MD.AHMET ARIF EROGLU PRACTICE OFFICE

INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA

This clarification text is in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) in Turkish Legal Legislation, the European Union General Data Protection Regulation (“GDPR”), the Regulation on Personal Health Data and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Notification Obligation. It has been prepared to inform data owners about the procedures and principles regarding the processing of Personal Data of patients/clients applying to MD. AHMET ARIF EROGLU PRACTICE (”  MD. ARIF EROGLU”).

Ensuring the security of patients/clients’ Personal Data It is one of MD. ARIF EROGLU’s primary goals. For this reason, in order to securely process the Personal Data of patients/clients and prevent any unlawful access or leakage of these data, all necessary security measures are 

taken by MD. ARIF EROGLU  in accordance with the applicable legislation. 

DATA CONTROLLER

Your Personal Data, within the scope of KVKK No. 6698 and GDPR, “Abdi İpekçi Cad.  operating at the address of “Azer İş Hanı No.40 K.6 D.16-17 Nişantaşı/Şişli/İstanbul”. It will be processed by MD. ARIF EROGLU. MD. AHMET ARIF EROGLU, registered with Beyoğlu V.D., Tax Number 30652934170, is accepted as “Data Controller” within the scope of KVKK and “Controller” within the scope of GDPR.

Within the scope of GDPR, MD. ARIF EROGLU has agreed with a Law Firm with Personal Data Protection Expertise as the “Data Protection Officer”,   IN MD. ARIF EROGLU PRACTICE, the Compliance Process Regarding the Protection of Personal Data within the scope of KVKK and GDPR was carried out under the consultancy and guidance of the Expert Law Firm, provided that the implementation responsibility belongs to the Data Controller.

YOUR PERSONAL DATA TO BE PROCESSED

Your Personal Data and Special Personal Data specified below will be processed in accordance with the basic principles stipulated in KVKK Article 4 and GDPR Article 5, in line with the Personal Data Processing Conditions and Purposes specified in KVKK Articles 5 and 6 and GDPR Articles 6 and 9. and within the scope of the purposes stated in this Information Text; In accordance with the law, in connection with the purpose of processing, limited and proportionate, observing the principle of justice and transparency, in an accurate and up-to-date manner, by taking all kinds of technical and administrative measures foreseen in the legislation to ensure data security. It will be processed by MD.ARIF EROGLU.

1-YOUR IDENTITY INFORMATION: Your name, surname, Your Identity Number and/or Passport Number and/or Temporary Identity Number, place and date of birth, marital status, gender, profession, signature and other identification data that can identify you.

2-YOUR CONTACT INFORMATION: Your address (residence/workplace), telephone number (your home/workplace fixed and/or mobile telephone numbers), your e-mail address, IP address, social media accounts and other communication data.

3-YOUR HEALTH INFORMATION: Your blood type, allergies, chronic diseases, venereal diseases, infectious diseases, data regarding previous surgeries/operations, medications you constantly use, information regarding Covid-19 disease, medical treatments, medical history, health reports, Your analysis and imaging results, anesthesia information, prescription information, unhealthy habits, body analysis and measurement data, skin analysis data and other health data required for the treatments and operations to be applied to you.

4- YOUR PHOTO/VIDEO IMAGES AND AUDIO DATA: Your image and audio data contained in the photographs and/or videos recorded before, during, and/or after the medical procedure, and the video obtained from the cameras recorded 24/7 in the practice. your image data and your audio recording data.

5-YOUR FINANCIAL INFORMATION: Your bank account number, IBAN number, credit card information, billing information and other financial data.

6-YOUR TRANSFER AND ACCOMMODATION INFORMATION: If you are a Health Tourist coming within the scope of International Health Tourism, your transfer information, flight ticket round-trip information, and hotel accommodation information.

FOR WHAT PURPOSE IS YOUR PERSONAL DATA PROCESSED?

Your Personal Data and Special Personal Data; are processed to be able to create a patient file, to carry out your examination, preventive medicine, medical diagnosis, treatment, medical application, operation and care services, to carry out your checks after the medical diagnosis, medical application, treatment and operation processes, to carry out complication processes that may occur, to communicate with you one-on-one, to manage appointment processes. To be able to perform patient satisfaction and demand management, to fulfill legal and contractual obligations, to preserve information regarding your health data that must be kept in accordance with the relevant legislation within the specified periods, to ensure the security of the practice, to receive consultation from another relevant specialist physician when necessary in order to perform your operation/treatment correctly, To be able to fulfill legal obligations in accordance with the legislation within the scope of International Health Tourism, to plan transfer, accommodation and translator services for Health Tourist patients/clients coming within the scope of International Health Tourism, to announce innovations regarding medical treatment and practices, to inform third parties medically about the applied medical procedures/operations. To be able to carry out promotional and marketing activities regarding medical practices/operations implemented within the framework of the International Health Tourism Incentive legislation, to plan and manage health services and their financing, to fulfill the responsibilities arising from the legal relationship established between the doctor and the patient, to fulfill financial and administrative obligations, to ensure technical security and In order to fulfill public obligations, in accordance with KVKK and GDPR It is processed by MD. ARIF EROGLU.

Your Personal Data and Special Personal Data, will be processed by MD.  ARIF EROGLU within the scope of KVKK and GDPR:

• Your Identity Data; It will be processed in order to carry out examination, medical diagnosis, medical application, treatment/operation and care services, to create a patient file, to perform patient satisfaction and demand management, and to plan transfer, accommodation and translator services of Health Tourist patients/clients within the framework of International Health Tourism.
• Your Contact Information; It will be processed in order to carry out your checks and manage appointment processes after examination, preventive medicine, medical diagnosis, medical practice, treatment and operation processes, and may also be processed for the purpose of introducing, informing and announcing innovations in medical treatment and practices, provided that you give your explicit consent.
• Your Health Information; To be able to carry out your medical treatments and operations successfully, to receive consultation from another specialist physician if deemed necessary during your treatment and operation process, to manage the complication process that may occur, to create a patient file, to preserve information regarding your health data that must be kept in accordance with the relevant legislation within the period, to be able to keep the information regarding your health data that must be kept in accordance with the applicable Health Law and It will be processed in order to fulfill the legal obligations within the scope of International Health Tourism Legislation.
• Your Photo, Video and Voice Recording Information;  It will be processed by MD. ARIF EROGLU in order to observe and manage the treatment and/or operation process, to ensure the security of the practice, and also, provided that you give your explicit consent, to inform third parties about the medical procedure(s) applied to you, and to manage promotional and marketing activities in accordance with the International Health Tourism Incentive legislation. .
• Your Financial Data; It will be processed for the purpose of controlling your fee payments and issuing invoices and, in case of any excess fee, for a refund.
• Your Transfer and Accommodation Information; It will be processed in order to plan the transfer and accommodation services of Health Tourist patients/clients within the framework of International Health Tourism.

Your above-mentioned Personal Data and Special Personal Data will be processed in line with the above-mentioned purposes and legislation in order to carry out your medical treatment/operation and to fulfill the obligations regarding the medical service provided. If you do not provide your relevant personal data,  will serve as a physician in your medical treatment and/or operation.  The legal obligations imposed on MD. ARIF EROGLU will not be fulfilled properly, and your operation, treatment and recovery processes will not be carried out successfully.

PERSONAL DATA COLLECTION METHOD

Your Personal Data, Depending on the health service provided by MD. ARIF EROGLU;

• For the purpose of examination, preventive medicine, diagnosis, treatment, medical practice and operation coming to MD. ARIF EROGLU’s office and providing medical evaluation regarding the treatment to be applied to you, through your health reports, laboratory and imaging results, analyses, your identity/passport and your statements regarding your health data, identity and contact information,
• By filling out the “Patient Information and Consent Form” regarding the treatment and/or operation to be performed by MD. ARIF EROGLU,
• Through the contact form you fill out on MD. ARIF EROGLU’s corporate website digipeaktest6.xyz/ariftr, whose server is located in the country,
• Through e-mails sent to MD. ARIF EROGLU’s corporate e-mail address (info@ariferoglu.com), whose server is located in the country,
• Through photo/video recordings taken by MD. ARIF EROGLU before, after and/or during the medical procedure applied to you,
• Upon your request and when necessary;   In order for MD. ARIF EROGLU to diagnose and control you online via remote access, you can use remote connection applications service providers (whatsapp/zoom.us/facetime/skype/messanger/google/instagram/facebook) from which you receive service by accepting their Privacy Policies and Overseas Transfer Policies. etc.) using   Through your written/audio/visual (photo and/or video recording) messages you send to MD. ARIF EROGLU and your online audio/video calls you make through these applications,
• OP located on social media accounts (instagram, youtube, facebook, twitter, linkedin, etc.) whose servers are located abroad, of which you are already a user by accepting their Privacy Policies and International Transfer Policies. By sending a direct message to MD. ARIF EROGLU’s profile account and/or commenting on his posts,
• OP via social media accounts (instagram, youtube, facebook, twitter, linkedin, google, etc.) whose servers are located abroad, of which you are already a user, by accepting their Privacy Policies and International Transfer Policies.  Through the information you transfer by allowing it to be processed automatically through panels such as “contact us” or “get information” in the promotions and advertisements made by MD. ARIF EROGLU,
• If you want to join the wireless internet network (wi-fi) available in MD. ARIF EROGLU’s practice as a guest user, through log-recording devices (firewall) used within the scope of technical measures taken in accordance with the legislation,
• Through closed-circuit recorded security cameras in order to ensure workplace security within the scope of legitimate interest, will be collected and throughout the examination, preventive medicine, medical diagnosis, treatment, operation and maintenance services,

In order for MD. ARIF EROGLU to fully and properly fulfill its contractual and legal obligations, it will be processed by taking all administrative and technical measures prescribed by KVKK and GDPR.

PURPOSE OF PROCESSING YOUR PERSONAL DATA,

METHOD AND LEGAL REASON

Your Personal Data by real or legal persons authorized by MD. ARIF EROGLU, in the capacity of “DATA PROCESSOR/PROCESSOR”; It can be recorded physically and electronically, along with all technical and administrative security measures required by the legislation, by taking verbal, written, camera and photographic records, and in cases stipulated by the relevant provisions of KVKK and GDPR, it can also be processed with your explicit consent.

SITUATIONS WHERE YOUR EXPRESS CONSENT STATEMENT IS REQUIRED

In accordance with GDPR article 6/1/a and KVKK article 5/1, your Personal Data may be processed in the following cases only with your explicit consent;

• Sending you SMS messages and/or e-mails and establishing mobile communications for the purpose of promoting, announcing and informing you about the innovations regarding the medical services provided by MD. ARIF EROGLU will only be possible with your express consent.

• Your photographs and/or video recordings taken before, during and/or after the medical procedure in order to observe the progress of the treatment will be sent to  Sharing on MD. ARIF EROGLU’s social media user accounts (instagram, youtube, facebook, twitter, linkedin, google, etc.) and corporate websites will only be possible with your express consent.

• Since sharing your data through service providers whose servers are located abroad is considered “transfer abroad” and there is an “explicit consent requirement” for transfer abroad, your explicit consent will be obtained in such cases. However, in the following cases   Since there will be no international transfer made by MD. ARIF EROGLU, YOUR EXPRESS CONSENT WILL NOT BE REQUIRED, YOUR EXPRESS CONSENT WILL BE DEEMED TO BE RECEIVED BY THE SERVICE PROVIDER OF WHICH YOU ARE THE USER;OP by using service providers whose servers are located abroad 

(whatsapp/zoom.us/facetime/skype/messanger/google/instagram/facebook etc.) of which you are already a user by accepting its Privacy Agreement and International Transfer Principles.  If you send a written/voice message and/or photo/video recording or make an audio/video call to MD. ARIF EROGLU and request to receive remote examination/diagnosis service in this way; OP through these applications by accepting the policies of the said applications.  

• Your Personal Data and Special Personal Data that you shared with MD. ARIF EROGLU is   You are deemed to have accepted the processing in accordance with MD. ARIF EROGLU’s KVK Disclosure Text and Privacy principles, you have consented to be contacted through the aforementioned applications, and you have given explicit consent to the aforementioned applications to transfer your data abroad in accordance with the policies you have previously accepted of these applications whose servers are located abroad.

• In cases where you accept its Privacy Policy and International Transfer Principles and request to be contacted via e-mail service providers (Hotmail, Gmail, Yahoo, etc.) whose servers you are currently using are located abroad;  You are deemed to have given explicit consent for MD. ARIF EROGLU to process your Personal Data and Special Personal Data shared in the messages in line with its KVK Disclosure Text and Privacy principles, and to have your data transferred abroad in accordance with the policies you have previously accepted of these service providers whose servers are located abroad.

•  In cases where you apply for MD. ARIF EROGLU’s advertisements and promotions are published on social media service providers (facebook, Instagram, YouTube, Google, WhatsApp, etc.) whose servers are located abroad; By accepting the Privacy and International Transfer Policies of the relevant social media service providers, your data that you allow to be automatically processed and transferred abroad will be transferred to OP by the relevant social media service provider.  It will be transferred to MD. ARIF EROGLU and   It will be processed and stored by MD. ARIF EROGLU in accordance with its Information Text and Privacy Policy that you are reading. In these cases; .  With the Clarification Text of MD. ARIF EROGLU, you have accepted the Privacy Principles and the processing of your Personal Data and Special Personal Data accordingly, and OP through your contact information provided.  You are deemed to have given your express consent for MD. ARIF EROGLU to reach you and communicate with you.

• OP located on social media accounts (instagram, youtube, facebook, twitter, linkedin, etc.) whose servers are located abroad, of which you are already a user by accepting their Privacy Policies and International Transfer Policies. If you send a direct message to MD. ARIF EROGLU’s profile account; .  You are deemed to have given explicit consent for MD. ARIF EROGLU to process your data in accordance with its KVK Disclosure Text and Privacy principles and to communicate with you through the relevant application.

SITUATIONS WHERE YOUR DATA MAY BE PROCESSED WITHOUT EXPRESS CONSENT STATEMENT:

In accordance with GDPR article 9/2/h and KVKK article 6/3;

• In order to carry out examination, medical diagnosis, treatment, operation and care services,  is under the obligation of confidentiality in accordance with the Law. Your Health Data, which is considered Special Personal Data, will be processed by MD. ARIF EROGLU without your explicit consent.

In accordance with GDPR article 6/1/b and KVKK article 5/2/c;

• In order to be able to carry out your checks after medical diagnosis, treatment and operation processes, to manage complications that may occur, to communicate with you one-on-one, and to manage control appointment processes,  Your Personal Data will be processed by MD. ARIF EROGLU without your explicit consent.

Based on our legitimate interests in accordance with GDPR article 6/1/f and KVKK article 5/2/f;

In order to ensure clinic security, patient satisfaction and demand management, Your Personal Data will be processed by MD. ARIF EROGLU without your explicit consent.

Based on legal and legal obligations in accordance with GDPR article 6/1/c, KVKK article 5/2/a and KVKK article 5/2/ç, your Personal Data will be processed without your explicit consent in the following cases;

• Creating a patient file.
• Preserving information regarding your health data that must be kept in accordance with the relevant legislation.
• Checking your fee payments and issuing invoices.
• Execution of tax payments.
• Fulfillment of obligations in accordance with the Ministry of Health Legislation.
• Fulfillment of obligations in accordance with the International Health Tourism Legislation.
• Ensuring your data security.
• Fulfillment of legal obligations before the Judicial Authorities.
• Fulfillment of administrative obligations before Administrative Institutions and Organizations.

YOUR PERSONAL DATA TRANSFER AND TO WHOM IT WILL BE TRANSFERRED FOR WHAT PURPOSE

Your Personal Data and Special Personal Data collected in line with the conditions and purposes within the scope of the Personal Data Processing Conditions specified in Articles 5 and 6 of KVKK No. 6698 and Articles 6 and 9 of GDPR; In accordance with Articles 8 and 9 of the KVKK and Articles 45 and 49 of the GDPR,   Carrying out and developing examination, medical diagnosis, treatment, medical application, operation and maintenance services by MD. ARIF EROGLU, receiving consultation service from a specialist physician(s) when necessary, fulfilling administrative obligations regarding International Health Tourism legislation, transferring Health Tourist patients coming within the framework of International Health Tourism. planning accommodation and interpreter services, communicating with patients, planning and managing health services and financing, managing promotion and marketing activities in accordance with the International Health Tourism Promotion legislation, fulfilling the responsibilities arising from the legal relationship established between the doctor and the patient, financial, legal and administrative obligations. For the purposes of fulfillment, ensuring technical security and fulfilling public obligations; To the extent that it is sufficient to achieve the purpose, it may be transferred to the third parties and institutions listed below by signing the necessary confidentiality agreements and providing all administrative and technical security measures in accordance with the legislation. In this context,   Your Personal Data processed by MD. ARIF EROGLU;

• Insured Employees,
• Subsidiary Partnership,
• Private Hospitals,
• To other specialist physicians for consultation,
• To its suppliers,
• Financial Advisors, Tax and Finance Consultants and Auditors
• Legal Advisor
• translators
• International Promotion Marketing Consultant
• Support Management System (DYS) Officer
• Data Protection Officer
• IT Consultant
• WEB Consultant
• Tourism Agencies
• “Clinic Management Software Program” Service Provider
• Database (Server) Providers
• Public Institutions and Organizations authorized within the framework of the law,
• It will be transferred to the Judicial Authorities.

PERSONAL DATA PROCESSING TIME

Your Personal Data,   It will be stored by MD. ARIF EROGLU to the extent and for as long as it is legally obliged to keep it. Documentation and storage obligations arise from local norms regarding trade, tax and health legislation. The table shown below includes the retention periods for your Personal Data.

Your Personal Data Storage Periods

Your Identity Information           20 Years After the End of the Service Provided to the Service Receiver

Your Contact Information          20 Years After the End of the Service Provided to the Service Receiver

Your Health Information             20 Years After the End of the Service Provided to the Service Receiver

Your Photo and Video Information  20 Years After the End of the Service Provided to the Service Receiver

Your Financial Information             5 Years After the End of the Service Provided to the Service Receiver

AGE LIMIT OF DATA OWNER WITHIN THE FRAMEWORK OF REGULATIONS

Within the scope of KVKK, patients/clients will be able to give personal consent for the processing of their personal data, provided that they are at least 18 years old. Approval of patients/clients under this age limit must be given by their legal representatives.

Within the scope of GDPR, citizens of European Union countries and patients/consultants residing in European Union countries can give their consent for the processing of their personal data in person, provided that they are at least 16 years old or the age limit stipulated in their country. Approval of patients/clients under this age must be given by their legal representatives.

WITHDRAWAL OF CONSENT

 regarding the processing of your Personal Data.  If you give your consent to MD. ARIF EROGLU, we inform you that you can withdraw your consent at any time for the purposes stated above, in accordance with GDPR 6/1/a and KVKK 5/1. Your consent will be withdrawn if you send your declaration of withdrawal of consent to our contact address as specified below.

RIGHTS OF DATA SUBJECTS ACCORDING TO GDPR

As a Data Owner, your Personal Data is also protected in accordance with the GDPR. In cases where GDPR falls within the jurisdiction (European Union citizens or residents of European Union countries), the rights of Data Owners are as follows;

• Right of Access (Article 15 GDPR): The data owner has the right to decide whether personal data concerning him/her is being processed or not.  He/she has the right to confirm by contacting MD. ARIF EROGLU and to learn the details in GDPR article 15 in case personal data is processed.
• Right to Rectification (Article 16 GDPR): Data Owner,  MD. ARIF EROGLU has the right to have its changed personal data corrected at any time.
• Right to Erasure (Article 17 GDPR): Data Owner,  MD. ARIF EROGLU has the right to request the deletion of his personal data. If the matters specified in Article 17 of the GDPR occur,   Your personal data will be deleted by MD. ARIF EROGLU without delay.
• Right to Restriction of Processing (Article 18 GDPR): If Data Owners object to the up-to-dateness of their Personal Data,   Until the accuracy of Personal Data is confirmed by MD. ARIF EROGLU, Data Owners have the right to request the restriction of the use of their data.
• In cases where the Data Owner requests the deletion of his Personal Data due to the illegality of the Personal Data processing activity, he has the right to request the restriction of the use of the data until his request is fulfilled.
• Data Owner,   In cases where MD. ARIF EROGLU no longer needs his personal data for the purpose of processing, he has the right to request the restriction of the use of his data.
• In cases where Data Owners object to processing in accordance with Article 21/1 of the GDPR,   MD. ARIF EROGLU has the right to request the restriction of the use of his data until it is verified whether the legitimate reasons for data processing outweigh the legitimate reasons of the Data Owner.
• Right to Data Portability (Article 20 GDPR): Data Owner, if technically possible,  MD. ARIF EROGLU has the right to request the transfer of its Personal Data held by it to another controller at any time. However, this right can be exercised when data processing is based on consent or when required by contract.
• Right to Object (Article 21 GDPR): The Data Subject has the right to object to the processing of Personal Data, including profiling, on grounds relating to his or her particular situation, pursuant to point (e) or (f) of Article 6(1) of the GDPR.  MD. ARIF EROGLU cannot process Personal Data unless it can demonstrate a strong legitimate reason, such as overriding the interests, rights and freedoms of the Data Owner or the establishment, exercise or protection of a legal right.
• Where Personal Data is processed for direct marketing purposes, the Data Subject has the right to object at any time to processing of his personal data for such purposes, including profiling to the extent that it is related to such direct marketing.
• If the Data Owner objects to the processing of Personal Data for direct marketing purposes, the Personal Data will no longer be processed for such purposes.

RIGHTS OF DATA OWNERS ACCORDING TO KVKK

The rights that natural persons whose Personal Data are processed have in accordance with Article 11 of the KVKK are as follows;

• Learning whether personal data is processed or not,
• Requesting information if personal data has been processed,
• Learning the purpose of processing personal data and whether they are used for their intended purpose,
• Knowing the third parties to whom personal data is transferred at home or abroad,
• Requesting correction of personal data in case personal data has been processed incompletely or incorrectly and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
• Requesting the deletion or destruction of personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the provisions of KVKK and other relevant laws, and requesting that the transaction carried out in this context be notified to third parties to whom personal data has been transferred,
• Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,
• Request compensation for damages in case of damage due to unlawful processing of personal data.

In case you have rights or requests that you want to exercise from the rights listed above; Your written application, in which you clearly and understandably state which of the articles regarding data owner rights in the GDPR and the rights specified in Article 11 of the KVKK, you wish to use, with a wet signature and documents proving your identity, should be submitted to   MD. ARIF EROGLU’s “Abdi İpekçi Cad.”, which is also on their corporate website. Azer İş Hanı No.40 K.6 D.16-17 Nişantaşı/Şişli/İstanbul” and present it in person, send it through a notary public, or sign it with a secure e-signature and send it to the e-mail address “info@ariferoglu.com” or at KVKK. You can send it via other specified methods. In your applications, name-surname, signature, T.R. Identity Number/Passport Number/temporary T.R. It is mandatory to have the Identity Number, residence or workplace address, e-mail address, telephone and fax number, as well as the elements subject to the request, in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller”.

MD. ARIF EROGLU will finalize the request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee at the tariff determined by the Personal Data Protection Board will be charged.

CONSENT AND APPROVAL

When you read and accept this Information Text, You hereby declare that you have full and complete information about the data processing process carried out by MD. ARIF EROGLU, that you have learned your rights under the KVKK and GDPR, and that your Personal Data and Special Personal Data are subject to OP within the scope of this Information Text. You are deemed to have accepted, declared, and undertaken that you have given your free and free will to the PROCESSING by MD. ARIF EROGLU.

You have the right to refuse to accept the Information Text after reading it.

MD. ARIF EROGLU reports as “DATA CONTROLLER” within the scope of KVKK and as “CONTROLLER” within the scope of GDPR.

Regards.

I HAVE READ, UNDERSTOOD, AND ACCEPT THE KVK CLARIFICATION TEXT (to be added as a link).