Clarification Text on KVKK

PERSONAL DATA PROTECTION AND PROCESSING CLARIFICATION TEXT

Data Controller: Prof. Dr. Şahin Ulu Clinic

In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), the General Data Protection Regulation (GDPR), and the Regulation on Promotion and Information Activities in Health Services, personal data belonging to our patients and website visitors are processed within the scope explained below.

1. Processed Personal Data

• Identity Data: Name, surname, Passport/ID number, date and place of birth.
• Contact Data: Phone number, address, email address.
• Health Data (Special Category): Medical history, diagnoses, laboratory and imaging results, prescriptions, pre-operative and post-operative aesthetic/medical photographs and videos.
• Financial Data: Invoicing, payment, and bank details.

2. Purposes of Processing Personal Data

Your collected personal data is processed for the following purposes:

• Execution of medical diagnosis, treatment, surgical intervention, and care services,
• Scheduling appointments and sending reminders,
• Making legal notifications required by the Ministry of Health and other public institutions,
• Organizing travel, accommodation, and translation processes for patients within the scope of health tourism,
• Measuring patient satisfaction and medical archiving within legal periods.

3. Processing of Visual Contents (Important Notice)

In accordance with Article 7 of the Regulation on Promotion and Information Activities in Health Services; your pre-operative and post-operative visual contents (photos/videos) are processed and shared strictly based on your "Explicit Consent". You have the right to withdraw this consent at any time without any conditions. Withdrawing your consent will not cause any changes to your diagnosis/treatment processes or the fees charged.

4. Transfer of Personal Data

Your personal data, including health data, may be transferred to other specialist physicians for consultation purposes, contracted hospitals where operations will be performed, medical laboratories, and legal authorities within the scope of legal obligations.

5. Method and Legal Reason for Data Collection

Your data is collected verbally, in writing, or electronically through your physical application to our clinic, contact forms on our website, our call center, or WhatsApp line. This process is based on the legal grounds of "protection of public health, preventive medicine, medical diagnosis, treatment and care services" and "explicit consent".

6. Your Rights as the Data Subject

Under the KVKK and GDPR, you have the right to learn whether your data is processed, to know if it is used in accordance with its purpose, to request correction of incomplete/incorrect data, and to request the deletion of your data when legal storage periods expire. You can submit your requests in writing to our clinic.