Data Protection Law

PATIENT / PATIENT’S RELATIVE INFORMATION TEXT ON PERSONAL DATA PROCESSING

Private Çorlu Vatan Hospital (Can Sağlılk Tesisleri İşletme ve Ticaret A.Ş.) is the Data Controller under the Law on Personal Data Protection No. 6698 and the relevant legislation. Your personal and Private Quality data is regulated by the Ministry of Health’s Private Hospitals Regulations, which are explained below. It will be done in accordance with other laws.

1.Your Processed Personal Data

We acquire your personal data verbally, in writing, visually, or electronically from our call center, website, web-based applications, physical locations, and other similar channels in order to offer you with high-quality health services.

The main data processed by Private Çorlu Vatan Hospital (Can Sağlık Tesisleri İşletme ve Tic. A.Ş.) is your personal data and health data, which are required for the execution of all medical diagnostics, examinations, treatments, and care services within the scope of personal data. Processed Private Datas are listed below;

Your identity information: name, surname, your identity card number, passport number or temporary turkish identity number, place and date of birth, marital status, gender, signature information, health insurance, professional qualification card, driver’s license and other identification data by which we can identify you. If you visit our hospital, your camera recordings and biometric data are kept for security and audit purposes;

Your contact information: your address, telephone number, e-mail address and other communication data, your voice call records kept by customer representatives or patient services in accordance with quality standards, and your personal data obtained when you contact us via e-mail, letter or other means;

Financial Information: Your financial data such as your bank account number, credit card information, workplace registration number, billing information; your data on private health insurance and your Social Security Institution data for the purpose of financing and planning health services;

Your health information: your personal data regarding all kinds of health and sexual life obtained during or as a result of medical diagnosis, treatment and care services, including but not limited to your laboratory results, test results, examination data, appointment information, prescription information.

2.Purposes of Processing Your Personal Data

Your personal data may be processed by Çorlu Vatan Hospital for the following purposes:

• Health Services Basic Law No. 3359, Decree-Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Regulation on Private Hospitals, Law on Protection of Personal Data No. 6698, Regulation on the Processing and Privacy of Personal Health Data and other relevant legislation. In order to fulfill our obligations;
• Protection of public health, preventive medicine, medical diagnosis, treatment and care services;
• Sharing the information requested by the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation;
• Patient Services, financial affairs, financing of your health services by paying institutions, covering your examination, diagnosis and treatment expenses, sharing the information requested with private insurance companies within the scope of the plausibility query;
• Appointments through our call center and digital applications, reminder services;
• Confirmation of your identity by patient services, healthcare professionals and call center departments;
• Performing risk management and quality improvement activities by the quality unit and information systems unit in accordance with the quality standards in health;
• Invoicing for our services by the patient services, financial affairs, marketing departments;
• Companies, associations with which a corporate agreement is made with our hospital. For the purpose of confirming the information that you work / you are a member in institutions and organizations;
• Answering all your questions and complaints about our health services by the hospital management, patient rights, call center departments;
• Participation in campaigns and providing campaign information by marketing, media and communication, call center departments, designing and transmitting special content, tangible and intangible benefits on web and mobile channels.
• Your personal data mentioned above are kept in physical and electronic archives within the body of Çorlu Vatan Hospital and external service providers, in compliance with the provisions of the legislation, provided that the necessary technical / administrative measures are taken.

3.Transfer of Personal Data

All necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with the Personal Data and the relevant health legislation. In line with the purposes permitted by the Health Services Basic Law No. 3359, Decree-Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Regulation on Private Hospitals, Law on Protection of Personal Data No. 6698, Regulation on the Processing and Privacy of Personal Health Data and other relevant legislation provisions /institutions and/or organizations;

• Ministry of Health, sub-units and family doctors affiliated to the ministry,
• Private insurance companies (health, pension, life insurance, etc.),
• Social security institution,
• General directorate of security and other law enforcement agencies,
• General directorate of population,
• Turkish Pharmacists Association,
• Judicial authorities,
• Laboratories, medical centers, ambulances, medical devices/medical consumables and institutions providing health services in the country with which we cooperate for medical diagnosis and treatment,
• The health institution to which the patient was referred or to which the patient applied himself,
• Your authorized legal representatives,
• Third parties, including lawyers, tax consultants and auditors we work with, who are authorized to access patient data within the scope of the law,
• Regulatory and supervisory institutions and official authorities,
• Your workplace doctor working at your workplace
• It can be shared with our suppliers and support service providers whose services we benefit from or cooperate with.

4.Method and Legal Reasons for Collecting Personal Data

Collection Method: In accordance with the purposes of the Processing of your Personal Data; During and/or before and/or after your arrival at Çorlu Vatan Hospital; verbal, written, visual or electronic media, telephone, sms, mms etc. By telecommunication communication tools, online via the Social Security Institution system, from the records shared in case of benefiting from a private insurance company, in case you come to our health institutions by referral and/or in case you send it yourself, through the records of other health institutions and organizations, e-mails, call Central call records are collected and stored in the physical and digital environment so that  Çorlu Vatan Hospital can fully and duly fulfill its contractual and legal obligations through the website, verbal, written, printed and similar channels.

Legal Reasons: These legal reason for the collection of your data;

Law No. 6698 on the Protection of Personal Data,

Health Services Basic Law No. 3359,

Decree-Law No. 663 on the Organization and Duties of the Ministry of Health and its affiliates,

• Private Hospitals Regulation,
• Regulation on the Processing of Personal Health Data and Protection of Privacy,
• Ministry of Health regulations and other legislative provisions.

In addition, as stated in paragraph 3 of Article 6 of the Law, personal data related to health and sexual life can only be kept confidential for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing. It can be processed by persons or authorized institutions and organizations that are under the obligation without seeking the explicit consent of the person concerned.

5.Storage and Deletion of Personal Data

Çorlu Vatan Hospital stores personal data and processes for the periods determined by the legislation. The storage period that requires processing in accordance with the practices of the hospital and the practices of commercial life, depending on the services offered by Çorlu Vatan Hospital while processing that data. After this period, only for the periods of time required in practice in order to constitute evidence in possible legal disputes. After the expiry of the specified periods, the personal data in question are deleted, destroyed or anonymized.

6.Rights of Personal Data Owner

As the owner of the personal data collected, processed and transferred by Çorlu Vatan Hospital, if you as our valued service recipients, want to use your rights under this heading and/or under the Data Protection Law, in accordance with the procedures and principles stipulated in this Clarification Text and the legislation, or you may apply to Çorlu Vatan Hospital. In the case of a request, it will be concluded free of charge within thirty (30) business days, at the latest, depending on the nature of the request. However, if the transaction requires a separate cost for Çorlu Vatan Hospital, the fee determined by the Personal Data Protection Board may be requested.

In accordance with the law and relevant legislation you can:

• Learning whether personal data is processed or not,
• Requesting information about processed personal,
• Accessing and requesting personal health data,
• Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
• Knowing the third parties to whom personal data is transferred at home or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing,
• Requesting the deletion or destruction of personal data,
• Requesting notification of the third parties to whom the personal data has been transferred, regarding the correction of personal data and/or the deletion or destruction of personal data in case of incomplete or incorrect processing of personal data,
• Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• You have the right to demand the compensation of the damage in case of loss due to unlawful processing of personal data.

As the following cases are excluded from the scope of the law pursuant to Article 28 of the Law; Personal data owners cannot claim the following rights in these matters:

• Processing personal data for purposes such as research, planning and statistics by making them anonymous with official statistics.
• Processing personal data for art, history, literature or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy of private life or personal rights or does not constitute a crime.
• Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public safety, public order or economic security.
• Processing of personal data by judicial authorities or execution authorities in relation to investigation, prosecution, trial or execution proceedings.

Pursuant to Article 28/2 of the Law, personal data owners cannot claim the following rights in these matters, except for the right to demand the compensation of the damage in the following cases:

• The processing of personal data is necessary for the prevention of crime or for criminal investigation.
• Processing of personal data made public by the personal data owner.
• Personal data processing is necessary for the execution of supervisory or regulatory duties and for disciplinary investigation or prosecution by authorized and authorized public institutions and organizations and professional organizations in the nature of public institution, based on the authority given by the law.
• The processing of personal data is necessary for the protection of the economic and financial interests of the state with regard to budgetary, tax and financial matters.

7.Data Security and Right to Apply

Your personal data is meticulously protected within the scope of technical and administrative measures and is stored at a level suitable for possible risks, taking into account the necessary security measures and technological possibilities.

In order to determine whether the person applying to Çorlu Vatan Hospital is the owner of personal data, it can request information from the person concerned, and in order to clarify the issues stated in the application, it can ask a question about the personal data owner’s application. Çorlu Vatan Hospital may reject the application of the applicant in the following cases by explaining the reason,

• Processing personal data for purposes such as research, planning and statistics by making them anonymous with official statistics,
• Processing of personal data for art, history, literature or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy of private life or personal rights or does not constitute a crime,
• Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public safety, public order or economic security,
• Processing of personal data by judicial authorities or execution authorities in relation to investigation, prosecution, trial or execution proceedings,
• The processing of personal data is necessary for the prevention of crime or for criminal investigation,
• Processing of personal data made public by the personal data owner,
• Personal data processing is necessary for the execution of supervisory or regulatory duties and for disciplinary investigation or prosecution by authorized public institutions and organizations and professional organizations in the nature of public institution, based on the authority granted by the law,
• The processing of personal data is necessary for the protection of the economic and financial interests of the state with regard to budgetary, tax and financial matters,
• The possibility of the personal data owner’s request to prevent the rights and freedoms of other persons,
• Making requests that require disproportionate effort,
• The requested information is publicly available.

Your requests within the scope of the law, by filling out the “Application Form in accordance with the Law on the Protection of Personal Data” on the website “www.corluvatan.com“; or it can be delivered to Esentepe Mah. Deva Sok No:11/A Çorlu / Tekirdağ address or sent through a notary public.