KVKK General Information Text

GENERAL INFORMATION TEXT ON THE PROTECTION OF PERSONAL DATA

Yeni Manisa Yapı Sanayi Özel Sağlık ve Turizm Hizmetleri A.Ş. (Hospital) holds the title of “Data Controller” in accordance with Article 3 of the KVKK, and we exercise utmost care in the processing and protection of the personal data of Patients and Patient Relatives (Companion, Parent/Guardian, Legal Guardian, etc.), our potential patients and guests and their relatives, our website visitors, our suppliers and service providers together with their employees/authorized persons, and other third parties, in compliance with our legislation. This information text has been prepared in order for the Hospital to fulfill its “obligation to inform” within the hospital, pursuant to the Personal Data Protection Law No. 6698 (“KVKK”).

1. Personal Data

In this context, the main general and special categories of personal data, primarily the personal health data that is necessary for the conduct of all medical diagnosis, examination, treatment and care services and obtained for this purpose, are listed below;

• Your Identity Information: Your identity data such as name, surname, T.R. Identity Number, passport number or temporary T.R. identity number if you are not a Turkish citizen, place and date of birth, marital status, gender, and the photocopy of the T.R. Identity Card or Driving License you submit,
• Your Contact Information: Address, telephone number, e-mail address
• Your Financial Information: Bank account number or IBAN number
• Your Health Information: Your health and sexual life data obtained during the conduct of medical diagnosis, treatment and care services such as your laboratory and imaging results, test results, examination data, prescription information,
• Your Legal Transaction Information: Correspondence with judicial authorities and information in the case file
• Your Biometric Information: Your palm scan records taken as required by Social Security Institution legislation
• Patient Transaction Information: Your private health insurance data and Social Security Institution data for the financing and planning of health services, your responses and comments shared with the purpose of evaluating our services,
• Your Image and Audio Recordings: Your closed-circuit camera system image and audio recordings taken during your visit to our hospitals,
• Your Communication Records: Your voice call records kept if you contact our Call Center,
• Browsing information obtained during the use of our website and mobile application, IP address, browser information, and the medical documents, questionnaires, form information and location data you transmit with your own consent.

2. Purpose of Processing Your Personal Data

Your personal data is processed for the purposes stated below:

• Enabling you to purchase and benefit from the products and services offered to you by the Hospital,
• Identity determination and verification,
• Protection of public health, preventive medicine, conduct of medical diagnosis, treatment and care services, planning and management of health services and their financing,
• Fulfillment of legal obligations set out in the Fundamental Health Services Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliated Institutions, the Private Hospitals Regulation, the Personal Data Protection Law No. 6698, the Regulation on the Processing and Protection of Confidentiality of Personal Health Data and other relevant legislation,
• Planning and management of our hospital's internal operations and daily operations,
• Measurement, improvement and research of patient satisfaction by the Hospital Management within the framework of patient rights and patient experience activities,
• Supply of patient-specific medication and/or medical supplies and/or devices,
• In case an appointment is made, informing patients about the appointment, providing information and/or reminding the appointment,
• Carrying out risk management and quality improvement activities,
• Conducting analyses to improve health services,
• Financing of your health services by patient services, financial affairs and marketing departments, coverage of examination, diagnosis and treatment expenses, eligibility inquiry and sharing of requested information with private insurance companies within the scope of financing of health services,
• Analyzing the use of health services for the purpose of developing and improving the health services offered, and storing your health data, responding to your questions or complaints regarding our services,
• Conducting patient relations management processes,
• Performance of finance, accounting and invoicing processes,
• Tracking of request/complaint processes,
• Ensuring physical premises security,
• Conducting logistics activities,
• Carrying out activities such as organizations, events, etc.,
• Conducting contract processes,
• Providing information on developments in the healthcare institution, newly applied treatment methods, service areas and services to be offered, opening information and similar matters,
• Providing information to authorized persons and institutions,
• Creation and tracking of visitor records,

Apart from the situations mentioned above, your personal data may be processed, provided that your consent is obtained, for the purposes of informing about developments in the healthcare institution, newly applied treatment methods, service areas and services to be offered, opening information and similar matters.

Our Hospital shows special sensitivity in the processing of special categories of personal data, which are believed to be of more critical importance in terms of protection for data subjects from various aspects. In this context, such data are not processed without the explicit consent of the data subjects, provided that adequate measures determined by the Board are taken.

However, special categories of personal data other than data relating to health and sexual life may also be processed without the explicit consent of the data subject in cases stipulated by law. On the other hand, data relating to health and sexual life may be processed without explicit consent, provided that adequate measures are taken and the following grounds exist:

• Protection of public health,
• Preventive medicine,
• Medical diagnosis,
• Conduct of treatment and care services,
• Planning and management of health services and their financing.

3. To Whom and for What Purpose Your Processed Personal Data May Be Transferred

Your personal data may be transferred, within the scope of the conditions for transferring personal data pursuant to Articles 8 and 9 of Law No. 6698 and provided that adequate and effective measures specified in the legislation are taken, to Hospital shareholders-business partners, the patient's relative/legal representative, public and/or private legal entities for which the patient is an employee/insured person, private health insurance companies, laboratories, our business connections within the scope of the purpose of the service we provide, or authorized public institutions or organizations in cases stipulated by the relevant legislation.

4. Method and Legal Grounds for Collecting Your Personal Data

Your personal data is collected based on one of the legal grounds for personal data processing, namely “being explicitly provided for in the laws”, “the processing of personal data belonging to the parties to a contract being necessary provided that it is directly related to the establishment or performance of that contract”, “being mandatory for the Company to fulfill its legal obligation”; “being mandatory for the establishment, exercise or protection of a right”; “being mandatory for the legitimate interests of the Company provided that it does not harm the fundamental rights and freedoms of the relevant persons”, or based on your explicit consent, through records transmitted via internet or call center channels when making an appointment, printed forms or questionnaires filled out in the physical environment, invoices, delivery notes, various documents and contracts submitted to the Company, medical tests, examinations and measurements performed in the hospital, or documents received within the scope of your communications with doctors or other Hospital personnel, palm readers and security cameras.

Your Personal Data will be processed within the scope of the lawful grounds stipulated in Article 5, Paragraph 2 of Law No. 6698, for the performance of the contract, fulfillment of legal obligations or, provided that it does not harm your fundamental rights and freedoms, mandatory legitimate interests, or in cases where none of these apply, based on your explicit consent.

5. Rights of the Personal Data Subject

Your rights as a data subject arising from the Law are listed in Article 11 of the relevant Law and are as follows: Everyone has the right, by applying to the data controller, to learn whether personal data relating to him/herself is processed, to request information if personal data has been processed, to learn the purpose of processing personal data and whether they are used in accordance with their purpose, to know the third parties to whom personal data is transferred domestically or abroad, and to request the correction of personal data if it has been processed incompletely or incorrectly.

You may exercise your rights set out in the above articles by filling in the “Relevant Person Application Form”, which you can obtain from the website https://grandmedicalhospital.com.tr/, through the following methods:

After filling in the application form on our website;

• You may deliver it in person with a wet signature or send it to our postal address via Notary or registered mail with return receipt,
• You may transmit it electronically by using your registered electronic mail (KEP), secure electronic signature, mobile signature or e-mail address.