This information text has been prepared in accordance with Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) to inform data owners about the procedures and principles regarding the processing of Personal Data belonging to patients/clients applying to ÖNMED LTD. ŞTİ. It aims to provide you with the most transparent information regarding the identity of the data controller, the method and legal basis for collecting your personal data, the purposes for which this data will be processed, to whom and for what purposes it may be transferred, the processing period, and your rights as listed in Article 11 of the KVKK. The explanations provided for “Your Personal Data” in this information text also include “Your Special Personal Data.”

Ensuring the security of patients’/clients’ Personal Data is a priority objective of ÖNMED HEALTH TD. ŞTİ, which is owned by ÖNMED HEALTH TD. ŞTİ. Therefore, ÖNMED HEALTH TRADING CO. takes the necessary security, administrative, and technical measures in accordance with applicable legislation to ensure the secure processing of patient/client Personal Data and to prevent any unlawful breaches of this data.

DATA CONTROLLER

Your Personal Data will be processed by ÖNMED HEALTH TRADING CO., operating at “Bahcelievler Mah. Fevzi Çakmak 2 Cd. Güzelşehir No: 1 /429 Istanbul” under the Personal Data Protection Law No. 6698. ÖNMED HEALTH TRADING CO. is considered the “DATA CONTROLLER” under the Personal Data Protection Law.

METHOD AND LEGAL REASON FOR COLLECTION OF YOUR PERSONAL DATA

Your personal data will be collected by ÖNMED HEALTH TRADING CO., whether automatically or non-automatically. Your personal data may be collected verbally, in writing, or electronically through affiliated units, the website, social media channels, call center, mobile applications, and similar means. Your personal data may be created, updated, processed, and stored both digitally and physically for as long as your relationship with ÖNMED SAĞLIK TD. ŞTİ continues.

Your personal data may be processed and transferred in accordance with the purposes listed under “Processed Personal Data and Purposes of Processing” and provided that the explicit consent requirement is met under Article 5, paragraph 1, of Law No. 6698, or within the scope of the personal data processing conditions and purposes specified in subparagraphs “a, c, ç, e, and f” pursuant to Article 5, paragraph 2.

YOUR PERSONAL DATA TO BE PROCESSED

Your personal data and special categories of personal data specified below will be processed by ÖNMED SAĞLIK TD. ŞTİ in accordance with the fundamental principles set forth in Article 4 of the KVKK, in accordance with the Personal Data Processing Conditions and Purposes set forth in Articles 5 and 6 of the KVKK, and within the scope of the purposes set forth in this Disclosure Statement. This data will be processed lawfully, in a manner related to the processing purpose, limited and proportionate, observing the principles of fairness and transparency, and in an accurate and up-to-date manner, taking all technical and administrative measures stipulated in the legislation to ensure data security.

In this context, the following personal data is collected:

Contact Data: This is the data group that can be used to contact the individual (telephone number, address, email, IP address).
Identity Data: This data group contains information related to a person’s identity (name and surname, Turkish ID number, mother’s name, father’s name, place of birth, date of birth, gender, wallet serial number, ID copy, tax number, social security number, nationality data, employee card, signature).

Health Data: This data group contains a person’s health information (blood type, medical history, check-up results, consultation report, diet form, surgery information, treatment method, disease type, medications used, retinal scans, medical values, test results).

Financial Data: This data group contains a person’s financial information (bank account number, IBAN number, card information, bank name, financial profile, mail order form, credit score).

Customer Transaction Data: This data group contains a person’s customer transaction data (invoices, checks, promissory notes, etc.).

Visual and Audio Recordings Data: This data group contains a person’s visual and audio recordings. (Photo)

FOR WHAT PURPOSES ARE YOUR PERSONAL DATA PROCESSED?

Your Personal Data is used to create a patient file, conduct examinations, preventive medicine, medical diagnosis, treatment, medical practices, and care services, conduct checkups after medical diagnosis and treatment, manage potential complications, communicate with you directly, manage appointments, ensure patient satisfaction and manage requests, fulfill legal and contractual obligations, preserve information regarding your health data, which must be stored in accordance with relevant legislation, for specified periods, obtain consultations from other relevant specialists when necessary to ensure the proper delivery of your treatment, fulfill legal obligations in accordance with international health tourism legislation, and facilitate the processing of transgender patients/clients who come within the scope of health tourism.

PURPOSE, METHOD, AND LEGAL REASON FOR PROCESSING YOUR PERSONAL DATA

Your Personal Data may be processed by real or legal persons authorized by ÖNMED SAĞLIK TD. ŞTİ. as “DATA PROCESSOR/PROCESSOR.” These data will be recorded verbally, in writing, by video recording, and by photographing, along with necessary technical and administrative security measures, and kept in physical and electronic formats. Your explicit consent will also be obtained, as stipulated by the relevant provisions of the Personal Data Protection Law.

TRANSFER OF YOUR PERSONAL DATA AND THE PURPOSE AND TO WHOM IT WILL BE TRANSFERRED

We will ensure that all necessary technical and administrative measures are taken to ensure an appropriate level of security in accordance with the Personal Data Protection Law and relevant legislation. We will process your Personal Data only when necessary for the purposes specified above;

Personal data may be transferred to individuals, institutions, and/or organizations permitted by other relevant legislation, including:
Private insurance companies and banks,
Lawyers or law partnerships for the purpose of legal proceedings,
Financial advisors for the purpose of financial and accounting transactions,
Our direct and indirect domestic shareholders,
Consultants,
Business partners,
Domestic/overseas organizations from which we contractually receive and/or provide services and collaborate to carry out our activities. In accordance with Article 8 of the Personal Data Protection Law, if one of the conditions stipulated in the second paragraph of Article 5 of the Personal Data Protection Law exists and if explicit consent is provided within the framework of the personal data processing conditions and purposes stipulated in Article 9.
PERSONAL DATA PROCESSING PERIOD

Your personal data will be stored by ÖNMED SAĞLIK TD. ŞTİ to the extent and for as long as it is legally obligated to do so. Documentation and storage obligations arise from local norms related to trade, tax, and healthcare legislation. The table below shows the retention periods for your Personal Data.

Personal Data Retention Periods
Identity Information: 20 Years After the End of the Service Provided to the User
Contact Information: 20 Years After the End of the Service Provided to the User
Health Information: 20 Years After the End of the Service Provided to the User
Photo and Video Information: 20 Years After the End of the Service Provided to the User
Financial Information: 10 Years After the End of the Service Provided to the User
DATA SUBJECT AGE LIMIT UNDER LEGISLATION

Under the Personal Data Protection Law (KVKK), patients/clients may personally consent to the processing of their personal data provided they are at least 18 years old. Patients/clients under this age must provide their consent through their legal representatives.

WITHDRAWAL OF CONSENT

If you have given consent to ÖNMED SAĞLIK TD. ŞTİ. regarding the processing of your Personal Data, we hereby inform you that you may withdraw your consent at any time, in accordance with Article 5/1 of the KVKK, for the purposes specified above. Your consent will be withdrawn if you submit your withdrawal of consent to our contact address as specified below.

RIGHTS OF DATA SUBJECTS PURSUANT TO THE KVKK

The rights of natural persons whose personal data is processed, pursuant to Article 11 of the KVKK, are as follows:

To learn whether personal data has been processed,
To request information if personal data has been processed,
To learn the purpose of processing personal data and whether it is being used in accordance with its intended purpose,
To know the third parties to whom personal data has been transferred, both domestically and internationally,
To request correction of personal data if it is incomplete or inaccurate, and to request notification of the action taken to third parties to whom personal data has been transferred,
To request the deletion or destruction of personal data if the reasons requiring processing no longer exist, despite the data being processed in accordance with the provisions of the Personal Data Protection Law and other relevant laws, and to request notification of the action taken to third parties to whom personal data has been transferred,
To object to the analysis of processed data exclusively through automated systems, leading to a detrimental outcome,
To request compensation for damages suffered due to unlawful processing of personal data.

If you wish to exercise any of the rights listed above or to request that you exercise the following rights or requests: You can submit your written application, clearly and understandably stating which of the rights specified in Article 11 of the Personal Data Protection Law you wish to exercise, in person, with a wet signature and documents proving your identity, to ÖNMED SAĞLIK TD. ŞTİ., “Bahcelievler Mah. Fevzi Çakmak 2 Cd. Güzelşehir No: 1 /429 Istanbul.” You can send it by hand, send it through a notary, sign it with a secure e-signature and forward it to the e-mail address “drberraonsoy@gmail.com”, or send it using other methods specified in the Personal Data Protection Law. In your applications, you must include your name and surname, signature, Turkish Republic Identity Number/Passport Number/Temporary Turkish Republic Identity Number, residence or workplace address.