Clarification Text on Protection and Processing of Personal Data

SNS GLOBAL TOURISM LTD. ŞTİ. Personal data in accordance with the “Personal Data Protection Law” numbered 6698; collection, processing, transfer, storage period and data privacy and protection activities in accordance with the relevant laws and regulations. For this purpose, we take the highest level of security measures and inform you about your rights, and we attach great importance to the security of your personal data. We protect all kinds of personal data shared by our patients, patient privacy and we take all necessary technical and administrative measures to ensure the appropriate level of security of your personal data.

This Personal Data Protection Statement sets out our personal data protection and processing policy, how we collect, use and disclose your personal data in the course of the services provided, and preserve it.

1.  Identity of the data controller

Pursuant to the Law No. 6698 on the Protection of Personal Data (referred to as KVK Law in the Clarification Text), which entered into force on April 7, 2016, your personal data; SNS GLOBAL TURİZM LTD. ŞTİ. (referred to as Medcarya in the Clarification Text) is within the scope described below.

2.  Purpose and legal reasons for processing your personal data

Articles 5 and 6 of the PDP Law regulate the conditions for processing personal data and sensitive personal data. Special categories of personal data are regulated in a limited manner in the Law and include race, ethnic origin, political opinion, religion, sect or other beliefs, appearance and dress, membership to associations, foundations or trade unions, health, sexual life, criminal conviction and security measures, relevant data and biometric and genetic data.

includes. While Article 5 of the Law sets out the conditions for the processing of non- special categories of personal data, Article 6 sets out the conditions for the processing of special categories of personal data.

Pursuant to Article 5 of the KVK Law, the conditions for processing personal data that are not of special nature are as follows; 

  • There is explicit consent of the data
  • Data processing is clearly regulated by
  • Processing of the relevant data is necessary for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid.
  • Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract.
  • Data processing is mandatory for the data controller to fulfill its legal
  • Personal data is made public by the data
  • Data processing is mandatory for the establishment, exercise or protection of a
  • Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
  • Conditions for the processing of special categories of personal data according to Article 6 of the KVK Law;
  • Explicit consent of the data subject,
  • The processing of biometric and genetic data and special categories of personal data other than data relating to health and sexual life (race, ethnic origin, political opinion, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, criminal convictions and security measures) are regulated by law.
  • Your personal data under these conditions;
  • To fulfill our legal obligations in the relevant legal regulations,
  • Public health protection, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing,
  • If you make an appointment, you will be informed about your appointment,
  • To plan and manage the internal functioning of MedCarya,
  • Analyzing to improve our services,
  • Invoicing,
  • Verification of your identity,
  • Verification of your relationship with contracted institutions,
  • Responding to the requests of the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,
  • Respond to your questions or complaints about our services,
  • Analyze your use of healthcare services to improve the services we provide,
  • To comply with MedCarya’s internal policies and principles,
  • Measuring patient satisfaction and increasing patient satisfaction after receiving healthcare services,
  • To contact you to inform you about our services,
  • It is archived, processed and used within the specified purposes in electronic or physical environments by taking the necessary security, confidentiality and legal measures for the supply of medicines or medical devices.
  • However, your personal data will not be used for commercial purposes in any way other than the activities listed above and as required by the relevant

3.  Personal data collected by THST

We collect various information from our patients within the framework of the health services we provide. Such information is collected in accordance with the data processing principles and conditions specified in the Law No. 6698 on the Protection of Personal Data (“KVKK”). The information we collect from you for the purpose of processing personal data may include the following:

  • Your name and surname,
  • Your TR identity information, passport number,
  • Place and date of birth,
  • Your gender
  • Your address,
  • Your phone number
  • E-Mail Address,
  • Your patient protocol number assigned to you by MedCarya,
  • Your financial data, such as payment and billing information,
  • Your private health insurance or Social Security Institution data,
  • Your biometric data within the scope of services funded by the Social Security Institution,
  • Your health data, including but not limited to your examination, X-ray and CT scan data, prescription information,
  • Your audio recording in case you contact us,
  • During your visit to our hospitals, you will be recorded with a closed circuit camera system,
  • If you use the parking/ valet service, provide the license plate number of your vehicle,
  • https://medcarya.com, your health data and identity information that you share when you use online services on our website,
  • Other data you share when you contact us via email, call center or other channels

4.  Purposes of transfer and the persons and organizations to whom your personal data may be transferred.

Basic Law No. 3359 on Health Services, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations,

Regulation on Private Hospitals, Regulation on the Processing of Personal Data

to fulfill our obligations. Health Data and Ensuring Privacy and other relevant regulations;

Necessary work is carried out by the relevant units in order to ensure that the relevant persons benefit from the products by taking all kinds of technical and administrative measures to ensure the appropriate level of security in accordance with the KVKK and the relevant health legislation.

The services and offerings of our organization,

Fulfillment of financial, legal and administrative affairs in line with the purposes listed in Article 2 of this clarification text, including the fulfillment of the administrative and economic activities of our institution, ensuring and supervising physical security in the buildings belonging to our institution, carrying out legal, financial and administrative compliance processes; To institutions or organizations permitted by the provisions of the relevant legislation (Turkish Medical Association, Antalya Provincial Health Directorate, Turkish Dental Association, Social Security Institution, etc.); all Ministries, judicial bodies; private insurance companies; our direct / indirect domestic / foreign shareholders, affiliates and / or

our subsidiaries; auditors; consultants; business partners; we contractually receive services and cooperate to carry out our activities,

5.  Method and Legal Grounds for Collecting Personal Data

Your personal data is collected in order to provide our services in line with the above- mentioned purposes and to fulfill the contractual and legal responsibilities of our organization in a complete and accurate manner. Your collected personal data may be processed for the purposes specified in Articles 2 and 4 of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law and

can be transferred.

Within the framework of the above-mentioned legal reasons, your personal data is collected through all kinds of verbal (all kinds of statements, etc.), written (tests, job application forms, contact forms, patient consent forms, etc.) identity documents. Our website, social media areas, corporate website, mobile applications and existing camera recording systems.

6.  Your rights regarding your personal data

By applying to the data controller in accordance with Article 11 of the KVK Law;

To learn whether your personal data has been processed or not, to request information if your personal data has been processed,

To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,

To the person to whom your personal data is transferred, To request correction of your personal data in case of incomplete or incorrect processing of your personal data and to request notification of the transaction made within this scope to third parties to whom your personal data is transferred, To request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, if it has been processed in accordance with the Law and other relevant provisions of the law, and to request notification of the transaction made within this scope to third parties, To the person to whom your personal data is transferred,

To object if a result arises against you by analyzing the processed data exclusively through automated systems,

In case you suffer damage due to unlawful processing of your personal data, to demand compensation for the damage.

Pursuant to paragraph 1 of Article 13 of the KVK Law, your applications for your above-mentioned rights, the necessary information identifying your identity and your request including your rights specified in Article 11 of the KVK Law and your right to use

your explanations;

Health Stores Turkey, Fener Mah. Tekelioglu Cad. Shemall AVM No:3/114

Muratpaşa / Antalya by hand with documents identifying your identity,

You can send it through a notary public or other methods specified in the KVK Law,

You can send the relevant form to info@medcarya.com e-mail address with secure electronic signature. Depending on the nature of your request, your applications will be finalized free of charge within thirty days at the latest; However, if it causes an additional cost, our Authority reserves the right to charge you a fee according to the tariff determined by the Personal Data Protection Board.

7.  Declaration of explicit consent regarding the processing, use and sharing of personal data

Dear Data Subject;

Pursuant to Law No. 6698 on the Protection of Personal Data (“KVKK”), any information that serves to identify or identify a natural person is personal data is covered.

In this context, your personal data SNS GLOBAL TOURISM LTD. ŞTİ. will be processed, stored, stored, updated when necessary, updated to third parties within the conditions and legislation and legal limits specified in the Clarification Text, Clarification Text

will be disclosed/transferred and processed as specified in the KVK Law. Your personal data by applying to our organization in accordance with Article 11 of the KVK Law;

  1. Find out if it is being processed,
  2. If processed, do not request information,
  3. Learn the purpose of processing and whether it is used for its intended purpose,
  4. Knowing the third parties to whom it is transferred domestically or abroad,
  5. Request correction of your data if it is incomplete or incorrectly processed,
  6. To request deletion/destruction within the framework of Article 7 of the KVK Law,
  7. If you suffer damage due to unlawful processing, you have the right to demand compensation for the damage.

Within the scope of Law No. 6698 on the Protection of Personal Data (“Personal Data Law”);

  • In accordance with the “Regulation on Processing Personal Health Data and Ensuring Confidentiality”; SNS GLOBAL TURİZM LTD. ŞTİ. As the data controller, we will record and process your personal information in our archives in order to provide health services (diagnosis, treatment, care services, ) for the benefit of patients and public health,
  • As a health institution, to record identity, address, telephone, medical history and all other necessary information in order to identify the information of the patient served in order to provide you with health services within the scope of the relevant legislation; All records and documents to be included in the medical patient file, electronic or paper

in a way that will be the basis for processing in its environment,

  • We hereby declare that your private health insurance will be shared with us, authorized and authorized persons if requested by the competent authorities, especially your insurance company, or if you use it within the scope of e-pulse and similar systems or within the scope of our notification and/or reporting
  • The above information and SNS GLOBAL TOURISM ŞTİ. I have read, examined and accepted all the matters stated below on the date I specified below,

I accept, declare and undertake that I know, understand and accept the Clarification Text and that I have given my free will and explicit consent. Processing, use and transfer of my personal data within the scope defined in the KVK Law.