Personal Data Protection

ABOUT THE PROTECTION OF YOUR PERSONAL DATA
FOR EMPLOYEES, PROSPECTIVE EMPLOYEES, TRAINEES
CLARIFICATION TEXT

This clarification text has been prepared by DENİZLİ ÖZEL TIP ANONİM ŞTİ. (‘Özel Odak Hospital’) as the data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 (‘KVKK’) (‘Law’) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
With this clarification text, we aim to fulfil our obligation to inform you about which of your personal data will be processed, the purposes of processing your personal data, legal grounds, personal data collection method, to whom and for what purposes your processed personal data can be transferred and your rights listed in Article 11 of the Law.

Our employees, employee candidates and interns at Private Odak Hospital;
CATEGORIES OF PERSONAL DATA TO BE COLLECTED AND PROCESSED:
Identity: Name, Surname, T.R. Identity Number, father’s name-mother’s name, place and date of birth, family population record, photograph, identity card and driving licence information,
Contact: Telephone number, e-mail address, residential address,
Personnel: Payroll information, employment and exit documents, CV information, military discharge certificate, information required for AGI calculation, Family status notification,
Legal Action: Information in correspondence with judicial and administrative authorities, information in the case file,
Physical Space Security: Entry-exit registration information of employees, security camera records,
Process Security: IP address information, website login and exit information, web browser history information, log records,
Finance: Bank IBAN information,
Professional Experience: Graduation certificate, vocational training information, certificates,

PERSONAL DATA OF SPECIAL NATURE:

Health Information: Personal health information, health report, medical analysis, test and imaging information, blood group, work accident and occupational disease information and information on disability status,

Criminal Conviction and Security Measures: Criminal record.

Biometric Data: Fingerprint information.

OUR PURPOSES FOR PROCESSING YOUR PERSONAL DATA:
Your personal data, within the scope of the employment contract signed between our Hospital and our employees and / or planned to be signed with our employee candidates, meeting the human resources needed by our Hospital, carrying out the human resources processes of our Hospital, carrying out the application processes of employee candidates and interns, creating personal files, creating personal health files, ensuring and improving occupational health and safety, wages, Payment of taxes and insurance premiums, fulfilment of obligations regarding Labour Law, Occupational Health and Safety, Social Security and Tax Legislation, keeping accounting records and ensuring the fulfilment of obligations required by other legal regulations, fulfilment of contractual obligations, follow-up of legal proceedings, evaluation of employee performance and ensuring physical space security.

PERSONAL DATA COLLECTION METHOD AND LEGAL REASONS:Your personal data, both before the establishment of the employment contract, after the establishment of the employment contract and during its continuation, all kinds of documents, information you have submitted to our Hospital and security camera records and fingerprint readers kept in all locations of our Hospital.
Law No. 6698 on the Protection of Personal Data, Labour Law, Occupational Health and Safety Law, Social Insurance and General Health Insurance Law, Turkish Commercial Code, Turkish Code of Obligations, Tax Procedure Law, Identity Notification Law and other secondary regulations in force in accordance with the above-mentioned laws and your personal data limited to the retention periods stipulated in the legislation;

Employee candidates – interns;
Personal data in the category of identity, contact, personal, professional experience; It will be processed for legal reasons that it is necessary for the establishment and performance of the contract and that data processing is mandatory for the legitimate interests of the data controller.

Employee candidates – interns;
Sensitive personal data in the category of health information; will be processed for the legal reason of ‘Explicit Consent’.

For employees;
Personal data in the category of identity, contact, personal, professional experience, finance; It is necessary for the establishment and performance of the contract and is mandatory for the fulfilment of the legal obligation,
Personal data required for the LVS calculation; it is mandatory for the establishment, use or protection of a right,
Personal data in the legal transaction category will be processed for the legal reasons that it is clearly stipulated in the law and that it is mandatory for the fulfilment of a legal obligation.
Personal data in the category of transaction security and physical space security will be processed for the legal reasons that it is mandatory for the fulfilment of a legal obligation and that data processing is mandatory for the legitimate interests of the data controller.

Employees;
Sensitive personal data in the category of health information will be processed for the legal reasons of protecting public health, preventive medicine, ensuring occupational health and safety in the workplace and improving the existing health and safety conditions.
Criminal conviction and security measures and special categories of personal data in the category of biometric data will be processed for the legal reason of ‘Explicit Consent’.

TO WHOM AND FOR WHAT PURPOSES YOUR PROCESSED PERSONAL DATA CAN BE TRANSFERRED:
Personal data of Employee Candidates are not transferred.
Personal data of employees and interns are not transferred abroad.
Personal data belonging to employees and interns; In case of request by the authorities and institutions authorised to request information and audit officers and limited to the subject of the request and in cases where notification is obligatory within the scope of our legal obligations, it is transferred to the relevant institutions, judicial and administrative authorities, the law enforcement unit we are affiliated with, as well as to business partners, suppliers and service providers under the commitment of confidentiality, with whom our Hospital works / receives services in order to carry out its activities and fulfil its legal obligations.
Health data, which are among the special categories of personal data belonging to employees and interns, are transferred to the relevant institutions, judicial and administrative authorities upon request by the authorities and institutions authorised to request information and by the supervisory officers, limited to the subject of the request and in cases where notification is obligatory within the scope of our legal obligations. In accordance with the Occupational Health and Safety Services Regulation, a certified copy of your personal health file is sent to your new employer if your new employer requests it in writing after your resignation. In addition, your blood type information, personal health information and health reports are shared with the relevant health institution in case of emergency medical intervention. Apart from these, your sensitive personal data are not transferred to third parties.

YOUR RIGHTS LISTED IN ARTICLE 11 OF THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA:
As a personal data owner, if you submit your requests regarding your rights to our Hospital by the methods set out below, our Hospital will finalize the request free of charge as soon as possible and within 30 days at the latest in accordance with paragraph 2 of Article 13 of KVKK No. 6698. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged by our Hospital.

• In this context, personal data owners;
• To learn whether personal data is processed or not,
• Request information if their personal data has been processed,

The purpose of processing personal data and whether they are used in accordance with their purpose

• To know the third parties to whom personal data are transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Although it has been processed in accordance with the provisions of KVKK No. 6698 and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
• In case of damage due to unlawful processing of personal data, it has the right to demand compensation for the damage.

APPLICATION METHODS TO THE DATA CONTROLLER:
Pursuant to Article 13/1 of the KVKK No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit your request to exercise your rights mentioned above by filling out the “Data Owner Application Form” and applying in person to Sümer Mah.İzmir Bulvarı No:18/A Merkezefendi/DENİZLİ or by sending the original of the application form with wet signature to our address by registered letter with return receipt. You can also send it to our Hospital’s info@odakhastanesi.com e-mail address or our Hospital’s denizliozeltip@hs01.kep.tr KEP address by filling out the form on our web page or by using registered electronic mail (KEP), secure electronic signature, mobile signature or your e-mail address that you have previously sent to our Hospital and registered in our system.

DOCUMENT REVISION INFORMATION:

REVISION NO: 1
REVISION DATE: 01.12.2021
REVISED INFORMATION: Changed Title and Mersis no. information due to change of type has been updated.

DENİZLI PRIVATE TIP ANONİM ŞİRKETİ
PRIVATE FOCUS HOSPITAL

ABOUT SECURITY CAMERAS
CLARIFICATION TEXT

This clarification text has been prepared by Denizli Özel Tıp Anonim Şirketi (“Özel Odak Hospital”) as the data controller within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

In order to ensure building security, images are recorded by means of security cameras in all locations in and around our hospital and the recording process is supervised by the security unit.

The personal data in question is processed automatically based on the legal reason that “it is mandatory for the data controller to fulfill its legal obligation” and “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned” in Article 5 of the KVKK.

Such personal data may be transferred to judicial authorities or relevant law enforcement agencies upon request to resolve legal disputes or in accordance with the relevant legislation.

You can send your requests within the scope of Article 11 of the Law regulating the rights of the person concerned to Denizli Özel Tıp Anonim Şirketi (“Özel Odak Hastanesi”) sinin Sümer Mah.İzmir Bulvarı Mah. No:18/A Merkezefendi/DENİZLİ in writing or via e-mail confirming your membership to our Hospital’s info@odakhastanesi.com e-mail address or our hospital’s denizliozeltip@hs01.kep.tr KEP address.

ABOUT THE PROTECTION OF YOUR PERSONAL DATA
PATIENTS AND RELATIVES

CLARIFICATION TEXT
This clarification text has been prepared by DENİZLİ ÖZEL TIP ANONİM ŞTİ. (“Özel Odak Hastanesi”) as the data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) (“Law”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

With this clarification text, we aim to fulfill our obligation to inform you about which of your personal data will be processed, the purposes of processing your personal data, legal grounds, personal data collection method, to whom and for what purposes your processed personal data can be transferred and your rights listed in Article 11 of the Law.

Odak Hospital, patients and patient relatives;

CATEGORIES OF PERSONAL DATA TO BE COLLECTED AND PROCESSED:
Identity: Name, Surname, T.R. Identity Number, father’s name-mother’s name, place and date of birth, identity card/passport, signature circular, power of attorney, authorization certificate information,
Contact: Phone number, e-mail address, KEP address, work address, residence address,
Legal Action: Information in correspondence with judicial and administrative authorities, information in case files,
Finance: Bank IBAN information,
Customer Transaction: Invoice, bill, check information, request information, order information, payment information, credit, debit, current account information,
Physical Space Security: Entry-exit registration information of visitors, security camera records,

Risks Management: Information processed for the management of commercial, technical and administrative risks.

CATEGORIES OF SPECIAL CATEGORIES OF PERSONAL DATA TO BE COLLECTED AND PROCESSED:
Health Information : Information about the disability status of our patients, blood type information, device and prosthesis information, diagnosis and treatment information, health report, medical analysis, test and imaging information and all other personal health information,
Biometric Data: The palm and fingerprint information of our patients.

OUR PURPOSES FOR PROCESSING YOUR PERSONAL DATA:
Personal data of patients and their relatives will be processed for the purposes of conducting medical diagnosis and treatment activities, conducting activities in accordance with the legislation, conducting accounting affairs, conducting communication activities, conducting storage and archive activities and ensuring the fulfillment of obligations required by other legal regulations and ensuring the security of physical space.

Special sensitivity is shown by Private Odak Hospital in the processing of sensitive personal data, which we believe that its protection is more critical for data owners in various respects. In this context, by taking adequate measures determined by the Board for the security of sensitive personal data, the sensitive personal data of our patients; It will be processed for the purposes of carrying out hospital activities, carrying out medical diagnosis and treatment activities, keeping hospital records, carrying out storage and archive activities and ensuring the fulfillment of obligations required by other legal regulations.

PERSONAL DATA COLLECTION METHOD AND LEGAL REASONS:
Your personal data is obtained through all kinds of documents, information you have submitted to our Hospital and security camera records, palm and fingerprint readers kept in all locations of our Hospital.

Law No. 6698 on the Protection of Personal Data, Social Insurance and General Health Insurance Law, Turkish Commercial Code, Turkish Code of Obligations, Tax Procedure Law, Identity Notification Law, Health Legislation and other secondary regulations in force in accordance with the above-mentioned laws and limited to the retention periods stipulated in the legislation,

Your personal data; It will be processed for the legal reasons that it is stipulated in the laws, it is necessary for the establishment and performance of the contract, fulfillment of legal obligations, data processing is mandatory for the legitimate interests of the data controller, it is mandatory for the protection of the life or physical integrity of the person himself or someone else who is unable to disclose his consent due to actual impossibility or whose consent is not legally valid.

Health data among the special categories of personal data of our patients;

• Protection of public health,
• Preventive medicine,
• Medical diagnosis,
• Carrying out treatment and care services,
• Planning and management of health services and financing,
• Keeping hospital records as per legal obligation,

For legal reasons, palmprint and fingerprint data in the biometric data category will be processed for the legal reason that it is clearly stipulated in the laws.

TO WHOM AND FOR WHAT PURPOSES YOUR PROCESSED PERSONAL DATA MAY BE TRANSFERRED:
Your Personal Data is not transferred abroad.
Your personal data are transferred to the relevant institutions, judicial and administrative authorities, as well as to other business partners, suppliers and service providers who are under the commitment of confidentiality, with whom our Hospital works / receives services in order to carry out its activities and fulfill its legal obligations, in cases where it is obliged to notify within the scope of our legal obligations and limited to the subject of the request by the authorities and institutions authorized to request information.
Health data, which are among the special categories of personal data belonging to our patients, can only be accessed by the authorities and institutions authorized to request information and by the auditors.upon request and limited to the subject of the request and in cases where notification is obligatory within the scope of our legal obligations, it is transferred to the relevant institutions, judicial and administrative authorities.

YOUR RIGHTS LISTED IN ARTICLE 11 OF THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA:
As a personal data owner, if you submit your requests regarding your rights to our Hospital by the methods set out below, our Hospital will finalize the request free of charge as soon as possible and within 30 days at the latest in accordance with paragraph 2 of Article 13 of KVKK No. 6698. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged by our Hospital.

In this context, personal data owners;

• Learn whether personal data is being processed,
• Request information if their personal data has been processed,
• The purpose of processing personal data and whether they are used in accordance with their purpose

learning that it is not used,

• To know the third parties to whom personal data are transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Although it has been processed in accordance with the provisions of KVKK No. 6698 and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
• In case of damage due to unlawful processing of personal data, it has the right to demand compensation for the damage.

APPLICATION METHODS TO THE DATA CONTROLLER:
Pursuant to Article 13/1 of the KVKK No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit your request to exercise your rights mentioned above by filling out the “Data Owner Application Form” and applying in person to Sümer Mah.İzmir Bulvarı No:18/A Merkezefendi/DENİZLİ or by sending the original of the application form with wet signature to our address by registered letter with return receipt. You can also send it to our Hospital’s info@odakhastanesi.com e-mail address or our Hospital’s denizliozeltip@hs01.kep.tr KEP address by filling out the form on our web page or by using registered electronic mail (KEP), secure electronic signature, mobile signature or your e-mail address that you have previously sent to our Hospital and registered in our system.

ABOUT THE PROTECTION OF YOUR PERSONAL DATA

SUPPLIERS, SERVICE PROVIDERS AND BUSINESS PARTNERS

CLARIFICATION TEXT
This clarification text has been prepared by DENİZLİ ÖZEL TIP ANONİM ŞTİ. (‘Özel Odak Hospital’) as the data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 (‘KVKK’) (‘Law’) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
With this clarification text, we aim to fulfil our obligation to inform you about which of your personal data will be processed, the purposes of processing your personal data, legal grounds, personal data collection method, to whom and for what purposes your processed personal data can be transferred and your rights listed in Article 11 of the Law, and your rights listed in Article 11 of the Law.

At Private Odak Hospital, our suppliers, service providers and business partners;
CATEGORIES OF PERSONAL DATA TO BE COLLECTED AND PROCESSED:
Identity: Name, surname, T.R. Identity Number, father’s name-mother’s name, place and date of birth, identity card/passport, signature circular, power of attorney, authorisation certificate information,
Contact: Telephone number, e-mail address, KEP address, work address, residence address,
Legal Action: Information in correspondence with judicial and administrative authorities, information in the case file,
Finance: Bank IBAN information,
Customer Transaction: Invoice, bill, cheque information, request information, order information, payment information, receivable, payable, current account information,
Physical Space Security: Entry-exit registration information of visitors, security camera records,

Risk Management: Information processed for the management of commercial, technical, administrative risks.

CATEGORIES OF SPECIAL CATEGORIES OF PERSONAL DATA TO BE COLLECTED AND PROCESSED:
Your special categories of personal data are not processed.

OUR PURPOSES FOR PROCESSING YOUR PERSONAL DATA:
The personal data of the officials of our suppliers, service providers and business partners, within the scope of the business relationship established and / or planned to be established with our Hospital, the execution of goods and service procurement processes, the execution of production and operation processes, the execution of activities in accordance with the legislation, the execution of finance and accounting affairs, the execution and follow-up of legal affairs, The data will be processed for the purposes of conducting communication activities, conducting training activities, conducting storage and archive activities, conducting contract processes, fulfilling contractual obligations, and ensuring the fulfilment of obligations required by other legal regulations and ensuring the security of physical space.

PERSONAL DATA COLLECTION METHOD AND LEGAL REASONS:
Your personal data is obtained through all kinds of documents, information you have submitted to our Hospital and security camera records kept in all locations of our Hospital.

Law No. 6698 on the Protection of Personal Data, Social Insurance and General Health Insurance Law, Turkish Commercial Code, Turkish Code of Obligations, Tax Procedure Law, Identity Notification Law, Health Legislation and other secondary regulations in force in accordance with the above-mentioned laws and limited to the retention periods stipulated in the legislation,

Your personal data; It will be processed for the legal reasons that it is stipulated in the laws, it is necessary for the establishment and performance of the contract, fulfilment of legal obligations, and data processing is mandatory for the legitimate interests of the data controller.

TO WHOM AND FOR WHAT PURPOSES YOUR PROCESSED PERSONAL DATA CAN BE TRANSFERRED:
Your Personal Data is not transferred abroad.
Your personal data are transferred to the relevant institutions, judicial and administrative authorities, as well as to other business partners, suppliers and service providers who are under the commitment of confidentiality, with whom our Hospital works / receives services in order to carry out its activities and fulfil its legal obligations, limited to the subject of the request and in cases where notification is obligatory within the scope of our legal obligations.

YOUR RIGHTS LISTED IN ARTICLE 11 OF THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA:
As a personal data owner, if you submit your requests regarding your rights to our Hospital by the methods set out below, our Hospital will finalise the request free of charge as soon as possible and within 30 days at the latest in accordance with paragraph 2 of Article 13 of KVKK No. 6698. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged by our Hospital.
In this context, personal data owners;

• To learn whether personal data is being processed,
• Request information if personal data has been processed,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Although it has been processed in accordance with the provisions of KVKK No. 6698 and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• To object to the emergence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems,
  In case of damage due to unlawful processing of personal data, it has the right to demand compensation for the damage.

APPLICATION METHODS TO THE DATA CONTROLLER:
Pursuant to Article 13/1 of the KVKK No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit your request to exercise your above-mentioned rights by filling out the ‘Data Owner Application Form’ and applying in person to Sümer Mah.İzmir Bulvarı No:18/A Merkezefendi/DENİZLİ or by sending the original of the application form with wet signature to our address by registered letter with return receipt. You can also send it to our Hospital’s info@odakhastanesi.com e-mail address or our Hospital’s denizliozeltip@hs01.kep.tr KEP address by filling out the form on our web page or by using registered electronic mail (KEP), secure electronic signature, mobile signature or your e-mail address that you have previously sent to our Hospital and registered in our system.

DOCUMENT REVISION INFORMATION:
REVISION NO: 1
REVISION DATE: 01.12.2021
REVISED INFORMATION: Changed Title and Mersis no. information due to change of type has been updated.

You can examine the content by downloading the file (Word).

KİŞİSEL VERİ GÜVENLİK SAKLAMA VE İMHA POLİTİKASI

You can examine the content by downloading the file (Word), fill in the form (Pdf) and apply in person to Sümer Mah.İzmir Bulvarı No:18/A Merkezefendi/DENİZLİ or send the original signed application form to our address by registered letter with return receipt.

KİŞİSEL VERİ İHLALİ MÜDAHALE PLANI

KİŞİSEL VERİ İHLALİ BİLDİRİM FORMU

You can examine the content by downloading the file (Word).

ÖZEL NİTELİKLİ KİŞİSEL VERİ GÜVENLİK SAKLAMA VE İMHA POLİTİKASI