Personal Data Protection Law
INFORMATION TEXT ABOUT OUR PRIVACY AND PERSONAL DATA PROCESSING POLICY (KVKK INFORMATION TEXT)
1- PURPOSE AND SCOPE
This clarification text has been prepared by DENTART SAĞLIK HİZMETLERİ TİCARET LİMİTED ŞİRKETİ (“DENTART”) in its capacity as the data controller, in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), the Regulation on Personal Health Data, the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, and relevant legislation.
Your personal data is processed by our Company, in its capacity as Data Controller, solely for the purposes of providing medical health services, ensuring customer satisfaction, and conducting business processes.
2- DEFINITIONS:
Explicit consent: Consent that is based on being informed about a specific subject and expressed freely.
Anonymization: The process of making personal data unidentifiable to a real person, such as through techniques like redaction, masking, aggregation, data distortion, etc., in a way that the personal data loses its nature and this situation cannot be reversed.
Data Subject: The real person whose personal data is being processed.
Destruction: The deletion, destruction, or anonymization of personal data.
Institutions/organizations we cooperate with: Employees of institutions where our company has any business relationship (such as partners, suppliers, etc., but not limited to these), including shareholders and officials of these institutions.
Processing of personal data: Any operation performed on personal data, whether fully or partially automated or non-automated as part of any data recording system, such as obtaining, recording, storing, preserving, altering, rearranging, disclosing, transferring, receiving, making available, classifying, or preventing the use of data.
Personal data: Any information related to an identified or identifiable natural person.
Personal data retention and destruction policy: The policy on which data controllers base their actions of determining the maximum period necessary for the purposes for which personal data are processed, and the actions of deletion, destruction, and anonymization.
KVKK: The Personal Data Protection Law No. 6698, published in the Official Gazette No. 29677 on April 7, 2016, and dated March 24, 2016.
Institution: The Personal Data Protection Authority.
Special categories of personal data: Data related to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, attire, membership in associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.
Data processor: A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller.
Data controller: The person who determines the purposes and means of processing personal data and manages the place where the data are systematically kept.
3- THE PERSONAL DATA WE PROCESS
Your personal data, as specified below, is being processed by our company.
• Your name, surname, Turkish ID number, place and date of birth, marital status, gender, and other identification data found on your ID card, and if you are not a Turkish citizen, your passport number,
• Your contact data such as address, phone number, and email address,
• Your data such as profession, bank account, and IBAN number
In addition to the personal data listed above, we also process the special categories of personal data listed below.
• Your blood type, allergy and chronic disease history data, anamnesis information,
• Your health data obtained during the diagnosis and treatment process, such as test results and examination data
• Your intraoral photographs, panoramic X-ray and tomography images, dental molds, measurements,
• Your image recordings obtained by security cameras in our clinics,
• Your voice recording if you call our company’s landline.
4- THE PURPOSE OF PROCESSING YOUR PERSONAL DATA
Your personal data are processed for the purposes specified below:
• Identity verification, patient tracking, appointment tracking and notification,
• Billing, payment collection,
• Patient treatment procedures and follow-up,
• Personalized treatment plan and implementation,
• In case of personalized equipment production, their production, tracking, notification, recording,
• Taking all necessary technical and administrative measures for your data security,
• Measuring, increasing patient satisfaction, improving services.
5- LEGAL GROUNDS FOR THE PROCESSING OF PERSONAL DATA
Your personal data is processed within the framework of the Law on the Protection of Personal Data No. 6698, the Basic Law on Health Services No. 3359, the Decree-Law on the Organization and Duties of the Ministry of Health and its Affiliated Institutions No. 663, the Regulation on the Processing and Protection of Personal Health Data, the regulations of the Ministry of Health, and other relevant legislation.
We primarily process your data within the scope of the explicit consent we have obtained from you. However, your personal data may be processed without your consent in the following situations specified in the Law No. 6698 on the Protection of Personal Data, where obtaining consent is not mandatory:
- a) Clearly stipulated in the laws.
- b) It is necessary to protect the life or bodily integrity of the person who is unable to express their consent due to physical impossibility or whose consent is not legally recognized, for themselves or another person.
- c) The processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract.
- c) It is necessary for the data controller to fulfill their legal obligation.
- d) It has been made public by the data subject themselves.
- e) The processing of data being necessary for the establishment, use, or protection of a right.
- f) The processing of data is necessary for the legitimate interests of the data controller, provided that it does not adversely affect the fundamental rights and freedoms of the data subject.
Your health data, which is classified as sensitive data, is processed for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment, and the provision of care services.
6- THE BASIC PRINCIPLES OF THE PROCESSING OF YOUR PERSONAL DATA
- We carry out all our personal data processing activities in accordance with the principles of:
- Compliance with law and honesty,
- Being accurate and, when necessary, up-to-date,
- Processing for specific, explicit, and legitimate purposes,
- Being relevant, limited, and proportionate to the purposes for which they are processed,
- Being retained for the period necessary for the purposes for which they are processed as stipulated in the relevant legislation, and in accordance with all the principles stipulated in the relevant legislation, without being limited to these.
7- METHODS OF COLLECTION AND STORAGE OF YOUR PERSONAL DATA
We collect your personal data through automatic or non-automatic methods, verbally, in writing, or electronically. Your data;
- With the forms you fill out or the information you provide verbally when you come to our company,
- With the messages you send us via email or social media platforms,
- With the information you provide verbally by contacting us through our phone numbers.
We store your personal data that we obtain in electronic and physical environments for the legal retention periods or until the purpose of obtaining them ceases to exist. We take the necessary legal, technical, and administrative security measures to protect this data and ensure that unauthorized persons do not have access to it. In this context, we conduct regular inspections at our workplace, train our team members, and continuously improve our technical infrastructure in line with the evolving technology.
8- TRANSFER OF YOUR DATA WITHIN AND OUTSIDE THE COUNTRY
Your personal data, within the framework of the relevant legal provisions and for the purposes explained below;
- With our doctors and other personnel involved in your treatment,
- If necessary during the diagnosis and treatment process, with our suppliers, laboratories, consultants, and other service providers with whom we have partnerships,
- With our financial advisors for invoicing and payment processes,
- If your treatment is to be carried out in conjunction with another healthcare institution or continued at another healthcare institution, with that institution,
- With your authorized legal representatives, guardians, or custodians,
- If necessary for our company to fulfill its legal obligations, with our partners, consultants, courts, public institutions, and organizations,
- With our lawyers, financial advisors, and accountants for the fulfillment of our legal and financial responsibilities and the protection of our rights,
- With domestic and international service providers offering necessary infrastructure services and cloud services for the use and security of communication channels,
- With regulatory and supervisory institutions and official authorities.
Your personal data cannot be transferred to third parties without your explicit consent. However, in accordance with the second paragraph of Article 5 and the third paragraph of Article 6 of the Law on the Protection of Personal Data No. 6698, your personal data may be transferred without your explicit consent if one of the conditions specified therein is met, provided that adequate measures are taken. Your personal data may be transferred to our suppliers, laboratories, and business partners located abroad, provided that you give your explicit consent.
9- THIRD-PARTY SERVICES
Websites and third-party features such as Facebook, Instagram, LinkedIn, WhatsApp, and Twitter, which you can use to communicate with our company, operate independently of our company. Therefore, we have no responsibility regarding the personal data accessed and processed by these third parties. You can review the privacy practices, cookie, and KVKK policies of third parties by accessing their respective websites.
10- THE STORAGE PERIOD AND DESTRUCTION OF YOUR PERSONAL DATA
Your personal data will be retained for the duration necessary to fulfill our company’s obligations to public institutions and organizations within the framework of our commercial activities with you, or, in the absence of legal retention periods, for the period necessary for the purpose for which they were processed.
If the conditions for processing personal data cease to exist or the retention period expires, this personal data will be deleted, destroyed, or anonymized ex officio or upon the request of the Data Subject.
11- RIGHTS OF THE DATA SUBJECT
As a data subject under Article 11 of the Personal Data Protection Law;
- You have the right to learn whether your personal data is being processed,
- If your personal data has been processed, to request information regarding it,
- To learn the purpose of processing your personal data and whether it is being used in accordance with its purpose,
- To know the third parties to whom your personal data has been transferred, whether domestically or internationally,
- In case your personal data has been processed incompletely or inaccurately, to request its correction and to have this correction notified to the third parties to whom your personal data has been transferred,
- Even if your personal data has been processed in accordance with other relevant legal provisions, to request the deletion or destruction of your personal data when the reasons for processing no longer exist and to have this deletion or destruction notified to the third parties to whom your personal data has been transferred,
- To object to the emergence of a result against you by exclusively analyzing the processed data through automated systems,
- To request compensation for damages incurred due to the unlawful processing of your personal data, you have these rights.
12- CONTACT US
You can exercise your rights under Article 11 of Law No. 6698 by contacting our company. You can send your requests regarding your rights to our email address below, send them to our KEP address, deliver them in person to our address below, or send them via notary or post to the address of our company specified below.
Title: DENTART HEALTH SERVICES TRADE LIMITED COMPANY,
Address: Kosuyolu Cad.No.57 Kadikoy/Istanbul
Phone: +90 507 341 54 58
Email: info@dentart.com. Website: https://dentart.com/
Kep Address: dentartsaglik@hs06.kep.tr
Contact Person: Betul Yurteri
Your request submitted to our Company, which is the Data Controller, through the above-mentioned methods will be processed within 30 (Thirty) days at the latest. If the process requires an additional cost, it will be concluded upon your payment of the fee determined by the Personal Data Protection Board’s tariff; otherwise, it will be concluded free of charge. If your request in the application is accepted, we will fulfill our obligations as the Data Controller.
