Data controller
Data controller for your personal data ’dir. Data controllerna Yüksekalan, 502. Sk. No:3 A, 07310 Muratpaşa/Antalya adresinden ve You can reach us via e-mail address.
Protection of personal data
We explain for what purpose and how we protect your data.
Information, cookies and application processes for patients, visitors and website users.
This text has been prepared to fulfill the obligation to inform under Article 10 of the Personal Data Protection Law No. 6698. Clarification is provided whenever personal data is processed; For activities requiring explicit consent, consent is obtained separately and with free will.
Patient data that can be processed
Depending on the nature of the service offered, the following categories of data may be processed. Not all data on the list are collected from every patient; Only data necessary for the relevant transaction is processed.
Identity
Name, surname, T.R. identity or foreigner identification information, date of birth, gender, signature and, where necessary, parent/guardian information.
Contact
Telephone, e-mail, address and appointment contact preferences.
Health
Medical and dental history, allergy and medication information, examination findings, radiographs, photographs, measurements, treatment plan, applications and follow-up records.
Finance
Billing, payment, banking or insurance transaction information; The full security data of the card is not stored by the polyclinic.
legal action
Approvals, contracts, applications, dispute and official correspondence records.
physical security
Camera recordings taken for security purposes in common areas of the clinic. Registration in examination and treatment areas is only made if there is a legal reason.
Processing purposes
- Carrying out appointment, patient admission, identity verification and communication processes.
- Planning and providing preventive medicine, medical diagnosis, dental treatment, care and follow-up services.
- Carrying out examination, radiology, laboratory, prescription, prosthesis and consultation processes.
- Ensuring patient safety, infection control, quality standards and clinical record integrity.
- Carrying out invoicing, payment, accounting, insurance and finance processes.
- To fulfill legal notification obligations to the Ministry of Health and authorized public institutions.
- Evaluating patient demands and complaints, establishing and defending legal rights.
- Ensuring information systems and physical space security.
- To carry out satisfaction measurement and promotional and commercial communication activities in case of explicit consent.
Collection methods and legal reasons
Data; verbally, in writing or electronically by the patient; It can be collected through website forms, telephone, e-mail, messaging channels, devices used during examination and treatment, imaging systems, health information systems, contracted laboratories and authorized institutions.
Processing activities, depending on their nature, are listed in Articles 5 and 6 of the Law; It is based on the conditions of being clearly stipulated in the law, fulfillment of a legal obligation, establishment or execution of a contract, establishment/use/protection of a right, legitimate interest of the data controller and explicit consent of the data subject. Health data; It is processed by persons or authorized institutions who are obliged to keep confidentiality and by taking the necessary security measures, for the purpose of medical diagnosis, treatment and care services and planning and management of health services.
Parties to which data can be transferred
Data may only be transferred to the extent necessary and limited to the purpose:
- Ministry of Health, Provincial Health Directorate, SGK and public institutions authorized by legislation.
- Courts, prosecutor's offices, law enforcement, enforcement offices and other competent authorities.
- Dentists, healthcare professionals involved in the treatment and healthcare institutions where consultation is received when necessary.
- Contracted dental laboratories, imaging centers and suppliers for prosthesis production and examination.
- Payment institutions, banks, financial advisors, auditors and insurance companies.
- IT, archive, security and technical support service providers with regulated confidentiality and data processing obligations.
The scope of data transferred is limited to the information necessary for the task of the party concerned.
Website, contact and appointment forms
In the web appointment form, name-surname, telephone, preferred date, optional service and doctor preference are taken. This information is processed for the purposes of creating an appointment request, checking availability, and contacting you. The information in the contact form is used to respond to the request.
The forms do not request diagnoses, medications, medical history or detailed health complaints. The web form should not be used in emergency health situations; 112 or the appropriate health institution should be contacted. Only authorized employees have access to form records.
Cookie policy
The site only uses technical session cookies necessary for secure session and forms operation. These cookies are not used for advertising, profiling or analyzing visitor behavior.
Apart from mandatory cookies, Google Analytics, Google Ads, Google Tag Manager, Meta Pixel or Meta Conversion API are not used. You can delete or block technical cookies through your browser settings; If you block it, appointment and contact forms may not work.
Data transfer abroad
Web sitesinde analitik veya reklam amaçlı yurt dışı aktarım yapan bir takip aracı kullanılmamaktadır. Google Maps bağlantısı veya WhatsApp düğmesi kullanıldığında ilgili üçüncü taraf hizmetine yönlendirilirsiniz; yönlendirme sonrasındaki işlemler sağlayıcının kendi gizlilik koşullarına tabidir. Gelecekte yurt dışı aktarım gerektiren bir hizmet kullanılırsa Kanun’un 9. maddesindeki şartlar sağlanır ve bu metin güncellenir.
Storage, destruction and data security
Data is stored for the periods stipulated in the relevant health, tax, trade, labor and other legislation and for the period necessary for the purpose of processing. When the period expires and there is no other legal reason, it is deleted, destroyed or anonymized within the scope of periodic destruction processes.
Appropriate technical and administrative measures such as authorization and access records, role-based access, password policies, backup, updating, malware measures, physical archive security, confidentiality commitments and employee awareness studies are implemented. Access is more limited for sensitive data. Incident response processes are carried out taking into account that no system can provide absolute security.
Your rights under KVKK
Within the scope of Article 11 of the Law; You have the right to learn whether your personal data has been processed, to request information if it has been processed, to learn the purpose of processing and whether it is used in accordance with the purpose, to know the third parties transferred, to request correction of incomplete or incorrectly processed data, to request deletion or destruction if the conditions are met, to request correction and deletion to be notified to transferred third parties, to object to the results of analysis through automatic systems and to request compensation for damages due to unlawful processing.
Update the text
This text may be updated according to changes in legislation, Board decisions, technologies used and outpatient clinic processes. The current version is published on this page; Significant changes are announced through appropriate channels.