INFORMATION TEXT ON THE PROCESSING OF PATIENT / RELATIVE PERSONAL DATA

The following text has been added for the purpose of informing Assoc. Prof. Dr. Ali Ovayolu’s employees, patients, and visitors within the framework of the aforementioned laws. As a general rule, special personal data cannot be recorded, used or transferred in any way without the explicit consent of the person concerned.

1- Data Controller

Your personal data is processed by Assoc. Prof. Dr. Ali Ovayolu, located at Seyrantepe Mah. Abdulkadir Konukoğlu Cd. No:1 Şehitkamil/Gaziantep, acting as the data controller, within the scope of the Personal Data Protection Law No. 6698 (KVKK), the Regulation on Personal Health Data and similar relevant legislation, the regulations of the Ministry of Health of the Republic of Turkey and the relevant authorities, and the Information Text on the Processing of Patient/Patient Relative Personal Data.

The corporate identity information of Assoc. Prof. Dr. Ali Ovayolu, the Data Controller, is as follows:

Address: Seyrantepe Neighborhood, Abdulkadir Konukoğlu St. No:1, Şehitkamil/Gaziantep

Phone : +90 532 640 40 60

Web Site: https://aliovayolu.com/

E-mail Address : ovayolu.ali@gmail.com

Assoc. Prof. Dr. Ali Ovayolu adheres to the principle of “protecting patient privacy” in the provision of healthcare services and, accordingly, respects the privacy and personal data protection rights of both patients and their families. To this end, we process your personal data to a limited extent and to the extent necessary, in compliance with all relevant legislation, particularly the Personal Data Protection Law (KVKK), ensuring the secure storage of your data and taking all necessary security measures to prevent potential unlawful access. This information document explains the extent to which your personal data is processed as part of the services offered by our practice.

2- Collection Method of Your Personal Data and Legal Reasons for Processing

Your personal data may be collected by Assoc. Prof. Dr. Ali Ovayolu, either fully or partially by automated means, or by non-automated means provided that they are part of a data recording system, through electronic and/or physical environments such as patient registration processes at our clinic, printed forms and surveys, medical examinations performed by the Doctor, medical tests/examinations, and other communications you have with the Doctor and our personnel.
This data may also be collected via the Doctor’s information management system, the Doctor’s website, communication channels, email, telephone, fax, other online and/or offline electronic communication platforms, cargo/post, our social media accounts, healthcare institutions and laboratories we collaborate with for consultation or services you receive, and their integrated systems, authorized public institutions and private organizations and their integrated systems, and any other methods (channels) that may be added in the future.
Your personal data is collected for the purposes of protecting public health, conducting preventive medicine, medical diagnosis, treatment and care services, and planning and managing health services and their financing, and may be processed by individuals or authorized institutions and organizations who are under the obligation of confidentiality.
The legal grounds for processing include: being explicitly prescribed by laws, necessity for the establishment or performance of a contract, legitimate interest, legal obligation, establishment, exercise or protection of a right, making your personal data public through contact on our social media accounts, and — if applicable — your explicit consent.

3- Categories of Personal Data Processed and Purposes of Processing Your Personal Data

Your personal and sensitive personal data, especially your health data, included in the contact form:

Your identity information (Name, Surname, Turkish Republic Identity Number and/or passport number and/or temporary Turkish Republic Identity Number, place and/or date of birth, marital status, gender, health insurance, profession, insurance card number, workplace registration and/or patient identification number and other identity data that can identify you)

Your contact information (address, telephone number, e-mail address and other contact data, as well as your personal data obtained when you contact us via e-mail, letter and/or other means;

Your financial data such as bank account number, IBAN number, credit card information, billing and invoice information will not be stored if given by you (will only be used at the time of the requested transaction);

Your data regarding private health insurance and payer institution information such as the Social Security Institution for the purposes of financing and planning health services;

Your data and all kinds of health information obtained during and/or as a result of medical diagnosis, treatment and care services, including, but not limited to, patient medical reports, diagnosis data, biometric and genetic data in a way that does not involve data processing, or laboratory results, test results, examination data, doctor analyses and comments, appointment information, prescription information;

If you contacted the call center, your voice call recording, If you used the parking and valet service, your license plate information, Notifications such as surveys, thank you letters, complaint letters, satisfaction results, etc.

It includes your personal data, including your IP address, cookies and other personal data obtained during the use of our website and mobile applications, your navigation data obtained during use, and your medical data that you submit with your consent through the mobile application;

Your personal data may be processed in our archives, without being recorded or recorded, in accordance with the Regulation on the Processing and Ensuring the Privacy of Personal Health Data, within the scope of the Law on the Protection of Personal Data No. 6698, and in a limited manner and in connection with the purposes specified in Article 4, and may be transferred to the persons, institutions and organizations specified in Article 5, with your consent if not mandatory.

Your personal data may be processed for the following purposes:

-Identification and verification to prevent your personal data from being accessed by others,

-Protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing,

-Supply of medicine and/or medical supplies and/or devices specific to you,

-If you make an appointment, we can inform you about the appointment, provide information and/or remind you of the appointment.

-Sharing and responding to information obtained with the Ministry of Health, special information management systems related to the Ministry of Health, and other public institutions and organizations in accordance with the legislation,

– Sharing information and identity verification requested by contracted institutions/organizations, especially private insurance companies, within the scope of financing health services (if you have private health insurance AND USE YOUR PRIVATE INSURANCE)

-Issuing invoices for the services we provide,

-To analyze your use of healthcare services and store your health data in order to develop and improve the healthcare services we offer to you, and to respond to your questions or complaints regarding our services.

-Providing necessary information in line with the requests and inspections of regulatory and supervisory institutions and official authorities,

-Preserving information regarding your health data that must be kept in accordance with the relevant legislation,

-Conducting promotional and information activities specifically for you and ensuring your benefit, and contacting you to inform you about our services.

-In addition, if performed, it includes the execution and development of medical diagnosis, treatment and care services, planning and management of health services and financing, increasing patient satisfaction, research and related reasons.

Your personal data obtained and processed in accordance with the relevant legislation may be transferred to the physical archives and/or information systems of Assoc. Prof. Dr. Ali Ovayolu and kept both digitally and physically for the period required by law and custom.

4- Transfer of Your Personal Data to Third Parties Located Domestically and Abroad

Within the doctor’s office/clinic, your personal data can only be accessed by our employees, who have limited authorization access for the purposes detailed above, to the extent necessary to perform their duties.

In addition, if your collected personal data is processed by persons or authorized institutions and organizations under a confidentiality obligation, for the purposes of expressly provided for in the laws, legitimate interest, legal obligation, establishment, exercise or protection of a right, protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing, in accordance with Articles 8 and 9 of the KVKK, within the scope of the conditions (legal grounds) for processing personal data with explicit consent:

Persons/institutions and/or organizations permitted by the Health Services Fundamental Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Personal Data Protection Law No. 6698, the Regulation on the Processing and Ensuring the Privacy of Personal Health Data and other relevant legislation;

To our suppliers, potential suppliers and their employees for the purposes of providing products and/or services for the conduct of doctor’s office/clinic activities (e.g. social security, certified public accountants and legal advisors, information technology and data hosting service providers, platforms from which services are received for appointments and meetings)

To the patient’s family members/relatives, companions, attorney or legal representative and other permitted third parties for the purposes of providing information about the patient’s health condition, accompanying the patient, receiving and delivering the patient’s personal belongings/medicines and carrying out payment transactions in accordance with the relevant legislation provisions, especially the KVKK, Patient Rights Regulation, and the Regulation on Personal Health Data, in case of medical necessity, court order or permission of the patient/legal heirs.

To banks, contracted private health or complementary insurance companies or contracted institutions and organizations for the purposes of planning or carrying out financial and accounting affairs and insurance transactions related to health services,

To our business partners, potential business partners and their employees (e.g. contracted laboratories and pharmaceutical warehouses) for the purposes of ensuring business continuity and establishing potential collaborations within the scope of the services provided by the doctor in the office/clinic,

To institutions where patients are referred/transferred, other healthcare institutions, doctors and healthcare personnel, and domestic/international laboratories for the purposes of carrying out medical diagnosis and treatment processes in the most accurate way and receiving consultations,

To the extent permitted by legislation, to social media platforms, agencies, press/publication organs and persons who have access to the content in question for purposes such as planning or carrying out corporate communication activities and publishing scientific publications,

It may be transferred to legally authorized institutions and private persons (e.g., Ministry of Health of the Republic of Turkey, Provincial Health Directorates, other units affiliated to the Ministry of Health, Social Security Institution of the Republic of Turkey, courts) for the purposes of fulfilling the legal obligations of the Practice/Clinic and following up on legal affairs.

Domestic/foreign organizations and other third parties and legal representatives from whom we receive and/or provide services under contract to carry out our activities, with whom we cooperate.

With the legal representatives we receive advice from and authorize, including the lawyers, consultants, and auditors we work with.

It may be shared with legal representatives you have authorized.

5- Processing Period of Your Personal Data

Your personal data obtained during our clinic/clinic activities are stored and destroyed in accordance with the general principles and regulations set out in our clinic/clinic’s policies and procedures regarding storage and destruction, which have been prepared in accordance with the provisions of the Constitution, KVKK, the Regulation on the Deletion, Destruction or Anonymization of Personal Data and other relevant legislation.

In this context, your personal data will be destroyed if all the personal data processing conditions stipulated in Articles 5 and 6 of the KVKK are no longer met. Accordingly, your personal data will continue to be processed for the statutory limitation periods following the termination of your relationship with our practice. Personal data processed based on the express consent personal data processing condition will be destroyed within the first destruction period if you withdraw your express consent. Your requests regarding the destruction of your personal data are stated in Section 6 of this Information Text.

6- What are your rights under KVKK?

As a personal data owner, you have the following rights under the law, in accordance with Article 11 of the KVKK;

-Learning whether your personal data is being processed,

-To request information about your personal data if it has been processed,

-Learning the purpose of processing your personal data and whether they are used in accordance with their purpose,

-Knowing the third parties to whom your personal data is transferred, either domestically or abroad,

– To request correction of your personal data if it is processed incompletely or incorrectly and to request that the action taken in this context be notified to third parties to whom your personal data has been transferred,

-To request the deletion or destruction of your personal data in case the reasons requiring processing are eliminated, even though they have been processed in accordance with the law and other relevant legal provisions, and to request that the actions taken in this context and in case your personal data are processed incompletely or incorrectly, be notified to third parties to whom your personal data has been transferred,

-To object to the emergence of a result against the person due to the subsequent analysis of your processed data by automated systems,

-To request compensation in case of damages due to unlawful processing of your personal data.

In order to exercise your rights specified above, you may send your request, including the necessary information to establish your identity and your explanations regarding the right you wish to exercise as specified in Article 11 of the KVKK No. 6698, to our address in the information text, via a notary public; or you may deliver it personally to our address with documents and information to establish your identity, or you may send it via e-mail with a secure electronic signature.

Depending on the nature of your request, your application will be processed free of charge as soon as possible and within 30 (thirty) days at the latest. However, if the process requires additional costs, you may be charged a fee according to the tariff determined by the Personal Data Protection Board. We would like to remind you that the documents must not include any sensitive personal data (e.g., religious information or blood type).

7–Instances in Which Personal Data Can Be Processed Without Explicit Consent, in Accordance with the KVKK:

In accordance with Article 5 of the KVKK and Article 7 of the Regulation, your personal data may be processed without your explicit consent in the following cases:

-In cases clearly stipulated by law,

– If you are unable to give your consent as a data owner due to a de facto impossibility, or if your consent is not legally valid, the processing of your personal data is necessary to protect your life or the physical integrity of someone else,

-Provided that it is directly related to the establishment or execution of a contract, it is necessary to process your personal data/personal data belonging to the parties to the contract,

– It is mandatory to fulfill a legal obligation,

-Your personal data/personal data has been made public by you,

– Data processing is necessary for the establishment, exercise or protection of a right,

-Personal health data may be processed by persons or authorized institutions and organizations under a confidentiality obligation, without the explicit consent of the person concerned, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing, and may be transferred to relevant institutions and organizations in accordance with the law and relevant regulations.

For the Patient, the Patient’s Legal Representative, the Patient’s Guardian, the Parents of Child Patients Who Do Not Have the Power of Discernment, and Other Patient Relatives; Persons applying to Assoc. Prof. Dr. Ali Ovayolu for healthcare services:

Essentially, the above-mentioned information text, prepared within the scope of the Personal Data Protection Law, allows individuals to confirm the information already legally disclosed to the public, acknowledge their knowledge and understanding of it, and approve the relevant shortened text, which also covers the scope of the Personal Data Protection Law. They may also submit in writing that they do not want any of their personal data to be shared by any institution or person, except as required by health care and legal procedures. As a rule, personal data cannot be recorded, used, or transferred in any way without the express consent of the person concerned.