Personal Data Processing Information Text
“Information Text”

In accordance with the provisions of the Law No. 6698 on the Protection of Personal Data (“KVKK”) and the provisions of the European Union General Data Protection Regulation (GDPR), we, as the Data Controller, operating the Clinic of Radiation Oncology Specialist Prof. Dr. Lütfiye Zümre Arıcan Alıcıkuş, located at Mansuroğlu Mah. 288/4 Sok. No:16 İç kapı No:26 Bayraklı-İZMİR (hereinafter referred to as “Physician/Clinic/Employer”), hereby inform you about the recording, storage, updating, disclosure to third parties in cases permitted by law, transfer, classification, and processing of your personal information in the framework described below and in accordance with the KVKK and GDPR, regarding our mutual rights and obligations under the aforementioned legal regulations.

Within the scope of legal regulations, we would like to inform you that we will record, store, and process your personal information necessary for the establishment of the Physician-Patient relationship and for providing you with healthcare services (diagnosis, treatment, care services, etc.) in line with patient benefit and public health, and keep it in our archives. – In accordance with the Private Hospitals Law, Private Hospitals Regulation, Health Implementation Communiqué, Patient Rights Regulation, and other legislation, our Clinic is obliged to record identity, address, telephone, medical history, and all other necessary information to identify the patient receiving healthcare services in order to provide you with healthcare services; to prepare all records and documents to be included in the medical patient file, which will be the basis for processing in electronic or paper format; – We would also like to inform you that your personal data will be shared with the relevant authorities and individuals in cases where it is requested by the authorized authorities, including but not limited to the Ministry of Health of Turkey and Provincial Health Directorates, Public Health Centers and other units affiliated with the Ministry of Health, Social Security Institution, and your insurance company if you use your private health insurance, by persons assigned by the authorized authorities, or within the scope of requests made under e-pulse and similar systems, or in case of requests made under e-pulse and similar systems, or within the scope of our notification and/or reporting obligations imposed on us.

PURPOSES, METHODS OF COLLECTION, AND LEGAL GROUNDS FOR PROCESSING PERSONAL DATA
Your personal data is processed for the establishment, execution, and fulfillment of the Physician-Patient relationship and contract provisions, to be used in the services we can offer you; to record identity, address, tax number, and other necessary information, including personal health data, to identify the person performing/having performed the transaction; to prepare all records and documents that will be the basis for processing in electronic (internet/mobile, etc.) or paper environment; to comply with the information storage, reporting, and notification obligations stipulated by the legislation, authorized institutions, and other authorities; to increase service quality with marketing and statistical activities, to provide the requested / other products / services, and your special categories of personal data are processed due to communication, information, and similar processes within the contractual relationship.

Your blood type, laboratory and imaging results, tests, allergies, chronic diseases, venereal diseases, contagious diseases, data regarding previous surgeries/operations, e-nabız information, medications you use regularly, information regarding Covid-19 disease, medical treatments, prescription information, harmful health habits, body analysis and death information, and other health data necessary for the treatment and applications to be applied to you, and other
Personal Data; are processed for creating a patient file, performing preventive medicine, examination, medical diagnosis, treatment and care services, performing your check-ups after medical diagnosis and treatment processes, managing possible complication processes, contacting you directly, managing appointment processes, performing patient satisfaction and request management, fulfilling legal and contractual obligations, preserving information regarding your health data that must be kept in accordance with the relevant legislation within the specified periods, obtaining consultation services from other relevant specialist physicians when necessary for the correct treatment, fulfilling legal obligations in accordance with the legislation within the scope of health tourism, planning the transfer, accommodation, and translator services of patients/clients coming within the framework of health tourism, announcing innovations regarding medical treatment and applications, informing 3rd parties about the applied medical procedure, planning and managing health services and their financing, ensuring workplace safety, fulfilling the responsibilities arising from the legal relationship established between the doctor and the patient, fulfilling financial and administrative obligations, ensuring technical and commercial security, and fulfilling public obligations.

Your Personal Data and Special Categories of Personal Data mentioned above will be processed for the purposes mentioned above and in accordance with the legislation, in order to carry out the examination, preventive medicine, medical diagnosis, treatment, and medical applications to be applied to you and to fulfill the obligations related to your treatment. In case you do not provide the relevant personal data, the legal obligations imposed on the Physician and the clinic providing medical treatment services will not be fulfilled properly and your treatment and/or recovery processes cannot be carried out successfully.

Other areas where your personal data may be processed are as follows: HR operations, Clinic internal operations, Legal, technical and administrative consequences activities, Strategy, planning and business partners/suppliers, customer management, customer satisfaction, Corporate communication activities, planning and execution of events, Planning and execution of in-clinic training programs, Clinic Workplace Safety, Occupational Health and Safety Protection, Execution of after-sales services, Execution of Technical Service Services, Realization of collection procedures, Providing customers with product-service promotion, information, personalized advertising, campaigns and other benefits, sending all kinds of service and commercial electronic messages, conducting surveys, providing various advantages through statistical analysis, Making studies to improve service quality and providing better service, Issuing invoices for our services, Receiving services from external sources, Providing customers with the benefits of expert organizations in order to receive services and technology services in matters that do not fall within their area of expertise, which may be utilized due to the requirements of Clinic activities. Identity verification, Answering questions and complaints, Taking necessary technical and administrative measures within the scope of data security, Ensuring financial reconciliation with relevant business partners and other third parties regarding the offered products and services, Providing necessary information in line with the requests and inspections of regulatory and supervisory institutions, official authorities, Preservation of information regarding the data that must be kept in accordance with the relevant legislation, Ensuring the control of the accuracy of the information, Measuring customer satisfaction, For employees; creating a personnel file, determining whether they are constantly competent to fulfill the requirements of the job, making private health insurance, creating a health file, taking work safety measures, being able to make travel plans.

For job applicants: Managing and planning the process of evaluating suitability for open positions. Publication of visual and audio data belonging to the Clinic and its Employees, stands, obtained in competitions, organizations, fairs, studies and other activities carried out within the scope of the field of activity, for the purpose of developing and sharing the work, Fulfillment of legal obligations, Execution/follow-up of Clinic financial reporting and risk management operations, Execution/follow-up of legal affairs, Creation and tracking of visitor records. Planning and execution of employees’ use of machinery and equipment, Planning and execution of sales transactions, Planning and execution of supply transactions, Planning and execution of collection transactions, Planning and execution of the use of clinic internet, shared network, computer in accordance with the laws, Planning and execution of Clinic fairs, activities, social projects, product and corporate promotion.

These purposes are for informational purposes, and any additions that may be made by us in the future for the Clinic to carry out its operational activities will be announced with updates.

Your Personal Data, depending on the healthcare service provided;
• By coming to the Physician and Clinic for examination and treatment, through the health reports, laboratory and imaging results, tests, health reports, and your statements regarding your health data that you submit for the medical evaluation of the treatment to be applied to you,
• Through your filling out the “Patient Information and Consent Form” regarding the treatment to be applied by the Physician and Clinic,
• Through the contact form you fill out on the Physician Clinic’s corporate website,
• Through the e-mails you send to the Physician and Clinic’s corporate e-mail address,
• Through the photo/video recordings taken before, during, and/or after the medical procedure applied to you in the Physician Clinic,
• Upon your request and where necessary; through your written/audio/visual (photo and/or video recording) messages you send to the Physician and Clinic using remote connection applications service providers (whatsapp/zoom.us/facetime/skype/messenger/google/instagram/facebook, etc.) where you have accepted their Privacy Policies and International Transfer Principles, for the purpose of online diagnosis and check-ups via remote access by the Physician and Clinic, and through your online audio/video calls made through these applications,
• • By sending direct messages to the Physician and Clinic’s profile accounts on social media accounts (instagram, youtube, facebook, twitter, linkedin, etc.) where you are currently a user and whose server is located abroad, by accepting their Privacy Policies and International Transfer Principles, and/or by commenting on their posts,

• Through the information you provide by allowing it to be processed automatically through panels such as “contact us” or “get information” in the promotions and advertisements made by the Physician and Clinic on social media accounts (instagram, youtube, facebook, twitter, linkedin, google, etc.) where you are currently a user and whose server is located abroad, by accepting their Privacy Policies and International Transfer Principles, are processed.

Article 5/2 of the KVKK regulates the exceptions that allow personal data to be processed lawfully. In this regard, the Clinic may process personal data without explicit consent if one of the other conditions (exceptions) written below exists. The basis of the personal data processing