INFORMATION NOTICE
This information notice has been prepared by ERSA SAĞLIK TURİZMİ DANIŞMANLIK VE BİLİŞİM TEKNOLOJİLERİ LİMİTED ŞİRKETİ (“COMPANY”), located at 7-8-9-10.KIS.MH.ÇOBANÇEŞME E-5 YANYOL CD.N.8/2A, FLOOR:8, BAKIRKÖY / Istanbul, in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 (“Law”) and the Communiqué on the Principles and Procedures for Fulfilling the Obligation to Inform, in its capacity as the data controller.
The personal data you provide directly or indirectly to the COMPANY through the website, phone, or social media will be processed by the COMPANY for the purpose of conducting the services you wish to receive, as well as determining the pre-operation condition of the patient. Your personal data will be processed in whole or in part through automatic means, based on the legal ground “it is necessary for the processing of personal data of the parties to the contract, provided that it is directly related to the establishment or performance of the contract,” as specified in Article 5 of the Law. These data may be transferred abroad to our cloud-based system, stored, and shared with domestic and foreign individuals and legal entities for the same purpose and legal reasons.
In accordance with Article 11 of the Law, which regulates the rights of the data subject, you can submit your requests regarding the processing of your personal data in writing to the COMPANY’s official address via mail or electronically through the email address [email protected] as per the Communiqué on the Principles and Procedures for the Application to the Data Controller.
I have read the information notice, and I hereby give my free consent for the COMPANY to process my personal data, limited to the specified purposes and legal grounds, and to transfer them to the necessary parties, while maintaining them for the maximum period required by law. I confirm that I have been fully informed by the COMPANY, and I declare that I give my explicit consent under the Law based on my choices indicated below.
PATIENT/SERVICE RECIPIENT INFORMATION NOTICE UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA NO. 6698
PURPOSE AND SCOPE OF THE INFORMATION NOTICE
This information notice has been prepared by ERSA SAĞLIK TURİZMİ DANIŞMANLIK VE BİLİŞİM TEKNOLOJİLERİ LİMİTED ŞİRKETİ (hereinafter referred to as “COMPANY”) under Article 10 of the Law on the Protection of Personal Data No. 6698 (“KVKK” or “Law”) and the Communiqué on the Principles and Procedures for Fulfilling the Obligation to Inform, issued by the Personal Data Protection Board. It aims to inform you about how your personal data is collected, the legal basis for its collection, the purposes for processing your data, and to whom and for what purposes it may be transferred.
IDENTITY OF THE DATA CONTROLLER
Company Name: ERSA SAĞLIK TURİZMİ DANIŞMANLIK VE BİLİŞİM TEKNOLOJİLERİ LİMİTED ŞİRKETİ
Address: 7-8-9-10.KIS.MH.ÇOBANÇEŞME E-5 YANYOL CD.N.8/2A, FLOOR:8, BAKIRKÖY / Istanbul
PROCESSED PERSONAL DATA AND PURPOSES OF PROCESSING
PROCESSED PERSONAL DATA
The following personal data are processed by the COMPANY in accordance with the requirements and nature of the activities conducted for the service you wish to receive:
- Identity Data: Name, Surname, Date/Place of Birth, National ID/Passport Information, Signature, Gender, Nationality, Marital Status
- Contact Data: Phone Number, Email Address, Address Information, Postal Code
- Physical Space Security Data: CCTV Recordings
- Financial Data: Bank Account Number, IBAN, Credit Card Information
- Visual and Audio Data: Pre- and Post-Operation Photos
- Health Data: Personal Health History, Information on Illnesses, Allergy Information, Blood Type, Consultation Report, Medication Information, Pregnancy Status, Dental Health Information, Treatment Information, Illness Type, Medical Values, Test Results, Device and Prosthesis Information
PURPOSES OF PROCESSING
Your personal data listed above are processed for the following purposes:
- Creating a patient registration file to provide healthcare services
- Providing necessary examination, medical diagnosis, and treatment services
- Offering post-operation support services
- Managing patient relations processes
- Ensuring activities are carried out in accordance with regulations
- Collecting and sharing data required by public institutions, primarily the Ministry of Health, in compliance with legal obligations
- Carrying out accounting and finance tasks for service sales
- Managing contract processes
- Conducting advertising/campaign/promotion processes
- Managing product/service sales processes
- Providing post-sale support services for products/services
- Ensuring the security of the data controller’s operations
TRANSFER OF PERSONAL DATA
Your personal data may be transferred to our business partners, third parties from whom we receive services or with whom we cooperate, legally authorized public institutions, and private individuals within the scope of the purposes and legal grounds mentioned above, in compliance with the personal data processing conditions specified in Articles 8 and 9 of the Law.
RETENTION PERIOD OF PERSONAL DATA
Your personal data will be processed only for the purposes stated in this Information Notice and in compliance with all applicable laws and regulations, including statutory periods for data processing and time limitations. In the event of any changes in the data processing periods as specified by laws, the updated durations will be applied. After these periods, your personal data will be deleted, destroyed, or anonymized by the COMPANY or upon your request, in accordance with the Law and related regulations.
YOUR RIGHTS AS A DATA SUBJECT
Under Article 11 of the Law, which regulates the rights of the data subject, you can submit your requests regarding the processing of your personal data in writing to the COMPANY’s official address via mail or electronically through the email address [email protected].
I have read and understood the information notice. ☐
EXPLICIT CONSENT STATEMENT FOR THE PROCESSING AND TRANSFER OF PERSONAL DATA AND SPECIAL CATEGORIES OF PERSONAL DATA
I have read and understood the entire “Patient/Service Recipient Information Notice” under the Law on the Protection of Personal Data No. 6698, and I acknowledge that I have been informed about how my personal data, including special categories of personal data, will be processed and transferred by ERSA SAĞLIK TURİZMİ DANIŞMANLIK VE BİLİŞİM TEKNOLOJİLERİ LİMİTED ŞİRKETİ (“COMPANY”) in accordance with KVKK, and that I can withdraw my explicit consent at any time.
I consent to the processing of my special categories of personal data, specifically health data, by the COMPANY and its affiliates for the purpose of providing the services I request and the necessary healthcare services, and I also consent to the transfer of such data to relevant domestic or foreign individuals and organizations. I confirm that I have been informed in this regard, and I give my free consent for the COMPANY to process my personal data and special categories of personal data, including transferring them abroad, for the purposes mentioned above.
EXPLICIT CONSENT OF THE DATA SUBJECT
If you give your explicit consent, please write “I give my explicit consent” in your own handwriting and sign here. If you only consent to the processing of certain personal data mentioned in the information notice, please specify this separately.
EXPLICIT CONSENT STATEMENT FOR THE PROCESSING OF PERSONAL DATA AND SPECIAL CATEGORIES OF PERSONAL DATA ON SOCIAL MEDIA ACCOUNTS AND THE WEBSITE
As ERSA SAĞLIK TURİZMİ DANIŞMANLIK VE BİLİŞİM TEKNOLOJİLERİ LİMİTED ŞİRKETİ (“COMPANY”), in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), we, as the data controller, will process your personal data by publishing them on the COMPANY’s social media accounts and official website. We request your explicit consent in this regard.
EXPLICIT CONSENT OF THE DATA SUBJECT
I consent to the processing of my personal data, including special categories of personal data, by the COMPANY for the purposes mentioned in this information notice, including publishing them on the COMPANY’s website and social media accounts. I confirm that I have been fully informed in this regard and that I have read and understood the information notice prepared by the COMPANY.
If you give your explicit consent, please write “I give my explicit consent” in your own handwriting here. If you only consent to the processing of certain personal data mentioned in the information notice, please specify this separately.