PHOENIX HEALTHCARE INFORMATION TEXT

With this Information Text, we aim to inform you about the identity of Phoenix Healthcare (KVKK 10.a), the purposes for which your personal data that you may share with us will be processed (KVKK 10.b), to whom and for what purposes your processed personal data may be transferred (KVKK 10.c), our data collection methods and legal reasons (KVKK 10.ç) and your rights (KVKK 10.d).

Identity of the Data Controller (KVKK 10.a): Your personal data will be processed, stored and protected by Phoenix Healthcare as the data controller.
Purpose of Processing Your Personal Data, Collection Method and Legal Reason (LPPD 10.b):

If you apply to our institution, Phoenix Healthcare requests and processes certain documents and records from individuals and/or their relatives in order to carry out all medical diagnosis, examination, treatment and care services.

Because these documents are obliged to be stored and presented to authorized officers and authorities upon request within the scope of the legal reasons regulated in the Health Services Fundamental Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Personal Health Data, the Ministry of Health regulations and other legislation provisions.

In this context, your personal data in the records and documents detailed below, provided that they are only examples and not in any way limiting, may be used for the purposes of evaluating the patient, creating patient records, determining the patient in case he/she needs to have an examination as a result of the patient examination and providing the necessary information regarding the examination admission procedures to the patient, answering the questions conveyed to him/her by the patient and the patient’s relatives and directing them to the relevant unit for more detailed information when necessary, performing the patient’s inpatient or outpatient treatment, performing the patient’s care procedures, carrying out the processes regarding the provision and execution of the products and services offered by the institution, performing the necessary tests and examinations and carrying out the relevant processes, sending financial information to the e-mail address specified during registration, carrying out laboratory, imaging etc. activities within the scope of the diagnosis and treatment studies carried out on the patient, procuring medicines and related materials, carrying out the drug preparation processes and checking whether the drugs are administered appropriately, performing imaging etc. within the scope of the diagnosis and treatment studies carried out on the patient. activities, execution of processes related to the presentation and execution of products and services offered by the institution, planning and execution of patient relations management processes, protection of public health, preventive medicine, medical diagnosis, treatment and care services to be provided by our institution, planning and management of health services and their financing and to increase the quality of these services, fulfillment of information storage, reporting and information obligations foreseen and/or considered as exceptions by public authorities, proof of contractual relationship and customary business operations and prevention of possible disputes are processed:

2.1. Your name, surname, Turkish Republic identity number, passport number or temporary Turkish Republic identity number if you are not a Turkish citizen. Your identity data such as your ID number, place and date of birth, marital status, gender information, insurance and patient protocol number and all other identity information that we can use to identify you are processed automatically and/or non-automatically based on the legal reason “clearly prescribed by law” in Article 5 of the Law, “the data controller can fulfill its legal obligation” and “the processing of personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of a contract”.

2.2. Your communication data such as your address, telephone number, e-mail address are processed automatically and/or non-automatically based on the legal reason “clearly prescribed by law” in Article 5 of the Law, “the data controller can fulfill its legal obligation” and “the processing of personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of a contract”.

2.3. Your financial data such as your bank account number and IBAN number are used for the purposes of receiving payments, issuing invoices, implementing pricing policies, and making necessary notifications to authorized public institutions and organizations, primarily for the legal reason of „being clearly foreseen by the laws“ as stated in Article 5 of the Law, and „directly through the establishment or execution of a contract“.

Provided that it is relevant, it is processed by automatic and/or non-automatic means based on the legal reason of “the necessity of processing personal data belonging to the parties to the contract”.

2.4. Your special personal data such as your laboratory and imaging results, test results, examination data, prescription information that you provide in your file for tracking purposes, and your health and sexual life data obtained during the execution of medical diagnosis, treatment and care services, may be processed by persons under the confidentiality obligation stipulated in Article 6 of the Law; for the purposes of carrying out medical diagnosis, treatment and care services, planning and management of health services; Your personal data is processed automatically and/or non-automatically based on the legal reasons stated in Article 5 of the Law, namely, “provided that it does not harm the fundamental rights and freedoms of the relevant person, data processing is mandatory for the legitimate interests of the data controller”, “provided that it is directly related to the establishment or execution of a contract, personal data belonging to the parties to the contract is necessary” and “the data controller can fulfill its legal obligation”.

2.5. Your data regarding private health insurance for the purpose of financing and planning health services that we provide information exchange with through the system and that show your SSI registration, and your personal data in the Social Security Institution are processed fully or partially automatically based on the legal reason stated in Article 5 of the Law, “clearly foreseen in the laws”.

3. Transfer of Your Personal Data (LPPD 10.c): If you apply to our institution, your personal data that you may share with us as a patient or a relative or that we have acquired will be recorded in physical and electronic environments and used for the purposes of carrying out transactions arising from the legislation, protecting public health, carrying out preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and their financing and improving the quality of these services, fulfilling the obligations of storing information, reporting and informing activities prescribed by public authorities and/or listed as exceptions, and managing the necessary work by authorized persons within the institution, and can only be accessed by our employees with limited authorization access for the purposes detailed above, to the extent necessary to fulfill their duties.

Your data obtained after you apply to our institution may also be shared with the institutions and/or persons specified below, limited to their purposes and to the extent necessary for their purposes.

3.1. In order to carry out medical diagnosis and treatment processes in the most accurate way and to receive consultation, with the Ministry of Health, sub-units affiliated to the ministry and family medicine centers, Social Security Institution, General Directorate of Population, Turkish Pharmacists Association, laboratories, medical centers, doctors, hospitals, ambulances, medical devices and health service providers located in Turkey or abroad with whom we cooperate for medical diagnosis and treatment,

3.2. In case of any legal dispute, in order to resolve the legal dispute between us in good faith or in case it is necessary to apply to a mediator to initiate legal processes, with the mediator;

3.3. In cases where there is a possibility of a dispute or in a transaction we will perform or in order to understand our legal situation in the face of a transaction performed by you, or in order to obtain information about our legal rights or in order to initiate legal processes, with our lawyers;

3.4. In order to make our payments within the scope of our contractual obligations or to obtain information about the payments made, to obtain confirmation or to obtain evidence that we have fulfilled our financial obligations, with the contact person of the relevant branch of the bank with which we have an agreement;

3.5. In order to fulfill our financial and financial obligations or to obtain information about the incentives we can benefit from or to benefit from an incentive or to make financial calculations such as cost-benefit calculation, with the financial advisor with whom we have an agreement;

3.6. In order to fulfill our legal obligations, to prove that we have fulfilled our legal obligations, with the SSI and in case of an audit or official question, with the relevant SSI officer or inspector;

3.7. In order to fulfill our legal obligations, to prove that we have fulfilled our legal obligations or in case of an audit or official question, with the Insurance Supervisory Board or inspector;

3.8. The need to audit company servers, take necessary technical measures, store personal data in digital format

l With the IT company we have a contract with for the purpose of conducting inspections and checks in case of need for examination in environments, need for correction of an error, possibility or concerns of attack or leakage;

3.9. In accordance with the relevant legislation provisions, especially the Patient Rights Regulation, the Regulation on Personal Health Data, in case of medical necessity, court order or permission of the patient/legal heirs, with the patient’s family members/relatives, proxy or legal representative and other permitted third parties for the purposes of providing information about the patient’s health status, accompanying the patient, receiving and delivering the patient’s personal belongings/medicines and carrying out payment transactions,

3.10. With banks, contracted private health or complementary insurance companies or contracted institutions and organizations for the purposes of planning or carrying out insurance transactions and financial and accounting works related to health services,

3.11. In order to carry out medical diagnosis and treatment processes in the most accurate way, to receive consultation, to be subject to scientific research, to institutions to which patients are referred/transferred, to other health institutions, to doctors and health personnel,

3.12. In the event of any dispute and/or in the event of an investigation and prosecution of a crime or in the event of any audit or request, your data may be shared with the relevant judicial and administrative authorities and authorized regulatory and supervisory public institutions and organizations and individuals.

Your Legal Rights (LPPD 10.d): Your rights are set out in Article 11 of the Law and we would like to state that you have the following rights within the scope of this article: a) to learn whether your personal data has been processed; b) to request information regarding your personal data if it has been processed; c) to learn the purpose of processing your personal data and whether it has been used in accordance with its purpose; ç) to know the third parties to whom your personal data has been transferred domestically or abroad; d) to request correction of your personal data if it has been processed incompletely or incorrectly; e) Request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the Law; f) Request that the third parties to whom your personal data has been transferred be notified of the transactions made pursuant to subparagraphs (d) and (e) listed above; g) Object to the emergence of a result against you due to the analysis of your personal data exclusively by automated systems; and ğ) Request compensation for damages in the event of damages incurred due to the unlawful processing of your personal data.

You can forward your requests regarding your rights herein to us, Phoenix Healthcare, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.