CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA

Data Controller and Representative

In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), the Basic Law on Health Services No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliates, the Private Hospitals Regulation, regulations of the Ministry of Health, and other relevant legislation provisions; including your special categories of personal data, certain information is provided to you within the scope of this Clarification Text by Dr. Cem Yılmaz regarding the collection and processing of the personal data you have provided while benefiting from our healthcare and other services, in compliance with the law.

As the Data Controller, Dr. Cem Yılmaz may record, store, update your personal data as explained in this Clarification Text, and share, transfer, classify, and process it with third parties (relatives of the service recipient and/or public and/or private legal entities where the service recipient is an employee/insured person, other public and/or private legal entities, third parties from whom our companies receive services or cooperate with in order to carry out activities related to the purposes specified in the legislation we are subject to) in cases permitted and/or required by legislation or agreements, in the ways specified in the KVKK and related legislation.

The protection of personal data is among Dr. Cem Yılmaz’s highest priorities. Due care is taken regarding the security of personal data, and great importance is attached to processing and preserving all personal data of our patients/clients, ensuring patient/client privacy in the best possible and most careful manner. In addition to our patients/clients, the personal data of companions, visitors, all our employees, and the employees of institutions and organizations we cooperate with are protected in accordance with the principles set out in the Personal Data Protection Law No. 6698, the Regulation on the Processing of Personal Health Data and Ensuring Privacy, and other relevant legislation, as part of our corporate policy.

Purposes for Which Personal Data Will Be Processed

Your personal data collected will be processed for purposes such as planning and execution of business operations; identity verification; protection of public health; preventive medicine; medical diagnosis, treatment, and care services; planning and management of health services and their financing; planning and management of our clinic’s internal operations and daily activities; provision of medications; informing you about your appointment if booked; carrying out risk management and quality improvement activities; evaluating and conducting research for the improvement of healthcare services; fulfilling legal and regulatory requirements; managing and maintaining your e-newsletter subscription; verifying your relationship with contracted hospitals and medical centers; invoicing for healthcare services provided; sharing requested information with private insurance companies within the scope of financing healthcare services; sharing required information with the Ministry of Health and other public authorities in accordance with relevant legislation; responding to any questions and complaints regarding our healthcare services; taking all necessary technical and administrative measures for data security of systems and applications; analyzing your use of healthcare services to improve and enhance our services; storing your health data; providing necessary information to regulatory and supervisory bodies and official authorities upon request; training and developing our staff; monitoring, preventing, and reversing abuse and unauthorized transactions; preserving information regarding health data that must be stored under relevant legislation; ensuring financial reconciliation with contracted institutions for healthcare services provided to you; measuring patient satisfaction; and without limitation, carrying out, improving, planning, and managing medical diagnosis, treatment, and care services, increasing patient satisfaction, conducting research and similar purposes, and enabling the provision of healthcare services within the legal framework, ensuring that Dr. Cem Yılmaz fully fulfills his contractual and legal obligations. Such data is collected and processed in verbal, written, or electronic form.

Parties to Whom Personal Data May Be Transferred and Purpose of Transfer

Your personal data collected may be transferred for the purposes stated above to legally authorized public institutions and legally authorized private individuals, to our suppliers, and to financial institutions within the scope of fulfilling our legal obligations, and to the extent permitted by the relevant legislation, both domestically and abroad, in accordance with the personal data processing conditions and purposes set out in Articles 8 and 9 of Law No. 6698.

Method and Legal Basis for Collecting Personal Data

Your personal data is collected by Dr. Cem Yılmaz through various channels and on different legal grounds as required by the legislation to which he is subject, for the purposes set out above. The personal data collected during this process is gathered physically or electronically for the purposes specified in this Clarification Text and to fulfill related obligations. Your personal data collected on these legal grounds can be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

Rights of the Personal Data Owner under Law No. 6698

As personal data owners, if you submit your requests regarding your rights to us using the methods specified in the Dr. Cem Yılmaz Data Owner Application Form available on https://drcemyilmaz.com/, your request will be finalized free of charge as soon as possible and within thirty days at the latest, depending on its nature. However, if the process requires an additional cost, a fee will be charged according to the tariff determined by the Personal Data Protection Board. In this context, personal data owners have the right to:

• Learn whether personal data is being processed,
• Request information if personal data has been processed,
• Learn the purpose of processing personal data and whether it is being used in accordance with its purpose,
• Know the third parties to whom personal data has been transferred, domestically or abroad,
• Request correction of personal data if it is incomplete or incorrectly processed, and to request that the transaction carried out in this regard be notified to third parties to whom personal data has been transferred,
• Request the deletion or destruction of personal data if the reasons requiring processing have ceased to exist, despite being processed in accordance with the provisions of Law No. 6698 and other relevant laws, and to request that this transaction be notified to third parties to whom personal data has been transferred,
• Object to any outcome that is detrimental to the person, which arises as a result of the analysis of the processed data exclusively through automated systems,
• Request compensation if personal data is processed unlawfully and causes damage.

Information on Third Parties or Organizations to Whom Your Personal Data May Be Transferred

Within the scope of lawful personal data processing purposes, Dr. Cem Yılmaz may transfer the personal data and special categories of personal data of the data subject to third parties (third-party companies, institutions, group companies, third natural persons) by taking necessary security measures. In this regard, Dr. Cem Yılmaz acts in compliance with the provisions set forth in Article 8 of the KVKK.

Your personal data may be shared by Dr. Cem Yılmaz, within the scope of the Law and other legislation and for the purposes specified above, with Medical Centers, Group Companies, Universities, the Ministry of Health, its sub-units and family medicine centers, private insurance companies (health, pension, and life insurance, etc.), the Social Security Institution, the General Directorate of Security and other law enforcement agencies, the General Directorate of Population, the Turkish Pharmacists’ Association, courts, and without limitation, all public institutions and organizations; laboratories, medical centers, and third parties providing health services in Turkey or abroad with whom we cooperate for medical diagnosis; the healthcare institution to which the patient is referred or has applied; your authorized representatives; the institution you are affiliated with and/or working for; lawyers, tax advisors, and auditors, including third parties from whom we receive consultancy; regulatory and supervisory bodies and official authorities; our suppliers, support service providers, and business partners in Turkey or abroad whose systems and/or services we use or with whom we cooperate (for more detailed information, you can apply in writing to info@drcemyilmaz.com).