PERSONAL DATA PROTECTION INFORMATION NOTICE AND EXPLICIT CONSENT FORM
Within the scope of Law No. 6698 on the Protection of Personal Data, we process your personal data in a limited, relevant, and proportionate manner. As Cihan Özel Sağlık ve Eğitim Hiz. İnş. San. Tic. A. Ş. (“Hospital”), in our capacity as Data Controller, we process the personal data you have provided to us and shared with us, only for the purposes requiring such processing and in connection with, limited to, and proportionate to those purposes, while ensuring the accuracy and up-to-date status of your information, within the scope explained below. In this regard, we would like to inform you in detail and obtain your consent in cases where data processing depends on your explicit consent.
Which Personal Data Do We Process
The personal data we process include: your identity information such as name-surname, TR ID number, and all information on your identification documents; your contact details such as residence address, telephone number, and email address; information about family members or relatives to be contacted in emergencies or during companion processes; your financial information such as bank account number and IBAN number; all documents/information containing your disease and medical data provided by you or obtained within the scope of medical diagnosis, treatment, and care services offered by our hospital; information regarding private health insurance for the financing and planning of healthcare services; image data obtained during your visit to our hospital through closed-circuit camera systems, including your license plate number; biometric data such as fingerprint, palm print, vein pattern, where required by law; images taken within our hospital to be used for marketing and communication activities; your audio data provided through our call center; and other personal information not limited to the above.
Purposes of Processing Your Personal Data
The personal data collected may be processed for purposes such as ensuring the legal and commercial security of our hospital and persons in a business relationship with our hospital, ensuring physical space security of the hospital premises, creating and tracking patient/visitor records, fulfilling notification obligations to competent public institutions (such as courts, law enforcement authorities), fulfilling occupational health and safety obligations under Law No. 6331, carrying out sales and marketing activities, verifying your identity, protecting public health, preventive medicine, conducting medical diagnosis, treatment and care services, planning and managing healthcare services and financing, planning and managing the hospital’s internal operations and daily activities, supplying medication, informing you about your appointment in case you make one, carrying out risk management and quality improvement activities, conducting evaluations and research for the improvement of healthcare services, verifying your relationship with institutions contracted with our hospital, issuing invoices for healthcare services, sharing requested information with private insurance companies within the scope of healthcare financing, sharing requested information with the Ministry of Health and other public authorities in accordance with legislation, responding to your questions and complaints regarding our healthcare services, ensuring data security in our systems and applications, analyzing your use of healthcare services for the purpose of improving and developing them, storing your health data, providing required information to regulatory and supervisory bodies and official authorities, training and developing our employees, monitoring and preventing abuse and unauthorized transactions, ensuring recovery of processes, storing health data as required by law, ensuring financial reconciliation with contracted institutions regarding healthcare services provided to you, measuring patient satisfaction, and more broadly, conducting, developing, and improving medical diagnosis, treatment and care services, increasing patient satisfaction, research, and similar purposes, as well as using your data in marketing, promotion, and communication activities regarding our services, innovations, and campaigns.
Transfer of Your Personal Data
For the purposes stated above, your data may be processed, stored securely, and will not be shared with third parties without your explicit consent, except for notification obligations to public authorities and legal requirements. Your personal data may be transferred, within the framework of legal grounds and your consent, to the Social Security Institution, private insurance companies (health, pension, life insurance, etc.), your employers, intermediary healthcare institutions, authorized public institutions/organizations, intermediary companies and persons from whom we procure services, domestic/international institutions supporting our business processes; in compliance with the obligations arising from laws and regulations such as the Social Insurance and General Health Insurance Law No. 5510, the Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Healthcare Quality Standards (HQS), Private Hospitals Regulation, Tax Procedure Law, Turkish Commercial Code, Occupational Health and Safety Law.
Method of Collecting Your Personal Data
Your personal data are collected by our hospital through various channels and on different legal grounds. In this context, they may be collected through commitment forms (e.g., companion commitment form, private patient commitment form, SGK inpatient commitment form), hospital consent and approval forms, closed-circuit camera systems, registration forms, request/complaint/communication forms, call center, our website, as well as from external sources such as domestic/foreign business partners, official institutions, and third parties. Collection may take place physically on paper or digitally through electronic methods.
Your Rights under Article 11 of the Law
As data subjects, you may submit your requests regarding your rights to our hospital, and our hospital will finalize your request free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request. However, if a fee is prescribed by the Personal Data Protection Board, the fee set out in the tariff determined by our hospital will be charged. In this context, you have the following rights regarding your personal data:
a – To learn whether personal data is being processed,
b – To request information if personal data has been processed,
c – To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
ç – To know the third parties to whom personal data is transferred, domestically or abroad,
d – To request the correction of incomplete or incorrect personal data and to request notification of such correction to third parties to whom the data has been transferred,
e – To request the deletion or destruction of personal data in case the reasons requiring processing no longer exist, and to request notification of such action to third parties to whom the data has been transferred,
f – To object to the occurrence of a result against the individual by analyzing the processed data exclusively through automated systems,
g – To claim compensation in case of damage due to unlawful processing of personal data.
Data Controller and Application Methods for Related Person Requests
In accordance with the Law, you may submit your requests concerning the use of your rights mentioned above in writing or by other methods determined by the Personal Data Protection Board, through the channels stated below. As the data subject, you are required to submit your requests along with the necessary documents verifying your identity. For the healthy and fast management of your applications under Article 11 of the Law, we recommend that you use the “Related Person Information Request Form” available under the “Personal Data Protection” section at www.cihanhastanesi.com.tr, and submit it together with the necessary supporting documents either in person or by registered mail.
In addition, you may send your requests, using the related person information request form, securely signed with an electronic signature, to cihansaglik@hc01.kep.tr, or through your attorney or notary public.
Explicit Consent Regarding the Processing of Personal Data
Please indicate your consent to the processing of your personal data by marking (x) below. You may withdraw your explicit consent at any time without any restriction.
I hereby acknowledge and declare that within the scope of Law No. 6698 on the Protection of Personal Data, my personal data may be stored, processed, and transferred within the framework and purposes stated in the information notice.
I acknowledge and declare that you may contact me via e-mail, SMS, and telephone to inform me about your campaigns, innovations, and services.
I have read the information notice, and I acknowledge and declare that my visual data may be used in the hospital’s promotional, marketing, and communication activities and may be shared via the website and social media. I have read in full, understood the “Personal Data Protection Information Notice” prepared by Cihan Özel Sağlık ve Eğitim Hiz. İnş. San. Tic. A. Ş. (“Hospital”) within the scope of Law No. 6698 on the Protection of Personal Data, and I have been informed about the conditions of processing my personal data and the fact that I may withdraw my explicit consent at any time without any restriction.