DR. ŞULE ÜNAL CLARIFICATION TEXT OF THE LAW ON THE PROTECTION OF PERSONAL DATA

 

Your safety is important to us. For this reason, the personal data you share with us is protected sensitively.

​

Dr. Şule Ünal (referred to as the Company or the Practice) will be able to process your personal data as Data Controller within the scope of the Personal Data Protection Law No. 6698 (Law) and the European Union General Data Protection Regulation (“GDPR”) and relevant legislation, within the framework explained in detail below.

You can find detailed information about the protection, processing, storage and destruction of your personal data under the "Protection and Privacy of Personal Data" heading of our website.

​

COLLECTION, PROCESSING AND PROCESSING PURPOSES OF PERSONAL DATA

COLLECTION OF PERSONAL DATA

 

The company may use cookies to better provide its services and ensure that the content adapts to individual needs and interests. Disabling cookies in the browser does not prevent the use of services on the website, but it may cause some technical problems. Cookies are also used to collect general, statistical information about the user's use of the website. Our detailed cookie policy is available on our site.

​

Personal data can also be collected from digital environments such as company websites, software and applications made available on computers or some smart devices, and social media accounts activated by people authorized to provide services on behalf of the company.

​

Image recordings of our visitors are taken through the camera monitoring system at the entrances of our company's buildings, facilities and inside the facility. Within the scope of the company's security camera monitoring activities; It aims to improve the quality of the service provided, ensure its reliability, ensure the safety of our company, customers and other people, and protect the interests of customers regarding the service they receive. Our detailed information regarding camera monitoring activities is available on the site.

​

2. PROCESSING OF PERSONAL DATA

The company may process your private and general personal data, especially your health data, for the specified purposes:

Your identity information: Your name, surname, TR ID. Your ID number, passport number or temporary TR ID number, place and date of birth, marital status, gender, insurance and/or any other identification data that can identify you;

Your Contact Information: Your address, telephone number, e-mail address and other contact data, voice call records kept by customer representatives or customer services in accordance with call center standards, and your personal data obtained when you contact us via e-mail, letter or other means; Other personal data you send to us through our communication channels,

Family Members and Relative Information, children, spouses and identity information of the data owner,

Your Bank Account Information: Your financial data such as your bank account number, IBAN number, credit card information that appears only on the slip, billing and billing information,

Physical Space Security Information, If you use the parking lot belonging to our customers, your vehicle license plate information, visit information, entry and exit information, images obtained from camera recordings that are constantly recorded in common areas, your audio recording,

Legal Transaction Information, information requests received from judicial and administrative institutions, data resulting from audits and inspections, your other personal data, including the CV provided in case you apply for a job with the Company, and any information regarding your service contract if you are a company employee or related employee. Your personal data, Your private health insurance data and Social Security Institution data for the purpose of financing and planning health services,

Marketing Information, targeting information that may affect the service, cookie records, surveys filled out by our customers, thank you and complaint letters, satisfaction results, etc. The notifications you make to evaluate,

Personal Data of a Special Nature is primarily the information that must be obtained as a requirement of the service provided or in accordance with the legal legislation, data regarding race, health and sexual life, data regarding criminal convictions and security measures, biometric data.

​

PURPOSES OF PROCESSING PERSONAL DATA

Your personal data shared by you;

- Carrying out the necessary work, including but not limited to determining and implementing our Company's commercial and business strategies, conducting marketing activities, carrying out business development and planning activities, in order to benefit you and/or the institutions and organizations you represent from the products and services offered by our Company,

- Ensuring the physical security and control of the locations in use by our company,

- Establishing business partner/customer/supplier (officials or employees) relationships,

- Ensuring contractual requirements and financial agreement regarding the products and services offered with our business partners, suppliers or other third parties,

- Following up legal and administrative affairs and human resources policies,

- It may be processed for the purpose of calling our Company's call center or using our website and/or participating in training, seminars or organizations organized by our Company.

​

STORAGE OF PERSONAL DATA

a) Your personal data will be stored in electronic and/or physical environments. In order to prevent your personal data provided and stored by our company from unauthorized access, manipulation, loss or damage in the environments where they are stored, necessary business process design and technical security infrastructure developments are implemented.

​

b) Your personal data will be processed by taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and will be stored and processed during the legal retention period or, if such a period is not foreseen, for the period required by the purpose of processing. When this period expires, your personal data will be removed from our Company's data flows by deletion, destruction or anonymization methods.

​

c) The company adopts the principle of acting in accordance with the law when sharing data with both business and

solution partners. With the commitment to data confidentiality, data is shared with business and solution partners only as much as the service requires, and these parties are required to take measures to ensure data security.

​

d) About the Regulation of Trade. About the Law and Commercial Communication and Commercial Electronic Messages. In accordance with the Regulation, electronic messages for advertising purposes can only be sent to individuals with prior approval. Clear consent of the person to whom the advertisement will be sent is essential. The Company complies with the details of the "approval" determined in accordance with the same legislation. This approval can be obtained in writing, physically or through any electronic means of communication.

​

e) If a contractual relationship has been established with our customers and prospective customers, the collected personal data can be used without the customer's consent. However, this use is for the purpose of the contract. On the other hand, the data left to us by our prospective customers is processed in order to provide them with easier and higher quality service. This data is deleted upon request if a contractual relationship does not exist.

​

f) Data reaching our company is processed into the system only as much as necessary. Excess information is not saved in the system, is deleted or anonymized. These data may be used for statistical purposes.

 

g) Your personal data that we have mentioned above, the Health Services Basic Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Subsidiaries, the Private Hospitals Regulation, the Regulation on the Processing of Personal Health Data and the Protection of Privacy and the Ministry of Health regulations and other legislative provisions. We inform you, within the scope of the data controller's obligation to inform, that it may be processed and transferred to the physical archives and information systems of the HOSPITAL and/or our suppliers, and may be kept in both digital and physical environments.

​

B. TRANSFER OF PERSONAL DATA

- The Company, in accordance with the additional regulations listed in Articles 8 and 9 of the Law and determined by the Personal Data Protection Board; If the conditions for transferring personal data are met, personal data can be transferred domestically or abroad.

- Transfer of personal data to third parties within the country, your personal data can be transferred by the company if at least one of the data processing conditions specified in Articles 5 and 6 of the Law is met and provided that the basic principles regarding data processing conditions are complied with.

- Transfer of personal data to third parties abroad, upon the written commitment of the company and the data controller in the relevant country to adequate protection, the Personal Data is subject to the Board's approval of this process and the existence of at least one of the data processing conditions set out in Articles 5 and 6 of the Law. Personal data may be transferred to third parties abroad.

You can obtain detailed information and conditions regarding the transfer of your personal data from the Personal Data Protection and Processing Policy on our website.

​

SHARED PARTY CATEGORIZATION PURPOSE OF COVERAGE

Business Partner: Parties with which the Company establishes a business partnership while carrying out its commercial activities. Limited sharing of personal data in order to ensure that the purposes of establishing the business partnership are fulfilled.

SupplierParties providing services for the Company to continue its commercial activities, in line with the instructions received from the Company and based on the contract between it and the Company. Transfer limited to the receipt of outsourced services from the Supplier. Participation. Companies that are subsidiaries of the Company. Transfer of personal data limited to the purpose of carrying out commercial activities that require the participation of affiliates. Legally Authorized Public InstitutionsPublic institutions and organizations legally authorized to receive information and documents from the CompanyLimited sharing of personal data with relevant public institutions and organizations for the purpose of requesting information

Legally Authorized Private InstitutionPrivate legal persons legally authorized to receive information and documents from the Company Sharing of data limited to the purpose requested by the relevant private legal persons within their legal authority

​

1. DESTRUCTION OF YOUR PERSONAL DATA

Even though it has been processed in accordance with the provisions of the relevant law, it may delete or destroy personal data based on its own decision or upon the request of the personal data owner, in case the reasons requiring processing are eliminated.

The deletion or destruction techniques used by us are physical destruction, secure deletion from software, and secure deletion by an expert.

The company can anonymize personal data when the reasons requiring the processing of personal data processed in accordance with the law are eliminated. Anonymization of personal data means making personal data impossible to associate with an identified or identifiable natural person in any way, even by matching it with other data.

In accordance with Article 28 of the KVK Law; Anonymized personal data may be processed for purposes such as research, planning and statistics. Such processing is outside the scope of the Personal Data Protection Law and the express consent of the personal data owner will not be required. Personal data processed anonymously are outside the scope of the Personal Data Protection Law. The most commonly used anonymization techniques by the company are masking, aggregation, data derivation, and data hashing methods.

You can find detailed information about the methods of destruction of personal data in the "Personal Data Storage and Destruction Policy" on our website.

​

2. SITUATIONS WHERE DATA MAY BE PROCESSED WITHOUT EXPRESS CONSENT PURSUANT TO THE PERSONAL DATA PROTECTION LAW:​

In accordance with Article 5 of the KVK Law, your personal data listed below may be processed without your explicit consent in the following cases:

It is clearly prescribed by law.

It is necessary for the protection of the life or physical integrity of the person or someone else who is unable to express his/her consent due to actual impossibility or whose consent is not given legal validity.

It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.

It is mandatory for the data controller to fulfill its legal obligation.

It has been made public by the person concerned.

Data processing is mandatory for the establishment, exercise or protection of a right.

It is necessary to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.

​

​

1. DATA SECURITY

As a company; We attach importance to protecting your personal data. For this reason, we would like to inform you that we protect your personal data against possible risks within our technical and administrative capabilities in accordance with information security standards and procedures.

​

2. YOUR RIGHTS REGARDING THE PROTECTION OF YOUR PERSONAL DATA

Personal Data Protection Law art. In accordance with Article 11, you can fill out the "Data Owner Application Form" on our website and hand-deliver it to the workplace address where you received service with a wet signature, send it through a notary, send it from your registered e-mail address to our Company's kep address devaozelsaglikas@hs01.kep.tr, or again securely. In accordance with the relevant legislation, by sending a "Word or PDF" extension file signed with an electronic signature via e-mail to https://www.suleunal.com.tr/iletisim;

Learning whether it is processed or not; If it has been processed, to request information about it and to learn whether it is used for the purpose of processing and whether it is used in accordance with this purpose,

Knowing the third parties to whom personal data is transferred at home or abroad,

Requesting correction of any incomplete or incorrect processing,

In case your personal data has been processed incompletely or incorrectly, to request the correction of these and/or the deletion or destruction of personal data to be notified to third parties to whom personal data has been transferred,

Requesting correction of your personal data if it has been processed incorrectly or incompletely, and requesting that the action taken in this context be notified to third parties to whom your personal data has been transferred,

Objecting to adverse consequences that may arise as a result of processing through automatic systems,

We would like to inform you that you have the right to demand compensation from us in case of damage due to processing contrary to the law and relevant legislation.

Your right to learn whether personal data is being processed, your right to request information if personal data has been processed; If you exercise your right to learn the purpose of processing of personal data and whether they are used for their intended purpose, or your right to know third parties to whom personal data is transferred domestically or abroad, the relevant information will be provided to you, your applications may be clear and understandable free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. It will be notified in writing or electronically, through the contact information provided by you, but if the transaction requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

During the evaluation of applications, the company first determines whether the person making the request is the real beneficiary. However, when deemed necessary, the company may request detailed and additional information to better understand the request.

The company's responses to data owner applications are notified to data owners in writing or electronically. If the application is rejected, the reasons for the rejection will be explained to the data owner with justification.

​