This privacy notice has been prepared by Dr. Birgül Altuntürk, in her capacity as data controller, in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
1. Identity of the Data Controller
In accordance with the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), your personal data may be processed by Dr. Birgül Altuntürk, as the data controller, within the scope explained below.
Website: birgulaltunturk.com
Phone Number: +90 216 380 02 22 – 0(545) 380 02 22
Email Address: dr@birgulaltunturk.com
Address: Bağdat Cad. No: 448 Floor: 3 Apartment: 3 Suadiye / Kadıköy Istanbul 34740
2. Purposes of Processing Personal Data
Your personal data is processed securely in accordance with the Personal Data Protection Law, either due to legal obligations or to provide a more suitable service in doctor’s work and procedures.
In this context, the following data are collected as personal data:
Contact Data: This is the data group that can be used to reach the person (Telephone, address, e-mail, IP address).
Identity Data: This is the data group containing information about the person’s identity (Name, surname, Turkish National Identity Number, mother’s name, father’s name, place of birth, date of birth, gender, wallet serial number, photocopy of identity card, tax number, social security number, nationality data, employee card, signature).
Health Data: This data group contains an individual’s health information (blood type, medical history, check-up results, consultation report, diet form, surgical information, treatment method applied, type of disease, medications used, retinal scans, medical values, test results).
Financial Data: This data group contains an individual’s financial information (bank account number, IBAN number, card information, bank name, financial profile, mail order form, credit score).
Customer Transaction Data: This data group contains an individual’s customer transaction data (invoices, checks, promissory notes, etc.).
Visual and Audio Recordings Data: This data group contains an individual’s visual and audio recordings (photographs).
3. Method and Legal Basis for Personal Data Collection
Your personal data may be collected verbally, in writing, or electronically through automated or non-automated methods, via the doctor’s affiliated units, website, social media platforms, call center, mobile applications, and similar means. Your personal data may be created and updated and processed for as long as your relationship with the Doctor continues, and may be kept under custody in both digital and physical environments.
It may be processed and transferred in accordance with the purposes stated under the heading “Your Personal Data Processed and Processing Purposes” and within the scope of Article 5, paragraph 1 of Law No. 6698, provided that explicit consent is obtained, or within the scope of the personal data processing conditions and purposes specified in clauses “a, c, ç, e and f” of Article 5, paragraph 2.
4. Transfer of Personal Data
In accordance with the KVKK (Personal Data Protection Law) and related legislation, by ensuring that all necessary technical and administrative measures are taken to provide an appropriate level of security, your Personal Data/Personal Information may be transferred only when necessary for the purposes stated above, to:
Individuals/institutions and/or organizations permitted by other relevant legislation,
Private insurance companies and banks,
Lawyers or law firms for the purpose of following up on legal matters,
Financial advisors for the purpose of conducting financial and accounting transactions,
Our direct and indirect domestic shareholders,
Consultants,
Business partners,
Domestic/foreign organizations with whom we have contractual service agreements and/or to whom we provide services, and with whom we cooperate to carry out our activities,
In accordance with Article 8 of the KVKK, your Personal Data may be transferred with the explicit consent required, provided that one of the conditions in the second paragraph of Article 5 of the KVKK is met and within the framework of the personal data processing conditions and purposes specified in Article 9. 5. Rights of the Data Subject
Data subjects have the following rights pursuant to Article 11 of the Law:
• To learn whether their personal data is being processed,
• To request information regarding the processing of their personal data if it has been processed,
• To learn the purpose of the processing of their personal data and whether it is being used in accordance with its purpose,
• To know the third parties to whom their personal data has been transferred, domestically or internationally,
• To request the correction of their personal data if it is incomplete or inaccurate, and to request that this action be notified to the third parties to whom their personal data has been transferred,
• To request the deletion or destruction of their personal data if the reasons requiring its processing have ceased to exist, even if it has been processed in accordance with the KVKK and other relevant laws, and to request that this action be notified to the third parties to whom their personal data has been transferred,
• To object to a result that is detrimental to them arising from the analysis of their processed data exclusively through automated systems,
• To demand compensation for damages incurred as a result of the unlawful processing of their personal data.
The data subject may submit their requests regarding these rights to the Data Controller in accordance with the Communiqué on the Procedures and Principles for Applications. To exercise your rights mentioned above, you may personally deliver your request along with the necessary information to identify your identity, send it via a notary public or other methods determined by the Personal Data Protection Board, or send it to ……………….@hs01.kep.tr with a secure electronic signature.
The data subject’s requests will be evaluated and decided upon free of charge as soon as possible and ultimately within thirty (30) days at the latest. If the evaluation and decision-making process requires additional costs, the fee will be based on the tariff determined by the Personal Data Protection Board.