Personal Data Protection Notice

1. Data Controller

Company: Ege Estetik Ataşehir Ağız ve Diş Sağlığı Hizmetleri A.Ş.

Address: Ataşehir Mah. 8229/1 Sk. A-Blok No:3/1, Çiğli / İzmir

2. Purpose

This notice informs you, as required by Article 10 of KVKK, about which personal data is collected, the purposes and methods of collection and processing, the legal bases for processing, to whom and why your data may be transferred, and your rights as a data subject.

3. Personal Data Processed

Personal data that may be processed includes, by way of example:

• Identity data: name and surname, Turkish ID number, parents' names, date of birth, marital status, nationality, social security number, passport number, driving licence, tax number, signature
• Contact data: home and work address, e-mail, mobile and landline numbers, registered e-mail (KEP), fax number
• Financial data: bank account and similar financial information
• Electronic transaction data: login records, IP addresses, log records, username and password data
• Physical security and audio-visual records: voice calls, photographs, camera recordings; entry-exit records of patients, staff and visitors
• Biometric and genetic data: such as palm and fingerprint data
• Health data: blood type, personal health information, device and prosthesis data, medications, surgical data, disability status, diet forms, disease type, treatment methods applied, x-ray/imaging, examination and test results

4. Method and Legal Basis of Collection

Your personal data may be processed with your explicit consent, or without it where one of the conditions in Article 5/2 of KVKK applies (expressly provided for by law; factual impossibility; directly related to the conclusion or performance of a contract; necessary for the data controller to fulfil a legal obligation; made public by the data subject; necessary for the establishment, exercise or protection of a right; or necessary for the legitimate interests of the data controller provided fundamental rights are not harmed).

Special categories of personal data under Article 6 are processed with your explicit consent and may be collected in writing, verbally or electronically through medical documents such as examination and diagnosis records, security cameras, information provided for patient files, all kinds of official or unofficial documents, correspondence, contracts, forms, reports, invoices and prescriptions, as well as call centers, phone/tablet applications, our website and automatic or semi-automatic systems.

5. Purposes of Processing

Your personal data is processed mainly for the following purposes:

• Fulfilling legal obligations under KVKK, the Regulation on Personal Health Data and related legislation
• Protection of public health, preventive medicine, medical diagnosis, treatment and care services; planning and management of health services and their financing
• Identity verification
• Provision and continuity of the health services offered
• Contacting you regarding appointments
• Collecting and, where required, sharing data requested by authorized public institutions
• Evaluating patient requests and complaints
• Sharing information requested by the Ministry of Health and other public bodies; fulfilling information requests of judicial and administrative authorities
• Ensuring the physical security of the premises and movable assets
• Enabling patients to exercise their right to choose and change their physician
• Conducting legal/judicial processes related to the provision or collection of health services and adverse events
• Managing emergency processes

6. Transfer of Personal Data

In line with the legal bases and purposes in this notice and within the framework of Articles 8 and 9 of KVKK, your personal data may be transferred to authorized public institutions — primarily the Ministry of Health — limited strictly to the data they request; to lawyers and law partnerships for the conduct of legal affairs; to patient relatives or legal representatives; to our domestic and international partners; to laboratories and private health insurance companies; and, within the limits of the relevant provisions of the law, to authorized institutions, persons, organizations, judicial or administrative authorities for the protection of public health, preventive medicine, medical diagnosis, treatment and care services and the planning and management of health services and their financing.

7. Retention Period and Data Security

Your personal data is retained for the statutory periods set out in the relevant legislation and is deleted, destroyed or anonymized at the end of those periods. The measures set out in KVKK, related legislation and the decisions of the Personal Data Protection Board are applied to the processing, storage and transfer of data.

8. Your Rights as Data Subject

To exercise your rights under Article 11 of KVKK, you may apply in writing to Ataşehir Mah. 8229/1 Sk. A-Blok No:3/1, Çiğli / İzmir, by e-mail with secure electronic signature to info@egeestetikdis.com, or via the e-mail address registered in our system.