Personal Data Protection Law – Clarification Text (KVKK)
As Ferumedclinic Sağlık Danışmanlığı Turizm ve Dış Ticaret Limited Şirketi (“Ferume Health Tourism”, “Health Consultancy” or “Clinic”), we would like to inform you about your personal data in accordance with the “Personal Data Protection Law No. 6698” (KVKK), which was prepared and entered into force in order to protect fundamental rights and freedoms, especially the privacy of private life.
Your personal data are processed for the period stipulated in the relevant legislation or required for the purpose for which they are processed within the framework of the method, basis, purpose and conditions specified below, and all necessary administrative and technical measures are taken by our School & Course Centers for their protection.
1- Data Controller:
Ferume Health Tourism Sağlık Danışmanlığı Turizm ve Dış Ticaret Limited Şirketi is the “data controller” for your personal data received on behalf of our company by Ferume Health Tourism’s business and our suppliers, business partners and consultants.
2- Method of Collection of Personal Data:
Your personal data can be collected automatically or non-automatically, in written, verbally or electronically through all school & course centers and all affiliated Business units of our Clinic, website, social media accounts, integration systems, parties from which our educational institutions receive services that are complementary or extension of their activities, contracted organizations, business partners, suppliers and other similar channels.
3- Legal Reasons for Collecting Personal Data and Purposes of Processing:
Necessary information about patients such as name-surname, Turkish ID number, passport number for foreign nationals, contact information, photograph, student number are obtained and recorded. Necessary information such as name-surname, Turkish ID number, passport number for foreign nationals, contact information, bank account information of the legal representatives of the patients and the names and identity information of other family members for discounts are obtained and recorded.
3-2- Visitor Data
Camera recordings are taken for security purposes in all institutions and other units of Ferume Health Tourism. For security purposes, the name-surname, vehicle license plate number and T.R. ID/passport number/driver’s license number, entry-exit times, information about who they will meet with are taken and recorded for visitors coming to Ferume Health Tourism.
3-3- Party and Supplier Data Received within the Scope of Commercial Business Relationship:
Within the scope of our organization’s commercial business relationship with third parties such as procurement of goods and services, leasing, etc., the necessary professional information such as name-surname, T.R. ID number, identity document, signature circular, contact information, title/job division, qualification certificate, professional chamber information, and depending on the nature of the situation, financial information such as license plate no. information, account no., financial information such as account no., asset information such as real estate title deed can be obtained for the negotiation, establishment, execution and proof of the contract. Since the type of business relationship may differ from person to person, not all of the above-mentioned information will be relevant for every real person, and will vary according to the nature of the business.
Pursuant to the KVKK, it is possible to process personal data of general nature without seeking your explicit consent in the presence of one of the conditions listed in the Law;
- Explicitly stipulated in the law,
- It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his consent due to actual impossibility or whose consent is not legally valid, or of another person
- Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract
- It is mandatory for the data controller to fulfill its legal obligation,
- It has been made public by the person concerned,
- Data processing is mandatory for the establishment, exercise or protection of a right
- Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
4- Persons/Organizations to whom Personal Data may be Transferred:
In line with the above-mentioned purposes, your personal data may be transferred within the legal framework within the legal framework, depending on the type of personal data and limited to the purpose, to the affiliates of our Institution and their subsidiaries, the parent company to which it is affiliated; employees, company officers, legal, financial and tax consultants, auditors, consultants, suppliers, performance assistants, banks and financial institutions; Authorized public institutions and organizations such as authorities such as the Ministry of Health, judicial authorities, administrative authorities, persons permitted by the provisions of the legislation or institutions and organizations where you have your consent.
5- Rights of the Personal Data Owner:
Pursuant to Article 11 of the LPPD, you have the following rights in relation to your personal data;
- Learn whether personal data is being processed,
- Request information if personal data has been processed,
- To learn the purpose of processing personal data and whether they are used for their intended purpose,
- To know the third parties to whom personal data are transferred domestically or abroad,
- To request correction of personal data in case of incomplete or incorrect processing, to request notification of the transactions made to third parties to whom personal data is transferred,
- To request the deletion or destruction of personal data within the framework of the conditions stipulated in the KVKK, to request notification of the transactions made to third parties to whom personal data is transferred,
- To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems.