Clinical Patient Clarification Text
1. Data Controller
In accordance with the Personal Data Protection Law No. 6698 (KVKK), your personal data; It is processed by TENEME COMPANY (Clinic) operating at ATAŞEHİR as the data controller, within the scope explained below.
This illumination text; It has been prepared to inform patients in accordance with KVKK within the scope of the Clinic providing services to its patients and recording the personal data specified in this text regarding the patients it serves to the DentSoft system.
Contained in this text;
Explicit Consent: Consent regarding a specific subject, based on information and free will, given in a clear manner that leaves no room for hesitation, and limited only to that transaction.
Anonymization: Making personal data impossible to attribute to an identified or identifiable natural person in any way, even by matching it with other data,
Relevant Person: The real person whose personal data is processed,
Personal Data: Any information regarding an identified or identifiable natural person,
Processing of Personal Data: Obtaining and recording personal data by fully or partially automatic or non-automatic means as part of any data recording system,
storage, retention, alteration, rearrangement, disclosure, transfer,
Any operation performed on data such as acquiring, making available, classifying or preventing its use,
Data Controller: Refers to the real or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system. Personal data refers to any information regarding an identified or identifiable natural person. For this reason, the regulations regarding personal data contained in this text will apply if the relevant information belongs to a natural person.
Your personal data is processed in line with the following basic principles as regulated in the KVKK:
• Complying with the law and the rules of honesty,
• Being accurate and up to date when necessary,
• Processing for specific, clear and legitimate purposes,
• Being related to the purpose for which they are processed, limited and proportionate,
• Preservation for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
This Clinic Patient Information Text has been prepared by the Clinic to inform you about the following topics:
• Specifying what type of personal data the Clinic collects,
• Specifying how this personal data is used,
• Explaining with whom the Clinic can share your personal data,
• To explain what your rights are over your personal data processed by the Clinic and how you can exercise these rights, and,
• To explain your communication possibilities with us regarding all your requests.
2. Processed Data Types and Data Categories
Contact Person Data Categories Data Types
Patient Identity Name-surname, TR ID number, nationality, date of birth, gender
Contact GSM, e-mail address, address
Personnel Profession
Customer Transaction Patient type, method of arrival, recommended doctor, contracted institution, health tourism agency, billing information, appointment date and service received, upcoming appointment, notifications made, last visit and attending physician
Financial Information Debt/balance amount, treatment amount, total payment amount and method
Health Information Disease information, past illnesses/permanent illnesses, medications used, surgeries, blood type, treatment information, x-ray, report, prescription, condition of teeth and previous treatments.
Other Information Mother's name, father's name, mother and father's GSM and e-mail addresses, mother and father's profession, types of toothbrush and toothpaste, brand of mouthwash and dental floss, hobbies.
3. Personal Data Collection Methods
The clinic obtains the data specified in this clarification text from its patients verbally, by filling out a written form, within the scope of the service offered or by transmitting it to it through electronic media, in accordance with the personal data processing conditions specified in the KVKK. It operates in accordance with the purposes stated below, especially the purposes of carrying out service sales activities.
4. Purposes and Legal Reasons for Processing Personal Data
Data Categories Processing Purposes Legal Reasons
Identity
Customer Transaction
finance
• Carrying out commitment processes for the company / product / services
• Execution/supervision of business activities
• Carrying out activities to ensure business continuity
• Carrying out activities in accordance with the legislation
• Carrying out financial and accounting affairs
• Carrying out goods / service sales activities
• Carrying out after-sales support services for goods/services
• Carrying out goods / service production and operation processes
• Carrying out storage and archive activities
• Execution of supply chain management processes
• Execution of contract processes
• Carrying out management activities • It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of a contract.
• It is mandatory for the Clinic to fulfill its legal obligations.
Communication • Carrying out commitment processes for the company / product / services
• Carrying out communication activities
• Execution/supervision of business activities
• Carrying out activities to ensure business continuity
• Carrying out goods / service production and operation processes
• Carrying out storage and archive activities
• Carrying out marketing processes of products / services
• Execution of contract processes • It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of a contract.
personnel
Other Information • Carrying out commitment processes for the company / product / services
• Execution/supervision of business activities
• Receiving and evaluating suggestions for improving business processes
• Carrying out activities to ensure business continuity
• Carrying out after-sales support services for goods/services
• Execution of customer relationship management processes
• Carrying out activities for customer satisfaction
• Carrying out storage and archive activities • Processing data is mandatory for the legitimate interests of the Clinic, provided that it does not harm the fundamental rights and freedoms of the person concerned,
• It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
Health Information
• Execution/supervision of business activities
• Carrying out activities to ensure business continuity
• Carrying out activities in accordance with the legislation
• Carrying out goods / service sales activities
• Carrying out storage and archive activities • It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of a contract.
• Your express consent we received from you
5. Transfer of Personal Data
The Clinic takes care to process your personal data in accordance with the "need to know" and "need to use" principles, ensuring the necessary data minimization and taking the necessary technical and administrative security measures. Since the requirements of goods and service procurement processes, the execution or control of processes such as the management of supply chain management processes, and the operation of digital infrastructures necessitate continuous data flow with different stakeholders, we have to transfer the personal data we process to third parties for certain purposes.
Your personal data above may be transferred to the following groups at home or abroad, provided that your express consent is obtained, in order to fulfill the processing purposes stated in this text;
• Sharing with suppliers in the country or abroad from whom services are received, in order to maintain and ensure the continuity of in-clinic activities;
• Sharing with authorized public institutions or organizations so that we can fulfill our legal obligations.
6. Rights of the Relevant Person
Within the scope of the legislation regarding the protection of personal data;
• Learning whether your personal data is being processed or not,
• Request information regarding the processing of your personal data,
• Learning the purpose of processing your personal data and whether they are used for their intended purpose,
• Knowing the third parties to whom personal data are transferred at home or abroad,
• Request correction of your personal data if it is incomplete or incorrectly processed or changes,
• Requesting the deletion or destruction of your personal data in accordance with the conditions stipulated in KVKK,
• Requesting notification to third parties to whom your personal data has been transferred that your incomplete or incorrectly processed personal data has been corrected and your personal data has been deleted or destroyed,
• Object to a result against you arising from the analysis of your processed data exclusively through automatic systems,
• If you suffer damage due to unlawful processing of your personal data, you have the right to request compensation for the damage.
As data subjects, in order to express your requests regarding your rights and to exercise your rights on your personal data; By physically writing to the address ATAŞEHİR, by signing with the secure electronic signature or mobile signature defined to you, by sending an e-mail to yazilim@dentsoft.com.tr, which is the registered e-mail address of the Clinic, through your KEP address, or by sending an e-mail to yazilim@dentsoft.com.tr, which is the registered e-mail address of the Clinic, or by electronically notified to us before and registered in our systems. By sending an e-mail to yazilim@dentsoft.com.tr using your postal address; By submitting it to the Data Controller in a way that meets the minimum application requirements set out in the Communiqué on Application Procedures and Principles; You can make necessary changes, updates and/or deletions and related requests.
In your application containing your explanations regarding the rights you have as the relevant persons and which you request to use, in order to exercise your above-mentioned rights; The matter you request must be clear and understandable, the matter you request must be personally related to you, or if you are acting on behalf of someone else, you must be specifically authorized in this matter and your authority must be documented, and the application must meet the minimum application requirements set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.
If you submit your requests to us using the specified methods, the Clinic will finalize your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the process requires an additional cost, the Clinic will charge the fee in the tariff determined by the Personal Data Protection Board.