KVKK Information Notice
Information Notice Under the Turkish Personal Data Protection Law (KVKK)
Assoc. Prof. Dr. Demet Akpolat Dermatology Office www.drdemetakpolat.com is committed to processing and protecting your personal data in accordance with the Constitution of the Republic of Türkiye and the Turkish Personal Data Protection Law No. 6698 (“KVKK”). We take the highest level of security measures to ensure the confidentiality and protection of your personal data.
Your personal data may be collected, recorded, stored, archived, shared with third parties/institutions where necessary, and processed by Assoc. Prof. Dr. Demet Akpolat Dermatology Office as the Data Controller, in accordance with KVKK, the Regulation on the Processing and Protection of Personal Health Data, Ministry of Health regulations, and other applicable legislation.
Therefore, we hereby inform you about our mutual rights and obligations and request your explicit consent where required.
A – INFORMATION
1- Processing of Personal Data and Data Controller
In accordance with the law, your personal data is recorded and stored for the establishment and continuation of healthcare services, the performance of our services, and the fulfillment of our legal obligations as a medical office/healthcare provider.
Under Article 3/I(d) of KVKK, “personal data” refers to any information relating to an identified or identifiable natural person.
Under Article 3/I(e) of KVKK, processing of personal data refers to any operation performed on personal data, including obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing the use of such data, whether fully or partially automated or non-automated as part of a data recording system.
2- Identity of the Data Controller
According to KVKK, the “Data Controller” is the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system. Accordingly, the corporate identity information of Assoc. Prof. Dr. Demet Akpolat Dermatology Office is as follows:
- Registered Address: Atatürk Mah. Ertuğrul Gazi Sok. Metropol İstanbul Sitesi C1 Block, Floor: 13, Unit: 218, 34750 Ataşehir / Istanbul, Türkiye
- Phone: +90 530 732 23 04
- Website: www.drdemetakpolat.com
- E-Mail: info@drdemetakpolat.com
3- Personal Data Processed
Your personal and special categories of personal data, particularly your health data, may include:
- Your identity information, including name, surname, Turkish ID number and/or passport number and/or temporary Turkish ID number, place and/or date of birth, marital status, gender, health insurance information, occupation, insurance card number, workplace registration number and/or patient ID number, and other identifying information;
- Your contact information, including address, phone number, e-mail address, and other communication data obtained when you contact us via e-mail, letter, or other channels;
- Your financial data, including bank account number, IBAN, credit card information, billing and invoice details;
- Your private health insurance data and payer institution information such as Social Security Institution data for the financing and planning of healthcare services;
- Your health data, including medical reports, diagnosis data, biometric and genetic data, laboratory results, test results, examination data, physician analyses and comments, appointment information, prescription information, and all health information obtained during or as a result of medical diagnosis, treatment, and care services;
- Your voice call recording if you contact our call center;
- Your vehicle license plate information if you use parking or valet services;
- Your feedback, including surveys, thank-you notes, complaint letters, and satisfaction results;
- Your website and mobile application usage data, including IP address, cookie information, browsing data, and medical data submitted through the mobile application with your consent.
Such personal data may be recorded, processed in our archives in connection with and proportionate to the purposes stated in Article 4, and transferred to the persons, institutions, and organizations specified in Article 5, in accordance with KVKK and the Regulation on the Processing and Protection of Personal Health Data.
4- Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
- Identity verification and authentication to prevent unauthorized access to your personal data;
- Protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of healthcare services and financing;
- Provision of personalized medication, medical supplies, and/or medical devices;
- Informing you about your appointment, providing appointment information and/or appointment reminders;
- Sharing and responding to information requests from the Ministry of Health and other public institutions and organizations as required by legislation;
- Sharing information and identity verification with contracted institutions/organizations, particularly private insurance companies, within the scope of healthcare financing (if you have private health insurance and use your private insurance);
- Issuing invoices for the services provided;
- Analyzing your use of healthcare services and storing your health data to improve and develop the healthcare services we provide;
- Responding to your questions or complaints regarding our services;
- Providing necessary information to regulatory and supervisory authorities and official bodies upon request and inspection;
- Retaining information related to your health data as required by applicable legislation;
- Conducting personalized promotional and informational activities and contacting you for information regarding our services;
- Conducting, improving, planning, and managing medical diagnosis, treatment and care services, healthcare financing, patient satisfaction processes, research, and related activities.
Your personal data obtained and processed in accordance with applicable legislation may be transferred to physical archives and/or information systems belonging to Assoc. Prof. Dr. Demet Akpolat Dermatology Office and may be stored both digitally and physically.
5- Transfer of Personal Data
By ensuring all necessary technical and administrative measures to provide an appropriate level of security in accordance with applicable healthcare legislation, your personal data may be transferred for the purposes stated in Article 4 to:
- Persons, institutions and/or organizations permitted under the Healthcare Services Fundamental Law No. 3359, Decree Law No. 663, KVKK No. 6698, the Regulation on the Processing and Protection of Personal Health Data, and other applicable legislation;
- The Ministry of Health, Provincial Health Directorates, and other units affiliated with the Ministry of Health;
- The Social Security Institution for patients covered by SGK, and your insurance company if you use private insurance, and your employer if billing is to be made to your workplace;
- Our direct/indirect domestic/international shareholders, subsidiaries and/or affiliates, and group companies;
- Our business partners;
- Attorneys, consultants, auditors, and legal representatives from whom we receive consultancy or whom we authorize;
- Domestic/international organizations and third parties with whom we cooperate, provide services to, or receive services from under contractual relationships, and their legal representatives;
- Laboratories, ambulance services, medical device providers, and healthcare institutions located domestically or internationally with whom we cooperate for medical diagnosis and treatment;
- Legal representatives authorized by you.
6- Your Rights Under Article 11 of KVKK
Within the scope of Article 11 of KVKK, you may apply to our healthcare institution and:
- Learn whether your personal data is being processed;
- Request information if your personal data has been processed;
- Learn the purpose of processing and whether your data is used in accordance with that purpose;
- Learn whether your personal data has been transferred and, if so, the third parties to whom it has been transferred domestically or abroad;
- Request correction if your personal data has been processed incompletely or incorrectly;
- Request deletion or destruction of your personal data if the reasons requiring processing no longer exist, within the framework of purpose, duration, and legality principles;
- Request notification of correction, deletion, or destruction processes to third parties to whom your personal data has been transferred;
- Object to any result against you arising from the analysis of processed data exclusively through automated systems;
- Request compensation if you suffer damage due to unlawful processing of your personal data.
To exercise the above-mentioned rights, you may submit your request, including necessary identity verification information and explanations regarding the right you wish to exercise under Article 11 of KVKK, by notary public to our address stated in this notice, in person with identity verification documents, or via secure electronic signature to info@drdemetakpolat.com.
7- Cases Where Personal Data May Be Processed Without Explicit Consent Under KVKK
Pursuant to Article 5 of KVKK and Article 7 of the Regulation, your personal data may be processed without explicit consent in the following cases:
- Where it is explicitly provided for by law;
- Where it is necessary to process personal data to protect the life or physical integrity of the data subject or another person, where the data subject is unable to express consent due to actual impossibility or where consent is not legally valid;
- Where processing is necessary for the establishment or performance of a contract, provided that it is directly related to the parties of the contract;
- Where processing is necessary for the fulfillment of a legal obligation;
- Where the personal data has been made public by the data subject;
- Where processing is necessary for the establishment, exercise, or protection of a right;
- Where personal health data is processed by persons or authorized institutions and organizations under confidentiality obligations for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and planning and management of healthcare services and financing.
B – EXPLICIT CONSENT / APPROVAL
- 1- I consent to the processing, storage, and transfer of my personal data by the data controller Assoc. Prof. Dr. Demet Akpolat Dermatology Office and the data processor employees of Assoc. Prof. Dr. Demet Akpolat as explained above;
- 2- I consent to the transfer of my identity information, visual records, and health data to domestic or international healthcare institutions and organizations with whom you cooperate for expert opinions in order to obtain a second opinion regarding the diagnosis and treatment of my health condition;
- 3- If my private insurance company or an intermediary authorized by my private insurance company requests access to my medical information, and/or during the provision and billing processes of healthcare services received from your clinic/office, I acknowledge that the transfer of my health data to my private insurance company is necessary for benefiting from private health insurance and for the payment of my treatment expenses. For these purposes, I consent to the transfer of my personal health data by Assoc. Prof. Dr. Demet Akpolat Dermatology Office and its data processors to my private insurance company or its authorized intermediary;
- 4- I consent to the processing and storage of my personal data and medical photographs taken by the physician during the procedure, and to photographs or recordings being taken during the intervention/treatment to be applied to me;
- 5- I consent to being informed about appointments and campaigns via e-mail, social media, SMS, or telephone, and to the notification of my financial information to the following e-mail address: …………………………
With My Explicit Consent
DATE………./……../………
I Accept……………………………….
I Do Not Accept…………………………..
(Please indicate in handwriting)
NAME SURNAME
SIGNATURE…………………………………………………………………………………………….
As Assoc. Prof. Dr. Demet Akpolat Dermatology Clinic, your medical information is shared only with:
- You, the patient;
- Your legal representative under certain medical conditions;
- Institutions and organizations for which you have provided explicit consent;
- Government authorities within the scope of judicial and legal obligations.
The information below will be shared only with the person/persons you authorize. Please write the names and relationship degrees of the persons you authorize to receive your information.
| Information | Names and relationship degree |
| My appointment information | |
| General information about my health status | |
| My test results | |
| My medical records |
Name and signature of the data subject patient or legal representative: ……………………………………………………………………………………………………………
If the legal representative is a relative of the patient, relationship degree: ………………………………………………………
(This section must be completed by handwriting and the relationship of the legal representative must be specified.)
DATE: …………………………………………………………………………………………
**** If an interpreter/witness is required
Name and surname of interpreter/witness: ……………………………………………………………
Data Security and Right to Apply
Your personal data is carefully protected within technical and administrative means, and necessary security measures are provided at an appropriate level considering technological possibilities and possible risks.
You may submit your requests under the law by completing the “Application Form Pursuant to the Turkish Personal Data Protection Law” available at “www.drdemetakpolat.com” and:
- Delivering it in person to Atatürk Mah. Ertuğrul Gazi Sok. Metropol İstanbul Sitesi C1 Block, Floor: 13, Unit: 218, 34750 Ataşehir / Istanbul;
- Sending it through a notary public;
- Sending it to info@drdemetakpolat.com via secure electronic or mobile signature, registered electronic mail address, or the e-mail address registered in our system.