GDPR

General Disclosure Text on the Protection of Personal Data

Information Regarding the Data Controller

PURSUANT TO THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA; This Disclosure Text on the Processing of Personal Data (“Disclosure Text”) has been prepared in accordance with Article 10 of the KVKK, titled “Data Controller’s Obligation to Inform,” in order to inform you in the most transparent manner regarding the identity of the data controller, the method and legal grounds for collecting your personal data, the purposes for which this data will be processed, to whom and for what purposes it may be transferred, the duration of data processing, and your rights as listed in Article 11 of the KVKK. The explanations provided for your personal data in this disclosure text also cover your special categories of personal data.

The Data Controller is “Op. Dr. Necati ARİCİ,” residing at the address “Teşvikiye Mh. Hakkı Yeten Cd. Fulya Terrace Center 1 No:11 Kat 11 Daire:56 Şişli/İSTANBUL.”

Purposes of Processing Personal Data

The Practice requires the processing of personal data both while directly fulfilling its legal obligations and in cases indirectly required by these obligations and the services provided. In this sense, your personal data is processed by the Practice in a manner that is always relevant, limited, and proportionate for purposes such as:

  • Fulfilling our obligations specified in the Law No. 6698 on the Protection of Personal Data and the secondary regulations issued based on this Law,
  • Fulfilling our obligations specified in the Law No. 5651 on the Regulation of Publications Made in the Internet Environment and Combatting Crimes Committed through These Publications and the secondary regulations issued based on this Law,
  • Providing information needed by relevant public institutions and organizations, judicial or administrative jurisdictions, and law enforcement forces when necessary,
  • Ensuring the implementation of security measures in the workplace and preventing the disruption of the working environment in the workplace,
  • Fulfilling our necessary obligations for the healthy execution of relevant business processes within the scope of work and contractual relationships.

Transfer of Personal Data

Your personal data is transferred to public institutions and organizations within the scope of the purposes listed above, in accordance with the conditions specified in Articles 8 and 9 of the Law, upon the request of legally authorized institutions and judicial and/or administrative jurisdictions, solely for the purpose of fulfilling potential legal obligations.

Methods and Legal Grounds for Collecting Personal Data

Your personal data is collected by real or legal persons authorized by the Practice as data processors, through means such as e-mail, telephone, website, various contracts, forms and reports kept in paper medium, via automated or non-automated methods, in verbal, written, or electronic form.

In this context, your following personal data is processed pursuant to subparagraphs 2/a-c-ç-e-f of Article 5 and paragraph 3 of Article 6 of the Law, provided that it does not harm your fundamental rights and freedoms and based on the legal ground of the Practice’s legitimate interests:

  • Identity Information: Your name, surname, T.R. Identity number, passport number or temporary T.R. Identity number, place and date of birth, marital status, gender, insurance or patient protocol number, and other identity data by which we can identify you.
  • Contact Information: Your address, telephone number, electronic mail address, and other communication data; your call records with the consultation line, and personal data obtained when you contact us via electronic mail, letter, or other means.
  • Financial Data: Such as your billing information.
  • Insurance Data: Your data regarding private health insurance and/or Social Security Institution data for the purpose of financing and planning health services.
  • Health Information: All kinds of personal data regarding health and sexual life obtained during or as a result of the execution of medical diagnosis, treatment, and care services, including but not limited to laboratory results, test results, examination data, and prescription information.
  • Visual Data: Your photographs associated with the provision of health services.
  • Employment Data: In the event that you apply for a job at the Practice, your CV and other personal data provided in this regard; if you are an employee or consultant of the Practice, data regarding your family members to be used within the scope of the personnel file related to your service contract and legal relationship, and all kinds of your personal data.

Rights of Data Subjects Under the Law

By applying to our Practice at any time, you may:

  • Learn whether personal data is processed, the purpose of processing, and whether it is used in accordance with the purpose, and request information if it has been processed,
  • Learn the third parties with whom your information is shared domestically or abroad in accordance with the Law,
  • Request correction if you think your information has been processed incompletely or incorrectly,
  • Request the deletion or destruction of information within the framework of the conditions provided for in Article 7 of the Law,
  • Request that the third parties to whom the information has been transferred be notified of the requests stated in points (c) and (d) and that they perform the same operations,
  • Object to the emergence of a result against you due to the analysis of your information by automated systems, or request compensation for damages if you think your data was recorded or used unlawfully and that you suffered damage for this reason.

Should the application made for these purposes require an additional cost, the fee determined by the Communiqué on the Procedures and Principles of Application to the Data Controller issued by the Personal Data Protection Board shall be paid by the Data Subject. If the applications are answered in writing, no fee will be charged for the first 10 (ten) pages; a processing fee of 1 TL will be charged for each page over 10 (ten) pages. If the answer to the applications is provided in a recording medium such as a CD or flash memory, the cost of the recording medium will be reflected to the Data Subject.

Requests included in the applications will be concluded as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request.

Applications to benefit from the rights under the Law may be submitted to our Practice in writing, provided that they are in Turkish; detailed information can be obtained by visiting the website of the Personal Data Protection Authority.

Applications can be made by one of the following methods:

  • Obtaining the form from the address “Teşvikiye Mh. Hakkı Yeten Cd. Fulya Terrace Center 1 No:11 Kat 11 Daire:56 Şişli/İSTANBUL” and, after filling it out, delivering a wet-signed copy in person or via notary public to the same address,
  • Filling out the form obtained from the address [drnecatiarici.com/basvuru_formu.docx](https://drnecatiarici.com/basvuru_formu.docx) and, after signing it with your “secure electronic or mobile signature” within the scope of the Electronic Signature Law No. 5070, sending the secure electronically signed form to op.dr.arici@gmail.com via registered electronic mail.

In the application to be made to use the rights possessed as a personal data subject and mentioned above, which contains explanations regarding the right requested to be used; the requested matter must be clear and understandable, the requested subject must be related to the person of the Data Subject, or if acting on behalf of someone else, a special power of attorney notarized in this regard must be presented.

Pursuant to the “Communiqué on the Procedures and Principles of Application to the Data Controller,” it is mandatory for applications to include name-surname, signature, T.R. identity number, residence or workplace address, e-mail address, and telephone number elements. Applications that do not contain the aforementioned elements will be rejected by our Practice.

Our Practice always reserves the right to make changes to this disclosure text for reasons arising from the Law, secondary regulations, and Board decisions. Changes to be made to the disclosure text and the updated text will gain validity immediately as of the date of publication.