Dermatoloji- Kozmetoloji Kliniği Özel Sağlık Hizmetleri Tic. ve San. Ltd. Şti.

PRIVACY POLICY

Address : Şirinyalı Mah. İsmet Gökşen Cad. No: 14/1 Elif Apt. Muratpaşa- Antalya

E-Mail : info@dk-klinik.com.tr

Web Site : https://en.dk-klinik.com.tr/ and http://dkklinik-ru.denemehosting.com/

INTRODUCTION

Your safety is important to us. For this reason, the personal data you will share with us is sensitively protected. This Privacy Policy is in accordance with Regulation (EU) 679/2016 on the protection of natural person, the European Union General Data Protection Regulation ("GDPR") and other legislation Dermatoloji- Kozmetoloji Kliniği Özel Sağlık Hizmetleri Tic. ve San. Ltd. Şti. ("Clinic") is intended to provide information on the procedures and principles regarding the collection, processing, use and transfer of personal data of natural persons whose data are processed. Personal data refers to any data belonging to an identified or identifiable natural person.

Ensuring the security of the personal data of the real persons whose data are processed is one of the primary objectives of the Clinic. For this reason, in order to process the personal data of natural persons securely and to prevent any unlawful access to these data or to prevent them, in accordance with the legislation in force in the national and international area, our Clinic provides the necessary measures as much as possible.

If the following information is not sufficient for you and your requests, please contact our contact person in the last section titled " Contact Us".

1- WHO DOES THE PRIVACY POLICY COVER?

This privacy policy has been created in order to inform our customers and potential customers who receive the services we undertake to provide from our clinic, with whom we have contractual relations or who carry out interviews, about the processes related to the collection, processing, and transfer of their personal data.

2- HOW IS YOUR PERSONAL DATA COLLECTED?

This Privacy Policy explains how it processes personal data when you interact with us through digital media, such as our website, by phone, or by visiting our Clinic.

Your Personal Data, depending on the services provided by our Clinic;

• Through your statements regarding your identity and contact information,
• By coming to our Clinic for the purpose of medical practice and by means of all kinds of documents and declarations submitted in order to make an assessment of the treatment to be applied,
• Through the "Patient Information and Consent Form" directed to you regarding the treatment and/or operation to be applied by our clinic,
• Our clinics website https://en.dk-klinik.com.tr/ "Contact" Form in which you submit your requests and complaints through the website,
• Through invoices and similar accounting transactions issued in relation to the service we provide,
• By means of electronic mails that you will send to the corporate e-mail address info@dk-klinik.com.tr whose provider belongs to the clinic is located in the country,
• Through the cookies used in accordance with your permissions through the website of our clinic,
• Through the photo/video recordings taken before, after, and/or during the medical procedure applied to you by our clinic,
• Through your messages sent to us by our clinic using the online applications (Whatsapp / Zoom / Instagram / Facebook etc.) you receive services by accepting their own Privacy Policies and Foreign Transfer Principles or if necessary, through the online audio/video calls you have made through these applications,
• By accepting their Privacy Policies and Foreign Transfer Principles, by sending direct messages to the profile account of our Clinic located in the social media accounts (Instagram, Youtube, Facebook, Twitter, etc.) of which you are already a user and whose server is located abroad, and/or by commenting on their posts,
• The security cameras in our clinic are taken.

In order for the clinic to fully and properly perform its contractual and legal obligations and to “What Legal Bases and for What Purposes Are Your Personal Data Processed?” The legal bases described in detail under the heading ", as well as the necessary administrative, technical and physical measures, shall be processed by taking as much as possible.

In addition, when you visit and interact with our Website, information that uses cookies and other data collection technologies may also be collected through this. For more information, issues are detailed in the “Cookies and Other Data Collection Technologies” section below.

3- WHAT KIND OF DATA IS PROCESSED?

Personal data is processed in accordance with data processing principles only to the extent that it is necessary, where our processing is mandatory due to applicable legal requirements or as permitted by you.

Your data is processed in terms of activities;

• In accordance with the contract processes in terms of treatment and medical applications;

Identity Information (Name Surname, Signature)

Contact Information (Address, Mobile Phone Number, Mail Address, etc.)

Financial Information (Bank account information, IBAN, etc.)

Customer Transaction Information (Shopping information, Request/Complaint Information, etc.)

Treatment and health data

Audiovisual Recording Information (Before/After Photos)

• In terms of your complaints about receiving information and requests through contract negotiations, contact forms, social media, and other digital communication platforms;

Identity Information (Name Surname, Signature)

Contact Information (Address, Mobile Phone, E-Mail Address, Social Media Profile Information, etc.)

Customer Transaction Information (Request and complaint information, Shopping history information)

Treatment and Health Data

• In order to be able to contact you for Advertising, Campaign, and Promotion transactions;

Identity Information (Name Surname)

Contact Information (E-mail and mobile phone information)

• In order to ensure workplace safety;

Visual Recording Data (CCTV Recording data)

• In terms of conducting financial and accounting transactions;

Identity Information (Name Surname)

Financial Information (Bank account information, IBAN, etc.)

It is processed by automatic and non-automatic methods as explained in detail under the title "For What Legal Bases Are Your Personal Data Processed and For Which Purposes?"

4- FOR WHAT LEGAL GROUNDS AND FOR WHAT PURPOSES IS YOUR PERSONAL DATA PROCESSED?

A- Fulfillment of the Obligation Arising from Contracting and Fulfillment of Service Sales Processes, Follow-up, and Execution of Legal Affairs, Execution of Post-Operation Maintenance Services, Development, Fulfillment of International Healthcare Tourism Activities

In order to fulfill the obligation arising from the contract concluded with you for treatment and medical applications, the following categories of data are processed as part of this activity;

• Identity Information (Name Surname, Signature)
• Contact Information (Address, e-mail address, social media account information, etc.)
• Financial Information (Bank account information, IBAN, etc.)
• Customer Transaction Information (Shopping information, Request/Complaint Information, etc.)
• Treatment and Health Information
• Audiovisual Recording Information (Before/After Photos)

B- Execution of Customer Relationship Management Processes

In order to carry out customer relationship management in our clinic and to carry out the necessary activities, the following data categories are processed;

• Identity Information (Name Surname, Signature)
• Contact Information (Address, Mobile Phone, Mail Address, etc.)

C- Marketing, Advertising, Campaign, and Promotion Activities

Within the scope and limits of the consent given by you in order to carry out advertising campaign activities by our clinic, the following categories of data will be processed;

• Contact Information (Name Surname, Phone Number, E-Mail Address)

D- Follow-up on Requests and Complaints

The following categories of data will be processed in order to fulfill the request and complaint procedures you have directed to our clinic;

• Identity Information (Name Surname)
• Contact Information (Mobile Phone, E-Mail)
• Customer Transaction Information (Request and complaint information, Shopping history information)

E- Ensuring Physical Space Security

We also care about your safety while you are in our clinic. In order to ensure your security, the following categories of data will be processed;

• Visual Recording Data (CCTV Recording data)

F- Execution of Finance and Accounting Works

Due to the transactions performed in our clinic and the payments made as a result of the service provided, the following data will be processed;

• Identity Information (Name Surname)
• Financial Data (Bank account information, IBAN, Billing Information)

G- Carrying out storage and archive activities

A storage and archiving activity is carried out in terms of every activity you perform in our clinic and therefore every data processed. So in terms of any data collected by you;

For the purposes of the following legal reasons;

• Due to the performance of the contract, it is mandatory to collect with you through the contract to be concluded if it is agreed for treatment and medical procedures and in accordance with the service received data specified in detail under the heading "Which data is processed?” will be processed based on this legal reason.
• Within the scope of legitimate interest, the data collected by you are collected by our clinic provided that it does not harm your fundamental rights and freedoms. An example of this is the recording data collected through camera recordings.
• In some cases, your data is processed with your consent based on the condition and condition of obtaining your consent. For example, in terms of campaign and promotion processes, your data related to this purpose may be processed by obtaining your consent.

5- HOW LONG IS YOUR DATA STORED?

Your personal data will be stored for as long as the Clinic is legally obliged to keep it. Documentation and retention obligations arising from regulations such as time-outs and de-entitlement periods stipulated in the legislations.

The retention periods are set out below. The necessary procedures in terms of the data whose retention period has expired are duly completed and irreversibly destroyed.

6- TO WHOM AND FOR WHAT PURPOSES IS YOUR DATA TRANSFERRED?

Your Personal Data and Personal Data of nature; In line with the conditions and purposes within the scope of the Personal Data Processing Terms specified in Articles 5 and 6 of KVKK No. 6698 and Articles 6 and 9 of the GDPR, the transfer will be carried out in accordance with Articles 8 and 9 of the KVKK and Articles 45 - 49 of the GDPR.

Conducting business activities by our clinic, carrying out financial and accounting affairs, carrying out activities in accordance with the legislation, following up and executing legal affairs, protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing, Customer Relationship Management, medical practice, execution of post-operative care services, development, international Fulfillment of tourism activities, clarification of marketing activities, fulfillment of financial, legal and administrative objectives, but not only for the purpose of fulfillment. Administrative, technical and physical security measures in accordance with the legislation will be provided as much as possible and will be able to transfer to the 3rd persons and institutions specified below to the extent that you have consented.

In this context, your Personal Data processed by our Clinic; Financial Advisor, "Clinical Management Software Program" Service Provider, Public Institutions, and Organizations authorized within the framework of the Laws, Judicial Authorities will be transferred to the Judicial Authorities by issuing the necessary administrative measures and "Transfer from Data Controller to Data Processor Confidentiality Agreements" for the following purposes.

In line with the data processed in terms of the activities described in detail under the heading "Which Data is processed?" ;

• For the purposes of planning and clarifying the financing and financing with the services of the Health, the activities in accordance with the legislation, and the execution of the financial and accounting affairs, the Financial Relations will be transferred to our company.
• It will be transferred to our Legal Advisor with whom we have an agreement for the fulfillment of legal and administrative obligations, the follow-up and execution of legal affairs, and the execution of activities in accordance with the legislation.
• It will be transferred to the National and International Public Institutions and Organizations authorized within the framework of the Laws and to the Judicial Authorities for the purposes of fulfilling financial, legal, and administrative obligations, conducting legal affairs, conducting activities in accordance with the legislation, protecting public health, preventive medicine, medical diagnosis, treatment and care services, and providing information to the Authorized Persons, Institutions and Organizations.
• "Clinical Management Software Program" Service for the purposes of carrying out business activities, medical practice, conducting post-operative care services, developing, Conducting Customer Relationship Management Processes, International Health Tourism activities, and improving marketing activities It will be transferred to the provider.

We use the above-mentioned third-party service providers who work on our behalf and in accordance with our instructions to provide the services agreed upon with you. These service providers may receive or contact personal data as part of the provision of services and may represent third parties or recipients within the meaning of the GDPR. It is carried out with measures established in such a way as to comply with the requirements of the GDPR and to ensure the protection of the rights of the data subject.

7- COOKIES AND OTHER DATA COLLECTION TECHNOLOGIES

Cookies are text files containing small amounts of information that are sent to your browser when you visit a website and stored on your devices such as computers, tablets, mobile devices, etc. Cookies send this information back to the originating website or to another website that "recognizes" cookies.

Our clinic uses the relevant personal data obtained with your explicit consent from online and offline sources in order to provide you with various advantages in personalized advertising applications and to advertise, promotion, sales, marketing, event management, promotion, campaign notification, data enrichment and advertising display through search engines that are personally relevant to you. In this direction, it also makes use of data management platforms, social media platforms and similar digital advertising platforms and technologies. For the management of these platforms, cooperates with different companies within the framework of certain contracts and receives support from various companies in operational processes.

The following cookies are used on the website and on the mobile website according to the purpose of use:

• Mandatory Cookies: These cookies are necessary for the website to function and cannot be turned off in our systems. They allow you to navigate the website and use its features, such as setting your privacy preferences and taking actions that correspond to a service request, for example logging in or filling out forms.
• Performance Cookies: These cookies are used to improve the way the website works. It does not collect information that identifies the visitor contains information about how visitors use the website (e.g., whether they receive error messages on web pages)
• Functional Cookies: These cookies allow the website to remember choices you make (such as your user name, language, or region of residence) and provide enhanced, more personal features. It can also be used to remember changes in text size, fonts, and other parts of web pages that you can customize. The information these cookies collect may be kept confidential and they may not track your browsing activity on other websites. If you do not allow these cookies, some or all of these functions may not work properly.
• Targeting and Advertising Cookies: These cookies are used to create your profile and deliver advertisements that are relevant to your interests. It is also used to help measure the effectiveness of an advertising campaign, as well as to limit the number of times you see an advertisement. It is usually placed on advertising networks with the permission of the website owner (e.g., social media sites). Information about your visit to the website is shared with advertisers and other organizations. If these cookies are not allowed, we will not be able to experience our targeted advertising on different websites.

The "Cookie Policy" can be examined for more detailed information on the subject.

8- DATA SUBJECT AGE LIMIT

Within the scope of national and international legislation in the field of personal data protection, you can personally consent to the processing of your personal data, provided that you have completed at least 18 years of age. The consent of patients/clients under this age limit must be given by their legal representatives.

Within the scope of the GDPR, citizens of European Union countries and persons residing in European Union countries may give their consent to the processing, transfer, and other processing of their personal data in person at least 16 years of age or at least at the age of 16 years. If you are in this or below that, approvals must be given by your legal representatives.

9- OTHER ASPECTS OF YOUR PRIVACY AND SECURITY

The data of either customers or other persons in our clinic is confidential. No one may use, copy, reproduce, transfer to others, or use this data for any other purpose without compliance with the contract or the law, except for the purposes of the processing.

It is undertaken that the necessary care is taken to all kinds of data collected by you in our clinic. In this sense, the necessary technical, administrative, and physical measures are taken to the extent possible in order to protect your personal data collected by our Clinic and to prevent it from falling into the hands of unauthorized persons. In this context, it is ensured that the software complies with the standards, that third parties are carefully selected and that data protection policies are complied with within the clinic. Safety-related measures are constantly being renewed and improved. In this regard, a continuous protection mechanism is operated by carrying out periodic reporting, audits, and analysis processes in our clinic.

In our clinic, the necessary internal and external audits on the protection of personal data are carried out in accordance with the requirements of the law. Since audits are carried out both in a planned and raided manner, your data security is protected through periodic checks.

10- CHANGES TO THE POLICY

In this Policy, changes can be made within the framework of our changing practices and developing legislation when necessary. When material changes are made to this Policy, you will be provided with appropriate notice and posted on our website.

11- YOUR RIGHTS

As a Data Subject, your Personal Data is protected in accordance with the GDPR. Where the GDPR falls under its jurisdiction (European Union citizens or residents of European Union countries to whom the Service is provided), your rights are as follows;

• Right of Access - Art. 15 GDPR: You have the right to know whether personal data concerning yourself is being processed, and if your personal data is processed, you have the right to access the details contained in Art. 15 GDPR.
• Right to Correction - Art. 16 GDPR: You have the right to have your personal data corrected by applying at any time for your personal data that is within the clinic and belongs to the Clinic.
• Right to Erasure - Art. 17 GDPR: You have the right to request the erasure of your personal data held within the clinic. If the matters referred to in Article 17 GDPR occur, the Clinic will delete your personal data immediately, unless there are any other obstacles.
• Right to Restriction of Processing - Art. 18 GDPR: If you object to the timeliness of your Personal Data, you have the right to request the restriction of the use of your Personal Data until the accuracy of your Personal Data is confirmed by the Clinic. In cases where the processing of Personal Data is illegal, the Clinic no longer needs your personal data for the purpose of processing, you have the right to request the restriction of the use of your data. If you object to the processing activity in accordance with Article 21 § 1 GDPR, you have the right to request the restriction of the use of your data until the Clinic's legitimate grounds for processing data are decided to balance with your legitimate reasons.
• Right to Data Transport - Art. 20 GDPR: You have the right to request that your personal data held within the clinic be transferred to another controller by applying for it. However, this right may be exercised when the data processing is based on consent or when required by the contract.
• Right to Object - Art. 21 GDPR: You have the right to object to the processing of your personal data, including profiling under Art. 6 § 1 e and f GDPR, on the basis of grounds relating to your particular situation. If the clinic fails to see why a powerful process is concerned, it cannot process your personal data. Where your personal data is processed for marketing purposes only, you have the right to object to the processing for this purpose at any time.

Articles 15 – 21 of the GDPR listed above In your applications, name-surname, signature, Citizenship Number/Passport Number, residence or workplace address, e-mail address, telephone, and fax number, your written application in which you clearly and clearly state the elements subject to the request " Şirinyalı Mah. İsmet Gökşen Cad. No: 14/1 Elif Apt. Muratpaşa- Antalya" address, send it through a notary public or registered in the system "info@dk-klinik.com.tr" e-mail address. We would like to point out that if we provide a response regarding the destruction of your data following the evaluation of your application, you may be deprived of some of our services.

If you are of the opinion that we have violated the GDPR, you have the right to apply to the supervisory authority/Data Protection Authority at a location associated with you or our Clinic with the prerequisite that you first apply to our Clinic (Art.77 GDPR).

12- CONTACT US

Your Personal Data is processed by Dermatoloji- Kozmetoloji Kliniği Özel Sağlık Hizmetleri Tic. ve San. Ltd. Şti. operating at the address of Şirinyalı Mah. İsmet Gökşen Cad. No: 14/1 Elif Apt. Muratpaşa- Antalya is considered a "Controller" under the GDPR.

Address : Şirinyalı Mah. İsmet Gökşen Cad. No: 14/1 Elif Apt. Muratpaşa- Antalya

E-Mail : info@dk-klinik.com.tr

Web Site : https://en.dk-klinik.com.tr/