Personal Data Protection Law (KVKK)

Information and Consent Form Regarding the Processing and Protection of Personal Data (Law No. 6698 on the Protection of Personal Data, dated 24.03.2016)

At Dentrum Private Oral and Dental Health Clinic (dentrum.com.tr), we take the utmost care in processing and storing your personal data in accordance with the Constitution and the Law No. 6698 on the Protection of Personal Data, and we implement the highest level of security measures to ensure the security of your personal data.

As the Data Controller under Law No. 6698 on the Protection of Personal Data and related legislation, Özel Dentrum Oral and Dental Health Clinic will record, archive, and, when necessary, share your personal data with third parties/institutions (as specified below) in accordance with the Regulation on the Processing of Personal Health Data and Ensuring Privacy, Ministry of Health regulations, and other relevant legislation, and will process it in the ways stipulated in the Law on the Protection of Personal Data. Therefore, we inform you about our mutual rights and obligations below and request your explicit consent.

A - INFORMATION

1- Processing of Your Personal Data and Data Controller

In accordance with the law, your personal data is recorded and stored by us as the Data Controller and Data Processor to establish the service relationship, ensure the continuity of services, perform our services, and fulfill our responsibilities arising from other laws as a medical/examination center.

Within the framework of Article 3/I(d) of the Personal Data Protection Law, "personal data" refers to any information relating to an identified or identifiable natural person. In this context, personal data refers to any information relating to an identified or identifiable natural person.

Within the framework of Article 3/I(e) of the Personal Data Protection Law, the processing of personal data refers to any operation performed on data, such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing the use of personal data, whether wholly or partly automated or non-automated, provided that it is part of any data recording system.

2- Identity of the Data Controller

According to the Personal Data Protection Law (KVK Law), "Data Controller" refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Therefore, the corporate identity information of Özel Dentrum Ağız ve Diş Sağlığı Polikliniği, which is the "Data Controller" under the KVK Law, is as follows:

Headquarters Address: Dr. Muzaffer, Kurtuluş Mh. 64010 sk, Ersalan Apt No:14/B, 01120 Seyhan/Adana

Phone: +90 322 454 66 66

Website: https://dentrum.com.tr

E-Mail Address: info@dentrum.com.tr

3- Personal Data Processed

Your personal and sensitive personal data included in the registration form, primarily your health data:

• Your personal information (Name, Surname, Turkish Republic Identity Number and/or passport number and/or temporary Turkish Republic Identity Number, place and/or date of birth, marital status, gender, health insurance, occupation, insurance card number, workplace registration and/or patient identification number, and other identifying data that can identify you)
• Your contact information (address, telephone number, email address and other contact details, as well as personal data obtained when you contact us via email, letter and/or other means);
• Your financial data such as bank account number, IBAN number, credit card information, billing and invoice information;
• For the purpose of financing and planning healthcare services, we collect your data regarding private health insurance and information on payer institutions such as the Social Security Institution;
• Your data, including but not limited to patient medical reports, diagnostic data, biometric and genetic data, laboratory results, test results, examination data, doctor's analyses and comments, appointment information, and prescription information, as well as all other health information obtained during and/or as a result of medical diagnosis, treatment, and care services;
• If you contacted the call center, you have a recording of your voice call.
• If you used the parking and valet service, your vehicle license plate information.
• Your feedback, such as surveys, thank you letters, complaint letters, and satisfaction results.
• Your personal data, including your IP address, cookies and other personal data obtained during your use of our website and mobile applications, as well as your browsing data and medical data that you voluntarily provide through the mobile application, is included in this data.
• Your personal data is recorded in accordance with the Law No. 6698 on the Protection of Personal Data and the Regulation on the Processing of Personal Health Data and Ensuring Privacy, and this personal data may also be processed in our archives in a manner that is relevant and proportionate to the purposes stated in Article 4 and may be transferred to the individuals, institutions and organizations specified in Article 5.

4. Purposes of Personal Data Processing

Your personal data may be processed for the following purposes:

• Identity verification and authentication are necessary to prevent your personal data from being accessed by others.
• The protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing,
• Providing you with customized medication and/or medical supplies and/or devices,
• If you have an appointment, we can inform you about it, provide information and/or remind you of your appointment. In accordance with legislation, we can share information with and respond to the Ministry of Health and other public institutions and organizations.
• Sharing information and verifying identity requested by contracted institutions/organizations, primarily private insurance companies, within the scope of financing healthcare services (if you have private health insurance AND IF YOU USE YOUR PRIVATE INSURANCE).
• Issuing invoices for the services we provide,
• We use your healthcare usage to analyze and store your health data in order to improve and enhance the healthcare services we provide, and to respond to your questions or complaints regarding our services.
• Providing necessary information in accordance with requests and inspections from regulatory and supervisory bodies and official authorities.
• We store your health data as required by relevant legislation, conduct promotional and informational activities tailored to you, and contact you to inform you about our services.
• These include, but are not limited to, the implementation and development of medical diagnosis, treatment, and care services; the planning and management of healthcare services and their financing; increasing patient satisfaction; research; and related reasons.

In accordance with the relevant legislation, your personal data obtained and processed may be transferred to the physical archives and/or information systems of Özel Dentrum Ağız ve Diş Sağlığı Polikliniği and kept under custody in both digital and physical environments.

5- Transfer of Personal Data

and by ensuring that all necessary technical and administrative measures are taken to provide an appropriate level of security in accordance with relevant health legislation, your personal data/personal information will be processed for the purposes set out in Section 4;

• Individuals, institutions, and/or organizations permitted by the provisions of Law No. 3359 on Basic Health Services, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, Law No. 6698 on the Protection of Personal Data, the Regulation on the Processing of Personal Health Data and Ensuring Privacy, and other relevant legislation;
• The Turkish Ministry of Health, Provincial Health Directorates, and other units affiliated with the Ministry of Health.
• For patients covered by SGK (Social Security Institution), if you use your private insurance (if you have one), you should use your insurance company, and if your billing will be done to the institution you work for, you should use your institution.
• Our direct/indirect domestic/foreign shareholders, subsidiaries and/or affiliates; our group companies
• With our partners
• With the legal representatives we work with, including lawyers, consultants, and auditors, and with whom we have received advice and authorization.
• We cooperate with and/or contract with domestic/foreign organizations and other third parties, as well as their legal representatives, to carry out our activities.
• We collaborate with laboratories, ambulance services, medical equipment providers, and healthcare service providers both domestically and internationally for medical diagnosis and treatment.
• This information may be shared with your legal representatives to whom you have given authorization.

6- Your Rights as a Data Subject as Listed in Article 11 of the Law

In accordance with Article 11 of the Personal Data Protection Law, you can apply to our Healthcare Institution to: inquire whether your personal data is being processed; request information regarding the processing of your personal data if it has been processed; learn the purpose of the processing of your personal data and whether it is being used in accordance with its purpose; inquire whether your personal data has been transferred and, if so, to which third parties, both domestically and internationally, have been transferred; request the correction of your personal data if it is incomplete or inaccurate; and request the deletion or destruction of your personal data if the reasons requiring its processing cease to exist, to be evaluated within the principles of purpose, duration, and legitimacy.

You may request that third parties to whom your personal data has been transferred be notified of any corrections, deletions, or destructions of your personal data. If the analysis of your personal data exclusively through automated systems results in an unfavorable outcome for you, you may object to this outcome. Furthermore, if your personal data has been processed unlawfully and you have suffered damages as a result, you may request compensation for those damages.

To exercise your rights mentioned above, you can send your request, including the necessary information to identify you and your explanations regarding the right you wish to exercise as specified in Article 11 of Law No. 6698 on the Protection of Personal Data, to the address provided in the disclosure text: Dr. Muzaffer, Kurtuluş Mh. 64010 sk, Ersalan Apt No:14/B, 01120 Seyhan/Adana; or you can personally deliver it to our address with your identifying documents and information; or you can send it via email with a secure electronic signature to info@dentrum.com.tr .

7- Cases Where Personal Data May Be Processed Without Explicit Consent According to the KVKK (Law on Protection of Personal Data):

In accordance with Article 5 of the KVKK (Law on Protection of Personal Data) and Article 7 of the Regulation, your personal data(s) listed below may be processed without your explicit consent in the following cases:

• In cases explicitly provided for by law,
• If you are unable to express your consent as a data subject due to factual impossibility, or if your consent is not legally valid, and the processing of your personal data is necessary for the protection of your or another person's life or physical integrity,
• The processing of your personal data(s) belonging to the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract.
• It must be necessary for the fulfillment of a legal obligation.
• Your personal data/personal information has been made public by you,
• Data processing must be necessary for the establishment, exercise, or protection of a right.
• Personal health data may be processed by persons or authorized institutions and organizations bound by an obligation of confidentiality, without seeking the explicit consent of the data subject, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and planning and managing health services and their financing.

B - EXPLICIT CONSENT (APPROVAL)

1- I consent to the processing, storage, and transfer of my personal data by the data controller , Özel Dentrum Oral and Dental Health Clinic, and the data processor (Dentrum employees covered by SGK) as explained above ;

2- In order to obtain a second opinion regarding the diagnosis and treatment of my health condition, I consent to the transfer of my personal information, visual and health data to domestic or foreign healthcare institutions and organizations with which you collaborate that provide expert opinions;

3- I understand that the transfer of my health data to my private insurance company or an authorized intermediary institution of my private insurance company is necessary for me to benefit from private health insurance and for my treatment costs to be paid, in order for my private insurance company or an intermediary institution authorized by my private insurance company to access my medical information and/or for the provision and billing processes of the health services I receive from your clinic/practice. For these purposes, I consent to the transfer of my personal health data by Özel Dentrum Ağız ve Diş Sağlığı Polikliniği and the data processor (Dentrum SGK-insured employees) to my private insurance company or an intermediary institution authorized by my private insurance company.

4- I consent to the processing of my medical photographs, including those taken by the physician during the procedure, along with the personal data shared above, and to the taking, recording, storage, and processing of photographs during the intervention/treatment I will undergo.

5- I would like to be informed about my appointment and campaign information via email, social media, or SMS to my phone, and that the sharing of my financial information be notified to the email address ………………………….

Data Security and Right to Apply

Your personal data is meticulously protected within the scope of technical and administrative capabilities, and necessary security measures are provided at a level appropriate to potential risks, taking into account technological possibilities.

You can submit your requests under the law by filling out the "Application Form According to the Personal Data Protection Law" at the website "www.dentrum.com.tr" .

You can personally deliver it to Dr. Muzaffer at the following address: Kurtuluş Mh. 64010 sk, Ersalan Apt No:14/B, 01120 Seyhan/Adana.

You can send it through a notary public.

You can send it to info@dentrum.com.tr with a secure electronic or mobile signature, via your registered email address or the email address registered in our system.