INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA FOR THE WEBSITE

Registered with the Istanbul Beyoğlu Tax Office under the tax number 9410291776 and located at Harbiye Mah. Mim Kemal Öke Cad. Melek Ap. No.19, Interior Door No.2, Şişli/Istanbul, as Dr. Pınar Sarıyıldız, we highly value patient privacy and take great care to process and store all personal data belonging to our patients with the utmost diligence and in the best possible manner. Your personal data may be processed within the scope and framework described below by PINAR SARIYILDIZ (Clinic) as the "data controller" in accordance with the Law on the Protection of Personal Data No. 6698 (KVKK) and relevant legal regulations.

We would like to emphasize that, as a Clinic, we exercise great sensitivity in processing the personal data of our patients, patient relatives, suppliers, employees, employee candidates, potential patients, visitors, business partners, and other relevant third parties.

The Clinic’s Information Notice on the Processing of Personal Data ("Information Notice") has been prepared in accordance with Article 10 of the KVKK, titled "Obligation of the Data Controller to Inform", to provide you with the most transparent information about the identity of the data controller, the method and legal basis for collecting your personal data, the purpose for which these data will be processed, to whom and for what purposes they may be transferred, and your rights listed under Article 11 of the KVKK.

1. Method of Collecting Your Personal Data and Legal Basis

In accordance with the KVKK, personal data refers to any information related to an identified or identifiable natural person. Your personal health data, including special category personal data and general personal data, is collected by our Clinic orally, in writing, or electronically in connection with the healthcare services provided to you, in compliance with the relevant healthcare legislation, the KVKK, and related secondary regulations, for the purposes outlined below.

Your personal data collected physically and/or electronically is processed in accordance with Article 5 of the KVKK, based on the following legal grounds:

When explicitly stipulated by law,
When it is necessary to protect the life or physical integrity of a person who is unable to express consent due to actual impossibility or whose consent is not legally valid,
When required for the establishment or execution of a contract,
When processing is necessary to fulfill legal obligations,
When the data subject has made their personal data publicly available,
When necessary for the establishment, exercise, or protection of a legal right,
When processing is required for the legitimate interests of the Clinic, provided that it does not infringe on the fundamental rights and freedoms of the data subject,
When processing is necessary for the protection of public health, preventive medicine, medical diagnosis, treatment, and care services, as well as the planning and management of healthcare services and financing, under Article 6 of the KVKK.

2. Processing of Personal Data and Purposes of Processing

Your personal data may be collected orally, in writing, or electronically through various Information Technology-based methods, including our website, social media platforms, mobile applications, or in person during pre-operative, operative, or post-operative processes, as well as through GSM technologies and similar means.

Additionally, in accordance with the purposes of personal data processing, your data is processed in compliance with the personal data processing conditions outlined in Articles 5 and 6 of the KVKK, and is subject to at least one of the lawful bases specified therein. The processing is also conducted in line with the principles stated in Article 4 of the KVKK, as well as the general principles and retention periods specified in our VERBIS registration.

Within the scope described above, the types of personal data collected are as follows:

Identity Data (Patient, Patient’s Relative, Translator, Supplier Employee, Visitor)	Your name, surname, citizenship number, passport number or temporary citizenship number, place and date of birth, marital status, gender, clinic-specific protocol number, and other identity data that can be used to identify you.
Contact Information (Patient, Patient's Relative, Interpreter, Supplier Employee, Visitor)	Your address, phone number, email address, and other contact information.
Physical Space Security (Patient, Patient's Relative, Interpreter, Supplier Employee, Visitor)	Your CCTV recordings
Financial Data (Patient, Patient's Relative, Interpreter, Supplier Employee, Visitor)	Your financial data, such as your bank account number, IBAN number, and credit card information.
Visual and Audio Records (Including Data Provided by Patients and Prospective Patients)	Your visual and audio records, including photographs taken for pre- and post-operative comparison purposes.
Health Information and Sexual Life Data (Including Data Provided by Patients and Prospective Patients)	Your health-related data, including blood type, medical history, past illnesses, current diseases, medications used, drug allergies, mental and psychological health conditions, alcohol and tobacco use, surgical history, pregnancy status, consultation reports, surgical details, treatment methods applied, type of illness, medical values, and test results.

Your personal data, including your special category personal data, may be processed as necessary for the establishment or performance of a contract, in direct relation to the processing of personal data belonging to the parties of the contract, and in compliance with our legal obligations arising from regulations. This includes purposes such as the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of healthcare services and their financing, providing information regarding scheduled appointments, planning and managing clinic operations, executing all human resources processes and policies of the clinic, conducting analyses to improve healthcare services, preventing fraud and unauthorized transactions, implementing risk management and quality improvement actions, sharing promotional content and communication via the website and mobile channels, conducting research, managing advertising, campaign, and promotional processes, fulfilling legal and regulatory requirements, issuing invoices for healthcare services provided, identity verification, sharing requested information with the Ministry of Health and other public institutions and organizations in accordance with relevant regulations, sharing requested information with private insurance companies for the financing of healthcare services, ensuring communication with hospitals to coordinate patient care and surgical procedures, informing anesthesia and surgical staff in advance to facilitate the execution of medical procedures, responding to any inquiries and complaints regarding healthcare services, implementing necessary technical and administrative measures to ensure data security, analyzing healthcare service usage and storing health data to enhance and improve healthcare services, retaining health data that must be stored under relevant legislation, conducting audits and/or regulatory duties by authorized public institutions, organizations, and professional bodies, fulfilling requests for information and documents from judicial authorities and/or administrative institutions, ensuring financial reconciliation regarding healthcare services provided in collaboration with contracted institutions, ensuring compliance with the policies and procedures of organizations that have a business relationship with the clinic, managing emergency processes within the clinic, and measuring and enhancing patient satisfaction.

The above-mentioned personal data may be processed in accordance with Law No. 3359 on Basic Health Services, Decree-Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliated Institutions, the Private Hospitals Regulation, the Private Hospitals Bylaw, the Emergency Health Services Regulation, the Inpatient Treatment Institutions Operation Regulation, the Regulation on the Processing and Protection of Privacy of Personal Health Data, regulations of the Ministry of Health, and other applicable legislative provisions. Your personal data may be transferred to the clinic's archive and information systems and stored in both digital and physical formats.

3. Transfer of Your Personal Data

Your personal data processed by us may be transferred within the country and/or abroad in accordance with the Law on the Protection of Personal Data (KVKK) and other relevant regulations. These transfers are made for purposes such as providing information to authorized persons, institutions, and organizations, ensuring the security of clinical operations, conducting audit and investigation activities, enhancing the efficiency of internal operational management, implementing risk management and quality improvement measures, verifying your relationship with institutions contracted with our clinic, and managing emergency processes.

In accordance with Articles 8 and 9 of the KVKK, and within the framework of national and international legislation, your data may be shared primarily with the Ministry of Health, Provincial and District Health Directorates and their affiliated units, family health centers, private insurance companies, the Social Security Institution, the General Directorate of Security and relevant law enforcement agencies, the General Directorate of Population and Citizenship Affairs, the Turkish Pharmacists Association, judicial authorities, and other relevant public institutions.

Additionally, your data may be shared with laboratories, medical centers, and other third-party healthcare providers that we collaborate with for medical diagnosis, as well as the healthcare institutions to which the patient is referred or has applied. If your surgery is to be performed outside the clinic, your data may be shared with the contracted hospital and surgeons for coordination.

Furthermore, your personal data may be shared with your authorized representatives, the institution to which you are affiliated or employed, IT consultants, IT infrastructure service providers, business partners providing IT support (server, hosting, software, cloud computing), lawyers, tax advisors, auditors, third-party consultants, regulatory and supervisory authorities, official bodies, suppliers, support service providers, and business partners with whom we cooperate or whose services we utilize.

4. Deletion, Destruction, or Anonymization of Personal Data

According to Article 7 of the Law on the Protection of Personal Data (KVKK), even if personal data has been processed in compliance with this law and other relevant legal provisions, it shall be deleted, destroyed, or anonymized by the data controller either ex officio or upon the request of the data subject if the reasons requiring its processing no longer exist.

In this context, our clinic retains personal data only for the period specified in the relevant legislation or as long as it is necessary and mandatory for the purpose for which it was processed. Upon the expiration of this period or the elimination of the reasons requiring processing, personal data shall be destroyed using one of the designated methods (deletion, destruction, or anonymization) either within the scope of periodic destruction periods or in response to a request from the data subject.

All personal data processing activities are carried out in compliance with the general principles outlined in Article 4 of the KVKK.

5. What Are Your Rights Under Article 11 of the KVKK?

As a data subject, under Article 11 of the Law on the Protection of Personal Data (KVKK), you have the following rights:

To learn whether your personal data is being processed,
If your personal data has been processed, to request information about it,
To learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
To know the third parties to whom your personal data has been transferred, either domestically or abroad,
If your personal data has been processed incompletely or incorrectly, to request correction and to request that this correction be notified to third parties to whom the data has been transferred,
To request the deletion or destruction of personal data if the reasons requiring its processing no longer exist, even if it has been processed in compliance with the KVKK and relevant laws, and to request that this be notified to third parties to whom the data has been transferred,
To object to any adverse consequences arising from the analysis of processed data exclusively through automated systems,
To demand compensation if you suffer damage due to the unlawful processing of your personal data.

You can submit your applications regarding the rights listed above by filling out the Data Controller Application Form available at https://drpinarsariyildiz.com/ and:

Delivering it in person to the address Küçükbakkalköy Mah. Sarı Lale Sokak, Ulugöl Plaza No:1, İç Kapı No:10, Ataşehir – Istanbul,
Sending it via a notary, or
Submitting it with a secure electronic signature to This email address is being protected from spambots. You need JavaScript enabled to view it..

Your request will be processed as soon as possible and no later than thirty days, free of charge.

However, if the requested transaction incurs an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.