Protection of Personal Data

DISCLOSURE/INFORMATION ON THE PROCESSING OF PERSONAL DATA

Universalis Pharmaceutical Warehouse and Sa. Tic. A.Ş. (“Istanbul Cerrahi Hospital”), we attach importance to the security of your personal data. With this awareness, we show great sensitivity to processing and preserving all kinds of personal data belonging to you in the best possible way and with care. With the awareness of this responsibility, we process your personal data as Data Controller within the scope of the Law No. 6698 on the Protection of Personal Data (“Law”) and the relevant legislation within the framework set out below.

Collection, Processing and Processing Purposes of Personal Data

In order to provide you with high standards of service, we obtain your personal data verbally, in writing, visually or electronically through the Call Center, internet, mobile applications, physical locations and similar channels, depending on the nature of the service provided.

In this context, the main general and special categories of personal data, especially personal health data, which are necessary for the execution of all medical diagnosis, examination, treatment and care services and obtained for this purpose, are listed below;

• Identity data such as your name, surname, Turkish ID number, passport number or temporary Turkish ID number if you are not a Turkish citizen, place and date of birth, marital status, gender information and a photocopy of your Turkish ID Card or Driver’s License,
• Your contact data such as your address, telephone number, e-mail address,
• Your financial data such as your bank account number, IBAN number,
• Your health and sexual life data obtained during the execution of medical diagnosis, treatment and care services such as your laboratory and imaging results, test results, examination data, prescription information that you submit for follow-up in your file,
• Your responses and comments you shared in order to evaluate our services,
• Your closed circuit camera system image and sound recording taken during your visit to our hospitals,
• Your voice call records kept in case you contact our Call Center,
• Your data regarding private health insurance for the purpose of financing and planning of health services and your data from the Social Security Institution,
• If you benefit from parking and valet service, please provide vehicle license plate number,
• Browsing information, IP address, browser information obtained during the use of our website and mobile application, and medical documents, surveys, form information and location data that you transmit with your consent.

Your personal data listed above and your sensitive personal data may be processed for the following purposes:

• Protection of public health, preventive medicine, medical diagnosis, treatment and care services,
• Sharing the information requested with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,
• Fulfillment of legal and regulatory requirements,
• Financing your healthcare services, covering your examination, diagnosis and treatment expenses by Patient Services, Financial Affairs and Marketing departments, sharing the information requested with private insurance companies within the scope of the eligibility inquiry,
• Informing you about your appointment through our Call Center and Digital Channels,
• Confirmation of your identity by our Patient Services, Health Professionals and Call Center departments,
• Planning and management of the internal functioning of the organization by the Hospital Management, Analysis by Quality, Patient Experience, Information Systems departments to improve health services,
• Providing training to our employees by the Human Resources and Quality departments,
• Monitoring and prevention of fraud and unauthorized transactions by Audit and Information Systems departments,
• Fulfillment of risk management and quality improvement activities by Quality, Patient Experience, Information Systems departments,
• Invoicing for our services by Patient Services, Financial Affairs, Marketing departments,
• Confirmation of your relationship with the institutions contracted with our hospital by the Patient Services, Financial Affairs, Marketing departments,
• Hospital Management, Patient Experience, Patient Rights, Call Center departments can respond to all your questions and complaints regarding our health services,
• Taking all necessary technical and administrative measures within the scope of data security of our hospital’s systems and applications by Hospital Management, Information Systems departments,
• Participation in campaigns and providing campaign information by Marketing, Media and Communications, Call Center departments, designing and communicating special content, tangible and intangible benefits on web and mobile channels,
• Measuring, increasing and researching patient satisfaction by Hospital Management, Patient Rights, Patient Experience departments,
• Fulfillment of education and training activities by educational institutions with which the institution cooperates.

Your “Personal and Special Qualified Data” mentioned above can be kept in physical and electronic archives within Istanbul Cerrahi Hospital with great care and in compliance with the provisions of the legislation.

Transfer of Personal Data

Your personal data, Basic Law No. 3359 on Health Services, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations, Law No. 6698 on the Protection of Personal Data, Regulation on Private Hospitals, Regulation on the Processing of Personal Health Data and Protection of Privacy, and the regulations of the Ministry of Health and other legislation and for the purposes described above;

• Ministry of Health, its sub-units and family medicine centers,
• Private insurance companies (health, pension, life insurance and similar),
• Social Security Institution,
• General Directorate of Security and other law enforcement agencies,
• General Directorate of Population,
• Turkish Pharmacists Association,
• Judicial authorities,
• Laboratories, medical centers, ambulances, medical devices and healthcare institutions in Turkey or abroad with which we cooperate for medical diagnosis and treatment,
• The health institution to which the patient is referred or to which the patient himself/herself applies,
• Your authorized legal representatives,
• Third parties we consult, including lawyers, tax advisors and auditors we work with,
• Regulatory and supervisory bodies and government authorities,
• With domestic or foreign systems and/or companies within the group of companies to which our Hospital is affiliated.
• With your employer,
• Your health data limited to the T.R. Identity No, Name and surname information you will share if you receive Live Support via Istanbul Cerrahi Hospital website, social media accounts, direct message sharing or Corporate Whatsapp line, and what you declare while using these programs/applications with Istanbul Cerrahi Hospital servers
• It may be shared with our suppliers, support service providers, archive service providers and business partners (for more detailed information, you can obtain information by applying to our hospital in writing.

Method and Legal Grounds for Collecting Personal Data

Your personal data are collected and processed in all kinds of verbal, written, visual or electronic media for the above-mentioned purposes and in order to carry out all kinds of work within the scope of the activities of Istanbul Cerrahi Hospital within the legal framework and in this context, in order for Istanbul Cerrahi Hospital to fully and duly fulfill its contractual and legal obligations. The legal reason for collecting your personal data;

• Law No. 6698 on the Protection of Personal Data,
• Basic Law No. 3359 on Health Services,
• Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations,
• Regulation on Private Hospitals,
• Regulation on the Processing of Personal Health Data and Protection of Privacy,
• Ministry of Health regulations and other legislative provisions.

In addition, as stated in Article 6, paragraph 3 of the Law, personal data relating to health and sexual life can only be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, without seeking the explicit consent of the data subject.

Your Rights Regarding the Protection of Personal Data

In accordance with the Law and relevant legislation;

• Learn whether personal data is being processed,
• Requesting information if personal data has been processed,
• Access to and request for personal health data,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing,
• To request the deletion or destruction of personal data,
• In case personal data are incomplete or incorrectly processed, to request that third parties to whom personal data are transferred be notified of the transactions regarding the correction and/or deletion or destruction of personal data,
• Objecting to the occurrence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
• You have the right to demand the compensation of the damage in case of damage due to unlawful processing of personal data.

Data Security and Right of Recourse

Your personal data is meticulously protected within the technical and administrative possibilities and the necessary security measures are provided at a level suitable for possible risks, taking into account the technological possibilities.

Your claims under the law,

• Ferah Sokak No:22 P.K.:34365 Fulya - Şişli / Istanbul in person,
• Can send it through a notary public,