CLARIFICATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA
As Atamer Oral and Dental Health Clinic, we attach importance to ensuring the security of your personal data. In line with this principle, we aim to inform you with this Clarification Text about your personal data processed by our clinic with the publication of the Personal Data Protection Law No. 6698 dated 07/04/2016 and numbered 29677 in the Official Gazette dated 07/04/2016, which aims to protect personal fundamental rights and freedoms, especially the privacy of private life, which is protected in the processing of personal data.
All kinds of personal data belonging to all persons associated with our clinic are kept, processed and stored in accordance with the KVK Law No. 6698 and the Communiqué on the Procedures and Principles to be followed in the Fulfilment of the Disclosure Obligation. As the data controller and processor as defined in the law, we operate within the limits set by the mandatory provisions.
- Data Controller
Atamer Health Services Food Construction and Tourism Industry Trade Limited Company
Aydinli Mah. Bahceler Sk. Yavuzhan Konakları A2 Blok No:28E Tuzla / Istanbul
- Purpose and Scope of Processing Personal Data
Your personal data is obtained in order to improve the quality of service provided depending on the activity of our clinic. Pursuant to Article 4 of the KVK Law No. 6698; We act in accordance with the principles specified as being accurate and up-to-date when necessary, processing for specific, clear and legitimate purposes, and retaining personal data for the period stipulated in the relevant legislation or required for the purpose for which they are processed. Therefore, all kinds of transactions that start with the first acquisition of personal data by fully or partially automated or non-automated means, provided that they are part of any data recording system, are based on the data processing conditions, comply with the general / basic principles and carry the conditions of compliance with the law with the realisation of the enlightenment.
In this context, your personal data of general nature that are necessary for the execution of all examination, treatment, care and diagnosis services and obtained for this purpose are as follows;
- Identity
(Name, surname, mother's and father's name, mother's maiden name, date of birth, place of birth, marital status, serial number of identity card, Turkish ID number, etc.) - Contact
(Address no, E-mail address, Contact address, Registered electronic mail address (REM), Telephone no etc.) - Personal Information
(Payroll information, Disciplinary investigation, Employment records, Property declaration information, CV information, Performance evaluation reports, etc.) - Legal Action
(Information in correspondence with judicial authorities, information in the case file, etc.) - Customer Transaction
(Call centre records, invoice, promissory note, cheque information, information in box office receipts, order information, request information etc.) - Physical Space Security
(Entry and exit registration information of employees and visitors, camera records, etc.) - Process Security
(IP address information, website login and exit information, password and password information, etc.) - Finance
(Balance sheet information, Financial performance information, Credit and risk information, Asset information etc.) - Professional Experience
(Diploma information, courses attended, vocational training information, certificates, transcript information etc.) - Audio and Visual Recordings
If your personal data of special nature;
- Health Information
(Information on disability status, Blood group information, Personal health information, Information on devices and prostheses used, etc.)
- Transfer of Personal Data
We may share your general or special categories of personal data, which meet the conditions of compliance with the law, with service providers such as real or legal persons, shareholders, suppliers, authorised public institutions and organisations, etc. from whom we receive support to carry out our dentistry activities during the retention period. In accordance with the procedures and principles stipulated in Articles 8 and 9 of the Law, your personal data may be transferred to the servers and storage areas used by our clinic. Depending on the origin of the said transfer server, it may be transferred domestically or abroad.
- Data Collection Method and Legal Reason
Your personal data are collected verbally or in writing in the technical electronic systems of our clinic or in physical environments. In order to carry out all kinds of transactions within the field of activity of our clinic in accordance with the legislation, the data processing methods and reasons are the Law No. 6698 on the Protection of Personal Data, the Basic Law No. 3359 on Health Services, the Decree Law No. 663 on the Organisation and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Hospitals, the Regulation on Processing Personal Data and Ensuring Privacy, the Regulation on Deletion, Destruction or Anonymisation of Personal Data and other legal regulations.
Data processing, which refers to the process between the receipt and destruction of data, is, as a rule, subject to the existence of your informed consent. Processing of special categories of personal data such as health data may be processed except with the explicit consent of the data subject; special personal data other than health and sexual life may only be processed in cases stipulated by law, and personal data relating to health and sexual life may only be processed during health services such as the provision of treatment and care services.
Your data will be kept under the responsibility of our clinic for the legal retention period determined by the provisions of the legislation. In the data retention period of our clinic, information on identity, communication, personal, health, criminal conviction and security measures are kept for 15 years in addition to the working period; legal transactions, customer transactions, finance, professional experience, visual and audio records are kept for 10 years, and physical space security for 1 month. Pursuant to Article 7 of the Regulation on Deletion, Destruction or Anonymisation of Personal Data, all transactions regarding the deletion, destruction and anonymisation of personal data are recorded and such records are kept for at least 3 years, excluding other legal obligations. Although it has been processed in accordance with the Law and other relevant legal regulations, the real person whose personal data is processed is also entitled to request its deletion or destruction in the event that the reasons requiring its processing disappear.
- Other Rights
The data subject may request the following rights specified in Article 11 of the law from our clinic, which is the data controller and processor;
- To learn whether personal data is being processed,
- Request information if personal data has been processed,
- To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data are transferred domestically or abroad,
- To request correction of personal data in case of incomplete or incorrect processing,
- To request the deletion, destruction or anonymisation of personal data by the data controller ex officio or upon the request of the data subject, in the event that the reasons requiring the processing of personal data disappear, although it has been processed in accordance with the provisions of the KVK Law and other relevant laws,
- In case of incomplete or incorrect processing of personal data, to request correction of personal data, deletion or destruction of personal data subject to the conditions stipulated in the law, and notification to third parties to whom personal data is transferred,
- To object to the emergence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems,
- In case of damage due to unlawful processing of personal data, to demand compensation for the damage.