Personal Data Protection Clarification Text

Dr. Kuyumcu Dental Clinic (referred to under applicable legislation as the “Data Controller: Dr. Kuyumcu Dental Clinic”), we attach great importance to the security and privacy of the personal data of our patients and website visitors. We take the necessary technical and administrative measures to ensure that personal data is processed, stored and protected in accordance with the law.

We process your personal data as a data controller within the scope of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and other applicable legislation, under the terms explained below.

We fulfill our obligations regarding the collection, processing, use, transfer, retention and protection of personal data in accordance with the KVKK and related secondary legislation.

This Privacy Notice has been prepared in accordance with Article 10 of the KVKK, which regulates the data controller’s obligation to inform. It explains the identity of the data controller, the methods and legal grounds for collecting personal data, the purposes for which such data is processed, the persons and organizations to whom it may be transferred, and the rights of data subjects under Article 11 of the KVKK.

References to personal data in this Notice may also include special categories of personal data, including health data, where applicable.

1. Collection, Processing and Purposes of Personal Data

Dr. Kuyumcu Dental Clinic processes and stores personal data in accordance with the KVKK, applicable healthcare legislation and other relevant legal regulations.

Your personal data may be processed for purposes including the provision of oral and dental healthcare services, examination, diagnosis, treatment and follow-up procedures, creation of patient records, management of appointment processes, fulfillment of financial and administrative obligations, and compliance with statutory requirements arising from the provision of healthcare services.

Your personal data may be collected verbally, in writing or electronically, by automated or non-automated means, during your direct visits to our clinic or through telephone, our website drkuyumcu.com, e-mail, WhatsApp, social media platforms, electronic forms and similar communication channels.

Where necessary, your information may be updated during the course of your relationship with our clinic and retained in physical or electronic environments for the periods required under applicable legislation.

Personal Data That May Be Processed

Identity Information:
Name, surname, Turkish Republic identity number, passport number or foreign identity number, date and place of birth, gender and other identification information required for establishing and maintaining a patient record.

Contact Information:
Address, telephone number, e-mail address and other contact details provided by you.

Financial Information:
Payment information, invoicing information and, where necessary, banking or payment transaction details.

Visual and Audio Data:
Where required as part of diagnosis or treatment, clinical photographs, radiographic images, intraoral images and other visual records.

Health Data and Other Special Categories of Personal Data:
Information regarding your oral and dental health, medical history, medications, allergies, examination findings, radiographic images, diagnosis, treatment and follow-up processes, as well as insurance and other healthcare-related information where necessary.

Purposes for Processing Personal Data

Your personal data may be processed for the following purposes:

• Fulfillment of legal obligations arising from healthcare legislation,
• Provision of preventive dentistry, examination, diagnosis, treatment and care services,
• Creation and retention of patient records and medical files,
• Preparation and follow-up of treatment plans,
• Scheduling and management of appointments,
• Contacting you regarding appointments by telephone, SMS, e-mail or WhatsApp,
• Invoicing healthcare services and processing payments,
• Responding to questions, requests and complaints relating to healthcare services,
• Prevention of unauthorized transactions and misuse,
• Ensuring data and system security,
• Compliance with legal and administrative obligations,
• Management and improvement of healthcare service quality and related processes.

2. Persons and Organizations to Whom Personal Data May Be Transferred

Where the conditions set out under the KVKK and applicable legislation are met, and only to the extent necessary, your personal data may be transferred to:

• The Republic of Türkiye Ministry of Health and its affiliated bodies,
• Provincial Directorates of Health and other authorized public institutions,
• The Social Security Institution,
• Private health and insurance organizations,
• Public authorities legally authorized to request such data,
• Courts, Public Prosecutor’s Offices and other authorized judicial authorities,
• Law enforcement authorities,
• Dental laboratories providing services as part of your treatment,
• Suppliers involved in prosthetic, implant, restorative, medical device and material processes,
• Medical imaging, laboratory and similar healthcare service providers,
• Other healthcare institutions and healthcare professionals to whom the patient is referred or where treatment is continued,
• Your authorized legal representatives, attorneys or guardians,
• Legal advisers, accountants, tax advisers and auditors,
• Information technology, data storage, software, hosting and cybersecurity service providers.

Such transfers are carried out within the framework of the requirements set out in Articles 8 and 9 of the KVKK.

Personal data is transferred only to the extent necessary for the relevant service or legal obligation.

3. Methods and Legal Grounds for Collecting Personal Data

Your personal data may be collected verbally, in writing or electronically through face-to-face procedures carried out at the clinic, patient registration and consent forms, the website, telephone, WhatsApp, e-mail, social media platforms and other communication channels.

Personal data may be processed on legal grounds including:

• Provision of healthcare services,
• Fulfillment of legal obligations,
• Performance of contractual processes,
• Establishment, exercise or protection of a legal right,
• Other legal grounds permitted under applicable legislation.

Health data and other special categories of personal data are processed in accordance with the provisions of the KVKK and applicable healthcare legislation governing the processing of special categories of personal data.

4. Data Processing and Retention Period

Your personal data is retained only for the purposes stated in this Notice and for the periods required under applicable healthcare legislation, the KVKK, tax and financial regulations and other laws to which we are subject.

When the applicable retention period expires and there is no longer a legal basis requiring continued processing, personal data is deleted, destroyed or anonymized in accordance with applicable legislation.

5. Your Rights Regarding the Protection of Personal Data

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing and whether your personal data is being used in accordance with that purpose,
• Learn the third parties to whom your personal data has been transferred in Türkiye or abroad,
• Request correction of incomplete or inaccurate personal data,
• Request deletion or destruction of your personal data where the applicable legal conditions are met,
• Request notification of correction, deletion or destruction procedures to third parties to whom your personal data has been transferred,
• Object to a result arising against you through the analysis of processed data exclusively by automated systems,
• Request compensation if you suffer damage due to the unlawful processing of your personal data.

6. Application Procedure

You may submit requests relating to your rights under the KVKK to Dr. Kuyumcu Dental Clinic together with information and documents sufficient to verify your identity.

Applications may be submitted in writing to:

Address:
Plevne Bulvarı No:19
Emek 1 Apt. Floor:3 Apartment:7
Alsancak / İzmir
Türkiye

or through other application methods permitted under applicable legislation.

Applications will be concluded as soon as possible and, in any event, within 30 days, depending on the nature of the request. Where processing of the application requires an additional cost, fees may be charged in accordance with the tariff determined by the Turkish Personal Data Protection Board.

Data Controller and Contact Information

Data Controller: Dr. Kuyumcu Dental Clinic
Website: drkuyumcu.com
Address: Plevne Bulvarı No:19, Emek 1 Apt. Floor:3 Apartment:7, Alsancak / İzmir, Türkiye
Telephone: (0232) 421 90 70
E-mail: akinkuyumcu@yahoo.com