Personal Data Protection Law

AKADEMİ HOSPITAL
CLARIFICATION TEXT ABOUT THE PROCESSING OF PERSONAL DATA

In accordance with the Law on the Protection of Personal Data No. 6698 ("PDPL"), the Basic Law on Health Services No. 3359, the Decree Law No.663 on the Organization and Duties of the Ministry of Health and its Affiliates, the Legislation on Private Hospitals and the Regulations of the Ministry of Health and other legislation provisions; In order to collect and process your personal data you have provided to us while using our health services and other

services, including your personal data, some information is hereby provided by AK-MED MERSİN ÖZEL SAĞLIK HİZMETLERİ SAN. VE TİC. A.Ş.  (“Hereinafter it will be referred to as private Mersin AKADEMİ Hospital.)  within the scope of this clarification text.

PRIVATE MERSİN AKADEMİ Hospital, which has the title of Data Controller, will be able to record, store, update your personal data as described in this Clarification Text, to share, transfer, classify your personal data with third parties (relatives of the service recipient and/or public and/or private legal entities where the service recipient is an employee/insured, other public and/or private legal entities, third parties from whom our companies receive services or with whom we cooperate to carry out their activities for the purposes specified in the legislation to which they are subject), where permitted and/or required by the legislation or agreements, and to process them in the ways listed in the PPDL and relevant legislation.

Your Personal data is obtained through oral, written, visual or electronic media, call center, website, oral, written and similar channels for the purposes of protection of public health, preventive medicine, medical diagnosis, carrying out treatment and care services, planning and management of health services and financing provided by MERSİN AKADEMİ Hospital.

Your Personal Data Processed with Your Explicit Consent and Their Processing Purposes

Your personal data, including your personal data of special nature, including your health data, can be processed by the PRIVATE MERSİN AKADEMİ Hospital in a limited and measured manner in connection with the purposes specified in this article, including but not limited to: Your identity information, your name, surname, T.R. ID number, passport number or temporary T.R. ID number, place and date of birth, marital status, gender, insurance or patient protocol number and other identity data that we can identify you with; Your contact information, your phone number, your electronic mail address and your other communication data, your voice call records kept by customer representatives or patient services in accordance with call center standards and your personal data obtained when you contact us by e-mail, letter or other means; your Financial Data such as your bank account number, IBAN number, credit card information, billing information; your data on private health insurance for the purpose of financing and planning health services and your data of the Social Security Institution; your camera records images kept for security and inspection purposes if you visit our hospital, your vehicle license plate information if you use parking, Your health information; your personal data on all kinds of health and sexual life obtained during or as a result of the execution of medical diagnosis, treatment and care services, including your laboratory results, test results, examination data, appointment information, check-up information, prescription information but not limited to these, your other personal data including the CV provided in this regard in case you apply for a job at PRIVATE MERSİN AKADEMİ Hospital, and your service contract and all kinds of personal data related to your work aptitude if you are an employee of PRIVATE MERSIN AKADEMI Hospital or an associated employee.

All kinds of personal data obtained by PRIVATE MERSİN AKADEMİ Hospital can be processed in line with the purposes listed; confirming your identity, protecting public health, preventive medicine, medical diagnosis, carrying out treatment and care services, planning and management of health services and financing, planning and management of daily operations with the internal functioning of our hospital, informing you about the appointment if you make an appointment, fulfilling risk management and quality improvement activities, making evaluations for the development of health services, conducting research, fulfilling legal and regulatory requirements, realizing your e-bulletin subscription and to maintain your relationship with the institutions contracted with our hospital, to make invoicing in return for our health services, to share the information requested with private insurance companies within the scope of the financing of health services, to share the information requested with the Ministry of Health and relevant public institutions and organizations in accordance with the relevant legislation, to respond to all kinds of questions and complaints about our health services, to take all necessary technical and administrative measures within the scope of data security of hospital systems and applications, to analyze your use of health services in order to develop and improve the health services we offer and to store your health data, to provide the necessary information in line with the demands and inspections of the official authorities with regulatory and supervisory institutions, to train and develop our employees, to monitor, prevent and retrieve abuse and unauthorized transactions, to keep information about your health data that should be stored in accordance with the relevant legislation, to provide financial reconciliation with the institutions we contract with regarding the health services provided to you, the measurement of patient satisfaction and without limited to them, the execution and development of medical

diagnosis, treatment and care services, planning and management of health services and financing, to increase patient satisfaction, research and similar purposes.

Conditions Where Explicit Consent Is Not Required In Personal Data Processing By PDPL

In the event that at least one of the following situations is present, it will also be possible to process your personal data in the absence of your Explicit Consent.

In addition, your personal data regarding health and sexual life can only be processed by the PRIVATE MERSİN AKADEMİ Hospital without seeking your explicit consent for the purpose of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing.

Transferring Your Personal Data Domestically or Abroad

Your personal data of our service areas can be transferred to third parties in the country as well as abroad via our business partners and other third parties that we cooperate with, within the framework of the personal data transfer conditions and purposes specified in Articles 8 and 9 of the Law to benefit from the services provided by PRIVATE MERSİN AKADEMİ Hospital for the purpose of carrying out the necessary work by the business units and carrying out the relevant business processes, planning and executing the commercial or scientific strategies of PRIVATE MERSİN AKADEMİ Hospital, ensuring the legal, technical and commercial security of the people in contact with the PRIVATE MERSIN ACADEMY Hospital in order to develop or carry out health services for the above-mentioned purposes for private insurance companies, Ministry of Health and its sub-units, Social Security Institution, General Directorate of Security and other law enforcement agencies, General Directorate of Population, Pharmacists Association of Turkey, Courts and all kinds of judicial authorities, central and other third parties, your authorized representatives, lawyers, third parties we consult, including tax and financial advisors and auditors, regulatory and supervisory bodies, including official authorities

Method and Legal Reasons for Collecting and Processing Your Personal Data

Your personal data is obtained in all kinds of verbal, written, visual and electronic media or by non-electronic methods, for the purposes stated above and for the health services to be provided within the determined legal framework and in this context, for the PRIVATE MERSİN AKADEMİ Hospital to fulfill its contractual and legal obligations fully and duly.

Retention of Your Personal Data

Your personal data is processed as a requirement of the principle of limitation for the purpose, limited to the period required to fulfill the purposes described in this Clarification Text and in any case to be processed in accordance with the practices and commercial life practices of the PRIVATE MERSİN AKADEMİ Hospital, and after the expiration of the periods, it is deleted, destroyed or anonymized.

In addition to these, in cases clearly stipulated by law, your data, which is mandatory for the PRIVATE MERSİN AKADEMİ Hospital to fulfill its legal obligation as the data controller, which is made public by the person concerned, which is mandatory for the legitimate interests of our company, which has the title of data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned, can only be used for the realization of the purposes listed as a limitation in this sentence if the periods specified under this heading pass. Your personal data stored for these reasons will not be allowed to be accessed for any other purpose and can only be used within the scope of essential circumstances. In the event that the above-mentioned essential conditions expire, your personal data will be duly deleted, destroyed or anonymized.

Rights of the Personal Data Owner in the capacity of Data Subject

If you, as the owner of the personal data collected, processed and transferred by the PRIVATE MERSİN AKADEMİ Hospital, wish to exercise your rights under this title and/or within the scope of the PDPL, within the procedures and principles stipulated in this Clarification Text and legislation, or if you apply to the PRIVATE MERSİN AKADEMİ Hospital, your requests in your application will be concluded free of charge within thirty (30) business days at the latest, depending on the nature of the request. However, if the transaction requires a separate cost for the PRIVATE MERSİN AKADEMİ Hospital, it may be possible to request the fee in the tariff determined by the Personal Data Protection Board.

Relevant persons (data owners – service recipients) in accordance with Article 11 of the PDPL;

Data owners pursuant to Article 11 of the Law has the rights as following; (i) to learn whether personal data related to them is processed, (ii) to request information about it if their personal data has been processed, (iii) to learn the purpose of processing personal data and whether they are used in accordance with their purpose, (iv) to know the third parties to whom personal data is transferred at home or abroad (v) to request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within the scope to third parties to whom personal data is transferred, (vi) Despite the fact that it has been processed in accordance with the provisions of the law and other relevant laws,  in the event that the reasons requiring its processing disappear, to request the deletion or destruction of personal data, and to request notification of the transaction made within this scope to third parties to whom personal data has been transferred (vii) to object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems and (viii) to demand the compensation of the damage in case of damage due to unlawful processing of personal data.

Requests for the exercise of these rights may be submitted to us by the personal data owners by the PRIVATE MERSİN AKADEMİ Hospital and by the methods specified in the Scope of Law No. 6698.

Regarding the issues mentioned on this form, changes may occur in line with legal and technological developments.

In order to exercise your above-mentioned rights, you can submit your request in "written" to our Company in accordance with the PDP Law and the Communiqué on the Procedures and Principles of Application to the Data Controller, together with the necessary information identifying your identity and your explanations regarding the right you wish to exercise, by filling out and signing the application form that can be accessed from the link below;

You must send it to us by signing with the "secure electronic signature" defined in the Electronic Signature Law No. 5070 by the applicant, and by sending it to our Company's registered e-mail address ([email protected]).

Click for the application form.