- Call Now +90 542 821 14 91
- Working Hours 09:30 AM - 05:30 PM
PROTECTION AND PROCESSING OF PERSONAL DATA
LIGHTING TEXT
Acting as Data Controller, pursuant to Article 10 of the Law on Protection of Personal Data No. 6698 (hereinafter referred to as "KVKK"), which entered into force with the publication of the Official Gazette dated 07 April 2016, this Clarification Text is provided by Dr. Murat Üstündağ (hereinafter referred to as "ENT Clinic"); It is shared for the purpose of informing you about the identity of the data controller, the purposes and reasons for personal data processing, the persons to whom personal data is transferred and the purposes for which they are transferred, and the rights listed in Article 11 of the KVKK, which the personal data owner will direct to the data controller.
As a Data Controller within the scope of KVKK, ENT Clinic fulfills the obligations required by this title by giving importance to the privacy of your private life in order to protect your fundamental rights and freedoms, and processes your personal data in the following manner and within the limits determined by the relevant laws and regulations;
In Article 10/1-A of the KVKK titled Data Controller's Obligation to Disclose, it has brought the obligation to provide information about the identity of the data controller. Data controller is defined as natural or legal persons who determine the purposes and means of processing personal data and are responsible for the establishment and management of the data recording system. In terms of the implementation of the KVKK and the Regulation on Personal Health Data, the ENT Clinic is the "data controller".
Other informations; Data such as IP records, navigation information of visitors on the ENT clinic website.
Purpose of Collection and Processing of Your Personal Data:
You can collect your personal data in the Basic Law No. 3359 on Health Services, Regulation on Private Health Institutions with Outpatient Diagnosis and Treatment, Regulation on the Processing and Privacy of Personal Health Data, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Patient Rights Regulation and We process your data within the scope of legal obligations in other health-related regulations.
Your personal information may be requested by the ENT Clinic in order to serve you better. In this context, your personal data is collected verbally, in writing or electronically, with your explicit consent.
This information;
Informing you about your appointment, examination, early diagnosis and preventive medicine, medical diagnosis, treatment, providing the requested services and fulfilling the services you will receive in accordance with the contract you have concluded, measuring patient satisfaction, answering your questions, requests and complaints about our health services, patient rights and other that you have conveyed to us about your ability to benefit from the opportunities and/or fulfilling the professional, financial, legal responsibilities and obligations related to them, confirming your identity, confirming your relationship with the contracted institutions, issuing the self-employment receipt, payment procedures, before and after the examination or surgery, and / or your photo and / or video provided in our clinic with your consent, to follow up your treatment, to be used as evidence in case of legal dispute, to be used for promotional purposes on the website of the ENT Clinic and other social media accounts mentioned here, to be kept in accordance with the relevant legislation. Preserving the information about your required health data, sharing the information requested by the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation, fulfilling legal and regulatory requirements, keeping your health data for the purpose of announcing our services to you, developing and improving the health service we provide, Provided that support can be obtained from institutions and organizations, and for similar purposes within the legal limits, personal data is processed within the scope of the processing conditions and purposes specified in Articles 5 and 6 of the KVKK, and is stored and used for the period required for the purpose for which they are processed or stipulated in the relevant law.
ENT Clinic uses cookies on the website http://www.muratustundag.com. cookie; These are text files that are sent to your device and take up very little space. Cookies will collect and process your browsing information in order to facilitate your usage experience and to assist you, so that you can get better service during your visits to our site. Your personal data obtained through this means will not be shared with third parties. By making the necessary adjustments in your internet browser you are using, you can delete the previously installed "cookies", as well as block the "cookies" that will be loaded in the future, or have your browser warn you during their installation.
c. To Whom Your Personal Data May Be Transferred And For What Purpose:
Your collected personal data is subject to the conditions in the Law on the Protection of Personal Data, in line with the fulfillment of the legal obligations of the ENT Clinic and for the purposes specified in your contract, Turkish Code of Obligations, Health Services Basic Law No. 3359, Regulation on Private Health Institutions Provided Outpatient Diagnosis and Treatment, Regulation on the Processing and Privacy of Personal Health Data, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Patient Rights Regulation and other health-related regulations, within the scope of, but not limited to, legal obligations in other legislation provisions allowed and required. to the extent; It can be shared with authorities such as the Personal Data Protection Authority, the Ministry of Health, the Ministry of Treasury and Finance, the Ministry of Labor and Social Security, contracted hospitals and third parties and institutions with which we have legal relations.
.
In addition, your personal data;
• Photos and videos provided with the photograph and video shooting approval form can be transferred to the article or website of the ENT Clinic and/or social media accounts.
Collection Method of Your Personal Data and Legal Reason:
Your personal data, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK; It is necessary to process your personal data, sensitive personal data and health data, provided that it is clearly stipulated in the law, is directly related to the establishment or performance of your contract, you have your express consent, it is mandatory for the ENT Clinic to fulfill its legal obligations, the data processing is mandatory for the legitimate interests of the ENT Clinic Depending on the legal reason, it is collected through various other collection channels that are partially or completely automatic or not, including verbal, written or electronic media, in order to provide the services to be provided fully and on time within the legal framework.
Cases Where Your Personal Data May Be Processed Without Explicit Consent pursuant to Law;
Pursuant to Article 5 of the KVK Law, your personal data specified above and obtained in accordance with the law may be processed without seeking your explicit consent in the following cases;
In cases where it is expressly stipulated in the laws, you are unable to express your consent as the data owner due to the actual impossibility, or in cases where your consent is not legally valid, for the protection of your or someone else's life or bodily integrity.
If the processing of your data is mandatory, provided that it is directly related to the establishment or performance of a contract, if the processing of personal data belonging to the parties to the contract is necessary, if it is necessary for the ENT Clinic to fulfill a legal obligation, if your personal data has been made public by you, establishment of a right, in the event that data processing is mandatory for the use or protection of the data, provided that it does not harm your fundamental rights and freedoms, if data processing is necessary for the legitimate interests of the ENT Clinic.
d. Your Rights Enumerated in Article 11 of KVKK as Data Owner
Pursuant to Article 11 of KVKK; As the data owner, by applying to the ENT Clinic in writing or by other methods determined by the Personal Data Protection Board, to learn whether your personal data has been processed, to request information about it if your personal data has been processed, to learn the purpose of processing your personal data and whether they are used in accordance with its purpose, if your personal data is processed, If your data is transferred to third parties in the country or abroad, knowing the third parties to whom your personal data is transferred, requesting the correction of your personal data if it is incomplete or incorrectly processed, and requesting that the transaction carried out in this context be notified to the third parties to which the personal data is transferred, Requesting anonymization, deletion or destruction of your personal data in the event that the reasons requiring its processing disappear, although the transaction is processed as You have the right to request notification to third parties, to object to the emergence of a result against you by analyzing the processed data exclusively through automated systems, and to demand the compensation of the damage in case you suffer damage due to the processing of your personal data in violation of the KVKK.
In order to exercise your above-mentioned rights, you can request additional information and documents on the subject, including the necessary information to determine your identity and your explanations about your right that you want to exercise from the rights specified in Article 11 of the KVKK, and the "Data" on the website of the ENT Clinic at www.muratustundag.com. By filling in the Application Form to the Person in Charge, you can send a wet signed copy of the form to the address "Adnan Kahveci Mahallesi Yavuz Sultan Selim Bulvarı Perlavista No:1B/85 Beylikdüzü/Istanbul" by hand, and send your application request to contact@muratustundag.com. You can send it with secure electronic signature/mobile signature or send it via notary public or other methods specified in the KVKK.
In the application to be made by the Data Owner to use the above-mentioned rights; The requested matter must be clear and understandable, the requested matter must be related to the applicant's person or, if acting on behalf of someone else, he must be specifically authorized in this regard and this authority must be documented, the application must include identity and address information, and documents proving his identity must be attached to the application. Additional information and documents may be requested by the Employer during the application or while the application is being evaluated. Such requests will be made individually and requests made by unauthorized third parties regarding personal data will not be taken into consideration.
Applications regarding personal data; Processing of personal data for purposes such as research, planning and statistics by anonymizing personal data with official statistics, processing of personal data that makes it public by the Data Owner, the application is not based on a just cause, the application contains a request contrary to the relevant legislation, the application procedure is not complied with.
Your requests in your application will be concluded free of charge by the ENT Clinic as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires a separate cost for the ENT Clinic, the fee in the tariff determined by the Personal Data Protection Board will be charged. In case the application is rejected by the data owner, the answer given is insufficient or the answer is not given in a timely manner; has the right to file a complaint with the Personal Data Protection Board within 30 (thirty) days from the date of learning the answer and in any case within 60 (sixty) days from the date of application.
Pursuant to Article 10 of the Law on the Protection of Personal Data No. 6698, titled “Information Obligation of the Data Controller”, by whom and for what purpose my personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data, and the 11th article of the KVKK. I have read and understood this "Clarification text on the protection and processing of personal data" prepared on my rights in the article, and I have been informed in detail by the ENT Clinic, which has the title of data controller.
This Clarification Text is an annex and an integral part of your requests for all kinds of service contracts and service procurement that you have signed with the ENT Clinic and our business partners.
PERSONAL DATA PROCESSING, STORAGE AND DISPOSAL POLICY
With this Personal Data Processing, Storage and Disposal Policy (hereinafter referred to as the "Policy"), Article 10 of the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as "KVKK"), which entered into force with the publication of the Official Newspaper dated 07 April 2016 Acting as Data Controller, Dr. Murat Üstündağ (hereinafter referred to as "ENT Clinic"); The personal data of service users and employees are processed, stored, destroyed in accordance with the legislation, especially the Constitution of the Republic of Turkey, international agreements on human rights to which our country is a party, GDPR, the Law on the Protection of Personal Data No. 6698 (“KVKK”) and the Regulation on Personal Health Data. We ensure that the rights of the persons whose data are processed are used effectively.
For this reason, the processes regarding the processing, storage, transfer and destruction of the personal data we obtain during our activities are carried out by the ENT Clinic in accordance with the Policy, and we take all administrative and technical protection measures required by the nature of the relevant data in accordance with the legislation and technology.
In this Policy, detailed explanations will be made regarding the basic principles we adopt in the processing of personal data;
This Policy explains the methods we follow for the processing, storage, transfer, deletion, or anonymization of personal data shared during the service we provide, within the framework of the principles referred to in KVKK.
The purpose of the Policy is to make explanations about the personal data processing activity carried out in accordance with the law and the systems for the protection of personal data, to provide transparency by informing the persons whose personal data are processed by the ENT Clinic.
This Policy; It relates to all personal data of the aforementioned persons that are processed automatically or non-automatically, provided that they are part of any data recording system.
ENT Clinic, Turkish Code of Obligations, Health Services Fundamental Law No. 3359, Regulation on Private Health Institutions with Outpatient Diagnosis and Treatment, Regulation on the Processing and Confidentiality of Personal Health Data, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, It collects and processes data classified as identity information, contact information, financial information, special quality personal data and health data, 3rd party information, other information within the scope of the legal obligations in the Patient Rights Regulation and health-related regulations;
Identity data is data that helps to identify a person. These data are collected from service recipients and employees, and its content is; Name, surname, date of birth, gender, marital status, TR identity number, temporary identity number, passport information, identity card copy, patient protocol number and other identification data.
This law, appointment registration and providing information about the appointment, examination, early diagnosis and preventive medicine, medical diagnosis, treatment, surgery, providing the services requested and fulfilling the services in accordance with the concluded contract, follow-up of the treatment, questions and requests through our website regarding our health services. and responding to complaints, patient rights and other opportunities, confirming relations with contracted institutions, issuing self-employment receipts, payment transactions, fulfilling professional, financial, legal responsibilities and obligations, fulfilling the procedures of our employees as required by labor and social security legislation to evaluate the job applications of our employee candidates, to share the information requested by the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation, to fulfill the legal and regulatory requirements, to get support from other institutions and organizations that we have a contract with, Identity data of our employees, making salary payments to employees, approval of employees, making leave arrangements, entering and leaving work, ensuring payroll transactions, creating personnel file, SGK notifications, İŞKUR notifications, providing compulsory private pension insurance account opening, work It is collected for the purposes of carrying out health and safety procedures, complying with other information storage, reporting and informing obligations stipulated by the legislation, relevant regulatory institutions and other authorities, and fulfilling court decisions.
Contact data is personal data that is useful for communicating with the person. These data are collected from service users, employees, visitors and other real people. phone number, address information, e-mail address and other contact information.
This data includes informing about appointments, concluding the contract, providing the requested services, responding to questions, requests and complaints through our website regarding our health services, confirming the relationship with the contracted institutions, announcing our services, data of the people with whom we have a business relationship, to fulfill our contractual requirements and obligations. We collect to bring. We collect the contact information of the employees for purposes such as making the recruitment process, creating the personnel file, SGK notifications, İŞKUR notifications, providing the opening of a compulsory private pension insurance account, providing the service and travel organization, communicating with the employees. We are obliged to record the contact data of our employees in accordance with the labor and social security legislation. We collect the contact data of our employee candidates in order to receive and evaluate the job applications and to notify the result of the job applications.
Special Quality Personal Data and Health Data; appointment and examination data, blood group, test, test and examination results, biometric information, photographs and/or videos provided to us during the examination or before and after the operation and/or provided in our clinic, genetic information, prescription information, drugs used, current diseases, allergies, all kinds of health data obtained during medical diagnosis and treatment services, health data transmitted to us via our website regarding our health services and health data including but not limited to these.
These datas are collected from service users; examination, early diagnosis and preventive medicine, medical diagnosis, treatment, to provide requested services and to fulfill the services you will receive in accordance with the contract you have concluded, to ensure that patient rights and other opportunities are used, to fulfill legal responsibilities and obligations, to confirm identity, before examination or surgery and Post-operative photos and/or videos provided to us and/or provided in our clinic are used as evidence in case of legal dispute, used for promotional purposes on the website of the ENT Clinic and other social media accounts mentioned here, regarding health data that must be kept as per the relevant legislation. to preserve information, to share information requested by the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation, to fulfill legal and regulatory requirements and for similar purposes, provided that they remain within the legal limits. The personal data is processed within the terms and purposes of processing, stored and used for the period required for the purpose for which they are processed or for the period stipulated in the relevant law.
Financial data is collected from service recipients, employees and other real people. Bank information (IBAN number, account number, credit card information), billing information, private health insurance and social security institution information, salary details, payrolls, premiums, bank information, minimum living allowance information, private health insurance information.
We collect financial data in accordance with the legislation we are subject to and in order to ensure that service recipients receive a complete service. We collect these data for the purposes of providing examination, treatment, requested services, fulfilling the services agreed in the concluded contracts, fulfilling professional, financial, legal responsibilities and obligations, and performing the services offered through our business partners. We are obliged to record the financial data of our employees in accordance with the labor and social security legislation. We collect this data for the purposes of making salary payments to the employees, making payroll transactions, creating the personnel file, paying the employee's salary lien deductions to the executive files, and making expense payments to the employees.
Personal data; It is the information that is necessary for the conclusion of the employment contract and the continuation of the employment relationship. We collect this data from our employees and employee candidates. These data are identity and communication data, financial data, gender, social insurance number, bank account information, employment document, criminal record certificate, CV, internship status, military service information, disability information, insurance information, foreign language information, education status, diploma information. , certificate, if it is a foreign worker, data such as work permit, driver's license information, occupational information. In addition to our obligations under the legislation, we collect the aforementioned data for purposes such as insurance, contacting family members in emergencies and placing employee candidates in suitable positions.
Other data collected by the ENT Clinic and its content is; visitors' IP records, browsing information, etc. We collect this data for statistical purposes and to facilitate the user experience on our website.
Processing of Personal Data collected through Cookies
ENT Clinic uses cookies on the website http://www.muratustundag.com. These are text files that are sent to the device the visitors are using and take up very little space. Cookies facilitate the use of visitors and enable them to receive good service.
Cookies help to obtain statistical information about how many people visit the site, for what purpose, how many times a person visits the site, and how long they stay on the site. Cookies are not designed to retrieve data or any other personal information from main memory or e-mail. Most of the browsers are initially designed to accept the technical communication file, but users have the right to reject the technical communication file if they wish.
We can collect, process and store your data through cookies on our websites. Data obtained through cookies will not be shared with third parties.
Pursuant to Article 5 of the KVK Law, your personal data specified above and obtained in accordance with the law may be processed without your explicit consent in the following cases:
• In cases where it is expressly stipulated in the laws,
• If you, as the data owner, are unable to express your consent due to actual impossibility, or in cases where your consent is not legally valid, you orit is necessary to process your personal data in order to protect the life or physical integrity of another person,
• In case it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
• If it is necessary for the ENT Clinic to fulfill a legal obligation,
• If your personal data has been made public by you,
• If data processing is necessary for the establishment, exercise or protection of a right,
• In case data processing is necessary for the legitimate interests of the ENT Clinic, provided that it does not harm your fundamental rights and freedoms.
d. Ensuring the Security of Personal Data
Our ENT Clinic takes technical and administrative measures in accordance with the legislation in order to ensure that personal data is processed in accordance with the law, to prevent unlawful disclosure, access, transfer and other unlawful access of this data.
It establishes the technical infrastructure, monitors and controls its processes, uses technologically-advanced systems for backing up data, periodically updates and renews the measures taken, software and software containing virus protection systems and firewalls, in order to store personal data in secure electronically secure environments and to ensure the security of databases. equipment is installed.
In our ENT Clinic, we establish policies and procedures for accessing personal data, inform and train our employees on the legal protection and processing of personal data, and take the necessary measures to prevent unlawful processing of personal data by our employees in the contracts we have concluded with our employees and in the Policies we have created.
• Processing in Compliance with Law and Integrity
In the processing of personal data, we act in accordance with the principles brought by legal regulations and the general rule of trust and honesty. In this context, we take into account the proportionality requirements in the processing of personal data, and we do not use personal data other than as required for the purpose.
• Being Related to the Purpose for which they are Processed, Limited and Measured
We process personal data in a proportionate manner that is suitable for the realization of predetermined legal purposes, and we avoid the processing of personal data that is not relevant or needed for the realization of the purpose. In this context, we process personal data according to existing, clear and legitimate purposes, and we do not carry out personal data processing activities to meet possible needs that may arise later.
• Processing for Specific, Explicit and Legitimate Purposes
We clearly and precisely determine the purpose of personal data processing that is legitimate and lawful. Personal data is processed only to the extent necessary and in connection with the service we provide.
• Ensuring Personal Data Are Accurate and Up-to-Date When Necessary
As personal data owners have the right to demand that their data be up-to-date and accurate, our ENT Clinic has an obligation to keep this data up-to-date and accurate, and to destroy or change correct and outdated information when requested. ENT Clinic; It ensures that the personal data it processes are accurate and up-to-date, taking into account the fundamental rights of personal data owners and their own legitimate interests, and takes the necessary measures in this direction. For this reason, we have established an effective application system for all personal data owners to correct their personal data and confirm its accuracy through the data subject application form.
• Retention for the Time Required for the Purpose of Processing or Envisioned in the Relevant Legislation
ENT Clinic retains personal data only for as long as required by the relevant legislation or for the purpose for which they are processed. In this context, first of all, it is determined whether a period is foreseen for the storage of personal data in the relevant legislation, if a period is determined, this period is acted upon. Personal data is deleted, destroyed or anonymized in the event that the period expires or the reasons for its processing disappear.
The personal data collected are subject to the conditions in the Law on the Protection of Personal Data, in line with the purpose of the ENT Clinic's appointment record, fulfillment of its legal obligations and the purposes of the contracts, Turkish Code of Obligations, Health Services Basic Law No. 3359, Private Outpatient Diagnosis and Treatment. Regulation on Health Institutions, Regulation on Processing Personal Health Data and Ensuring Confidentiality, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Patient Rights Regulation and other legislation within the scope of, but not limited to, legal obligations in other health-related regulations. to the extent permitted and required by its terms; It can be shared with authorized authorities such as the Personal Data Protection Authority, Ministry of Health, Ministry of Treasury and Finance, Ministry of Labor and Social Security, contracted hospitals and third parties and institutions with which we have legal relations.
On the other hand personal data;
• A program called Docplanner for the purpose of creating the appointment record, creating the examination record and patient follow-up,
• In particular, in order to fulfill the purpose necessary for the performance of the contracts; Doctors we work with, workplaces, laboratories, ambulances, medical devices and institutions and organizations that provide health services, appointment registration system, consultants, hospitals we have contracted with,
• To the companies and professionals we are affiliated with for the purpose of auditing and reporting transactions related to accounting and finance,
• In particular, in order to fulfill our legal obligations; In order for us to exercise our right of defense, we can share our lawyers with the relevant institutions within the framework of our obligation to fulfill legal requests such as court decisions and evidence requests, provided that they comply with the law and procedure.
• In order to preserve the data storage capacity, we can transfer it to archival companies so that it can be stored during storage periods.
• Required personal data can be transferred to the companies we work with and the plaza management company for reasons such as ensuring security, providing records of entry and exit to the ENT Clinic, use of parking lot.
• The photos and videos provided with the photograph and video shooting approval form can be transferred to the article or website of the ENT Clinic and/or social media accounts.
ENT Clinic acts in accordance with the decisions and regulations stipulated in the KVKK and taken by the KVK Board in the transfer of your personal data. Personal data and sensitive data shall not be transferred to other real persons or legal entities without the express consent of the personal data owner, without prejudice to the exceptional circumstances in the legislation. However, in exceptional cases stipulated by the KVKK and other legislation, the data may be transferred to an administrative or judicial institution or organization authorized as stipulated in the legislation, without the explicit consent of the data owner.
ENT Clinic retains personal data only for as long as required by the relevant legislation or for the purpose for which they are processed. In this context, the ENT Clinic first determines whether a period is foreseen for the storage of personal data in the relevant legislation, if a period is determined, it acts in accordance with this period. The expiry of the period or the disappearance of the reasons requiring its processing, or upon the request of the personal data owner, the personal data are deleted, destroyed or anonymized, unless there is an obstacle in the legislation. In matters of destruction, deletion or anonymization, KVKK, Regulation on the Deletion, Destruction or Anonymization of Personal Data and Board decisions are followed.
Pursuant to Article 11 of KVKK; data owners, by applying to the ENT Clinic in writing or by other methods determined by the Personal Data Protection Board, to learn whether their personal data has been processed, to request information about it if their personal data has been processed, to learn the purpose of processing personal data and whether they are used in accordance with their purpose, if their personal data is processed, If the data is transferred to third parties, knowing the third parties to whom the personal data is transferred, requesting the correction of personal data in case of incomplete or incorrect processing and requesting the notification of the transaction made within this scope to the third parties to which the personal data has been transferred, processing the personal data even though it is processed in accordance with the provisions of the Law and other relevant laws Requesting the anonymization, deletion or destruction of personal data in the event of the disappearance of the reasons requiring it and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred, has the right to object to the emergence of an unfavorable result by analyzing the data exclusively through automatic systems, and to demand the compensation of the damage in case of loss due to the unlawful processing of personal data.
In order to exercise the above-mentioned rights, the data owner may request additional information and documents on the subject, including information that helps to identify his/her identity, and explanations regarding the right to be exercised from the rights set forth in Article 11 of the KVKK, and on the website of the ENT Clinic at www.muratustundag.com. Fill in the "Application Form for Data Controller" completely and completely and send a wet signed copy of the form to "Adnan Kahveci Mah. Yavuz Sultan Selim Bulvarı Perlavista No:1B/85 Beylikdüzü/İstanbul” by hand, send the application request to contact@muratustundag.com with secure electronic signature/mobile signature, send it via a notary public or other methods specified in the KVKK.
In the application to be made by the Data Owner to use the above-mentioned rights; The requested matter must be clear and understandable, the requested matter must be related to the applicant's person or, if acting on behalf of someone else, he must be specifically authorized in this regard and this authority must be documented, the application must include identity and address information, and documents proving his identity must be attached to the application. Additional information and documents may be requested by the ENT Clinic during the application or while the application is being evaluated. Such requests will be made individually and requests made by unauthorized third parties regarding personal data will not be taken into consideration.
Applications regarding personal data; The processing of personal data for purposes such as research, planning and statistics by anonymizing personal data with official statistics, processing of personal data made public by the data owner, the application not being based on a just cause, the application containing a request contrary to the relevant legislation, the failure to comply with the application procedure, may be rejected with justification.
The requests included in the application will be concluded free of charge by the ENT Clinic as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires a separate cost for the ENT Clinic, the fee in the tariff determined by the Personal Data Protection Board will be charged. In case the application is rejected by the data owner, the answer given is insufficient or the answer is not given in a timely manner; has the right to file a complaint with the Personal Data Protection Board within 30 (thirty) days from the date of learning the answer and in any case within 60 (sixty) days from the date of application.
Personal Data;
• In cases where the application made to the ENT Clinic is rejected by the person concerned, with the request for the deletion, destruction or anonymization of his personal data, the response given by the ENT Clinic is found to be insufficient, or the response is not given within the time stipulated in the KVKK; The person concerned makes a complaint to the Personal Data Protection Board and this request is approved by the Board,
• In cases where the maximum period for keeping personal data has passed and there is no condition to justify keeping personal data for a longer period, it is deleted, destroyed or ex officio deleted, destroyed or anonymized by the ENT Clinic at the request of the person concerned.
The following criteria are used to determine the retention and destruction periods of personal data obtained by the ENT Clinic in accordance with the provisions of the KVKK and other relevant legislation:
• If a period of time is stipulated in the legislation regarding the storage of the personal data in question, this period is complied with. Following the expiry of the aforementioned period, the data is processed within the scope of the following article.
• In the event that the period stipulated in the legislation regarding the storage of the said personal data expires or if no period is stipulated in the relevant legislation regarding the storage of the said data, respectively;
• Personal data is classified as personal data and special quality personal data, based on the definition in Article 6 of the KVKK. The method to be applied in the destruction of the said data is determined according to the nature of the data and the degree of importance of its storage before the ENT Clinic.
• Compliance of data storage with the principles specified in Article 4 of the KVKK, for example; It is questioned whether the ENT Clinic has a legitimate purpose in storing the data. Data that are detected to be kept in violation of the principles set forth in Article 4 of the KVKK are deleted, destroyed or anonymized.
• It is determined which of the exceptions stipulated in Articles 5 and 6 of the KVKK that data storage can be evaluated within the scope of. Within the framework of the detected exceptions, reasonable periods for data storage are determined. In the event of the expiration of these periods, the data is deleted, destroyed or anonymized.
• Personal data, whose storage period has expired, is anonymized or destroyed in 6 (six) month periods in accordance with the procedures set forth in this Policy. All transactions regarding the deletion, destruction and anonymization of personal data are recorded and these records are kept for at least 3 (three) years, excluding other legal obligations.
Personal data is required for the ENT Clinic to fulfill its obligations within the scope of employment, for the establishment of a right, data processing is mandatory, for the fulfillment of the financial and legal responsibilities and obligations of the service recipients, for ensuring the security of the ENT Clinic or for the legitimate purposes of the ENT Clinic. Personal data to be collected in case of need for processing are processed on the computers of the ENT Clinic, on paper media, and in the patient follow-up and appointment program called docplanner.
All the administrative and technical measures taken by the ENT Clinic within the framework of the principles in Article 12 of the KVKK in order to keep personal data safe, to process it unlawfully, to prevent its access and to destroy the data in accordance with the law are listed below.
Administrative Measures
• In-office access to the stored personal data is limited to the personnel required to access it as per the job description.
• In case the processed personal data is obtained by others unlawfully, this situation is reported to the person concerned and the Personal Data Protection Board as soon as possible.
• Regarding the sharing of personal data, data security is ensured by controlling the persons with whom personal data is shared.
• Personnel who are knowledgeable and experienced about the processing of personal data are employed and necessary trainings are given to the personnel within the scope of personal data protection legislation and data security.
• Necessary inspections are carried out at the ENT Clinic in order to ensure the implementation of the provisions of the KVKK, and confidentiality and security vulnerabilities are eliminated.
• It is ensured that adequate security measures (against situations such as electricity leakage, fire, flood, theft, etc.) are taken according to the environment where the personal data is located, and unauthorized entry and exit to these environments are prevented.
Technical Measures
• Technical measures are taken to prevent illegal processing, destruction processes are defined and implemented in accordance with the storage and destruction policy.
• The destruction of personal data is ensured in a way that cannot be recycled and leaves no audit trail.
• In accordance with Article 12 of the KVKK, all kinds of digital media where personal data are stored are protected by methods that will meet information security requirements, and necessary measures are taken for the physical security of software and data.
• In cases where sensitive personal data is accessed through a software, user authorizations for this software are made.
Procedures Regarding the Storage and Disposal of Personal Data
This Policy is binding on all business units, service providers and anyone processing personal data. When a violation of the policy is detected, the issue will be immediately reported to the ENT Clinic.
Personal data will be stored for the periods specified in the table below and will be destroyed at the end of the period.
|
Process |
Storage Time |
Disposal Time |
|
Data stored under the Labor Law |
5 years after the termination of the employment relationship |
Within 180 days after the end of the storage period |
|
Data collected within the scope of occupational health and safety legislation |
15 years after the termination of the employment relationship |
Within 180 days after the end of the storage period |
|
Data kept within the scope of SSI legislation |
10 years after the termination of the employment relationship |
Within 180 days after the end of the storage period |
|
Documents that can be used in a claim/litigation regarding work accident/occupational disease |
10 years after the termination of the employment relationship |
Within 180 days after the end of the storage period |
|
Data on concluding contracts with employees |
10 years after the termination of the employment relationship |
Within 180 days after the end of the storage period |
|
The relevant personal data is subject to a crime within the scope of the Turkish Penal Code or other legislation that imposes penal provisions. |
During the statute of limitations |
Within 180 days after the end of the storage period |
|
Data on Service Users |
10 years after registration |
Within 180 days after the end of the storage period |
If the purpose of the ENT Clinic to use the relevant personal data has not expired, if the storage period stipulated for the personal data processed in accordance with the relevant legislation is longer than the periods in the table, or if the statute of limitations requires the personal data to be stored for more than the periods in the table, the periods in the above table may not be applied. In this case, the purpose of use, special legislation, or the statute of limitations for the case, whichever comes to an end, will be applicable for that period.
k- Update Table
Changes made in this Policy are listed in the table below.
|
Date of Update |
Scope Of Changes |
|
|
|
|
|
|
|
|
|
DATA OWNER’S APPLICATION FORM
a) General Explanations
The right to make certain requests regarding the processing of personal data in Article 11 of the KVKK to the personal data owners (hereinafter referred to as the "Applicant") defined as the data subject in the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as "KVKK"). has been recognized.
Pursuant to paragraph 1 of Article 13 of the KVKK; Applications to the data controller regarding these rights must be submitted to us in writing or by other methods determined by the Personal Data Protection Board (“Board”).
By means of this data subject application form,
You can fill in the "Data Owner Application Form" on the website www.muratustundag.com with additional information and documents related to the subject completely and send a wet signed copy of the form to "Adnan Kahveci Mahallesi Yavuz Sultan Selim Bulvarı Perlavista No:1B/85 Beylikdüzü. /Istanbul” by hand, you can send your application request to contact@muratustundag.com with a secure electronic signature/mobile signature, or send it via a notary public or other methods specified in the KVKK.
In the applicant's application to use the above-mentioned rights; The requested matter must be clear and understandable, the requested matter must be related to the applicant's person or, if acting on behalf of someone else, he must be specifically authorized in this regard and this authority must be documented, the application must include identity and address information, and documents proving his identity must be attached to the application. Additional information and documents may be requested by the Employer during the application or while the application is being evaluated. Such requests will be made individually and requests made by unauthorized third parties regarding personal data will not be taken into consideration.
Applications regarding personal data; The processing of personal data for purposes such as research, planning and statistics by anonymizing personal data with official statistics, the processing of personal data that makes it public by the data owner, the application not being based on a just cause, the application containing a request contrary to the relevant legislation, the failure to comply with the application procedure, may be rejected with justification. Your requests in your application will be concluded free of charge by the Employer as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires a separate cost for the Employer, the fee in the tariff determined by the Personal Data Protection Board will be charged.
In cases where the applicant's application is rejected, the answer given is insufficient, or the response is not given in a timely manner; has the right to file a complaint with the Personal Data Protection Board within 30 (thirty) days from the date of learning the answer and in any case within 60 (sixty) days from the date of application.
a) Information about the Applicant
|
Name: |
|
|
Surname: |
|
|
Identity Number / Nationality and Passport Number:
|
|
|
Phone Number:
|
|
|
E-mail Address:
|
|
|
Address: |
|
* If you are the representative or legal representative of the Data Owner, please send the relevant decision as an attachment to the application.
• Please indicate your relationship with the Data Owner.
|
☐ Customer ☐ Visitor |
☐ Business Partner ☐ Other: …………………………………………………………….. |
|
☐ My Former Employee
Years I work with: ………………………………………. ☐ Other: ………………………………………………….. |
☐ Job application/ I shared my CV Date : …………………………………………………………………..
|
• Please choose the method of notifying you of our response to your application:
(We will be able to respond to you faster if you choose the e-mail method.)
( In case of receipt by power of attorney, a notarized power of attorney or authorization document is required.)
|
1 |
Learning whether personal data is processed
|
|
|
2 |
If your personal data has been processed, requesting information about it
|
|
|
3 |
Learning the purpose of processing your personal data and whether they are used in accordance with the purpose
|
|
|
4 |
Knowing the third parties to whom personal data is transferred
|
|
|
5 |
Requesting correction of your personal data if it is incomplete or incorrectly processed
|
|
|
6 |
Requesting the deletion or destruction of your personal data, although it has been processed in accordance with the provisions of the KVKK and other relevant laws, within the scope of the disappearance of the reasons for processing
|
|
|
7 |
Requesting notification of the transactions made pursuant to request no 5 to third parties to whom personal data has been transferred
|
|
|
8 |
Requesting notification of the transactions made pursuant to request no 6 to third parties to whom personal data has been transferred
|
|
|
9 |
Objecting to the emergence of a result against you by analyzing the processed data through automated systems
|
|
|
10 |
Requesting the compensation of the damage in case of loss due to unlawful processing of personal data
|
|
In this context, we kindly ask you to write your request regarding your personal data clearly below.
|
|
b) Statement of the Applicant
In line with the requests I have stated above, I request that my application be evaluated in accordance with Article 13 of the KVKK and inform me. This application form has been prepared in order to determine your relationship with the Data Owner and to fully determine your personal data, if any, and to respond to your relevant application in a correct and legal time. We reserve the right to request additional documents and information (copy of identity card or driver's license, etc.) for identification and authorization determination, in order to eliminate legal risks that may arise from illegal and unfair data sharing and especially to ensure the security of your personal data. In the event that the information regarding your requests you submit within the scope of the form is not correct and up-to-date or an unauthorized application is made, all responsibility arising from such false information or unauthorized application-based requests, unlawful, misleading or false applications belongs to the applicant.
Applicant’s Name Surname :
Application Date :
Signature :
Copyright © 2022 Doktor Murat Üstündağ. Powered by Swantro