As “EOT Ankara Dental Clinic”, the scope within which the personal data we obtain from our patients can be processed, in accordance with the Personal Data Protection Law No. 6698, as the Data Controller, is explained below, taking into account the issues related to the privacy of private life.

What is the Method and Legal Reason for Collecting Your Personal Data?

Your personal data is processed in accordance with the relevant legal regulations and by taking measures taken by the Personal Data Protection Board, in order to establish and fulfill the healthcare service contract with you, to fulfill our legal obligations, provided that it does not harm your fundamental rights and freedoms, if data processing is mandatory for our legitimate interests, for the purpose of preventive medicine, medical diagnosis services, provision, financing and management of healthcare services, statistical studies to improve service quality, and workplace safety.

Your personal data is obtained through your completion of patient information forms, consent forms and patient treatment cards, through written, verbal and e-mail notifications from you, through patient telephone call records, through information you enter on our website, through notifications from your private health insurance company, through notifications from the hospital or health institution where you receive treatment or have medical tests and analyses, as a result of your medical examinations, and through closed-circuit security camera recordings.

Your personal data refers to the health information, medical history, identification information, photograph, security camera recordings, contact information, occupation, data provided in patient information and consent forms, and test results that you provide to us in writing, verbally, or electronically during and after examination/diagnosis/treatment. This information is stored physically and digitally. Your personal data may be processed and transferred to the natural and legal entities specified in this “Information Text” and for the purposes set forth below, in accordance with the basic principles stipulated by the Personal Data Protection Law (KVKK), and within the scope of the personal data processing conditions and purposes set forth in Articles 5 and 6 of the KVKK.

For What Purposes Do We Process Your Personal Data?

Your personal data may be processed for the purposes of providing medical treatment and services, informing you about our services, informing you about your appointment if you make an appointment, providing you with the opportunity to benefit from products, services and opportunities related to our fields of activity, informing you about and enabling you to benefit from advantages such as special campaigns, promotions and discounts, informing you about events, services and developments, conducting analysis to improve services, ensuring workplace safety, copying/backing up to prevent data loss, invoicing, sending SMS and commercial electronic messages, informing you and our followers on our social media accounts, measuring patient satisfaction and responding to all your questions and complaints within the scope of our healthcare services, ensuring digital and physical data security and ensuring the fulfillment of legal obligations as required or mandated by legal regulations, and for other purposes specified in the KVKK.

• To Whom and For What Purpose Do We Transfer Your Personal Data?

Your personal data collected in accordance with the KVKK and Articles I and II above; in accordance with the basic principles stipulated by the KVKK and within the conditions and purposes of processing personal data specified in Articles 8 and 9 of the KVKK and for the purposes set out above; (in case you consent) your SMS and e-mail information may be shared with the company from which we receive IYS bulk shipping service in order to inform you about our services, to inform you about your appointments, to inform you about events, services and developments, to send SMS and commercial electronic messages, your e-mail address to our accountant for invoicing, your photo and video image (in case you consent) to the company that manages our social media accounts, the closed circuit camera recording of the office’s interior to the security company or official authorities in case of legal obligation or legitimate interest, and for other purposes specified in the KVKK; In case of legal necessity or legitimate interest, personal data may be transferred to legal representatives and third parties from whom we receive consultancy, including lawyers, financial advisors, consultants, auditors, whom we have authorized, laboratories from which we receive services for medical examination and analysis, legally authorized public institutions and private persons.

What are your rights as a data owner, as listed in Article 11 of the KVKK?

As a personal data owner, you have the right to learn whether your personal data is being processed, to request information if your personal data has been processed, to learn the purpose of processing your personal data and whether it is being used in accordance with its purpose, to know the third parties to whom your personal data has been transferred, to request correction of your personal data if it is incomplete or inaccurate and to request notification of the action taken in this context to third parties to whom your personal data has been transferred, to request the deletion or destruction of your personal data if the reasons requiring processing are eliminated despite having been processed in accordance with the provisions of the KVKK and other relevant laws and to request notification of the action taken in this context to third parties to whom your personal data has been transferred, to object to the analysis of your processed data exclusively through automated systems leading to a result detrimental to the person, to withdraw your consent to the processing of your personal data, and to request compensation for your losses in the event that you suffer damages due to the unlawful processing of your personal data.

How Will You Exercise Your Rights as a Data Owner?

To exercise your aforementioned rights pursuant to Article 11 of the Personal Data Protection Law, you may contact “EOT Ankara Dental Clinic” (Contact Address: Ümit, 2480. Sk. Kafkas Sitesi no: 94, 06810 Çankaya/Ankara) by submitting your written application in person or through a notary public. “EOT Ankara Dental Clinic” will finalize the request as soon as possible and within thirty (30) days at the latest, depending on the nature of the request.

You can also submit your requests within the scope of Article 11 of the Law “Regulating the Rights of the Data Subject” in writing to the Personal Data Protection Authority’s address “Nasuh Akar Mahallesi 1407 Sokak No: 4 Çankaya / Ankara” in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” or by applying online to www.kvkk.gov.tr.

How Long Will Your Personal Data Be Processed?

In accordance with the KVKK, your personal data processed for the purposes specified in the Information Text and Consent Text will be deleted, destroyed or anonymized and will continue to be used by us when the purpose requiring processing ceases to exist in accordance with KVKK Article 7/f.1 and/or when the limitation periods required for us to process your data in accordance with the legislation expire.

• In accordance with the KVKK, the following situations may arise where “EOT Ankara Dental Clinic” may process your personal data without your explicit consent:

In accordance with Article 5 of the KVKK, your personal data, as specified above and obtained in accordance with the law, may be processed without your explicit consent in the following cases:

In cases where it is clearly stipulated by law, if you are unable to give your consent as the data owner due to actual impossibility or if your consent is not legally valid, the processing of your personal data is mandatory for the protection of your life or physical integrity or that of someone else, if it is mandatory to fulfill a legal obligation, if your personal data has been made public by you, if data processing is mandatory for the establishment, exercise or protection of a right, if data processing is mandatory for the legitimate interests of “EOT Ankara Dental Clinic”, provided that it does not harm your fundamental rights and freedoms.

DATA SECURITY

As the data controller within the scope of KVKK, “EOT Ankara Dental Clinic” takes all necessary physical, digital, technical and administrative measures to ensure an appropriate level of security in order to prevent the unlawful processing of personal data, to prevent unlawful access to personal data and to ensure the preservation of personal data.