This Clarification Text has been prepared by Maslak Physical Therapy in accordance with the article titled “Data Controller's Obligation to Inform” in Article 10 of the Personal Data Protection Law No. 6698 (“Law“): the identity of the data controller, the method and legal reason for collecting your personal data, the purpose for which this data will be processed, to whom and for what purpose it can be transferred, the data processing period and your rights listed in Article 11 of the KVKK. The explanations made for your “Personal Data” in the clarification text also cover your “Sensitive Personal Data”.

Data Controller

Title of data controller : Maslak Physical Therapy     
Data controller address : Maslak Meydan Sk. Beybi Giz Plaza No:1 D:2 Sarıyer - Istanbul
Data controller phone                : 0533 414 4020
Data controller e-mail : info@maslakfiziktedavi.com
Data controller website : maslakphysicaltreatment.com

Categories of Personal Data Processed

• Your identity data (Name, surname, Turkish ID number, passport number or temporary Turkish ID number if you are not a Turkish citizen, place and date of birth, marital status, gender, signature)
• Your contact data (Your contact data such as address, telephone number, e-mail address, etc.)
• Finance your data (Bank account and card information, debt and invoice information)
• Your Customer Transaction data (Patient file payment transaction information, request, request and treatment records, etc.)
• Audio and Visual Recordings (All kinds of laboratory and imaging results you have submitted to the clinic / obtained by the clinic physician during the treatment, your photo image obtained for registration in the patient tracking automation used by the clinic
• Your health data (Laboratory and imaging results, test results, examination data, prescription information, private health insurance data and Social Security Institution data, prosthesis and device information to be used if needed during your treatment, your blood type, disease history, responses and comments you share to evaluate our services, your health data obtained during the execution of treatment and care services and your health data related to sexual life)
• Process Security Data: Data such as IP address information, website login and exit information.
• Your Data on Private Health Insurance

Purposes of Processing Personal Data

Personal data are processed for the following purposes in accordance with the principles specified in Article 4 of the Law on the Protection of Personal Data; to comply with the law and good faith, to be accurate and up-to-date when necessary, to be processed for specific, explicit and legitimate purposes, to be connected, limited and measured for the purpose for which they are processed, and to be kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

• Evaluation of the patient, provision of health services, protection of public health, preventive medicine, medical diagnosis, treatment and care services
• Monitoring the preparation processes of medicines and oral materials, procurement of relevant medical supplies
• Carrying out the necessary processes for the treatment of patients with medical imaging and diagnostic centers
• Creating, tracking and informing appointments, conducting communication activities, monitoring patient requests and complaints, managing patient relationship management processes

• Carrying out financial and accounting affairs, fulfilling tax obligations, issuing invoices for health services rendered
• Archiving/storing data on health services provided in accordance with the legislation

• Follow-up and execution of legal proceedings
• Sharing the information requested with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation
• Fulfillment of the necessary procedures in accordance with the legislation, execution of activities in accordance with the legislation
• Confirming the relationship with your contracted institutions, financing health services, covering your examination, diagnosis and treatment expenses, sharing the requested information with private insurance companies within the scope of eligibility query
• In line with your request and with your explicit consent, confirming the relations with the associations, trade unions, foundations that we have contracted with the clinic and of which you are a member, financing health services, covering your examination, diagnosis and treatment expenses
• Confirming your identity by our staff, planning and managing the internal functioning of the clinic

• Carrying out information security processes, performing audit and ethical activities, planning and execution of Clinical internal processes
• Receiving and evaluating requests and complaints, planning and execution of patient relationship management processes

• Conducting analysis for the purpose of improving healthcare services by the clinic, providing training to our employees, monitoring and preventing abuse and unauthorized transactions, performing risk management and quality improvement activities, responding to all kinds of questions and complaints regarding the healthcare services provided/to be provided to you
• Taking all necessary technical and administrative measures within the scope of data security by the clinic, participation in campaigns and providing campaign information, patient rights, measuring, increasing and researching patient satisfaction

Transfer of Personal Data and Purposes of Transfer

Personal data processed for the purposes listed above may be transferred to the following third parties limited to the same purposes:

• The Ministry of Health, sub-units under the ministry and family medicine centers, legally authorized public institutions and organizations and official authorities in line with the requests of the relevant public institutions and organizations and limited to the purposes of the request
• Third parties we receive consultancy from, including lawyers, independent accountants, tax consultants and auditors we work with
• In the presence of your explicit consent, your relevant health data and other personal data may be transferred to your relatives or third parties you have specified by name in accordance with and limited to your request.

Method of Collection, Legal Reason and Retention Period of Personal Data

Your personal data is obtained through automated or non-automated methods, using the personal information, results, prescriptions, treatment reports, (contact form methods available at the above-mentioned website address) submitted by the patient for the follow-up of the patient's file. Your personal data may also be collected through software used for the execution of activities, camera shooting and verbally, in writing or electronically.

Personal data are processed based on the legal reasons that it is explicitly stipulated in the law (Law No. 1219), it is necessary to process the data of the service recipient for the performance of the service contract, it is mandatory for the data controller to fulfill its legal obligation, and data processing is mandatory for the establishment, use or protection of patient rights.

Your personal data, limited to the purposes specified in this Clarification Text; It will be processed by complying with the data processing purposes and statute of limitations in the legislation to which the clinic is subject. When the periods for which we are obliged to process your data in accordance with the legislation expire, they will be deleted by us. In case of changes in the laws regarding data processing periods, the new periods determined will be taken as basis.

Rights of the Personal Data Subject

Pursuant to Article 11 of the Law, anyone can apply to the data controller and request information about him/her;

• Request information if their personal data has been processed,
• To learn the purpose of processing personal data and whether they are used for their intended purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing,
• To request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, although it has been processed in accordance with the provisions of the Law and other relevant laws,
• In case of a request for correction of incomplete or incorrect data and deletion or destruction of personal data, to request notification of this situation to third parties to whom personal data is transferred,
• To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
• In case of damage due to unlawful processing of personal data, to demand compensation for the damage,

rights.

 

In order to exercise your above-mentioned rights, you can use the data controller's website which you can obtain from the above-mentioned address and the above-mentioned website Data Subject Application Form’You are required to fill in this form completely and send it with wet signature to the above-mentioned e-mail address of our clinic by hand, by mail, to our address or via your e-mail address that you have previously notified us and registered in our system.

The applications made as stated above will be responded free of charge as soon as possible and within 30 (thirty) days at the latest. However, if the transaction subject to your request incurs an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by the Clinic.

I read it, I understood
patient name-surname
Signature
History