Mahmut Sunay

Estetik Merkezi

Home EXPLICIT CONSENT TEXT FOR THE PROCESSING OF PERSONAL DATA OF PATIENTS

EXPLICIT CONSENT TEXT FOR THE PROCESSING OF PERSONAL DATA OF PATIENTS

As Op. Dr. Mahmut Sunay, in the capacity of Data Controller, to inform you about the
collection, processing and transfer of your personal data as the Relevant Person (“you”) who has
contact with Op. Dr. Mahmut Sunay within the framework of the “Turkish Personal Data
Protection Law” No. 6698 (“KVKK”) and relevant legislation this explicit consent text has been
prepared.
You can learn detailed information about your collected, processed and transferred personal data
through the Data Controllers Registry Information System (“VERBIS”) of the Personal Data
Protection Board.
You can access the VERBIS records of Op. Dr. Mahmut Sunay by searching the above
company title in the “Registry Inquiry” section on https://verbis.kvkk.gov.tr.
1 – Personal Data Processed
Detailed information about your collected and processed personal data is available in VERBIS
under the heading “Data Categories”.
Among your collected and processed personal data there are;
(a) Name, surname, T.C ID number, for non-citizens passport number or temporary T.C. ID
number, identity number, place and date of birth, marital status, gender,
(b) Contact data such as address, telephone number, e-mail address,
(c) Exam, diagnosis, examination data and test, laboratory and imaging results, Special quality
personal data obtained during the execution of medical diagnosis, treatment and care services, such
as prescription information,
(e) Data related to private health insurance and Social Security Institution data for the purpose of
financing and planning health services,
(f) Financial data such as bank account number depending on possible payments,
(g) Answers and comments shared to evaluate the services received,
(h) CCTV footage and audio recordings taken during the hospital visit.
2 – Processing of Personal Data
Detailed information about the purposes of processing your personal data is available in VERBIS
under the title of “Personal Data Processing Purposes”.
Among the purposes of processing your personal data there are;
(a) Protection of public health, preventive medicine, medical diagnosis, treatment and care services,
(b) Sharing information requested by the Ministry of Health and other public institutions and
organizations in accordance with the relevant legislation,
(c) Financing of health services, examination, diagnosis and Sharing the medical information
requested with private insurance companies within the scope of meeting the treatment expenses,
(d) Invoicing for the services you receive,
(e) Planning and managing the internal functioning of the Institution,
(f) Monitoring and preventing abuse and unauthorized transactions through the camera and ensuring
spatial security
( g) Answering all your questions and complaints regarding the health services you have received,
measuring, increasing and researching patient satisfaction,
(h) Giving information about the services you are receiving, complementary services and new
services.
3 – Collection of Personal Data and Its Legal Reason
Detailed information about the storage periods of your collected personal data and the data security
measures taken to protect the stored data are available in VERBIS under the headings of “Data
Retention Periods” and “Data Security Measures”.
Among the purposes of collecting your personal data there are;
(a) Data entry to the hospital management software,
(b) electronic or printed forms,
(c) audible or silent security camera recordings.
Your personal data within this scope, in order to achieve the above-mentioned purposes by the Op. Dr. Mahmut Sunay, as specified in the relevant legislation and Article 5 of the KVKK;
(a) It is clearly stipulated in the laws and it is mandatory for the data controller to fulfill its legal
obligation;
(1) Basic Law on Healthcare Services No. 3359,
(2) Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its
Affiliates,
(3) Private Hospitals Regulation
(4) Emergency Health Regulations,
(5) Patient Rights Regulation,
(6) Regulation on the Processing of Personal Health Data and Protection of Privacy,
(7) Regulation on the Principles of Infectious Diseases Surveillance and Control
(b) It is necessary to process the personal data of the parties to the contract, provided that it is
directly related to the establishment or performance of a contract,
(c) Data processing is mandatory for the legitimate interests of the data controller, provided that it
does not harm the fundamental rights and freedoms of the data subject.
Op. Dr. Mahmut Sunay clinic keeps the personal data collected and processed for as long
as it deems necessary, not shorter than the periods specified by the relevant laws and legislation, in
order to provide evidence in contractual obligations, possible legal disputes, to assert a right or to
establish a defense.
4 – Transferring Personal Data
Detailed information about the transfer of your collected and processed personal data is available in
VERBIS under the headings of “Data Transfer Recipient Groups” and “Information to be
Transferred to Foreign Countries”. Your personal data, in line with the processing purposes in the
2nd article of this clarification text and by taking the necessary administrative and technical
measures, provided that the transfer conditions in the relevant laws are complied with;
(a) Ministry of Health, sub-units and family medicine centers affiliated to the Ministry
(b) Private insurance companies within the scope of financing health services, examination,
diagnosis and treatment expenses,
(c) Social Security Institution,
(d) General Directorate of Security and other law enforcement forces,
(e) General Directorate of Population and Citizenship Affairs,
(f) Turkish Pharmacists Association,
(g) Legal authorities,
(h) Laboratories, medical centers, ambulances, medical devices and institutions that provide health
services with which you cooperate for medical diagnosis and treatment.
(ı) The health institution to which you were referred or to which you applied.,
(i) Legal representatives you have authorized
(j) In the event of a possible legal dispute, legal or contractual confidentiality obligations to
lawyers, tax consultants and auditors, third parties from whom consultancy is received.
(k) Regulatory and supervisory institutions and official authorities,
(l) In case of invoicing to the employer, the workplace physician,
(m) Our business partners within the framework of legal limits in terms of the continuity of the
services you receive
(n) In accordance with the legislation, services you receive, complementary services, new services,
etc. Our business partners residing in Turkey, who provide bulk SMS and e-mail to provide
information on issues.
5 – Legal Rights Regarding Personal Data
Within the scope of KVKK and related legislation, regarding your personal data; You have the right
to;
(a) learn whether personal data is processed,
(b) Request information if personal data has been processed,
(c) learn the purpose of processing personal data and whether they are used in accordance with
their purpose,
(d) Knowing the third parties to whom personal data is transferred in the country or abroad,
(e) Requesting the correction of personal data in case of incomplete or incorrect processing,
(f) Requesting the deletion or destruction of personal data within the framework of the conditions
stipulated in Article 7 of the KVKK,
(g) Requesting that the transactions made pursuant to subparagraphs (e) and (f) be notified to third
parties to whom personal data has been transferred,
(h) Objecting to the emergence of a result against the person himself by analyzing the processed
data exclusively through automated systems,
(ı) Requesting the compensation of the damage in case of loss due to unlawful processing of
personal data,
6 – Use of Legal Rights Regarding Personal Data
You can forward your requests regarding your personal data to the address of Mesrutiyet mah.
Rumeli c. Birlik apt. No:42 D:5 Sisli Istanbul through the following channels in accordance with
the Communiqué on Application Procedures and Principles to the Data Controller:
If you are applying on behalf of another person, together with your own identity information;
(a) Identity registration sample or related document showing your relationship and authority with
the person you are the parent or guardian of,
(b) In other cases, you must share the copy of the power of attorney for which you are specially
authorized, in the annex of the application.
Application Method Application Address Application
Information
1 In person or through a notary public with a valid
identity document signed by your handwriting
Meşrutiyet mah. Rumeli
c. Birlik apt. No:42 D:5
Şişli İstanbul
“Application
under KVKK”
should be
written on the
envelope.
2 With your Registered Electronic Mail address info@mahmutsunay.com
“Application
under KVKK”
should be
written in the
subject line of
the e-mail.
4
With an e-mail address that is not registered in the
Op. Dr. Mahmut Sunay system, including a
secure electronic signature or mobile signature
info@mahmutsunay.com
“Application
under KVKK”
should be
written in the
subject line of
the e-mail.
Pursuant to the Communiqué on Application Procedures and Principles to the Data Controller, the
following information must be included in the application:
(a) Name, surname and signature if the application is written,
(b) For citizens of the Republic of Turkey, T.C. ID number, for foreigners nationality, passport
number or identification number, if any,
(c) Domicile or workplace address for notification,
(d) If available, e-mail address, telephone and fax number for notification,
(e) Subject of request.
I Have Completely Read and Understand the Information Disclosed
Name Surname
Date