Information regarding the protection of your personal data.
This privacy notice has been prepared by Ankara Cerrahi Private Medical Center in its capacity as data controller under Law No. 6698 on the Protection of Personal Data ("KVKK"). It is intended to inform you about how your personal data is processed, for what purposes it is transferred, and what your rights are.
Data Controller
Pursuant to Article 3 of the KVKK, the data controller is Ankara Cerrahi Private Medical Center. You can reach our center through our communication channels.
Categories of Personal Data Processed
The following categories of data may be processed within the scope of our services:
- Identity information: First name, last name, Turkish ID number, date of birth, gender
- Contact information: Address, phone, e-mail
- Health information: Medical history, test results, diagnosis and treatment information, prescription information
- Visual and audio information: Security camera recordings (at the center's entrances)
- Transaction security information: Log records related to visits to the website
Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
- Protection of public health, preventive medicine, and the provision of medical diagnosis, treatment and care services
- Managing appointment, reminder and notification processes
- Fulfilling legal obligations and reporting to the relevant public authorities
- Ensuring the security of internal operations, and conducting audit and quality processes
- Measuring patient satisfaction and improving service quality
- Following up on legal proceedings
Transfer of Data
To the extent required by legal obligations and the treatment process, your personal data may be shared with the Ministry of Health and its affiliated units, the Social Security Institution, private insurance companies (if any), authorized courts and law enforcement, our auditors and consultants, our information technology service providers and our business partners. In every case, sharing is carried out in accordance with Articles 8 and 9 of the KVKK.
Method of Collection and Legal Basis
Your personal data may be collected verbally, in writing or electronically — during your application, appointment, examination, testing and treatment processes at our center, and via our center's website. Processing is based on the legal grounds set out in Articles 5 and 6 of the KVKK:
- Being expressly provided for in law
- Being necessary for the establishment or performance of a contract
- Fulfilling a legal obligation
- Processing by persons bound by confidentiality obligations for the protection of public health
- Legitimate interest
- Explicit consent
Your Rights Under Article 11 of the KVKK
As a personal data subject, you have the following rights:
- To learn whether your personal data is being processed
- To request information if it is processed
- To learn the purpose of processing and whether the data is used in line with that purpose
- To know the third parties to whom it has been transferred domestically or abroad
- To request correction if it has been processed incompletely or incorrectly
- To request its deletion or destruction within the framework of the KVKK
- To request that such correction, deletion or destruction be notified to the third parties to whom the data has been transferred
- To object to an outcome that disadvantages you as a result of automated analysis
- To claim compensation if you suffer damage due to unlawful processing
Application Method
You may submit requests regarding the exercise of your rights to our center in writing, together with documents enabling us to verify your identity, or by the other methods specified in the Communiqué on the Principles and Procedures for Application to the Data Controller. Your applications are concluded within thirty days at the latest.
Updates
This privacy notice may be revised from time to time in line with legislative changes and updates to our center's processes. The current text continues to be published on our website.