KVKK INFORMATION REQUEST FORM. CLICK TO DOWNLOAD..
LIGHTING TEXT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA NUMBER 6698
Aydınlatma Metni Amacı ve Kapsamı
As Elitium Esentent Health Services LTD ŞTİ We take measures to protect your personal data within the scope of the Law on Protection of Personal Data No. 6698 (referred to as "KVKK" or "Law"). We process your Personal Data within the scope of KVKK and relevant legal legislation, and in our capacity as "data controller", for the reasons and methods described below.
Elitium Esentent Health Services LTD. Clarification Text on the Processing of Personal Data, pursuant to the article titled “Informing Obligation of the Data Controller” in Article 10 of the KVKK: the identity of the data controller, the method and legal reason for collecting your personal data, the purpose for which this data will be processed, to whom and for what purpose. has been prepared to inform you in the most transparent way about the data processing period and your rights listed in Article 11 of the KVKK. The explanations made for your "Personal Data" in the clarification text also include your "Special Quality Personal Data".
Data Controller
Company Name: Elitium Esenkent Health Services LTD ŞTİ
Address: Aşık Veysel District Süleyman Demirel Street N:17 Esenyurt/İstanbul
(It will be referred to as the "Company" within the scope of this Clarification Text.)
Collection Method and Legal Reason of Your Personal Data
Your personal data may be collected through automatic or non-automatic methods, by means of the Company's affiliates, website, social media channels, call center, mobile applications, software used to carry out activities within the company, and verbally, in writing or electronically. Your personal data can be created and updated as long as your relationship with the Company continues, and can be processed and kept in both digital and physical environment.
Your personal data can be processed and transferred in line with the purposes set out in the second article below and within the scope of the personal data processing conditions and purposes specified in the 5th and 6th articles of the Law No. 6698.
Your Processed Personal Data and Purposes of Processing
Your Personal Data is processed securely in accordance with the Law on the Protection of Personal Data in order to provide a more appropriate service in accordance with legal obligations or in company business and transactions.
In this context, the data in the table is collected as personal data;
Communication Data: It is the data group that can be used to reach the person (Phone, address, e-mail, IP address).
Identity Data: It is the data group that contains information about the person's identity (Name and surname, TCKN, mother's name, father's name, place of birth, date of birth, gender, wallet serial number, identity copy, tax number, SSI number, nationality data, employee card).
Health Data: The data group that contains the health information of the person (Blood group, medical history, check-up result, consultation report, diet form, surgery information, treatment method, disease type, medications used, eye retinal shots, medical values, analysis results) .
Audio/Visual Data: It is the data group that contains the visual and audio data of the person (Photo, sound recording, camera recording, driver's license photocopy/scan, ID photocopy/scan, passport photocopy/scan). is the data group (Log) where the traces are found.
Financial Data: It is the data group that contains the financial information of the person (Bank account number, iban number, card information, bank name, financial profile, mail order form, credit rating).
Biometric/Genetic Data: The data group containing the biometric/genetic data of the individual (Fingerprint, palm print, genetic information).
Travel Data: It is the data group that contains information about the person's travels (flight information, boarding pass, tour route, mile card number, accommodation data).
Company Data: Personal company data (Company address).
Religious Knowledge: It is the data group that contains the data about the belief of the person.
Signature Data: It is the data group containing the signature information of the person (Wet signature, e-signature, signature copy/scan).
Visa/Passport Data: It is the data group that contains the visa/passport information of the person (Visa information, passport photocopy/scan).
Image Recording Data: The security camera recording data in the areas belonging to the person (Camera recording, photo recording)
Your collected personal data;
• Necessary studies are carried out by our relevant business units in order for real and/or legal third persons, institutions and organizations (employees, visitors, patients, suppliers, business partners, etc.) that have a relationship with the company to benefit from the products and services of our company and/or its headquarters and units. can be made,
• Ensuring the life and property security and legal and commercial security of real and/or legal third party institutions and organizations in which the company's business is carried out or in the headquarters and units affiliated to the company,
• Storage of camera images, ensuring discipline, security and inspections in case you are physically present in the company's headquarters and units,
• Turkish Commercial Code No. 6102, Turkish Code of Obligations No. 6098, Law No. 6502 on the Protection of Consumers, Law on Protection of Personal Data No. 6698, Tax Procedure Law No. 213, Social Insurance and General Health Insurance Law No. 5510, Health Services Basic Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Regulation No. 29399 on the Development and Evaluation of Quality in Health, Regulation on Private Hospitals, Regulation on Processing and Privacy of Personal Health Data, Regulation on Archive Services and all related laws and secondary regulations. / Fulfilling the legal and regulatory requirements that may arise and taking the necessary measures in this context,
• Execution of inspection and/or regulation duties to be carried out by authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions,
• Fulfillment of information and document requests by judicial bodies and/or administrative authorities,
• To list, report, verify and analyze the use of products and services offered in our company and in all centers and units affiliated with the company, to produce statistical and scientific information on this subject, to develop our products and services accordingly, to increase satisfaction with our products and services, and within this scope making customizations for the user,
• To carry out market research, promotion and necessary information regarding our products and services, to evaluate complaints and suggestions, and to contact you directly through the communication channels shared with the Company,
• Planning and management of the financing of all services provided, invoicing,
• Carrying out risk management and quality improvement activities,
• Offers, promotions, exemptions, etc. offered by contracted private insurance companies and/or other institutions within the framework of agreements. fulfillment of rights and obligations,
• Taking all necessary technical and administrative measures for the system and applications within the scope of data security,
• Protection of public order and health,
• For the purposes of conducting and managing health services such as medical diagnosis, treatment and care, supply of medical supplies, personal data will be processed within the terms and purposes of processing specified in Articles 5 and 6 of the Law No. 6698.
To Whom Your Processed Personal Data Can Be Transferred And For What Purpose
By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with KVKK and relevant health legislation, your Personal Data/Personal Data for the purposes stated above;
- Persons/institutions and/or organizations permitted by the provisions of other relevant legislation,
-Private insurance companies, banks, funds, foundations,
- Lawyers or attorney partnerships for the purpose of pursuing legal affairs,
- Financial advisors for the execution of finance and accounting transactions,
- Our direct/indirect domestic/foreign shareholders,
- Our subsidiaries and/or affiliates,
-Our community companies,
-Auditors,
-Consultants,
-Work partners;
- It will be possible to transfer personal data to domestic/foreign organizations that we contractually receive and/or provide services to, cooperate and cooperate with in order to carry out our activities, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law.
Data Processing Time and Retention Time
Your personal data, limited to the purposes specified in this Clarification Text; It will be processed in accordance with the data processing and timeout periods in all relevant laws and other legal regulations to which our company and its headquarters and units are subject. In case of changes in the laws regarding data processing periods, the new determined periods will be taken as basis.
As a requirement of the purpose-limitation principle, your personal data is processed for a limited period of time that requires the fulfillment of the purposes described in this Clarification Text and in any case in accordance with the practices of the Company and the practices of its commercial life, and after the expiry of the deadlines, it is deleted, destroyed or anonymized. In this context, the storage period of process-based personal data is stated below;
| PERIOD | STORAGE PERIOD |
Execution of Patient Registration and Treatment Processes |
20 years from completion of the process |
| Hospital Laboratory Processes | 30 years from completion of the process |
Hospital Accounting Processes |
5 years from the completion of the process |
| Execution of Human Resources Processes | 10 years after the end of the activity |
| Log Tracking Systems | 10 years |
| Execution of Hardware and Software Access Processes | 3 years |
| Visitor Registration | Kaydın tamamlanmasını takiben 1 yıl |
| Camera Recordings | 1 years |
| Preparation and Performance of Contracts | 10 years after the expiry of the contract |
| Execution of Corporate Communication Activities | 10 years after the end of the activity |
The Rights of the Relevant Person and the Use of These Rights
Rights of the persons whose personal data are processed
The persons whose personal data are processed have the following rights:
a. Learning whether personal data is processed or not,
b. If personal data has been processed, requesting information about it,
c. Learning the purpose of processing personal data and whether they are used in accordance with the purpose,
D. Knowing the third parties to whom personal data is transferred at home or abroad,
to. Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
f. Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing have disappeared, although it has been processed in accordance with the provisions of the KVK Law and other relevant laws, and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
g. Objecting to this result if a result against the person arises by analyzing the processed data exclusively through automated systems,
h. To request the compensation of the damage in case of loss due to unlawful processing of personal data.
Exercising the Rights of the Relevant Person
Persons whose personal data are processed will be able to submit their requests regarding their rights specified in the disclosure text to Elitium Medical Center free of charge, with the information and documents that will determine their identity, by filling out and signing the Application Forum, using the methods specified below or other methods determined by the Personal Data Protection Board.
Related person;
• After completing the personal data application and response form at the address https://www.elitium.com.tr/ or after preparing a duly petition, a copy with wet signature can be sent in person or in writing via registered mail, Aşık Veysel Mahallesi Süleyman Demirel Caddesi. N;17 Esenyurt/Istanbul address or by making an application in person,
• After completing the personal data response form at https://www.elitium.com.tr/ and signing with the “secure electronic signature” within the scope of the Electronic Signature Law No. 5070, the electronic mail registered to the address info@elitium.com.tr of the secure electronic signature form by using a secure electronic signature, mobile signature or the e-mail address previously reported to Elitium Medical Center by the person concerned and registered in the system of Elitium Medical Center, or by means of a software or application developed for application purposes to info@elitium.com .tr can apply to the data controller upon application.
In order for the above-mentioned application to be accepted as a valid application, in the application pursuant to the Communiqué on Application Procedures to the Data Controller;
a) Name, surname and signature if the application is written,
b) For citizens of the Republic of Turkey, T.R. identification number, nationality for foreigners, passport number or identification number, if any,
c) Domicile or workplace address for notification,
ç) If available, the e-mail address, telephone and fax number for notification,
d) The subject of the request,
information is required. Otherwise, the application will not be considered as a valid application. In applications to be made without filling out the application form, the issues listed here must be conveyed to the Elitium Medical Center in full.
In order for third parties to request an application on behalf of the persons whose personal data are processed, a special power of attorney issued by the relevant person through a notary public on behalf of the applicant must be present.