Privacy Notice for Patients and Relatives
This notice has been prepared to inform our patients and their relatives under Article 10 of the Personal Data Protection Law No. 6698 (the Law).
Data controller
- Data controller: Özel İdeal Cerrahi Tıp Merkezi (İdeal Sağlık)
- Address: Keykubat Mah. Osman Kavuncu Blv. 273/A, 38070 Melikgazi / Kayseri
- Phone: 0352 332 11 38
- Email: info@idealsaglik.com.tr
Which data do we process?
| Data category | Examples |
|---|---|
| Identity | First and last name, Turkish ID or passport number, date of birth, gender |
| Contact | Phone, address, email |
| Health | Examination records, test and imaging results, surgery and procedure records, prescriptions, reports |
| Finance and insurance | Invoice and payment information, SGK (Social Security Institution) and private health insurance information |
| Physical premises security | Security camera footage inside and around the building, vehicle license plate when you use the parking lot |
| Customer transactions | Call center recordings, your feedback, suggestions, and complaints |
| Network use | Traffic logs if you use our guest internet network |
For what purposes and on what legal grounds do we process it?
| Purpose | Legal ground (the Law) |
|---|---|
| Providing diagnosis, treatment, and care services | Art. 6/3-e: Processing is necessary by persons under a duty of confidentiality or by authorized institutions |
| Scheduling appointments, providing information about appointments and services, identity verification | Art. 5/2-c: Establishment or performance of a contract |
| Invoicing, SGK and insurance processes, notifications to the Ministry of Health and authorized institutions, keeping legal records | Art. 5/2-a and ç: Expressly provided for by law, legal obligation |
| Ensuring the security of the building, patients, and staff (cameras, parking lot, guest network logs) | Art. 5/2-f: Legitimate interest |
| Responding to complaints and requests, quality and patient safety work | Art. 5/2-f: Legitimate interest; Art. 5/2-e: Establishment, exercise, or protection of a right |
Who do we share your data with, and why?
| Recipient group | Purpose of transfer |
|---|---|
| Ministry of Health and its affiliated units, Social Security Institution, Population and Citizenship Affairs | Legal notifications and financing of healthcare services |
| Private health insurance companies | Pre-authorization and payment processes if you are insured |
| Judicial authorities, law enforcement, and authorized public institutions | Legal obligations and requests from competent authorities |
| Laboratories and imaging centers we work with, and healthcare institutions you are referred to | Continuing diagnosis and treatment |
| Suppliers that provide us with information systems, archive, legal, financial advisory, and audit services | Carrying out the service; under a duty of confidentiality |
| Your legal representatives whom you authorize | In line with your request |
If we need to work with an organization abroad for diagnosis and treatment, this transfer is made in accordance with the conditions in Article 9 of the Law, and you are informed separately.
How is your data collected?
Your data is collected at our center verbally, in writing, or electronically; through the call center, email, website, and messaging channels; and through medical devices, information systems, and security cameras, by partly or fully automated means. Data may also be received from the institution or insurance company that referred you.
How long do we keep it?
We keep your data for the periods set out in health legislation and other relevant legislation. When the period ends or the reason for processing no longer applies, your data is deleted, destroyed, or anonymized.
Your rights
You can find your rights under Article 11 of the Law and how to apply on the Your Rights and How to Apply page.