The Republic of Türkiye Clarification Text on the Policy on the Protection and Processing of Personal Data by the Law on the Protection of Personal Data No. 6698
The purpose of the information on the Protection and Processing of Personal Data is, https://www.health-book.org/By the relevant laws and principles of personal data, to prevent unlawful disclosure of personal data, unlawful access, transfer, or any security deficiencies arising in any way, according to Article 12 of the Personal Data Protection Law, to obtain the necessary information, to protect their data. It is to inform the person concerned within the scope of fulfilling the lighting system by Article 10 of the Law, about taking the administrative and technical measures to carry out the necessary security measures at the highest level, carrying out inspections or having them made.
Within the scope of the purpose that requires the processing of your data, which is shared directly and/or in a way to purchase the product or service requested by visiting our internet page, in connection with the purpose of the website as a https://www.health-book.org/ website; It can be recorded, stored, stored, rearranged, shared with the bodies authorized to request this personal data by law, that it can be transferred, transferred, executed, deleted with the relevant assignment, in cases and methods stipulated by the Law, domestic or foreign third parties, and We declare that shapes can be processed.
1- Personal Data to be Processed
As defined in the KVKK, your data to be processed means “any information relating to an identified or identifiable natural person”. Again, within the scope of the same Law, special categories of personal data are “race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and clothing, membership to associations, foundations or trade unions, health, sexual life, criminal convictions, and security. data on the measures taken and biometric and genetic data”.
With the consent of the patients/visitors, our website may obtain, classify, save, and store personal or private personal data in whole or in part, according to the purpose of obtaining the personal data or for the period stipulated by the provisions of the relevant law.
Accordingly, your data categories and their contents are as follows, including but not limited to the following:
Identity data Name and surname, T.C. ID number, SSI registration number, signature, marital status, identity card serial, and sequence number, date of birth, place of birth, identity, driver’s license, photocopy of passport
Contact data Telephone number, e-mail address, residential address
Finance data Your bank account number, IBAN, credit card information, billing information
Transaction security IP, Mac ID, Access details
Insurance Data Your private health insurance data and Social Security Institution data for financing and planning health services.
Sensitive personal data (Your health data), including but not limited to your laboratory results, test results, examination data, appointment information, check-up information, measurements, drawings, various patterns, prescription information, during or during the execution of medical diagnosis, treatment, and care services. your data regarding all kinds of health and sexual life obtained as a result of
Family and relatives data If necessary, the patient’s relative’s name, surname, contact information, and family health information if necessary for the patient’s history
It is your responsibility to inform your family members about the personal data you will share with us and to obtain their explicit consent if necessary.
2-Purpose of Processing Personal Data
https://www.health-book.org/ Your data by the website and in case of explicit consent, your data of special nature, in line with the purposes and legal reasons stated below, but not limited to these, and if necessary, for similar purposes and reasons. It is processed for purposes and conditions by the principles and periods specified in the personal data processing conditions specified in. 5 and m.6.
In this context, the purpose of processing your data:
1- Fulfilling our legal obligations,
2- Confirming your identity as a service requirement provided or to be provided by our website,
3- Protection of public health, preventive medicine, medical diagnosis, treatment, and care services, planning and management of health services and financing,
4- Sharing the requested information with the Ministry of Health and other public institutions and organizations by the relevant legislation,
5-Planning and managing the internal functioning of the website and daily operations,
6-Measuring, increasing, and researching patient satisfaction,
7- Analyzing and researching to improve health services,
8- Participation in campaigns and giving campaign information through our website,
9-Designing and transmitting special content, tangible and intangible benefits on web and mobile channels,
10-Invoicing can be listed under the headings.
3-Personal Data Collection Method and Legal Reason
Personal audits can be collected verbally, in writing, or electronically, including GSM technologies, through various research based on Information Technologies, call centers, websites, social media channels, mobile applications, and similar tools.
To achieve the purposes of the execution of personal data, based on at least one of the personal data processing provisions stipulated in the 5th and 6th cells of the Law, and as parts of it, as specified in the Law and the VERBIS registry of our company, primarily the principles specified in the 4th article of the Law. Personal information is processed by general principles and deadlines.
Mandatory Principles in the Processing of Personal Data
1-Processing in Compliance with Law and Integrity
2-Ensuring Personal Data Are Accurate and Up-to-Date When Necessary
3-Processing for Specific, Explicit, and Legitimate Purposes
4-Being Related to the Purpose for which they are Processed, Limited, and Measured
5-Preservation for as long as required by the relevant legislation or for the purpose for which they are processed.
Terms of Processing Personal Data
According to Article 5 of the Law, personal information cannot be processed without the explicit consent of the person concerned. The Explicit Consent of the Personal Data Owner should be related to a specific subject and should be disclosed with free will based on the Information. In the presence of the following conditions, it is possible to measure personal data without seeking the explicit consent of the person concerned.
Explicitly Provided in Laws
1-Failure to Obtain the Explicit Consent of the Related Person Due to the Cause of Actual Impossibility
2- Being Directly Related to the Establishment or Performance of a Contract
3- Fulfilling the Legal Obligation of the Data Controller
4-The person concerned has been made public by the person
5-Compulsory Data Processing for the Establishment or Protection of a Right
6 https://www.health-book.org/ Mandatory Data Processing for the legitimate interest of web exit
Processing of Private Personal Data
Data contained in paragraph 6 of the Law on human race, ethnic origin, political thought, immigrant belief, religion, sect or other beliefs, disguise, dress, members of associations, foundations or unions, health, sexual life, criminal convictions, and security measures. Biometric and genetic data, defined as permanent sensitive personal data and special purpose personal data, are invalid in the following cases where data processing is prohibited without the explicit consent of the person concerned. According to this; Special protection personal rules are processed by the data controller in line with all necessary administrative and technical regulations, including the procedures and principles to be determined by the Board, and in accordance with the principles set forth in this Text:
- Special principles and personal principles regarding health and sexual life: In some cases, data may be processed without seeking the explicit consent of the data owner. Apart from this, in any case, the explicit consent of the data owner must be obtained to process the special-purpose data in question.
- Private property related to health and sexual life: It will be kept confidential by individuals or authorized institutions and organizations only to protect public health, preventive medicine, medical diagnosis, treatment and care services, health services, and their financing. In such cases, personal data may be processed without permission.
Your personal data other than health and sexual life, which is considered to be among your private personal data, can only be transferred to the above-mentioned real or legal persons without your explicit consent, in cases stipulated by the laws. Your personal data related to health and sexual life, however, is the protection of public health, preventive medicine, medical diagnosis, the execution of treatment and care services, the planning and management of health services and financing, and the Protection of Personal Data Law No. 6698, Health Services Basic Law No. 3359, 21.06.2019 In order to fulfill our legal obligations in the Regulation on Personal Health Data dated and other relevant legislation, it can be transferred to the natural or legal persons listed above without seeking your explicit consent. Electronic Medical Records and Electronic Health Records are also within this scope.
In all other cases, the explicit consent of the data subject will be obtained in order to process personal data of special nature. In the processing of special categories of personal data, it is also obligatory to take adequate measures determined by the Board.
Deletion, Destruction, or Anonymization of Personal Data
Under Article 7 of the Law, personal data is deleted, destroyed, or anonymized by our website ex officio or upon the request of the person concerned, in case the reasons requiring processing are eliminated, although it has been processed by the provisions of this Law and other relevant laws. In this context, our website retains personal data only for as long as it is mandatory and necessary for the purpose specified in the relevant legislation or for the purpose for which they are processed. In the event that the period expires or the reasons requiring its processing to disappear, personal data will be destroyed by the destruction methods (deletion and/or destruction and/or anonymization) determined in accordance with the periodic destruction periods or the application of the data owner, if any. Personal data processing activities are carried out in accordance with the general principles specified in Article 4 of Law No. 6698.
4- Transfer of Personal Data
Regarding the transfer of personal data, regulations in parallel with the regulations on the Processing of Personal Data are included in the Law. According to Article 8 of the Law:
1-Personal data cannot be transferred without the explicit consent of the person concerned. Even if there is no explicit consent from the personal data owner, in case one or more of the conditions stated below are present, personal data may be transferred to third parties by taking all necessary security measures with due care by our website and by the methods prescribed by the Board. The relevant activities regarding the transfer of personal data are clearly stipulated in the laws,
1-The transfer of personal data by our website is directly related to and necessary for the establishment or performance of a contract,
2-The transfer of personal data is mandatory for our website to fulfill its legal obligations,
3-Transferring personal data by our website in a limited way for the purpose of making it public, provided that the personal data has been made public by the data owner,
4-The transfer of personal data by our website is mandatory for the establishment, use, or protection of the rights of our website or the data owner or third parties,
5- It is mandatory to carry out personal data transfer activities for the legitimate interests of our website, provided that it does not harm the fundamental rights and freedoms of the data owner,
6- If the person is unable to express his consent due to actual impossibility or whose consent is not legally valid, is compulsory for the protection of himself or someone else’s life or physical integrity.
According to Article 9 of the Law; Personal data cannot be transferred abroad without the explicit consent of the person concerned.
If you share your personal data on this website, you consent to the sharing of your personal data with foreign partners.
5- Rights of Personal Data Owner
As a personal data owner within the scope of Article 11 of KVKK;
Learning whether your personal data is processed,
If your personal data has been processed, requesting information about it,
Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
Knowing the third parties to whom your personal data is transferred, in the country or abroad,
Requesting correction of your personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
Requesting the deletion or destruction of your personal data and notifying third parties that your personal data is transferred in case the reasons requiring processing disappear, although it has been processed in accordance with Law No. 6698 and other relevant law provisions,
Objecting to the emergence of a result against you by analyzing your processed data exclusively through automated systems,
If you suffer damage due to the unlawful processing of your personal data, you have the right to demand compensation for the damage.
Pursuant to paragraph 1 of Article 13 of the KVKK, you can submit your requests regarding your rights as personal data owners to our website in writing or by other methods determined by the Personal Data Protection Board.
If the personal data owner duly submits his request regarding his rights to us, he will conclude the relevant request free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board. In cases where the application is rejected, the response given is insufficient or the application is not answered within the time limit; You can file a complaint with the Personal Data Protection Board within thirty days from the date you learned our answer, and in any case within sixty days from the date of application.
The Clarification Text on the Processing of Personal Data, which has been prepared in accordance with the provisions of Law No. 6698 and other relevant legislation, is presented for your information as of the date of its publication.
6-For Website Users Outside the REPUBLIC OF Türkiye;
Our Website is designed for use only by persons in the Republic of Türkiye. We do not warrant or represent that this Policy or the Website’s use of your Personal Information is in compliance with the laws of any other jurisdiction. We may also store, process and transmit information in the Republic of Turkey and other parts of the world, including countries that do not have the same privacy and security laws as yours, to provide you with our Services. Regardless of the country where such information is stored, we will process your Personal Information in accordance with this Policy.
7-CONTACT
To contact about this Policy or your Personal Information, please mugoyos@outlook.com delivery e-mail.
8-Data Controller Contact Information
To contact Data Controllers:
BY USING THIS WEBSITE, YOU AGREE TO THESE TERMS.