YEŞİLKÖY EDUCATION RESEARCH AND HEALTH ENTERPRISES JOINT STOCK COMPANY
Dear Patients;
Yeşilköy Education Research and Health Enterprises Inc. respects and values your privacy. Therefore, we would like to inform you about your rights regarding the use and protection of your personal data within the scope of the law in force to protect your fundamental rights and freedoms.
Personal Data Protection Law No. 6698 (KVKK) was published in the Official Gazette dated 7 April 2016 to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data and to regulate the obligations of real and legal persons processing personal data. Within this scope, as Data Controller, your personal data will be processed only within the scope and purpose explained below and in accordance with Health Services Fundamental Law No. 3359, Decree Law No. 663, Private Hospitals Regulation, KVKK, Regulation on Processing and Ensuring the Privacy of Personal Health Data, Ministry of Health regulations and other relevant legislation.
I. Processed Personal Data
Your personal and special categories of personal data, especially your health data may include (non-exhaustive):
- Identity data: name, surname, Turkish ID number and/or passport number and/or temporary Turkish ID number, place/date of birth, marital status, gender, profession, workplace/patient numbers, etc.
- Contact data: address, phone, e-mail; voice call records and e-mails kept by customer representatives/patient services per call center standards.
- Financial/billing data: bank account/IBAN, credit card info, invoice details; private health insurance and payer institution (e.g., SGK) information for financing and planning of services.
- Health data: medical diagnosis and reports, biometric/genetic data, labs, tests, examinations, physician analyses/comments, appointment and prescription information; all data obtained during/as a result of treatment and care.
- Feedback & records: surveys, thank-you or complaint letters, satisfaction results.
- Security data: license plate if using parking; CCTV footage in common areas per legislation.
- Online data: data you send/enter via our websites/online services (IP address, cookies and other personal data).
- HR data: CV and data related to your job application or service contract.
These data may be processed proportionately and in connection with the purposes in Section II and transferred to the persons/institutions in Section III.
II. Personal Data Processing Purposes
Your Personal Data may be processed by Yeşilköy Education Research and Health Enterprises Inc. for, but not limited to, the following purposes:
- Fulfilling legal obligations under relevant health legislation (Law No. 3359, Decree No. 663, Private Hospitals Regulation, KVKK, related Regulation, etc.).
- Identification/verification to prevent unauthorized access.
- Protection of public health, preventive medicine, medical diagnosis, execution of treatment and care services, planning/management of health services and financing.
- Planning and managing internal operations of our clinics.
- Supplying special medicines, medical equipment and/or devices for you.
- Appointment information/notifications and reminders.
- Risk management and quality improvement activities.
- Fulfilling legal/regulatory requirements and responding to authorities.
- Entitlement inquiries and financial agreements with contracted institutions.
- Sharing/authenticating information requested by contracted institutions (e.g., private insurers) within financing scope.
- Issuing invoices.
- Implementing technical/administrative data security measures.
- Analyzing service usage to improve services; responding to questions/complaints.
- Providing information to supervisory bodies.
- Preserving health data required by legislation.
- Compliance with internal policies/principles.
- Measuring and increasing patient satisfaction after services.
- Carrying out special promotional/informational activities and communicating about our services.
Data may be stored digitally and/or physically in our archives and information systems.
III. Personal Data Transfer
With necessary technical and administrative measures taken under KVKK and health legislation, your data may be transferred, in line with the purposes in Section II, to authorized persons/institutions/organizations (as permitted by law), private insurance companies, banks, funds, foundations, our domestic/foreign shareholders, subsidiaries/affiliates, group companies, auditors, consultants, business partners, and other third parties domestically/internationally with whom we have contractual relations to carry out our activities.
IV. Collection Method & Legal Reasons
Your data may be collected verbally, in writing, visually, or electronically during/before/after your visit via phone apps, SMS/MMS, SGK systems, private insurer records, referrals from other health institutions, e-mails, call center records, website forms, magazine subscription forms, and similar channels, and stored in physical/digital environments.
Under KVKK Article 7/f.1, when the purpose requiring processing ceases and/or statutory limitation/storage periods expire, your Personal Data will be deleted, destroyed, or anonymized.
V. Rights of Personal Data Owner
Within Article 11 of KVKK, you may apply to us (as Data Controller) by completing the “Personal Data Information Request Form” and delivering it by hand to the service hospital address, via notary, or via e-mail signed with your secure e-signature (Word/PDF) to [email protected] to:
- Learn whether your personal data are processed,
- Request information on processing activities,
- Learn purposes of processing and whether used accordingly,
- Know third parties transferred to domestically/abroad,
- Request correction/updating if incomplete/incorrect,
- Request deletion/destruction if processing reasons cease or no legal basis/legitimate interest exists,
- Object to adverse results via automated systems,
- Request compensation for damages due to unlawful processing.
Requests are finalized as soon as possible and within 30 days at the latest, free of charge or per the Board tariff. If the cause is our error, any fee collected will be refunded.
VI. Cases Processed Without Explicit Consent
Per KVKK Article 5 and Regulation Article 7, processing may occur without explicit consent where:
- Clearly stipulated by law,
- Necessary to protect life/physical integrity where consent cannot be given/valid,
- Directly related to contract establishment/performance,
- Mandatory to fulfill a legal obligation,
- Data made public by you,
- Mandatory for establishment, exercise or protection of a right,
- Mandatory for legitimate interests of the Company without harming fundamental rights/freedoms,
- Health data may be processed by confidentiality-bound persons or authorized institutions for public health, preventive medicine, diagnosis, treatment and care, planning/management/financing of health services.
VII. Explicit Consent Notice
By signing the “Approval Text within the Scope of the Personal Data Protection Law” during application, applicants consent to the collection, processing, and domestic/international transfer of their personal/special personal data within legal scope. Website users ticking the on-site approval text similarly consent. Absence of necessary permissions may partially or completely prevent provision of services listed under “personal data processing purposes”. In such cases, Yeşilköy Education Research and Health Enterprises Inc. does not accept responsibility for services that cannot be provided due to missing permissions.
ENFORCEMENT OF THE WEBSITE PRIVACY POLICY
Website Privacy Policy is dated 14/02/2024. If renewed, the effective date will be updated.
Published Domains
CONTACT
Data Controller: YEŞİLKÖY EDUCATION RESEARCH AND HEALTH ENTERPRISES JOINT STOCK COMPANY
E-mail (KVKK): [email protected]
Applications may be submitted by hand delivery, via notary, or by secure e-signature e-mail (Word/PDF).
© Yeşilköy Education Research and Health Enterprises Inc.