KVKK Disclosure Notice
As Private Akdiş Oral and Dental Health Polyclinic (“Akdiş Clinic”, “Polyclinic”, “we”), acting as the “data controller” under Law No. 6698 on the Protection of Personal Data (“KVKK”), we would like to inform you under Article 10 of the KVKK regarding the processing of personal data belonging to our patients and our website visitors.
1. Identity of the Data Controller
Data Controller: Private Akdiş Oral and Dental Health Polyclinic
Address: Toros Cd. Arterium 3 Residence No:2-C, Başakşehir/Istanbul
Phone: 0212 485 04 88
Email: info@akdisklinigi.com
2. Categories of Personal Data Processed
Within the scope of our polyclinic services, the following categories of personal data may be processed:
- Identity information: Name, surname, ID/passport number, date of birth and similar identifying information
- Contact information: Phone number, e-mail address, residential address
- Health data (special category personal data): Oral and dental health information obtained during examination, diagnosis and treatment processes, radiological images, treatment plans, prescriptions, allergy and general medical history information
- Appointment and communication records: Appointment requests and correspondence made via WhatsApp, phone and the website
- Financial information: Information relating to invoicing and payment transactions
- Visual data: Photographs and videos taken in connection with the treatment process (only with the patient’s explicit consent)
- Transaction security information: IP address, cookie data and log records relating to website usage
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Carrying out examination, diagnosis, treatment planning and dental services
- Receiving and planning appointment requests and communicating with patients
- Fulfilling our legal obligations arising from Ministry of Health legislation, patient rights regulations and tax legislation
- Issuing invoices and carrying out collection processes
- Ensuring the security of our website and information systems
- Carrying out marketing communications, provided that explicit consent has been obtained
4. Legal Grounds for Processing Personal Data
These data are collected in physical and electronic environments through channels such as records kept by our polyclinic, and appointment requests made via phone, WhatsApp and the website.
Such data is processed based on the following legal grounds set out in Articles 5 and 6 of the KVKK:
- Being directly related to the establishment or performance of a contract (the treatment service relationship)
- Fulfilment of our legal obligations (Ministry of Health legislation, patient rights regulation, tax legislation)
- Data processing being mandatory for our legitimate interests (service quality, record security)
- Special category personal data relating to health and sexual life (your health data) is processed solely for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, by our physicians and healthcare personnel who are under a duty of confidentiality
- Where your explicit consent exists (e.g. archiving of treatment images, marketing communications), based on explicit consent
5. Transfer of Personal Data
Your personal data, limited to the purposes stated above and with the necessary security measures in place, may be shared in accordance with the conditions set out in Articles 8 and 9 of the KVKK;
- Where legally required, with the Ministry of Health and its affiliated institutions, the Social Security Institution and other official bodies,
- With our business partners such as laboratories and imaging centers from whom we receive services (only to the extent required by the treatment process),
- With third parties from whom we receive accounting and financial consultancy services,
- With suppliers from whom we receive information technology services (patient management system, website hosting),
Your personal data is not transferred abroad unless there is a legal requirement to do so.
6. Retention Period of Personal Data
Your personal data is retained for the periods stipulated under the relevant legislation. Patient files and medical records are subject to the retention periods specified in the Regulation on the Processing and Ensuring the Privacy of Personal Health Data and other applicable health legislation. Upon expiry of the retention period or when the purpose of processing no longer applies, your personal data is deleted, destroyed or anonymized in accordance with the KVKK.
7. Your Rights under Article 11 of the KVKK
Pursuant to Article 11 of the KVKK, you may apply to the data controller to exercise the following rights:
- To learn whether your personal data is being processed,
- To request information about it if your personal data has been processed,
- To learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
- To know the third parties to whom your personal data is transferred, domestically or abroad,
- To request the correction of your personal data if it has been processed incompletely or incorrectly, and to request that this correction be notified to third parties to whom the personal data has been transferred,
- To request the deletion or destruction of your personal data within the framework of the conditions set out in Article 7 of the KVKK,
- To request that the correction, deletion or destruction transactions be notified to third parties to whom the personal data has been transferred,
- To object to a result that is to your detriment arising from the analysis of the processed data exclusively through automated systems,
- To request compensation for the damage suffered if you incur damage due to the unlawful processing of personal data.
8. Method of Application
You may submit your requests regarding the rights listed above, together with documents verifying your identity;
- In writing: By a wet-ink signed petition sent to Toros Cd. Arterium 3 Residence No:2-C, Başakşehir/Istanbul,
- By e-mail: To info@akdisklinigi.com (if using a registered e-mail address/secure electronic signature),
Your request will be concluded free of charge as soon as possible depending on its nature, and at the latest within 30 (thirty) days; if the transaction requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.
This Disclosure Notice may be updated in line with changes that may occur in legislation or in our polyclinic’s practices. You can always access the current text on this page.