Dentist …….. / ……. Healthcare Institution – Personal Data Protection Law Disclosure Text
As Dentist …….. / ……. Healthcare Institution (“Healthcare Institution”), operating at ………………………………………… address, we place great importance on the security of personal data processed within the scope of the Personal Data Protection Law No. 6698 (KVKK) in our capacity as the "Data Controller." To ensure this, all necessary technical and administrative measures are taken, and necessary audits are carried out. Personal data is stored as long as the data processing purpose remains valid. Necessary security measures are taken to prevent the loss of stored and recorded data, unauthorized access, and unlawful use.
a) Purposes of Processing Personal Data
In processing personal data, the general principles regulated under Article 4 of the law, titled "General Principles," are adhered to. These principles include lawfulness and fairness, accuracy and up-to-dateness when necessary, processing for specific, explicit, and legitimate purposes, relevance, limitation, and proportionality to the purpose of processing, and retention for the period prescribed by relevant legislation or required for the purpose for which they are processed.
Your personal data is collected based on the personal data processing conditions specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698, in connection with the medical, technical, and administrative processes required for the provision and improvement of healthcare services by our Healthcare Institution.
Depending on your relationship with our Healthcare Institution, your personal data may be collected verbally, in writing, or electronically through automated or non-automated methods. Your data will be updated as long as your relationship with our Healthcare Institution continues, and the necessary data will be processed by our Healthcare Institution in its capacity as Data Controller in accordance with the legal obligations specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698.
b) To Whom and for What Purpose Processed Personal Data May Be Transferred
Your personal data may be transferred to relevant institutions under the conditions specified in Article 5, Paragraph 2, and Article 6, Paragraph 3 of the Personal Data Protection Law No. 6698, provided that adequate precautions are taken and only to the extent necessary for the purposes of personal data processing.
c) Method and Legal Basis for Collecting Personal Data
Our Healthcare Institution collects personal data directly in the diagnosis and treatment processes or through delivery by hand, mail, or courier services. Data may be collected manually, digitally, automatically, partially automatically, or through integration methods. This personal data is collected to provide healthcare services and fulfill the legal obligations outlined in the section "Purposes of Processing Personal Data." Additionally, it may be processed and transferred under the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698.
d) Rights of the Personal Data Owner Under Article 11 of Law No. 6698
Personal data owners may submit their requests regarding their rights to our Healthcare Institution using the methods specified below. Our Healthcare Institution will finalize the request as soon as possible and within thirty days at the latest, free of charge. However, if the transaction requires an additional cost, the fee determined by the Personal Data Protection Board tariff may be charged.
In this context, personal data owners have the right to:
• Learn whether their personal data is processed,
• Request information if their personal data has been processed,
• Learn the purpose of personal data processing and whether it is used in line with its purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request the correction of personal data if it is incomplete or incorrectly processed and request notification of this correction to third parties to whom personal data has been transferred,
• Request the deletion or destruction of personal data if the reasons requiring its processing no longer exist, despite being processed in accordance with Law No. 6698 and other relevant laws, and request notification of this deletion or destruction to third parties to whom personal data has been transferred,
• Object to a result arising against them due to the exclusive analysis of processed data by automated systems,
• Request compensation for damages if they suffer harm due to unlawful processing of personal data.
Pursuant to Article 13, Paragraph 1 of Law No. 6698, you may submit your request regarding your rights in writing or by electronically signed document to our Healthcare Institution.
Within this framework, the channels and procedures for submitting your application under Article 11 of Law No. 6698 are explained below: You can personally deliver a signed copy of your request to ………………………………………… address, submit it through a notary, send it via other methods specified in Law No. 6698, or send it as a secure electronic signed document to ……………@kep.tr / …………….@……… address.
I have been informed of the above-mentioned details, and explanations regarding the processing of personal data have been provided in an understandable manner by answering my questions.
