Patient and Patient Relative Information Notice

PATIENT / PATIENT RELATIVE INFORMATION NOTICE

INFORMATION NOTICE ON THE PROTECTION OF PERSONAL DATA FOR PATIENTS / PATIENT RELATIVES

INFORMATION NOTICE

Maltepe Imaging and Healthcare Services Industry and Trade Inc. (“Data Controller”) acts as the Data Controller within the scope of Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Regulation on Personal Health Data published on June 21, 2019.

Our hospital, as the Data Controller, hereby openly informs you that your personal data obtained in the manner described below within the framework of the conditions stipulated in the legislation, within the scope of our commercial activities or service relationship with you; shall be processed for the purposes requiring such processing, limited and proportionate to these purposes, protected, recorded, stored, preserved, reorganized, transferred to authorized institutions entitled to request personal data by law, and in accordance with the provisions of the Law, may be transferred to domestic or foreign third parties, assigned, classified, and processed in other ways specified by the Law.

1. Collection and Procedure of Personal Data of Patients / Patient Relatives

Our hospital will process your personal data in line with the purposes specified in this Information Notice. In case of any change in the purpose of processing your personal data, your additional consent will be obtained.

The personal data collected and used by our hospital, especially regarding patients, include the following:

Data Category
Identity Data	Information including name-surname, Turkish ID number, marital status, mother’s name - father’s name, date of birth, place of birth, nationality, gender such as copies of driver’s license and identity card, information about family relatives, social security registration number, signature/initial information, tax ID and foreign ID number, passport number
Contact Data	Phone number, full address information, address in the country of temporary assignment, country, e-mail address, internal company communication details (including extension number and corporate e-mail address), fax information.
Financial Data	Bank account number, credit card information, IBAN number and similar bank details
Special Category Personal Data	Health data, health reports, blood group Data obtained within the scope of private health insurance Disability, invalidity and handicap status/definition/percentage Devices and prostheses used on the driver’s license (copy of the driver’s license) Blood group and religion field on the identity card Union membership information
Physical Location Security Data		Personal data related to records and documents taken during entrance to the physical location and stay inside the location, camera recordings, and security checkpoint records, etc.

 

2. Purposes and Legal Grounds for Processing Personal Data

Your personal data may be processed by our Company for the purposes listed below but not limited to them.

For the purpose of establishing and performing the contract, especially;

• Use of customer relationship management system for marketing analysis activities,
• Monitoring payments of patients/patient relatives,
• Collecting incoming calls and providing services to patients/patient relatives,
• Notification and monitoring of patient/patient relative information changes,
• Recording and monitoring patient/patient relative information,
• Collecting and monitoring patient/patient relative information,
• Monitoring meetings and offers of patients/patient relatives,
• Realizing and monitoring communication with patients/patient relatives,
• Recording, tracking, and resolving patient/patient relative complaints,
• Recording and monitoring requests of patients/patient relatives,
• Obtaining consent for communication from patients/patient relatives,
• Sending informational messages to patients/patient relatives,

Within the Scope of Relevant Legal Provisions;

• Your personal data is processed to fulfill administrative obligations within the scope of laws such as the Basic Law on Health Services, Social Insurances and General Health Insurance Law, Code of Obligations, Consumer Protection Law, and other relevant legislation.

Provided that it does not harm the fundamental rights and freedoms of the data subject, personal data is processed for the legitimate interests of our Company and the necessity of data processing for the establishment, use, or protection of a right, especially;

• Ensuring the follow-up and conclusion of legal/administrative processes such as lawsuits, enforcement proceedings, etc.,
• Processing your personal data for the follow-up of consumer lawsuits.

Your personal data will be retained for a reasonable period until the processing purpose ceases or for statutory limitation periods prescribed by law.

3. Transfer of Personal Data to Third Parties

Procedures and principles regarding the transfer of personal data are regulated under Articles 8 and 9 of the KVKK Law, and personal data and special category personal data of the data subject may be transferred to real or legal third parties.

Transfer of Personal Data to Domestic Third Parties;

Especially for the purpose of establishing and performing the contract;

• Conducting communication activities,
• Carrying out marketing analysis activities,
• Collecting incoming calls and providing services to patients/patient relatives,
• Notification and monitoring of patient/patient relative information changes,
• Tracking patient/patient relative complaints,
• Recording and monitoring patient/patient relative requests,
• Transfer to firms and business partners, affiliates and subsidiaries, and authorized public institutions and organizations for notification and monitoring of private patients/patient relatives.

For the purpose of establishing, exercising, or protecting a right, especially;

• Transfer to the company lawyer for the follow-up and conclusion of legal and administrative processes such as lawsuits and enforcement proceedings.

4.Ensuring the Security and Confidentiality of Personal Data

Our Company takes all kinds of technical and administrative measures to ensure an adequate level of security to prevent unlawful processing of personal data and unlawful access to personal data, in accordance with Article 12 of the KVKK Law. In case personal data processed is unlawfully obtained by others, our Company will notify the relevant data owner and the Board as soon as possible.

5. Deletion, Destruction, and Anonymization of Personal Data

Pursuant to Article 7 of the KVKK Law, although personal data is processed in accordance with the relevant legislation, if the reasons requiring processing disappear, personal data shall be deleted, destroyed, or anonymized ex officio or upon the request of the data subject by our Company.

The procedures and principles related to this issue shall be carried out in accordance with the KVKK Law and secondary legislation based on this Law.

6. Rights of the Patient / Patient Relative

In accordance with Article 11 of the KVKK Law, you can apply to our Company and make requests regarding your personal data as follows:

1. To learn whether your personal data is processed,
2. To request information if your personal data has been processed,
3. To learn the purpose of processing your personal data and whether they are used accordingly,
4. To learn the third parties to whom your personal data is transferred domestically or abroad,
5. To request correction of your personal data if they have been processed incompletely or incorrectly and to request notification of this correction to third parties,
6. To request deletion, destruction, or anonymization of your personal data if the reasons requiring processing disappear and to request notification of this to third parties,
7. To object to the emergence of a result against the data subject by analyzing the processed personal data exclusively by automated systems,
8. To request compensation for damages in case of unlawful processing of your personal data.

You can submit your applications and requests under the Law by filling out the “Application Form under the Personal Data Protection Law” available at https://radiologica.com.tr/ and;

• Deliver it personally or via notary to Cevizli Neighborhood Fil Yokuşu Street No: 22 / Maltepe ISTANBUL,
• Send it securely signed with electronic or mobile signature via registered electronic mail (KEP) to xxxxx@hs03.kep.tr or via the email address kvkk@radiologica.com.tr that has been previously notified to and registered in our system by the data subject,
• RADIOLOGICA will finalize application requests free of charge within a maximum of 30 (thirty) days in accordance with Article 13 of the Law. If the request is rejected, the reason(s) will be notified in writing or electronically with justification.

This Information Notice may be revised by RADIOLOGICA when necessary. In case of revision, employees and candidates will be informed accordingly. The latest version of the Information Notice can be accessed at [https://radiologica.com.tr/].