDING PERSONAL DATA
According to Article 11 of the KVKK, by applying to us in person and proving your identity, you have the right to:
- Learn whether your personal data are being processed,
- Request information if your personal data have been processed,
- Learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
- Know the third parties to whom your personal data are transferred domestically or abroad,
- Request correction of your personal data if they are incomplete or incorrectly processed,
- Request the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK,
- Request notification of the correction, deletion, or destruction of your personal data to third parties to whom your personal data have been transferred,
- Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
- Request compensation for damages if you suffer damage due to the unlawful processing of your personal data.
13. HOW TO APPLY FOR YOUR RIGHTS
To exercise your rights as a personal data subject, your application must include explanations regarding the right you wish to exercise, be clear and understandable, concern yourself or, if you are acting on behalf of someone else, you must be specifically authorized and provide documentation of your authority, and include your identity and address information, as well as documents identifying your identity.
Your application must include:
- Your name, surname, and if the application is in writing, your signature,
- For Turkish citizens, your Turkish ID number; for foreigners, your nationality, passport number, or, if available, your identity number,
- Your place of residence or business address for notification,
- If available, your email address, telephone, and fax number for notification,
- Your request, and if applicable, information and documents related to the subject.
Your requests in your application will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires an additional cost, the fee specified in the Communiqué on the Principles and Procedures for Application to the Data Controller by the Personal Data Protection Board may be charged.
For matters related to the processing of your personal data, you can fill out the application form on our website and send it, together with the necessary information to identify your identity and your explanations regarding the right you wish to exercise, to the address “Toros Mah. 805 Sk. Kurgu 1 Plaza No:14/1 Konyaaltı/Antalya” by hand with a wet signature, by registered mail, via notary, or to our registered electronic mail address info@markasyadis.com with a secure electronic signature.
As the data controller, depending on the nature of your request and the method of application, we may request additional verification (such as sending a message to your registered phone number or calling you) to determine whether the application belongs to you and to protect your rights. For example, if you apply via your registered email address, we may contact you using another communication method we have on record to confirm that the application belongs to you.
ASV Private Health, Private Education Services, Tourism and Medical Trade Ltd. Co.
(Private Markasya Oral and Dental Health Clinic)
Email: info@markasyadis.com
Website: www.markasyadis.com
Registered Email Address: asvsaglik@hs01.kep.tr
Address: Toros Mah. 805 Sk. Kurgu 1 Plaza No:14/1 Konyaaltı/Antalya
