Protection of Personal Data
CLARIFYING TEXT ON THE PROTECTION OF PERSONAL DATA
Ester Clinic, as a data controller, will record, classify, store, update and process the personal data of our customers within the scope of the Law on the Protection of Personal Data No 6698 (“Law”), and it will be processed within the framework of the legislation and transferred to third parties in cases and the extent permitted by the legislation.
This Clarification Text has been prepared per the relevant legislation in force and the rules shown in the regulations, communiqués, decisions, and guides published by the Board, particularly the Law. If there is a change in the Law or other relevant legislation after the publication date of the Clarification Text and the Clarification Text becomes incompatible with the said amendment, the amended provisions and rules will apply. All communiqués, decisions, and guidelines published by the Board are followed by me/us, and the regulations stipulated by the Clarification Text are kept up to date.
1. DATA OWNER/RELATED PERSON
The data owners within this Clarification Text are the patients and their relatives whose personal data are processed.
2. IDENTIFICATION OF DATA RESPONSIBLE AND REPRESENTATIVE
According to the Law, your data will be collected and processed by Ester Clinic as the data controller within the scope described below. For your questions regarding processing your personal data, you can contact Ester Clinic Contact Person via the e-mail address info@esterclinic.com.tr.
3. PURPOSE OF PROCESSING PERSONAL DATA, LEGAL REASONS FOR PROCESSING, AND METHODS OF COLLECTION
Ester Clinic will be able to record, store, update, transfer, classify and process your data to third parties under the conditions and to the extent specified under the heading “conditions for processing personal data” in Articles 5 and 6 of the Law. Ester Clinic reveals the purposes of processing personal data and processes it within the scope of purposes related to these activities in line with its business activities.
Your Data collected through the channels and methods specified in this Clarification Text are processed by Ester Clinic for the following purposes and legal reasons:
Data Processing Activity: Execution of Patient Registration, Appointment, and Call Center Line Activities | |
| Processed Personal Data | Personal Data Processing Purposes |
| Execution of Identity Identification and Verification Processes, Establishment of Appointments, Cancellation, and Change of Appointments, Notification of Appointments, Execution of Appointment Processes through the Call Center, Reminders of Incomplete Appointments, Planning and Management of Daily Operations, Execution of Activities in Compliance with the Legislation, Follow-up of Requests and Complaints, Execution of Patient Relationship Management Processes, Execution of Communication Activities, Execution of Storage and Archive Activities, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Reasons for Processing Personal Data
| The Clinic processes your data in line with the realization of the purposes mentioned earlier, on the basis that it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of the agreement specified in Article 5 of the PDPL. |
| Personal Data Collection Methods | Your data mentioned above is collected through the call center line, electronic forms, and various communication tools on our website, multiple websites that provide appointment services with which we have an agreement and mobile applications and call center lines of websites. |
| Data Processing Activity: Execution of Health Services | |
| Processed Personal Data | Personal Data Processing Purposes |
| Execution of Identification and Verification Procedures, Protection of Public Health, Preventive Medicine, Medical Diagnosis, Execution of Necessary Treatment and Care Services, Sharing Requested Information with the Ministry of Health and Other Public Institutions and Organizations by the Relevant Legislation, Providing Medicines, Planning and Management of Daily Operations, Evaluation of the Patient, Performing the Outpatient Treatment, Performing the Necessary Tests and Examinations and Execution of the Related Processes, Execution of Activities such as Laboratory and Imaging within the Scope of the Diagnosis and Treatment Studies Regarding the Patient, Archiving / Storing the Data Related to the Health and Financial Services Provided by the Legislation, Authorized Person, Providing Information to Institutions and Organizations |
| Legal Reasons for Processing Personal Data
| The Clinic processes your data in line with the realization of the purposes mentioned earlier, based on the legal reason for the medical diagnosis, treatment, and care services specified in Article 5 of the PDPL. |
| Personal Data Collection Methods | Your data mentioned above are collected through the call center line, various communication tools, clarification consent forms, and examination forms. |
| Data Processing Activity: Execution of Patient Exit and Finance/Accounting Transactions | |
| Processed Personal Data | Personal Data Processing Purposes |
| Execution of Finance and Accounting Activities, Execution of Activities in Compliance with the Legislation, Planning and Management of Healthcare Financing, Confirmation of Relationship with Contracted Institutions, Archiving/Storage of Data on Health and Financial Services Provided in Compliance with Legislation, Execution of Billing Processes for Services |
| Legal Reasons for Processing Personal Data
| The Clinic processes your data based on legal grounds that it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of the agreement specified in Article 5 of the PDPL, in line with the realization of the purposes listed above, and that the data controller must fulfill its legal obligations. |
| Personal Data Collection Methods | Your data mentioned above are collected through Private Health Insurance forms and acquittals. |
| Data Processing Activity: Execution of Website Activities | |
| Processed Personal Data | Personal Data Processing Purposes |
| Execution of Website Activities, Execution of Storage and Archive Services, Execution of Information Security Processes, Creation and Tracking of Visitor Records, Providing Information to Authorized Persons, Institutions, and Organizations |
| Legal Reasons for Processing Personal Data
| The Clinic processes your data in line with the realization of the purposes mentioned earlier, based on the legal reason stipulated in the laws specified in Article 5 of the PDPL. |
| Personal Data Collection Methods | Your data mentioned above is collected through our website. |
Data Processing Activity: Providing Physical Space Security | |
| Processed Personal Data | Personal Data Processing Purposes |
| Ensuring the Security of Data Controller Operations, Providing Physical Space Security, Carrying out Storage and Archive Activities, and Providing Information to Authorized Persons, Institutions, and Organizations |
Your data is processed by the Clinic for the legal reason that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, which is stated in Article 5 of the PDPL, in line with the realization of the purposes as mentioned earlier. | |
| Personal Data Collection Methods | CCTV cameras collect the data mentioned above. |
| Data Processing Activity: Execution of Legal Transaction Activities | |
| Processed Personal Data | Personal Data Processing Purposes |
| Execution of Activities in Compliance with the Legislation, Execution of Goods/Service Sales Processes, Execution of Contract Processes, Informing Authorized Persons, Institutions, and Organizations, Follow-up and Execution of Legal Affairs |
| Legal Reasons for Processing Personal Data | The Clinic processes your data in line with the realization of the purposes mentioned earlier, based on legal reasons. It is stipulated in the laws specified in Article 5 of the PDPL and is mandatory for the data controller to fulfill its legal obligation. |
| Personal Data Collection Methods | Your above data are collected through the power of attorney, contracts, and printed and electronic petitions/documents. |
4. TRANSFER OF PERSONAL DATA
The personal data of the data owners are only for the purposes mentioned earlier and your sharing purpose with our suppliers and business partners, private insurance companies, laboratories, imaging centers, medical centers, ambulances, medical devices, and health centers with which we cooperate medical diagnosis and treatment, institutions providing services, hospitals, the health institution to which the patient is referred, or the patient himself applies, the second physician to obtain the second physician’s opinion, the authorized legal representatives, the lawyers we receive consultancy from, the third parties, including the auditors, your employer, the relevant institution, if the invoicing is made to the institution, the patient’s care. It is shared with your companions, authorized public institutions and organizations, information technology, and archive service companies limited to the documents and purposes requested by the relevant public institutions and organizations to continue it outside the hospital.
5. SHARING PERSONAL DATA WITH THIRD PARTIES FOUND ABROAD
Keeping your data, identity, communication, and health data through various programs whose infrastructure is located abroad, system infrastructures or cloud systems used for storage and archiving activities abroad, private insurance companies, etc., keeping the e-mail contact addresses sent to the relevant persons and the e-mail service infrastructures belonging to us in the data centers abroad in case the doctor you request a second opinion is abroad, in case a second opinion has asked for a doctor in the country, the patient can be contacted via telephone applications whose infrastructure is abroad, health data can be shared abroad within the framework of transmitting the information specified in the contact form on the website to e-mail data centers, the infrastructure of which is located abroad, automatically.
6. YOUR RIGHTS UNDER THE LAW
As personal data owners, your requests regarding your rights must be filled in the Data Owner Application Form (based on the Communiqué on the Procedures and Principles of Application to the Data Controller) shared at https://www.esterclinic.com.tr or another document containing your mandatory information in the application form. Your identity can be confirmed by using the registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified by the relevant person to Ester Clinic and registered in the Ester Clinic system. If you send it to the following address of Merkez Mahallesi, Marmara Caddesi, Marmara İş Hanı No: 12, İç Kapı No: 76, Avcılar – İstanbul or info@esterclinic.com.tr, the request will be concluded as soon as possible and within thirty days at the latest, free of charge, depending on the nature of the request. However, if the transaction requires a separate cost, Ester Clinic will charge the fee in the tariff determined by the Personal Data Protection Board. In this context, personal data owners have the right to:
● Learn whether personal data is processed or not,
● Request information about if personal data has been processed,
● Learn the purpose of personal processing data and whether they are used per its purpose,
● Know the third parties to whom personal data is transferred at home or abroad,
● Request correction of personal data in case of incomplete or incorrect processing and request notification of the transaction made within this scope to third parties to whom personal data has been transferred,
● Request the deletion or destruction of personal data if the reasons requiring its processing cease to exist, even though it has been processed per the provisions of the Law and other relevant laws, and request that the transaction carried out in this context be notified to the third parties to whom the personal data has been transferred,
● Object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
● Demand compensation for the damage in case of loss due to unlawful processing of personal data.
Ester Clinic assures that the provisions of the legislation will find an area of application in case of a change in the current legislation and any inconsistency between this Clarification Text on the Protection of Personal Data and the said amendment.
Data Controller: Ester Clinic
Address : Merkez Mahallesi, Marmara Caddesi, Marmara İş Hanı No: 12, İç Kapı No: 76, Avcılar – İstanbul
Phone : +90 549 249 51 07