According to the Personal Data Protection Law No.6698 (hereinafter referred to as the “Law No.6698”), LAL YAPI TUR. SEY. ORG. SAN. VE TİC. A.Ş. is the Data Controller because he processes your personal data. According to Article 10 of the Law regulating the Obligation to Inform, data controllers are obliged to inform the real persons whose personal data they process on certain issues.
As you are the person concerned with this awareness, we process your personal data as explained below and within the limits prescribed by the legislation. As a Data Controller, we would like to inform you in accordance with Article 10 of the law titled “Data Controller’s Obligation to Inform”.
- About The Data Controller
As LAL YAPI TUR. SEY. ORG. SAN. VE TİC. A.Ş. (hereinafter referred to as “CLINIC MONO”) in accordance with Law No.6698,; We may process your personal data as Data Controller, record it, store it, classify it, update it, and disclose it to third parties at home or abroad, where permitted by legislation and / or limited to the purpose for which they are processed, in accordance with the law and the rules of integrity and as long as necessary for the purposes we foresee, which we have stated below, within the scope of our purposes explained below.
- Your Processed Personal Data, Legal Reasons and Processing Purposes
Your personal data subject to processing;
- Name, surname, Turkey Republic ID number, passport information, if you are a foreign citizen, your passport number or temporary Turkey Republic ID number, your place and date of birth, your marital status, your gender information and the Turkey Republic ID card or Driver’s License photocopy,
- Your contact and location data such as address, location, phone number, e-mail address,
- Your financial data such as your bank account number, IBAN number,
- Your health and sexual life data obtained during the execution of medical diagnosis, esthetics, treatment and care services such as your own laboratory and imaging results, test results, examination data, photographs of your body and video records, prescription information, blood type, past treatment informations, in order to be monitored in the file and to get service,
- Your responses and comments that you share in physical and / or digital media in order to evaluate our services,
- Your closed circuit camera system image and sound recording taken during your visit to our doctor’s offices, clinics and hospitals,
- Written notes, voice conversation records and video conversation records kept if you contact our Call Center,
- Your private health insurance data and Social Security Institution data for the purpose of financing and planning health services,
- Your vehicle license plate informations If you use the parking lot and valet service,
- Your browsing information obtained during the use of our website, whatsapp, mobile application and social media platforms and our applications, your IP address, your browser information and your medical documents, surveys, photos, videos, forms and contact information and location and contact data that you have submitted with your own consent,
- If you benefit from transportation and accommodation services, your travel, flight, ticket information and your requested accommodation data for the hotel, hostel, house and the like.
Your collected personal data are stipulated by Law No. 6698 and GDPR, a) Compliance with the law and the rules of honesty, b) Being accurate and up-to-date when necessary c) Being processed for specific, clear and legitimate purposes, d) Being linked, limited and proportionate to the purpose for which they are processed, e) In accordance with the basic principles of preservation for the period required by the relevant legislation or for the purpose for which they are processed; Law No. 6698;
Article 5/1 within this framework “Obtaining the explicit consent” of the Data Subject
Article 5/2 (a) “It is expressly permitted by any law”
Article 5/2 (c) “It is necessary to process the personal data of parties of a contract, provided that the processing is directly related to the execution or performance of the contract”
Article 5/2 (ç) “It is necessary for compliance with a legal obligation which the controller is subject to”
Article 5/2 (f) “It is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed” it will be processed for the following purposes:
Fulfillment of the purpose required for the execution of the customer contract, especially;
- Fulfilling our obligations under the contract with our customer,
- Carrying out the necessary work by our business departments to benefit the data subject from the products and services offered and carrying out the relevant business processes,
- Planning and execution of the activities required for the promotion and recommending of the products and services offered to the data subject by customizing them according to the likes, usage habits and needs of the data subject, sending commercial messages,
- Carrying out the necessary work by our relevant business units for the realization of the commercial activities that are being carried out and carrying out the related business processes,
- Establishing contractual processes such as service and after-service support, execution and follow-up of all necessary transactions, execution of contract processes, planning and execution of operational processes,
- The operation and follow-up of all kinds of processes in order to fulfill the obligations regarding after-service support and to carry out an effective service process,
- Conducting accounting and financial transactions, including service-related invoicing activities, performing risk management,
- To be able to perform evaluation, analysis and risk management studies regarding customers within legal limits,
- Fulfilling the guaranty obligation, monitoring the processes of the products covered by the guaranty,
- Conducting customer relations and monitoring corporate governance activities,
- Improving and developing the services offered, determining and implementing commercial and business strategies,
- Maintaining business and operations, carrying out activities and procedures,
- Managing risk, ensuring business continuity, following up contract processes or legal requests,
- Planning information security processes, ensuring the security of our website, establishing and managing information technology infrastructure,
- Responding to the demands of customers, visitors and other people who convey their complaints and requests through different channels, including our website, identifying and resolving their problems and communicating with the data subject in these processes,
- Ensuring the legal and commercial security of people who are in business relations with the products and services offered,
- Planning and monitoring the work carried out with authorized dealers / service / manufacturers, business partners, dealers or suppliers,
- Follow-up and execution of legal processes and communication processes with official institutions,
- Resolving legal disputes that may arise in the future
- Ensuring workplace safety,
- Protection of public health, preventive medicine, medical diagnosis, esthetics, treatment and care services,
- Sharing the requested information with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,
- Fulfillment of legal and regulatory requirements,
- Financing of health services, payment of the expenses of examination, diagnosis and treatment, sharing the requested information with private insurance companies within the scope of Eligibility Verification
- To be informed about your appointment through the Call Center and Digital Channels,
- Confirmation of your identity by Patient Services, Healthcare Professionals and Call Center departments,
- Planning and managing the internal workings of the doctor’s office, clinic and hospital,
- Monitoring and preventing abuse and unauthorized transactions by the Audit and Information Systems departments,
- Billing for our services by the Patient Services, Financial Affairs and Marketing departments
- Responding to all my questions and complaints by the Call Center departments regarding the health services provided / to be given to me
- Reminding of the process periods related to continuous medical procedures,
- Taking all necessary technical and administrative measures within the scope of data security of our Clinic’s systems and applications by the Information Systems departments,
- Providing marketing, promotion, participation in campaigns and campaign information by Call Center departments, designing and communicating special content, tangible and intangible benefits on web and mobile channels,
- Informing the public through social media and other communication tools,
- Making advertisements on the quality and processes of the service provided, by sharing the photographs and video recordings showing the pre and post situation regarding the service and medical procedure in various media.
- Measuring, increasing and investigating patient satisfaction.
- Transfer of Your Personal Data
Your personal data can be transferred to public institutions (such as ministries and Presidency boards) within the scope of the purpose and limitations stipulated by the law, if requested in cases clearly stated in the laws.
Your personal data can be transferred to;
- In order to fulfill the legal obligation, authorized official institutions and organizations and persons authorized by law,
- To the relevant judicial authorities and authorized lawyers in order to carry out or follow up the judicial processes,
- To authorized service, professional consultants, accountants and auditors from which the Company provides services, for the development of business processes, execution of definition and marketing activities, risk management, planning of sales and after-sales support processes, fulfillment of contractual obligations
- Occupational health and safety institutions and experts that we receive service to fulfill our legal obligations
- To the private and public institutions, physicians, hotels, organization companies and banks with which the Company has commercial, administrative or contractual relations within the scope of performance of contractual obligations, establishment of the right, fulfillment of legal obligations and legitimate interests.
- Shipping, motorcycle courier and logistics companies that provide transportation and distribution services in order to fulfill contractual obligations
- To Group companies in order to carry out our internal relations
- Methods of Obtaining Personal Data
Although the methods of collecting personal data may vary depending on the service provided by CLINIC MONO and the commercial activities of CLINIC MONO, your personal data, with all contracts / information forms and other documents regarding transactions issued with your approval and / or signature; they can be collected with automatic or non-automatic methods, via website, social media channels, mobile applications, security cameras and similar means. It can be verbal, written or electronic.
Your Rights as a Data Subject listed in Article 11 of Law No. 6698 and GDPR
The rights of real persons, whose personal data are processed in accordance with Article 11 of Law No. 6698 are as follows;
- Learning whether personal data is processed,
- If personal data has been processed, to request information regarding this,
- Learning the purpose of processing personal data and whether they are used appropriately for their purpose,
- To learn whether personal data are transferred domestically or abroad, and to know the third parties to whom it is transferred,
- To request correction of personal data in case of incomplete or incorrect processing and to request notification to be made about the correction to third parties to whom personal data have been transferred,
- Although it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, and to request notification to be made within this scope to third parties to whom personal data have been transferred,
- Object to the occurrence of a result that is disadvantageous of analyzing the processed data exclusively through automated systems,
- To request the compensation of the damage due to unlawful processing of personal data
You can transmit your application for your rights listed above, with your request which contains the necessary
information identifying your identity and your explanations about your right to use the rights specified in Article
11 of Law No.6698 with following methods: You can fill in the Data Subject Application Form at ; www.clinicmono.com.tr and send a signed copy of the form to Adalet Mah. Manas Bulv. Folkart Towers A Kule No:47/B D:2009, Bayraklı/Izmir by hand with documents identifying you, you can send it via notary or other methods specified in the Law No. 6698., or you can send the form to [email protected] with a secure electronic signature.
Depending on the nature of the request, the request will be concluded free of charge as soon as possible, within thirty (30) days at the latest. However, if the transaction requires an additional cost, we will charge the fee in the tariff determined by the Board of Protection of Personal Data.
Applications can be made in English or Turkish. In the application there must be name, surname and signature if the application is written, Turkey Republic ID number for Turkey citizens, on the other hand, nationality, passport number / identity number, place of residence or workplace address for notification, e-mail address, telephone or fax number and subject of request for foreigners.
In the application containing the explanations about the right that the relevant person has and that he / she will make in order to exercise the above-mentioned rights and that he / she has requested to use; the requested matter should be clear and understandable, the requested subject must be related to the person. If he / she is acting on behalf of someone else, he / she must be specially authorized in this regard and must document his / her authority, identification and address information and documents proving identity must be attached to the application.
We declare in the capacity of “Data Controller” within the scope of Law No. 6698 and GDPR.
Regards,
LAL YAPI TUR. SEY. ORG. SAN. VE TİC. A.Ş.
Adress: Adalet Mah. Manas Bulv. Folkart Towers A Kule No:47/B D:2009, Bayraklı/Izmir,
Phone: 0549 675 10 17
E-Mail: [email protected]
| ☐ | I HAVE READ AND UNDERSTOOD THE CLINIC MONO PATIENT DISCLOSURE TEXT IN ACCORDANCE WITH THE LAW NO. 6698 ON PROTECTION OF PERSONAL DATA. | ||
| Costumer | |||
| Name Surname | : | ||
| Date | : | ||
| Signature | : | ||