This privacy notice has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the European Union General Data Protection Regulation (“GDPR”) in order to inform data subjects about the procedures and principles regarding the processing of personal data belonging to patients/consultants who apply to the clinic operated under the ownership of Op. Dr. Nezih Durmazlar.

Ensuring the security of patients’/consultants’ personal data is among the primary responsibilities of Op. Dr. Nezih Durmazlar. Therefore, the necessary technical and administrative security measures are taken in accordance with the applicable legislation in order to ensure that patients’/consultants’ personal data are processed securely and to prevent any unlawful access to or disclosure of such data.

Data Controller

Your personal data will be processed by Op. Dr. Nezih Durmazlar, operating at “Mevlana Blv. (Konya Yolu) No: 182/B Kat: 4 No: 15 Çankaya/Ankara” within the scope of the Turkish Personal Data Protection Law No. 6698. Op. Dr. Nezih Durmazlar is regarded as the “Data Controller” under the KVKK and as the “Controller” under the GDPR.

Contact information:

Address: Mevlana Blv. (Konya Yolu) No: 182/B Kat: 4 No: 15 Çankaya/Ankara
E-mail: nezihdurmazlar@gmail.com
Phone: 0542 286 95 21

Your Personal Data to Be Processed

The personal data listed below may be processed by Op. Dr. Nezih Durmazlar in accordance with the fundamental principles set out under Article 4 of the KVKK and Article 5 of the GDPR, and in line with the personal data processing conditions specified under Articles 5 and 6 of the KVKK and Articles 6 and 9 of the GDPR. Such processing will be carried out lawfully, in connection with, limited to, and proportionate to the purposes of processing, in an accurate and up-to-date manner, and by taking the necessary technical and administrative measures to ensure data security, within the scope of the purposes stated in this Privacy Notice.

Your Identity Information: Your name, surname, Turkish Republic identification number and/or passport number and/or temporary Turkish Republic identification number, place and date of birth, marital status, gender, occupation, signature, and other identity data that may identify you.

Your Contact Information: Your address, telephone number, e-mail address, IP address, social media accounts, and other contact data.

Your Health Information: Your blood type, laboratory and imaging results, test results, allergies, chronic diseases, infectious diseases, information regarding previous surgeries/operations, medications used continuously, medical treatments, prescription information, and other health data required within the scope of your examination and treatment process.

Your Photographs, Video Images, and Audio Data: Your image and audio recording data contained in photographs and/or videos recorded before, during, and/or after a medical procedure, as well as your image data that may be recorded by closed-circuit camera systems for the purpose of ensuring workplace security.

Your Financial Information: Your bank account number, IBAN number, credit card information, billing and payment information, and other financial data.

Your Transfer and Accommodation Information: If you receive services within the scope of international health tourism, your transfer information, round-trip flight ticket information, and accommodation information.

Purposes of Processing Your Personal Data

Your personal data are processed by Op. Dr. Nezih Durmazlar in accordance with the KVKK and GDPR for the purposes of creating a patient file, carrying out your examination, medical diagnosis, treatment, and care services, performing follow-up checks after medical diagnosis and treatment processes, managing possible complication processes, communicating with you directly, managing appointment processes, carrying out patient satisfaction and request management, fulfilling legal and contractual obligations, retaining your health data that must be stored pursuant to the relevant legislation for the prescribed periods, obtaining consultation services from other specialist physicians when necessary, fulfilling legal obligations within the scope of health tourism, planning transfer, accommodation, and interpreter services for patients/consultants coming within the scope of health tourism, providing information regarding medical treatments and procedures, planning and managing healthcare services and their financing, ensuring workplace security, fulfilling responsibilities arising from the legal relationship established between the physician and the patient, fulfilling financial and administrative obligations, ensuring technical and commercial security, and fulfilling public obligations.

Your identity data may be processed for the purposes of carrying out examination, preventive medicine, medical diagnosis, treatment, and care services, creating a patient file, carrying out patient satisfaction and request management, and planning transfer, accommodation, and interpreter services for patients/consultants coming within the framework of health tourism.

Your contact information will be processed for the purposes of performing your follow-up checks after medical diagnosis and treatment processes, communicating with you, and managing appointment processes. In addition, provided that you give your explicit consent, it may also be processed for the purposes of introducing, informing, announcing, and sending greetings/congratulations on special days regarding medical services.

Your health information may be processed for the purposes of carrying out your medical treatments, obtaining consultation from another specialist physician if deemed necessary during your treatment process, creating a patient file, retaining your health data that must be stored pursuant to the relevant legislation for the prescribed period, and fulfilling legal obligations under the applicable health law and health tourism legislation.

Your photograph, video, and audio recording information may be processed for the purposes of observing and monitoring the treatment process and ensuring workplace security. In addition, provided that you give your explicit consent, it may be used for medical promotion, information purposes, or for informing third parties from a medical perspective.

Your financial data may be processed for the purposes of checking your fee payments, issuing invoices, and carrying out refund procedures in the event of any overpayment.

Your transfer and accommodation information may be processed for the purpose of planning transfer and accommodation services for patients/consultants coming within the scope of health tourism.

The above-mentioned personal data will be processed in accordance with the relevant purposes and legislation in order to carry out your medical treatment and fulfill the obligations related to your treatment. If you do not provide the relevant personal data, your medical treatment process and related services may not be carried out properly.

Method of Collection of Personal Data

Your personal data may be collected by Op. Dr. Nezih Durmazlar through the following methods, depending on the healthcare service provided:

Through your application to the clinic for examination and treatment, the health reports, laboratory and imaging results, tests, and statements regarding your health data that you provide in order for a medical evaluation to be made regarding the treatment to be applied to you,

Through your completion of the “Patient Information and Consent Form” regarding the treatment to be applied to you,

Through your visit to the corporate website of Op. Dr. Nezih Durmazlar and the contact form you complete on this website,

Through e-mails you send to the corporate e-mail address of Op. Dr. Nezih Durmazlar,

Through photograph/video recordings taken before, after, and/or during a medical procedure,

Upon your request and where necessary, through written, audio, and visual messages and online audio/video calls sent via service providers such as WhatsApp, Zoom, FaceTime, Skype, Messenger, Google, Instagram, Facebook, and similar platforms, which you use by accepting their own privacy policies and international data transfer principles, for the purpose of providing online consultation, follow-up, or information remotely,

Through your sending direct messages to the profile accounts of Op. Dr. Nezih Durmazlar on social media accounts and/or commenting on posts,

Through information you provide by permitting automatic processing via “contact us,” “get information,” or similar forms on social media and digital advertising platforms,

If you join the clinic’s existing wireless internet network as a guest user, through log recording devices used within the scope of technical measures taken pursuant to the legislation,

Through closed-circuit camera systems for the purpose of ensuring workplace security,

and will be processed in accordance with the KVKK and GDPR for the purpose of enabling Op. Dr. Nezih Durmazlar to fully and properly perform his contractual and legal obligations throughout examination, medical diagnosis, treatment, and care services.

Purpose, Method, and Legal Basis of Processing Your Personal Data

Your personal data may be processed by natural or legal persons authorized by Op. Dr. Nezih Durmazlar, acting as “Data Processor/Processor,” verbally, in writing, and through camera and photograph recordings, by keeping records in physical and electronic environments with the necessary technical and administrative security measures, and, where required under the relevant provisions of the KVKK and GDPR, by also obtaining your explicit consent.

Cases Where Your Explicit Consent Must Be Obtained

Pursuant to Article 6/1-a of the GDPR and Article 5/1 of the KVKK, your personal data may be processed only upon obtaining your explicit consent in the following cases:

Sending SMS messages and/or e-mails and establishing mobile communication with you for the purposes of promoting, announcing, and informing you about innovations regarding the medical services provided by Op. Dr. Nezih Durmazlar will only be possible upon obtaining your explicit consent.

Sharing your photographs and/or video recordings taken before, during, and/or after a medical procedure for the purpose of observing the development of the treatment on the social media accounts and corporate website of Op. Dr. Nezih Durmazlar will only be possible upon obtaining your explicit consent.

Since sharing your data through service providers whose servers are located abroad may be considered a “transfer abroad,” and since explicit consent is required for international transfer, your explicit consent will be obtained in such cases.

However, in the following cases, since there may not be a direct international transfer carried out by Op. Dr. Nezih Durmazlar, your explicit consent may be deemed to have been obtained by the service provider of which you are a user:

If you send written/audio messages, photograph/video recordings, or make audio/video calls to Op. Dr. Nezih Durmazlar using service providers such as WhatsApp, Zoom, FaceTime, Skype, Messenger, Google, Instagram, Facebook, and similar platforms, whose servers are located abroad and which you already use by accepting their own privacy agreements and international transfer policies, you will be deemed to have accepted the policies of the relevant applications.

If you contact Op. Dr. Nezih Durmazlar through e-mail service providers whose servers are located abroad, it is assumed that you have accepted the privacy and international transfer policies of the relevant service provider.

If you apply to advertisements and promotions published on social media service providers, your data, which you have permitted to be automatically processed and transferred by accepting the privacy and international transfer principles of the relevant social media service providers, may be transferred to Op. Dr. Nezih Durmazlar by the relevant service provider.

Cases Where Your Data May Be Processed Without Seeking Explicit Consent

Pursuant to Article 9/2-h of the GDPR and Article 6/3 of the KVKK, your health data, which are considered special categories of personal data, may be processed without seeking your explicit consent by Op. Dr. Nezih Durmazlar, who is under a legal obligation of confidentiality, for the purposes of carrying out examination, medical diagnosis, treatment, and care services.

Pursuant to Article 6/1-b of the GDPR and Article 5/2-c of the KVKK, your personal data may be processed without seeking your explicit consent for the purposes of performing your follow-up checks after medical diagnosis and treatment processes, communicating with you directly, and managing appointment processes.

Pursuant to Article 6/1-f of the GDPR and Article 5/2-f of the KVKK, your personal data may be processed without seeking your explicit consent within the scope of legitimate interests for the purpose of carrying out patient satisfaction and request management.

Pursuant to Article 6/1-c of the GDPR, Article 5/2-a of the KVKK, and Article 5/2-ç of the KVKK, your personal data may be processed without obtaining your explicit consent in the following cases based on legal obligations:

Creation of a patient file.

Retention of your health data that must be stored pursuant to the relevant legislation.

Checking your fee payments and issuing invoices.

Fulfillment of tax obligations.

Fulfillment of obligations arising from the legislation of the Ministry of Health.

Fulfillment of obligations arising from health tourism legislation.

Ensuring the security of your data.

Fulfillment of legal obligations before judicial authorities.

Fulfillment of administrative obligations before administrative institutions and organizations.

Transfer of Your Personal Data and the Purposes and Recipients of Such Transfer

Your personal data collected in line with the conditions and purposes within the scope of the personal data processing conditions specified under Articles 5 and 6 of the Turkish Personal Data Protection Law No. 6698 and Articles 6 and 9 of the GDPR may be transferred by Op. Dr. Nezih Durmazlar to third persons and institutions in accordance with Articles 8 and 9 of the KVKK and the relevant provisions of the GDPR. Such transfer may be carried out for the purposes of conducting and improving examination, medical diagnosis, treatment, and care services, obtaining consultation services from other specialist physicians when necessary, fulfilling administrative obligations related to health tourism legislation, planning transfer, accommodation, and interpreter services for patients coming within the framework of health tourism, communicating with patients, managing follow-up and appointment processes, planning and managing healthcare services and their financing, fulfilling responsibilities arising from the legal relationship established between the physician and the patient, fulfilling financial, legal, and administrative obligations, ensuring technical and commercial security, fulfilling public obligations, and promoting the medical services provided, provided that such transfer is limited to what is sufficient for the realization of the relevant purpose, that necessary confidentiality agreements are signed, and that administrative/technical security measures are ensured in accordance with the legislation.

Within this scope, your personal data processed by Op. Dr. Nezih Durmazlar may be shared with the following persons and institutions:

Other specialist physicians for consultation purposes,

Insured employees,

Suppliers,

Certified public accountants, tax and financial advisors, and auditors,

Legal advisors,

Database/server providers,

Clinic management software service providers,

Web consultant,

Interpreters,

Data protection consultant,

IT consultant,

Tourism agencies,

Public institutions and organizations authorized under the laws,

Judicial authorities.

Personal Data Processing Period

Your personal data will be retained by Op. Dr. Nezih Durmazlar for the period required by law. Documentation and retention obligations arise from commercial, tax, health legislation, and relevant local regulations.

The retention periods for your personal data are generally as follows:

Your identity information: 20 years after the end of the service provided to the service recipient.

Your contact information: 20 years after the end of the service provided to the service recipient.

Your health information: 20 years after the end of the service provided to the service recipient.

Your photograph and video information: 20 years after the end of the service provided to the service recipient.

Your financial information: 5 years after the end of the service provided to the service recipient.

Age Limit for Data Subjects Under the Legislation

Under the KVKK, patients/consultants may personally give consent regarding the processing of their personal data provided that they are at least 18 years of age. For patients/consultants below this age limit, consent must be given by their legal representatives.

Under the GDPR, patients/consultants who are citizens of European Union countries or who reside in European Union countries may personally give their consent regarding the processing of their personal data provided that they are at least 16 years of age or have reached the age threshold required in their country. For patients/consultants below this age, consent must be given by their legal representatives.

Withdrawal of Consent

If you give consent to Op. Dr. Nezih Durmazlar for the processing of your personal data, we hereby inform you that you may withdraw your consent given for the above-mentioned purposes at any time pursuant to Article 6/1-a of the GDPR and Article 5/1 of the KVKK. Your consent will be withdrawn if you submit your declaration of withdrawal of consent in writing to the contact addresses specified below.

Address: Mevlana Blv. (Konya Yolu) No: 182/B Kat: 4 No: 15 Çankaya/Ankara
E-mail: nezihdurmazlar@gmail.com
Phone: 0542 286 95 21

Rights of Data Subjects Under the GDPR

As a data subject, your personal data are also protected under the GDPR. In cases falling within the scope of the GDPR, namely with respect to citizens of the European Union or residents of European Union countries, the rights of data subjects are as follows:

Right of Access: The data subject has the right to apply to Op. Dr. Nezih Durmazlar to confirm whether personal data concerning him/her are being processed and, if personal data are being processed, to obtain the details set out under Article 15 of the GDPR.

Right to Rectification: The data subject has the right to have his/her personal data held by Op. Dr. Nezih Durmazlar corrected if such data have changed or are inaccurate.

Right to Erasure: The data subject has the right to request the deletion of his/her personal data held by Op. Dr. Nezih Durmazlar. If the conditions specified under Article 17 of the GDPR are met, your personal data may be deleted without undue delay.

Right to Restriction of Processing: The data subject may request the restriction of the use of data if he/she contests the accuracy of his/her personal data, claims that the data processing activity is unlawful, considers that the data are no longer necessary for the purposes of processing, or objects to the processing activity.

Right to Data Portability: The data subject has the right to request, where technically possible, that his/her personal data held by Op. Dr. Nezih Durmazlar be transferred to another data controller.

Right to Object: The data subject has the right to object to the processing of his/her personal data on grounds relating to his/her particular situation. In addition, where his/her personal data are processed for direct marketing purposes, he/she may object to such processing at any time.

Rights of Data Subjects Under the KVKK

The rights of natural persons whose personal data are processed under Article 11 of the KVKK are as follows:

To learn whether his/her personal data have been processed,

To request information if his/her personal data have been processed,

To learn the purpose of processing personal data and whether they are used in accordance with such purpose,

To know the third parties to whom personal data are transferred domestically or abroad,

To request correction of personal data if they have been processed incompletely or inaccurately,

To request the deletion or destruction of personal data if the reasons requiring their processing no longer exist, even though they have been processed in accordance with the KVKK and other relevant laws,

To request notification of correction, deletion, or destruction operations to third parties to whom personal data have been transferred,

To object to the occurrence of a result against the person himself/herself by means of analysis of processed data exclusively through automated systems,

To request compensation for damages in case he/she suffers damage due to the unlawful processing of personal data.

If you have any rights or requests that you wish to exercise from those listed above, you may submit your written application clearly and understandably indicating which of the data subject rights under the GDPR and which of the rights specified under Article 11 of the KVKK you wish to exercise, with wet signature and documents proving your identity, by hand to the address of Op. Dr. Nezih Durmazlar at “Mevlana Blv. (Konya Yolu) No: 182/B Kat: 4 No: 15 Çankaya/Ankara,” by notary public, or by signing with a secure electronic signature and sending it to nezihdurmazlar@gmail.com.

In your applications, the inclusion of your name, surname, signature, Turkish Republic identification number/passport number/temporary Turkish Republic identification number, residential or workplace address, e-mail address, telephone number, and subject of request is required pursuant to the “Communiqué on the Procedures and Principles of Application to the Data Controller.”

Op. Dr. Nezih Durmazlar will finalize your application free of charge as soon as possible and no later than thirty days, depending on the nature of the request. However, if the transaction requires an additional cost, the fee determined in the tariff set by the Personal Data Protection Board may be charged.

Consent and Approval

By reading and accepting this Privacy Notice, you will be deemed to have been informed about the data processing process carried out by Op. Dr. Nezih Durmazlar, to have learned your rights set out under the KVKK and GDPR, and to have accepted, declared, and undertaken that your personal data and special categories of personal data may be processed by Op. Dr. Nezih Durmazlar within the scope of this Privacy Notice and, where necessary, that you give your approval with your free will for processing activities subject to explicit consent.

You have the right not to accept this Privacy Notice after reading it.

Op. Dr. Nezih Durmazlar provides this information in the capacity of “DATA CONTROLLER” under the KVKK and “CONTROLLER” under the GDPR.

Respectfully.