DISCLOSURE STATEMENT REGARDING THE PROTECTION OF PERSONAL DATA
We, Op. Dr. Yunus Kaplan and our staff, present this statement to you, our valued patients, to inform you about the collection, storage, and processing of your personal data provided to us during the healthcare service process.
This disclosure is made by the clinic of Op. Dr. Yunus Kaplan, acting as the data controller, in accordance with the provisions of the 6698 numbered Personal Data Protection Law (“KVKK”), the 3359 numbered Basic Health Services Law, the 663 numbered Communiqué on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Hospitals, and the regulations of the Ministry of Health, etc.
We will record, archive, update, transfer, and classify your personal data, as well as your “sensitive” personal data specific to healthcare, in the manner described in this disclosure statement and process them in the ways prescribed by the KVKK and the relevant legislation.
1- Personal Data We May Process in Accordance with Your Explicit Consent and Their Purposes of Processing
Your Identity Information: Your name, surname, Turkish Republic identification number, place and date of birth, marital status, private insurance, and other identity details that can identify you;
Your Contact Information: Your address, phone number, email address, the city you reside in, and other contact details, as well as any personal data obtained when you communicate with us via email, letter, or other means;
Your Accounting Information: Your bank account number, IBAN, credit card information, billing details, and other financial data; information regarding private health insurance for the purpose of financing and planning healthcare services, and data from the Social Security Institution; video recordings from cameras maintained for security and audit purposes in case you visit our clinic;
The personal data obtained by Op. Dr. Yunus Kaplan’s clinic will primarily be used to provide you with effective, safe, and high-quality healthcare services. The general purposes of using your personal data include verifying your identity, facilitating doctor-patient communication, protecting public health, preventive healthcare, medical diagnosis, treatment and care services planning and effective implementation, planning and management of healthcare financing, and the internal operations and daily functioning of our clinic. In the event that you schedule an appointment with our clinic, we will use your contact information to inform you about the appointment.
Your personal data may be used for internal risk management, fulfilling quality improvement activities, the training and development of our staff, ensuring the safety of patients and employees, monitoring unauthorized activities within the institution, measuring patient satisfaction, improving healthcare services, and meeting legal and regulatory requirements.
Your personal data may be processed for verifying your relationship with the institutions with which we have agreements, for billing in exchange for our healthcare services, and for sharing information with private insurance companies as required within the scope of healthcare financing.
In accordance with the relevant legislation, your personal data may be used for sharing information with the Ministry of Finance, the Ministry of Health, and relevant public institutions as required; for obtaining necessary information in line with the demands and inspections of regulatory and supervisory bodies and official authorities; for preserving information regarding your health data that is required to be stored by the relevant legislation; and for responding to any inquiries or complaints related to our healthcare services.
With your explicit consent, your sensitive personal data may be used for the education and information of other patients and the public, and for scientific research and educational purposes. Visual data obtained during your treatment process will be used for evaluating cosmetic results after aesthetic surgeries and for advertising on social media platforms.
2- Cases Where Explicit Consent Is Not Sought for the Processing of Personal Data Under the KVKK
In cases where at least one of the following situations applies, your personal data may be processed even in the absence of your explicit consent:
- When expressly provided for by law,
- When a person who, due to practical impossibility, is unable to provide consent or whose consent is not legally valid requires it for the protection of their life or bodily integrity,
- When it is necessary for Op. Dr. Yunus Kaplan to fulfill his legal obligations,
- When the relevant data has been made public by the person themselves,
- When data processing is required for the establishment, exercise, or protection of a right,
- When data processing is necessary for Op. Dr. Yunus Kaplan’s legitimate interests, provided that it does not harm the fundamental rights and freedoms of the concerned person.
Furthermore, your personal data related to health and sexual life may be processed without your explicit consent by Op. Dr. Yunus Kaplan only for the purpose of protecting public health, preventive healthcare, the execution of your medical diagnosis, treatment and care services, and for planning and managing the financing of the healthcare services you receive.
3- Transfer of Your Personal Data Domestically or Internationally
The personal data generated and collected during the healthcare services provided by Op. Dr. Yunus Kaplan may be transferred to other healthcare service providers for consultation purposes. With your explicit consent, your sensitive personal data may be shown to candidate patients at the clinic or transferred via file sharing over the internet. With your explicit consent, your sensitive health data, including photos and videos of you, may be transferred to international scientific organizations. Visuals of patients are often used in the preparation, presentation, or publication processes of scientific articles, books, and conference presentations. Visual materials and other personal data belonging to patients may be transferred to scientific organizations and publishing houses with the patients’ explicit consent.
4- The Methods and Legal Grounds for the Collection and Processing of Your Personal Data
Your personal data can be obtained and processed through any oral, written, visual, or electronic means. Keeping patient records regularly in the execution of healthcare services and being able to present them to the patient and legal authorities when necessary is a legal obligation. Maintaining financial records is also necessary for individuals and institutions in terms of their tax obligations. The doctor-patient relationship is treated as a “work contract” in various judicial decisions. In this context, standardized visual data of you may need to be collected at different stages of the treatment in order to determine whether the obligations under the work contract have been fulfilled. These data may be requested by the patient, their attorneys, or the competent courts in the event of any dispute. You can refer to the 6698 numbered Personal Data Protection Law, the 3359 numbered Basic Health Services Law, and the 663 numbered Communiqué on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, as well as the Regulations on Private Healthcare Institutions to understand the legal grounds for the collection and processing of your personal data.
5- Retention of Your Personal Data
Your personal data is processed by Op. Dr. Yunus Kaplan only for the period required to process it, in accordance with the principle of purpose limitation, and after the expiration of such periods, it will be deleted, destroyed, or anonymized. This period may vary from patient to patient and from data to data. Part of your personal data is kept in our clinical files, protocol registers, and financial records in written form. Your electronic and digital data is stored on the clinic’s computers, backup hard drives, memory cards, USB drives, email servers, and cloud-based data storage systems. Personal data generated through social media during the initial consultation, diagnosis, treatment, and follow-up process is stored within the relevant accounts and records of the platforms on which it was created. Your personal data is securely stored in our clinic. Your electronic data is protected with a minimum of two-factor data protection. In principle, your health data will be kept indefinitely unless unforeseen events such as disasters, accidents, theft, etc. occur.
6- Rights of the Personal Data Owner in the Capacity of the Data Subject
As the owner of the personal data collected, processed, and transferred by Op. Dr. Yunus Kaplan, you, our valued patient, have the rights stated under this section and/or within the scope of the KVKK. Should you wish to exercise these rights or submit any request to Op. Dr. Yunus Kaplan’s clinic, your request will be processed free of charge and concluded within a maximum of thirty (30) business days, depending on the nature of the request.
However, if the processing entails an additional cost for Op. Dr. Yunus Kaplan, a fee as determined by the Personal Data Protection Board may be charged.
According to Article 11 of the KVKK, the relevant persons (data subjects – service recipients) have the rights to:
(i) learn whether their personal data is being processed;
(ii) request information if their personal data has been processed;
(iii) learn the purpose of processing their personal data and whether it is being used appropriately;
(iv) know the third parties to whom personal data has been transferred, domestically or internationally;
(v) request correction of any incomplete or inaccurately processed personal data and ask that such changes be notified to the third parties to whom the personal data has been transferred;
(vi) request deletion or destruction of personal data if the reasons for its processing have ceased to exist, even though it was collected, processed, and transferred in accordance with the law and the relevant legislation, and request that such action be notified to the third parties to whom the personal data has been transferred;
(vii) object to a decision made solely on the basis of automated processing of data that has a legal effect on them or affects them significantly; and
(viii) request compensation for damages if they suffer harm as a result of the processing of their personal data in violation of the law.
Requests for the exercise of these rights may be submitted to us by the data subjects using the methods specified under the 6698 numbered Law.
Please note that the issues stated in this form may be subject to changes in accordance with legal and technological developments.
If you wish to exercise your rights or make any requests under the above sections, you may send an email signed with your secure electronic signature to ykaplan79@hotmail.com. Alternatively, you may submit an application by sending a letter with your wet signature by mail or courier to Op. Dr. Yunus Kaplan Clinic, Teşvikiye Mah. Mim Kemal Öke Cd. No:6, Nişantaşı, Istanbul, Turkey.