Information Notice on the Processing of Personal Data
As Dr. Ceyhun Aydoğan, operating at “Tugay Yolu Caddesi, No: 20/B No: 19, Ofisim İstanbul, 34844 Maltepe/Istanbul,” we emphasize the utmost importance of privacy and security regarding your personal data. In our capacity as a data controller under the Law No. 6698 on the Protection of Personal Data (KVKK), we declare that your personal data is recorded and stored in compliance with KVKK.
1. Definitions
• Personal Data: Any information relating to an identified or identifiable natural person.
• Law on the Protection of Personal Data (KVKK): Law No. 6698, published in the Official Gazette on April 7, 2016.
• Data Processor: A real or legal person who processes personal data on behalf of the data controller, based on the authority granted by the data controller.
• Data Controller: A person or institution that determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system. Dr. Ceyhun Aydoğan acts as the data controller in accordance with KVKK.
2. Processed Personal Data
The personal data processed include:
• Identity Data: Name, surname, Turkish ID number, passport number or temporary Turkish ID number, place and date of birth, marital status, gender, clinic-specific protocol number, signature.
• Contact Data: Address, phone number, email address, and other communication details.
• Health Data: All medical data obtained during the provision of medical diagnosis, examination, treatment, and care services, such as health reports and blood type.
• Financial Data: IBAN, invoice details, tax number, payment and billing details, private health insurance information.
• Visual and Audio Data: Voice and digital recordings collected at various times.
• Physical Space Security: CCTV camera recordings.
3. Collection Methods, Processing, and Purposes of Personal Data
• Collection Method: Your personal data is obtained through verbal, written, or electronic means, either automatically or manually, in accordance with the legal bases specified in Articles 5 and 6 of KVKK, to provide you with higher-standard healthcare services.
• Processing Purposes: Your personal data may be processed for the following purposes:
o Verifying your identity,
o Managing appointment requests and notifications,
o Conducting and improving medical diagnosis, treatment, and care services,
o Performing invoicing procedures and benefiting from state incentives and support in medical tourism,
o Fulfilling legal obligations with the Ministry of Health and other public institutions,
o Sharing necessary information with professional liability insurance companies and judicial authorities,
o Addressing inquiries and complaints,
o Preventing fraud and unauthorized transactions,
o Ensuring necessary technical and administrative security measures,
o Managing information and physical security processes,
o Archiving to comply with legal retention obligations,
o Conducting scientific and academic research,
o Managing employment and recruitment processes,
o Fulfilling contractual obligations,
o Ensuring business continuity,
o Conducting market research, promotion, and information activities,
o Planning and managing healthcare service financing.
4. Legal Bases for Processing Personal Data
Your data is processed in accordance with the principles outlined in Article 4 of KVKK and the legal bases specified in Articles 5(2) and 6(3):
• For Personal Data:
o When explicitly required by law (KVKK Article 5/2-a),
o When it is impossible to obtain consent due to physical incapacity (KVKK Article 5/2-b),
o When necessary for the establishment or performance of a contract (KVKK Article 5/2-c),
o When processing is required to fulfill legal obligations (KVKK Article 5/2-ç),
o When necessary for the establishment, exercise, or protection of a right (KVKK Article 5/2-e).
• For Special Categories of Personal Data:
o When necessary for public health protection, preventive medicine, medical diagnosis, treatment, healthcare services, and financing, provided it is processed by professionals under a confidentiality obligation (KVKK Article 6/3-e),
o When required to fulfill obligations in employment, occupational health and safety, social security, social services, and social assistance (KVKK Article 6/3-f).
5. Transfer of Personal Data
Your personal data may be shared with the following parties in compliance with legal regulations and for the purposes mentioned above:
• Medical Collaboration: Laboratories, hospitals, and other healthcare providers.
• Public Institutions: Ministry of Health and other governmental organizations.
• Private Insurance Companies: Insurers providing private health coverage.
• Service Providers: Business partners, suppliers, IT service providers, and other service companies with whom we have contractual relationships.
• Third Parties Involved in Healthcare Services: Other necessary third parties.
• Judicial Authorities: Courts and legal entities.
• Regulatory Authorities: Competent regulatory institutions.
• Legal and Advisory Services: Attorneys and consultants, when required.
Additionally, your personal or special-category data will only be shared with individuals or institutions specified by you via email or physical documentation upon your request.
6. Data Retention Period
Your personal data will be processed and stored in compliance with retention and statute of limitations periods stipulated by healthcare and other relevant regulations. If there are legal changes regarding data processing durations, the new periods will be followed.
7. Data Subject Rights under Article 11 of KVKK
As a data subject, you have the following rights under Article 11 of the Personal Data Protection Law (KVKK):
• Right to Learn About Data Processing: To inquire whether your personal data is being processed,
• Right to Access Data: To request information regarding processed data,
• Right to Know Processing Purposes: To learn the purpose of data processing and whether data is used accordingly,
• Right to Know Third-Party Transfers: To learn about third parties to whom data is transferred domestically or abroad,
• Right to Request Data Correction: To request correction of incomplete or incorrect data and to ensure that corrections are notified to third parties,
• Right to Request Data Deletion: To request deletion or destruction of personal data when processing reasons cease and to ensure that third parties are informed,
• Right to Object to Automated Processing: To object to outcomes arising solely from automated processing,
• Right to Compensation: To claim compensation for damages incurred due to unlawful data processing.
8. Contact Information
You may submit requests regarding your rights in compliance with legal procedures through:
• Online Submission: Via the application form at https://www.ceyhunaydogan.com/tr/,
• Written Submission: By sending a signed copy of the application form to “Tugay Yolu Caddesi, No: 20/B No: 19, Ofisim İstanbul, 34844 Maltepe/İstanbul, Turkey” via mail,
• Electronic Submission: By sending an application via secure electronic signature or mobile signature to our registered electronic mail (KEP) address: [Your KEP address].
Your requests will be processed as soon as possible based on the nature of your inquiry.