PDPL Disclosure Statement

Information About the Personal Data Protection Law

The purpose of the Personal Data Protection Law No. 6698 is to protect the fundamental rights and freedoms of individuals in connection with the processing of personal data, in particular the right to privacy, and to set out binding obligations, principles and procedures for natural or legal persons who process personal data.

This personal data protection information explains our personal data protection and processing policy and has been prepared within the scope of Dent 2 Kıta Sağlık Hizmetleri Tic. Ltd. (hereinafter referred to as the Clinic), with the aim of transferring, using and protecting your personal data during services.

Within the framework of the Personal Data Protection Law No. 6698 (hereinafter referred to as the “Law” and/or “PDPL”) and the relevant legislation, your personal data will be processed by our clinic in its capacity as the Data Controller, only within the framework explained below and in accordance with the regulations of the Ministry of Health and other legislation.

Your Personal Data Collected by Us

Within the framework of our services, we collect a great deal of information from our patients. The said information collected by us is collected under all circumstances in line with the data processing principles and conditions set out in the Personal Data Protection Law No. 6698. The information we collect from you for the purposes explained in Section 2 may include the following:

Your Identity Information: Your name, surname, Turkish ID number, passport number or temporary Turkish ID number, place and date of birth, mother’s name and father’s name, marital status, gender, blood type, insurance and/or patient protocol number and other identifying data,

Your Contact Information: Your address, phone number, e-mail address and other contact data,

Your personal information obtained when you contact us by e-mail, letter or other means, and your voice recordings kept by customer representatives or patient services in accordance with call center standards;

Credit card information, your financial data appearing only on the receipt, and billing information,

Your private health insurance and Social Security Institution data for the purpose of financing and planning health services,

Your Health Information: Including but not limited to your patient health reports, diagnostic data, biometric and genetic data, laboratory results, test results, examination data, appointment information and prescription information — any and all health information and data obtained during or as a result of medical diagnosis, treatment and care services,

Your feedback such as surveys completed by the patient, thank-you letters and complaints, and satisfaction results,

Your audio and images obtained from the camera recordings in common areas that are continuously recorded in accordance with the law at our clinic,

Your health data and other personal data that you send or enter to all websites belonging to our clinic.

Purposes of Processing Personal Data

Within the framework of the legislation relating to health services, which is a public service, and in accordance with the Law No. 6698, our clinic as the data controller processes the personal data received in connection with the services it provides:

To comply with the Fundamental Law on Health Services No. 3359, Decree-Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on the Processing and Privacy of Personal Health Data and other relevant regulations,

Protection of public health, preventive medicine, the performance of medical diagnosis, treatment and care services, and the planning, management and financing of health services,

The business planning and management of our clinic,

To inform you about your appointment if you have one,

Sharing the information requested under the relevant legislation with the Ministry of Health and relevant public institutions and organizations,

To analyze the health services you use, to develop and improve health services and to store your health data,

To verify your identity,

To take all necessary technical and administrative measures within the scope of the data security of the systems and applications used,

To protect information regarding your health data that must be stored in accordance with the relevant legislation,

To provide the necessary information in line with the requests and audits of regulatory and supervisory institutions and official authorities,

Sharing the requested information with private insurance companies within the scope of the financing of health services,

To carry out quality improvement activities and risk management,

To measure patient satisfaction and to respond to all your questions and complaints within our health services,

To contact you to inform you about our services (notification by e-mail, SMS, call),

Supply of medicines or medical devices,

And, without being limited to these, it may be processed for the purposes of conducting and developing medical diagnosis, treatment and care services, planning, management and financing of health services, increasing patient satisfaction, and conducting research and development activities for these and similar purposes. Your personal rights cannot be violated during the processing of data.

Transfer of Your Data to Persons and Organizations

3.1. In accordance with the relevant legislation, your personal information will be recorded, stored, classified, processed, transferred, updated in physical and/or electronic media, and your data may be shared upon the request of official institutions, limited to the scope of the request, in cases permitted by law (Courts, Chief Public Prosecutor’s Offices, Ministries, all official institutions authorized to make requests, etc.).

3.2. Your personal data will be shared, within the framework of the Law No. 6698 and other relevant legislation and for the purposes stated above, limited to the scope of the request, with the following:

In line with the purposes in Section 2 above, in accordance with the PDPL and the relevant health legislation, ensuring that all necessary technical and administrative measures are taken to provide an appropriate level of security; the Fundamental Law on Health Services No. 3359, Decree-Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on the Processing and Privacy of Personal Health Data and other relevant legislation, Private Insurance Companies,

The General Directorate of Security and similar law enforcement agencies,

The General Directorate of Population,

The Turkish Pharmacists’ Association,

Domestic/foreign organizations and other third parties from whom we receive services and with whom we cooperate to carry out our activities,

In the event of a possible legal dispute, our clinic lawyers,

Representatives of official institutions authorized to audit our organizations.

Methods and Legal Grounds Regarding the Processing of Personal Data

Your personal information is collected through all forms of verbal, written and digital communication, as long as it serves the purposes stated above for the purpose of complying with our clinic’s contractual and legal obligations.

Your Rights Regarding Your Personal Data

In the event that your personal data is processed by our clinic as the data controller, you have the following rights pursuant to Article 11 of the Personal Data Protection Law:

To learn whether your personal data is being processed,

To request information about your personal data if it has been processed,

To learn the purpose of processing and whether it is used in accordance with its purpose,

To learn the third parties to whom it has been transferred, and to request correction in the event of incomplete or incorrect processing,

To request the deletion or removal of personal data within the framework of the conditions set out in Article 7 of the Law No. 6698, without prejudice to the legal obligation of the Health Legislation regarding the storage and protection of patient records,

To request that the operations carried out within the scope of the aforementioned correction, deletion or destruction processes be notified to the third parties to whom it has been transferred,

To object to a result being reached against you solely through analysis by automated systems,

To request compensation for the damage if you suffer a loss due to unlawful processing.

Our clinic will finalize the request as soon as possible and within thirty days at the latest, free of charge depending on the nature of the request. However, if the process requires an additional cost, the fee determined by the Personal Data Protection Board will be charged by our clinic.

Data Security

As the Clinic, we would like to state that we attach the utmost importance to the protection and security of your personal data, that we take all technical and administrative security measures that must be taken in accordance with information security standards and procedures, that we act with the awareness that personal data security is at the forefront of all products and services we offer to you, and that the aforementioned security measures are implemented taking into account all possible risks and technological possibilities, and that all necessary care is shown in this regard.