Personal Data Protection • Koru Hospital

CLARIFICATION/INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA

As Erer Sağlık ve Eğitim Kurumları İşletmeciliği A.Ş. (“Özel Ankara Koru Hastanesi, Özel Koru Sincan Hastanesi, briefly referred to as Koru Sağlık Grubu”), we attach importance to the security of your personal data. We maintain all kinds of personal data shared by our patients in a manner that respects patient privacy and by taking all necessary technical and administrative measures to ensure an appropriate level of security regarding your personal data. With the awareness of this responsibility, we process your personal data within the framework specified below in our capacity as the Data Controller under the Personal Data Protection Law No. 6698 (“Law”) and relevant legislation.

Collection, Processing, and Purposes of Processing Personal Data

Your personal data is obtained by Koru Sağlık Grubu through verbal, written, visual, or electronic media, call centers, websites, and similar channels, in accordance with the activities of Koru Sağlık Grubu companies, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and the planning and management of health services and their financing.

In this context, primarily your personal health data, which is necessary for the execution of all medical diagnosis, examination, treatment, and care services, and other data listed below obtained for this purpose:

Your identity data such as your name, surname, Turkish ID number, passport number or temporary Turkish ID number if you are not a Turkish citizen, place and date of birth, marital status, gender information, and copies of your Turkish ID card or driver's license you have submitted,
Your contact data such as your address, phone number, and e-mail address,
Your financial data such as your bank account number and IBAN number,
Your health and sexual life data obtained during the execution of medical diagnosis, treatment, and care services, such as laboratory and imaging results, test results, examination data, and prescription information that you provide for follow-up in your file,
Your responses and comments shared for the purpose of evaluating our services,
Your image and voice recordings taken by the closed-circuit camera system during your visit to our hospitals,
Your voice call recordings kept if you contact our Call Center,
Your data regarding private health insurance and Social Security Institution data for the purpose of financing and planning health services,
Browsing information obtained during the use of our website, IP address, browser information, and medical documents, surveys, and form information you transmit with your own consent;

Protecting public health, conducting preventive medicine, medical diagnosis, treatment, and care services,
Sharing requested information with the Ministry of Health and other public institutions and organizations in accordance with relevant legislation,
Fulfilling legal and regulatory requirements,
Financing your health services by Patient Services, Finance, and Marketing departments, covering your examination, diagnosis, and treatment expenses, and sharing requested information with private insurance companies within the scope of eligibility inquiries,
Informing you about your appointment via our Call Center and Digital Channels,
Verifying your identity by Patient Services, our Healthcare Professionals, and Call Center departments,
Planning and managing internal institutional operations by Hospital Management,
Conducting analyses for the development of health services by Quality, Patient Experience, and Information Systems departments,
Providing training to our employees by Human Resources and Quality departments,
Monitoring and preventing abuse and unauthorized transactions by Audit and Information Systems departments,
Performing risk management and quality improvement activities by Quality, Patient Experience, and Information Systems departments,
Billing for our services by Patient Services, Finance, and Marketing departments,
Confirming your relationship with institutions contracted with our hospital by Patient Services, Finance, and Marketing departments,
Taking all necessary technical and administrative measures within the scope of data security for our hospital's systems and applications by Information Systems departments,
Participation in campaigns and providing campaign information by Marketing, Media and Communication, and Call Center departments; designing and delivering special content, tangible and intangible benefits on web and mobile channels,
Measuring, increasing, and researching patient satisfaction by Patient Rights departments,

are processed by Koru Sağlık Grubu for these purposes.

Transfer of Personal Data

Your personal data may be shared within the scope of the Law and other legislation and for the purposes stated above with:

The Ministry of Health, its sub-units, and family medicine centers,
Private insurance companies (health, pension, life insurance, etc.),
Social Security Institution,
General Directorate of Security and other law enforcement agencies,
General Directorate of Population and Citizenship Affairs,
Turkish Pharmacists Association,
Judicial authorities,
Laboratories, medical centers, ambulance, medical device, and health service providers located domestically or abroad with whom we cooperate for medical diagnosis and treatment,
The health institution to which the patient is referred or to which the patient applies personally,
Your legal representatives whom you have authorized,
Third parties from whom we receive consultancy, including lawyers, tax advisors, and auditors with whom we work,
Regulatory and supervisory institutions and official authorities,
Your employer,

may be shared.

Method and Legal Basis for Personal Data Collection

Your personal data is collected and processed in any verbal, written, visual, or electronic environment for the purposes stated above and for the legal execution of all kinds of work included in the scope of activity of Koru Sağlık Grubu, and in this context, for Koru Sağlık Grubu to fully and properly fulfill its contractual and legal obligations.

In this context, health data is processed based on the legal grounds of protecting public health, preventive medicine, medical diagnosis, treatment, and care services, and the planning and management of health services and their financing, as stated in Article 6, Paragraph 3 of the Law; while your other personal data is processed based on the legal grounds of being stipulated in the laws, fulfillment of legal obligations, establishment and exercise of a right, and performance of a contract.

Your Rights Regarding the Protection of Personal Data

In accordance with the Law and relevant legislation, you have the right to;

Learn whether your personal data is being processed,
Request information if your personal data has been processed,
Access your personal health data and request this data,
Learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
Know the third parties to whom your personal data is transferred domestically or abroad,
Request correction of your personal data in case it is processed incompletely or incorrectly,
Request the deletion or destruction of your personal data,
Request notification of the operations performed regarding the correction and/or deletion or destruction of your personal data to third parties to whom your personal data has been transferred,
Object to the emergence of a result against you by analyzing the processed data exclusively through automated systems,
Request compensation for damages in case you suffer damage due to the unlawful processing of your personal data.

Data Security and Right of Application

Koru Sağlık Grubu protects your personal data in full compliance with all technical and administrative security controls required by information security standards and procedures. These security measures are provided at a level appropriate to the potential risk, taking into account technological possibilities.

You may submit your requests within the scope of the Law by filling out the “Application Form Pursuant to the Personal Data Protection Law” available at “www.koruhastanesi.com”;

You may deliver it in person with a wet-signed written application form to the address: Kızılırmak Mah. 1450. Sokak No:13 Çukurambar Ankara-TÜRKİYE, addressed to the “Chief Physician's Secretariat” department, with “Request for Information within the Scope of the Personal Data Protection Law” written on the envelope, or you may send it via a Notary Public.

“Explicit Consent Form Regarding the Processing of Personal Data”