{"id":7858,"date":"2024-01-18T15:48:35","date_gmt":"2024-01-18T12:48:35","guid":{"rendered":"https:\/\/gazimedicalclinic.com\/?page_id=7858"},"modified":"2024-01-18T15:48:35","modified_gmt":"2024-01-18T12:48:35","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/gazimedicalclinic.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">\u00a0\u00a0<\/span><\/p>\n<p><b>PERSONAL DATA PROTECTION LAW<\/b><b><br \/>\n<\/b><b>PATIENT AND PATIENT RELATIVES INFORMATION<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As Gazi Medikal Klinik, we may need to learn your personal information and health data in order to carry out the services I will provide to you and to record and store them within the limits required by the<\/span><span style=\"font-weight: 400;\">\u00a0\u00a0<\/span><\/p>\n<p><b>PERSONAL DATA PROTECTION LAW<\/b><b><br \/>\n<\/b><b>PATIENT AND PATIENT RELATIVES INFORMATION<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As Gazi Medikal Klinik, we may need to learn your personal information and health data in order to carry out the services I will provide to you and to record and store them within the limits required by the service to be provided.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Your health data that we have to record in order to provide health services to you is considered as special quality personal data by law. In this context, in accordance with the provision in the second paragraph of Article 6 of the Personal Data Protection Law No. 6698, &#8220;It is prohibited to process sensitive personal data without the explicit consent of the person concerned.&#8221; Since personal health data can only be processed and transferred with the explicit consent of the person, except for the special conditions specified in the law, it has become obligatory to obtain this consent from you.<\/span><\/p>\n<p><b>CLARIFICATION TEXT ON THE LAW ON THE PROTECTION OF PERSONAL DATA<\/b><\/p>\n<p><b>1- Data Controller:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medikal Klinik (Alsancak, Kahramanlar Mahallesi, Nevzat G\u00fczel\u0131rmak Sk. No:29, Konak\/\u0130zmir) processes your personal data in the capacity of &#8220;Data Controller&#8221; as defined in Article 3 of the Law No. 6698 on the Protection of Personal Data.<\/span><\/p>\n<p><b>2- Purpose for which Personal Data will be Processed:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to the Law No. 6698 on the Protection of Personal Data, your personal data that you share with our company is processed by the data controller by obtaining, recording, storing, storing, modifying, rearranging, and rearranging your personal data in whole or in part, automatically or by non-automatic means provided that it is part of any data recording system. The Data Controller processes the personal data it processes within the scope of its activities in accordance with the relevant legislation for the following purposes.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In this context, it covers your personal data that you provide to us verbally, in writing, visually, or electronically in our examination, and your personal data that you transmit to us via internet and mobile applications or electronically or obtained in our office (analysis result, prescription, camera recording, video, photo, etc.).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In this sense, personal health data that are necessary for the execution of the services we will provide to you and obtained for this purpose, in particular, your name, surname, Turkish ID number, (if you are not a Turkish citizen, your passport number or temporary Turkish ID number), place and date of birth, marital status, gender information, various identity documents, contact data such as your address, telephone number, e-mail address, financial data such as your bank account number, IBAN number, Your medical history in your clinical file, information showing your disease history, examination data, data regarding the procedures applied to you, prescription information, your health and sexual life data obtained during the execution of medical diagnosis, treatment and care services such as your photographs, all kinds of images, audio \/ camera recordings, laboratory and imaging results, test results, your data regarding private health insurance and your Social Security Institution data, etc. are considered personal data.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Within the framework of the Personal Data Protection Law No. 6698 and the relevant legislation, your personal data will be recorded only to the extent required by the health service to be provided to you and will be stored in our system \/ archive &#8216;&#8230;not exceeding the period required to fulfill the purposes for which it was recorded&#8217;. Your data processed within this scope will be protected as a professional secret and its confidentiality will be ensured.<\/span><\/p>\n<p><b>3- To whom and for what purpose the processed personal data can be transferred:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">We kindly remind you that in cases where the privacy of personal medical records should be limited for the protection of public health, such as the obligation to notify the competent authorities of infectious diseases regulated in Article 58 of the Public Hygiene Law No. 1593, or in cases of legal obligation, such as the obligation to report a crime, it may be necessary to notify the competent authorities in a limited and measured manner, or it may be shared with another physician for consultation (exchange of opinions) regarding your health status.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Requests from public institutions, judicial authorities and other official authorities to transmit your data to them will be evaluated in terms of the purpose of the request, whether the requested data and the purpose to be achieved coincide, whether it can be concretely demonstrated, whether the only way to achieve the stated purpose is to transmit your data without anonymization, whether data transmission is necessary in a democratic society, and data transmission requests that do not meet all of these elements will not be fulfilled.<\/span><\/p>\n<p><b>4- Data Transfer Abroad:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In accordance with the principles set out in the second paragraph of Article 4 of the Personal Data Protection Law No. 6698, our practice obtains Explicit Consent Texts from employees, employee candidates, customers and suppliers, service providers, and visitors separately regarding the personal data processed. In addition, in the Personal Data Protection Law No. 6698; In cases stipulated in the second paragraph of Article 5 and the third paragraph of Article 6 of the Personal Data Protection Law No. 6698, without seeking explicit consent, in accordance with the rules in Article 9, after the foreign countries with adequate protection to be determined by the Personal Data Protection Board are announced, only to persons and organizations residing in these countries, and for the countries where it is determined and announced that there is no adequate protection, it can be transferred provided that the data controllers in Turkey and in the relevant foreign country undertake an adequate protection in writing and obtain the necessary permissions from the Personal Data Protection Authority in terms of the relevant transfer and on a limited basis.<\/span><\/p>\n<p><b>5- Method and Legal Grounds for Collecting Personal Data:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your personal data is collected and processed in all kinds of verbal, written, visual or electronic media in order to carry out all kinds of work within the scope of the above-mentioned purposes and activities within the legal framework and to fulfill its contractual and legal obligations as a data controller in this context. The legal reason for collecting your personal data;<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Law No. 6698 on the Protection of Personal Data,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Basic Law No. 3359 on Health Services,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Regulation on Processing and Protection of Privacy of Personal Health Data,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ministry of Health regulations and other legislative provisions.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In addition, as stated in the third paragraph of Article 6 of the Law, personal data on health and sexual life can only be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, without seeking the explicit consent of the data subject.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When you enter our practice as a guest, your data is processed by our guest services staff for the purpose of registering you in the examination archive based on the legal reason that &#8220;it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract&#8221; and &#8220;it is mandatory for the data controller to fulfill its legal obligation&#8221;.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The data of our guests whose registration process has been completed will be processed by our healthcare personnel and physicians who are under the obligation of confidentiality during the provision of the health service they have requested and due to the nature of this service, by our healthcare personnel and physicians who are under the obligation of confidentiality, primarily for the legal reason of &#8220;conducting medical diagnosis, treatment and care services&#8221;, based on the cases clearly stipulated in the Health Services Basic Law No. 3359 and the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Affiliated Institutions, the Health Implementation Communiqu\u00e9 and the Patient Rights Regulation and the Turkish Code of Obligations No. 6098, and the information will be recorded through the cloud clinical program.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">After the medical services of our guests are completed, their data are processed for the purpose of receiving the medical service fee from our guests and issuing invoices according to the relevant situation and based on the legal reason that &#8220;it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract&#8221; and &#8220;it is mandatory for the data controller to fulfill its legal obligation&#8221;.<\/span><\/p>\n<p><b>6- Rights of the Personal Data Owner in accordance with the Law No. 6698 on the Protection of Personal Data (Right of Application):<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As the data controller, as per the Communiqu\u00e9 on the Procedures and Principles of Application to the Data Controller, you may submit your requests regarding your data recorded by us within the scope of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Council of Europe Convention No. 108), Article 8 of the European Convention on Human Rights, Article 20 of the Constitution, Article 11 of the Law No. 6698 on the Protection of Personal Data &#8220;regulating the rights of the data subject&#8221;;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medikal Klinik (Alsancak, Kahramanlar Mahallesi, Nevzat G\u00fczel\u0131rmak Sk. No:29, Konak\/\u0130zmir), to the address of the relevant person who is the Personal Data Owner, by filling out the attached Application Form, you can personally deliver a signed copy of the form to the company address with documents identifying your identity, Secure Electronic Signature, mobile signature or by using the e-mail address you have notified to our practice and registered in our company&#8217;s system <\/span><span style=\"font-weight: 400;\">info@gazimedicalclinic.com<\/span><span style=\"font-weight: 400;\"> \u00a0 address, by sending an e-mail, by personal application, by application through a notary public or by the methods determined by the Personal Data Protection Board.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to Article 11 of the Law No. 6698 on the Protection of Personal Data; everyone can apply to the data controller regarding him\/her;<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To learn whether your personal data is processed and the scope of your processed data,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">If your personal data has been processed, to obtain information about it, to access this data and to take samples from them,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To learn the purpose of processing your personal data and whether they are used in accordance with their purpose, whether they are transferred to a third person or institution at home or abroad, and to request notification of any changes in your personal data to the persons or institutions with whom the data is shared,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To request correction of your personal data in case of incomplete or incorrect processing, (We were informed that this right can be exercised by applying to our office address in person or in writing).<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">You have the right to request that some of your data be hidden, deleted or destroyed.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Pursuant to the first paragraph of Article 13 of the Law No. 6698 on the Protection of Personal Data, you are required to submit your applications to our company in writing or by the above-mentioned methods determined by the Personal Data Protection Board. Our Company will finalize your requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board will be charged.<\/span><\/p>\n<p><b>PATIENT (CUSTOMER) DECLARATION OF EXPLICIT CONSENT<\/b><\/p>\n<p><span style=\"font-weight: 400;\">I have read and understood the Personal Data Clarification and Consent Text prepared by Gazi Medikal Klinik, and that I have been verbally informed about the subject,<\/span><\/p>\n<p><span style=\"font-weight: 400;\">I have been informed about the purposes, collection methods and legal reasons for the processing of my personal data &#8220;Health Data&#8221;, which are detailed in the Personal Data Clarification text, my rights to protect my personal data, mandatory situations where my data can be transferred, data security and my application rights,<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Recording, storing and sharing my health data by Gazi Medikal Klinik and its employees within the framework of the above principles,<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In addition, Gazi Medical Clinic will be able to access my contact data specified below by mobile devices, over the internet or by mail to my address, etc.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0\u00a0I ACCEPT WITH MY EXPRESS CONSENT. I DO NOT ACCEPT*<\/span><\/p>\n<p><span style=\"font-weight: 400;\">* In this statement, we hereby inform you that if you do not accept the consent declaration for the processing of your personal data, including your relevant sensitive personal data, we will not be able to provide you with the necessary and sufficient service in terms of our processes that require your explicit consent, and that your commercial and operational activities will be adversely affected, except for the cases permitted to be processed in accordance with the KVKK legislation.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Patient Name Surname : Date: &#8230;&#8230;.\/&#8230;&#8230;.\/&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Address : Time: &#8230;&#8230;&#8230;&#8230;..<\/span><\/p>\n<p><span style=\"font-weight: 400;\">E-mail :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Tel :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Signature :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The patient is under 18 years of age or unconscious:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Patient&#8217;s Relative Name Surname :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Signature : Date: &#8230;&#8230;.\/&#8230;&#8230;.\/&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Degree of Proximity : Watch: &#8230;&#8230;&#8230;&#8230;.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Write &#8220;I understood what I read&#8221; in your own handwriting:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;..<\/span><\/p>\n<p><b>PERSONAL DATA STORAGE AND DESTRUCTION POLICY<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Telephone: 5017335707<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">E-mail: info@gazimedicalclinic.com<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Address:\u00a0 \u00a0 Alsancak, Kahramanlar Mahallesi, Nevzat Guzelirmak Sk. No:29, Konak\/ Izmir<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Mersis No:<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Tax Office<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Tax Number:<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Trade Registry No:<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Effective Date:<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Update Date:<\/span><\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">As Gazi Medical Clinic (Practice), we attach great importance to the processing and protection of all kinds of personal data belonging to all persons, including customers, suppliers, managers and employees of service providers, employees, employee candidates, interns, partners and employee relatives, visitors, public institutions and organizations, employees of private law legal entities and relevant third parties, in accordance with the Law No. 6698 on the Protection of Personal Data (KVKK). For this purpose, our practice takes the necessary administrative and technical measures in accordance with the legal regulations and decisions taken.\u00a0<\/span><\/p>\n<ol>\n<li><b> INTRODUCTION<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Law No. 6698 on the Protection of Personal Data and the Personal Data Retention and Destruction Policy prepared within the scope of the relevant legislation; The Personal Data Protection Law No. 6698 (Law) and the Regulation on the Deletion, Destruction or Anonymization of Personal Data have been prepared by Gazi Medikal Klinik (Practice) as the data controller.<\/span><\/p>\n<p><b>1.1. Objective<\/b><\/p>\n<p><span style=\"font-weight: 400;\">With this policy text prepared by our practice, Gazi Medikal Clinic, in line with the principles set out in the Law; personal data belonging to customers, suppliers, managers and employees of service providers, employees, employee candidates, interns, visitors, public institutions and organizations, employees of private law legal entities and relevant third parties; It is aimed to process the decisions published by the KVK Authority, the principles determined, the Constitution of the Republic of Turkey, International Conventions, the Law No. 6698 on the Protection of Personal Data and the relevant legislation and to ensure that the relevant persons use their rights effectively. The works and transactions regarding the storage and destruction of personal data are carried out in accordance with this policy.<\/span><\/p>\n<p><b>1.2. Scope<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data belonging to customers, suppliers, managers and employees of service providers, employees, employee candidates, interns, visitors, public institutions and organizations, employees of private legal entities and relevant third parties; This policy is within the scope of this policy, and this policy is applied in all recording media where personal data processed by automatic methods or non-automatic means are processed by our Muayenehane and in all activities of the Muayenehane for personal data processing.<\/span><\/p>\n<p><b>1.3. Abbreviations and Definitions<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Open Consent<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Consent on a specific subject, based on information and expressed with free will<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Buyer Group<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The category of natural or legal person to whom personal data is transferred by the data controller<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Anonymization<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Making personal data impossible to be associated with an identified or identifiable natural person under any circumstances, even by matching with other data<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Employee<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Includes Gazi Medical Clinic Employees<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Employee Candidate<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Those who fill out the job application form and apply for a job by using the website, through job search platforms on the internet or by coming to the workplace in person<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Electronic Media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Environments where personal data can be created, read, changed and written with electronic devices<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Non-Electronic Environment<\/span><\/td>\n<td><span style=\"font-weight: 400;\">All written, printed, visual, etc. media other than electronic media<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Service Provider<\/span><\/td>\n<td><span style=\"font-weight: 400;\">A natural or legal person who provides services under a specific contract with the practice<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Related User<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Persons who process personal data within the organization of the data controller or in accordance with the authorization and instruction received from the data controller, except for the person or unit responsible for the technical storage, protection and backup of the data<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Contact Person<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Natural person whose personal data is processed<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Recording Media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Any medium containing personal data that is fully or partially automated or processed by non-automatic means, provided that it is part of any data recording system<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Any information relating to an identified or identifiable natural person<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal Data Processing Inventory<\/span><\/td>\n<td><span style=\"font-weight: 400;\">It is the inventory that data controllers create by associating the personal data processing activities they carry out depending on their business processes, the purposes and legal grounds for processing personal data, the data category, the group of recipients transferred and the group of data subjects, and detail the maximum retention period required for the purposes for which personal data are processed, the personal data foreseen to be transferred to foreign countries and the measures taken regarding data security.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Processing of Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">All kinds of operations performed on personal data such as obtaining, recording, storing, storing, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that they are part of any data recording system<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Law<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Law No. 6698 on the Protection of Personal Data<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Board<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal Data Protection Board<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Institution<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal Data Protection Authority<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal Data Protection Committee<\/span><\/td>\n<td><span style=\"font-weight: 400;\">A unit consisting of more than one member responsible for supervision and oversight in the protection and processing of personal data, established by the decision of the Board of Directors of the Practice<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal Data Contact Person<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The real person notified to the Registry by the data controller for natural and legal persons resident in Turkey and by the representative of the data controller for natural and legal persons not resident in Turkey, in order to ensure communication with the Authority regarding their obligations under the Law and the secondary regulations to be issued based on this Law<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Destruction of Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Deletion, destruction or anonymization of personal data<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Deletion of Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The process of making personal data inaccessible and non-reusable in any way for the relevant users<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Destruction of Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The process of making personal data inaccessible, irretrievable and reusable by anyone in any way<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Sensitive Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Periodic Disposal<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Deletion, destruction or anonymization to be performed ex officio at recurring intervals specified in the personal data retention and destruction policy in the event that all of the conditions for processing personal data specified in the law disappear<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Politics<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal Data Processing, Storage and Destruction General Policy<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Interns<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Students who receive applied vocational training and work for this purpose in the practice<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Trainee Candidates<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Students applying to the practice for internship<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Medical Practice<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Gazi Medical Clinic<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Data Processor<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Data Recording System<\/span><\/td>\n<td><span style=\"font-weight: 400;\">A recording system where personal data is structured and processed according to certain criteria.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Data Controller<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Data Controllers Registry Information System<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The information system created and managed by the Presidency, accessible via the internet, which data controllers will use in the application to the Registry and other related transactions regarding the Registry.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">VERBIS<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Data Controllers Registry Information System<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Board of Directors<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Practice Management Board<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Regulation<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Regulation on Deletion, Destruction or Anonymization of Personal Data published in the Official Gazette dated October 28, 2017<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"2\">\n<li><b> DISTRIBUTION OF RESPONSIBILITIES AND TASKS<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Pursuant to Law No. 6698 and the relevant legislation, within the scope of ensuring, maintaining and maintaining compliance with the personal data protection legislation, the &#8220;Practice PDP Committee (Committee)&#8221; in order to ensure the necessary coordination within the Practice determined. The titles, units and job descriptions of those involved in the storage and destruction of personal data are shown in Table 1.<\/span><\/p>\n<p><b>TABLE 1- Distribution of Responsibilities and Duties<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">STAFF<\/span><\/td>\n<td><span style=\"font-weight: 400;\">TASK<\/span><\/td>\n<td><span style=\"font-weight: 400;\">RESPONSIBILITY<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Doctor<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Manager<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal Data Contact Person, KVKK application officer<\/span><\/td>\n<td><span style=\"font-weight: 400;\">To carry out the KVKK process as a contact person on behalf of the Data Controller, to carry out the necessary controls, to ensure coordination between the units, to manage the storage and destruction processes, to make the information system technically compatible with the KVKK, to carry out audit and training activities.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Nurse\/Secretary<\/span><\/td>\n<td><span style=\"font-weight: 400;\">KVKK implementation officer<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The Data Controller is to carry out the KVKK processes under the supervision and supervision of the contact person, to carry out this task instead of the contact person in cases where it is not possible for the contact person to continue this task for any reason, to ensure compliance with the storage period and method of data storage and to carry out the process of destruction of personal data.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">Technical and administrative measures to ensure data security in all environments where personal data is processed are carried out by the responsible units in order to ensure the proper implementation of the technical and administrative measures taken within the scope of this policy, to increase the training and awareness of the relevant unit employees, to prevent the unlawful processing and access of personal data and to ensure that personal data is stored in accordance with the law.<\/span><\/p>\n<ol start=\"3\">\n<li><b> MEDIA WHERE PERSONAL DATA ARE STORED<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Personal data kept by our practice are securely stored in the environments specified in Table-2 in accordance with the Law No. 6698 and the relevant legislation and international data security principles. Your personal data, in whole or in part, automatically or by non-automatic means, provided that it is part of any data recording system, by obtaining, recording, storing, storing, changing, rearranging, subject to any kind of processing performed on your personal data is processed by our Muayenehanemiz.<\/span><\/p>\n<p><b>TABLE 2- Environments where Personal Data are Recorded<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Electronic Media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Non-Electronic (Physical) Media<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal computers (desktop, laptop)<\/span><\/li>\n<\/ul>\n<\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data held in paper form<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Printer, scanner, photocopier, etc.<\/span><\/li>\n<\/ul>\n<\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Job Application Forms<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Contracts between the practice and third parties<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Manual data recording systems (survey forms, visitor logbook, etc.)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data kept in written, printed, visual media<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unit Cabinets<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Archive Rooms<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Prescriptions<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"4\">\n<li><b> PROCESSING OF PERSONAL DATA AND GENERAL PRINCIPLES<\/b><\/li>\n<\/ol>\n<p><b>4.1. Confidentiality Principle<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As explained in this policy, the data of both employees and all relevant persons who have personal data in contact with our practice are confidential. Within the scope of this policy and the measures taken, no one can use, reproduce, copy, copy, transfer to others and use the data of individuals for other purposes other than the purposes specified in the law.\u00a0<\/span><\/p>\n<p><b>4.2. Basic Principles<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data processed by our practice is processed in accordance with the principles specified in Article 4 of Law No. 6698. The practice processes personal data in accordance with the procedures and principles stipulated in the law, according to the principles written below in the processing, protection, deletion and destruction processes of the data.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Compliance with the law and good faith,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Accurate and, where necessary, up to date,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing for specific, explicit and legitimate purposes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Being relevant, limited and proportionate to the purpose for which they are processed,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retention for the period stipulated in the legislation or required for the purpose for which they are processed.<\/span><\/li>\n<\/ul>\n<p><b>4.3. Terms of Processing Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data processed by our practice is processed in accordance with Article 5 of Law No. 6698. Personal data cannot be processed without the explicit consent of the person concerned. However, in the presence of one of the principles we have stated below, it is possible to process personal data without seeking the explicit consent of the person concerned.\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Principle of legality) Explicitly stipulated in the law,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Actual impossibility) It is necessary for the protection of the life or physical integrity of the person who is unable to disclose his\/her consent due to actual impossibility or whose consent is not legally valid,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Performance of a contract) Processing of personal data of the parties to a contract is necessary, provided that it is directly related to the conclusion or performance of the contract,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Legal obligation) It is mandatory for the data controller to fulfill its legal obligation,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Publicity) The personal data has been made public by the data subject himself\/herself,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Obligation) Data processing is mandatory for the establishment, exercise or protection of a right,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Legitimate interest) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.<\/span><\/li>\n<\/ul>\n<p><b>4.4. Conditions for Processing Sensitive Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Sensitive Personal Data processed by our practice is processed in accordance with Article 6 of Law No. 6698. Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership to associations, foundations or trade unions, health, sexual life, criminal conviction and security measures, and biometric and genetic data are personal data of special nature.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It is regulated by the article of the law that the processing of sensitive personal data without the explicit consent of the data subject is prohibited. Accordingly, Special Categories of Personal Data cannot be processed without the explicit consent of the data subject. However, as written in the article of the law; personal data other than health and sexual life listed in the first paragraph of Article 6 of the law may be processed without the explicit consent of the data subject in cases stipulated by law.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal data relating to health and sexual life can only be accessed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing,<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It can be processed without seeking the explicit consent of the data subject. Our practice is processed in accordance with the Law No. 6698 and the relevant legislation and also by taking adequate measures determined by the Board in the processing of sensitive personal data.<\/span><\/p>\n<ol start=\"5\">\n<li><b> EXPLANATIONS ON PERSONAL DATA STORAGE AND DISPOSAL<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">With this policy created by our practice, personal data belonging to customers, suppliers, managers and employees of service providers, employees, employee candidates, interns, visitors, employees of public institutions and organizations and private law legal entities and relevant third parties; It is stored and destroyed in accordance with the laws and relevant legislation. Detailed explanations regarding storage and destruction are set out below.<\/span><\/p>\n<p><b>5.1. Storage of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Article 3 of the Law No. 6698 defines the processing of personal data, and Article 4 stipulates that the personal data processed must be linked, limited and measured for the purpose for which they are processed and must be retained for the period stipulated in the relevant legislation or for the purpose for which they are processed. In Articles 5 and 6 of the Law No. 6698, the processing conditions of personal data are listed. Accordingly, within the scope of the activities of the Practice, personal data are stored in accordance with the relevant legislation or in accordance with our processing purposes; by taking administrative and technical measures for the required period of time.<\/span><\/p>\n<p><b>5.2. Processing Purposes Requiring Retention of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The practice stores the personal data it processes for the following purposes, limited to the activities of the practice, in accordance with the relevant legislation. Accordingly; the processing purposes that require storing personal data are determined in the following items.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To improve the products and services of the practice and to continue growth and development activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Maintaining the financial and accounting affairs of the practice,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To maintain the commercial activities and service procurement transactions of the practice with third parties,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To fulfill legal obligations within the scope of practice activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Planning and execution of human resources processes, fulfillment of work and internship application processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Creating personnel files, fulfilling financial obligations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To make and fulfill the contracts and protocols that the practice has made or will make with its customers, suppliers, employees and third parties with whom it has a legal relationship,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Maintaining marketing activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensuring institutional communication with the practice,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To ensure the institutional quality of the practice, to ensure the safety of the relevant persons with whom it is in contact,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To carry out the works and transactions and processes before the PDP Authority within the scope of the PDP Law,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To liaise with real and legal persons with whom the practice has a legal relationship within the scope of its activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In accordance with the legislation; to make the necessary legal notifications to the relevant public institutions and organizations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To fulfill the practice&#8217;s burden of proof as evidence in legal disputes with third parties,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Participating in trainings, seminars or organizations organized by the practice to ensure corporate and personal development,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To maintain the necessary processes for your contact with our practice, your use of our website regarding the activities of the practice, your contact with the practice contact information, filling out the forms on our website,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To ensure the safety of customers, suppliers, managers and employees of service providers, employees, employee candidates, interns, visitors, employees of public institutions and organizations and private law legal entities and relevant third parties, the building and annexes of the practice, as well as the control of the entrance and exit of the practice building,<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Your personal data is processed in accordance with the conditions and purposes determined in accordance with Articles 5 and 6 of the Law. Your personal data is not used for any other purpose other than the activities of our Practice, which is the data controller, and is not shared with third parties except in cases determined by policies,<\/span><\/p>\n<p><b>5.3. Reasons for Retaining Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your personal data is kept within the framework of the activities of the Practice. In this context, Personal data;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">International regulations, the Constitution, the Personal Data Protection Law, the Code of Obligations, the Labor Law, the Turkish Criminal Code, the Turkish Criminal Procedure Code, the Tax Procedure Law and the relevant financial legislation, the Law on the Regulation of Publications on the Internet and Combating Crimes Committed through These Publications, the Regulation on the Procedures and Principles on the Regulation of Publications on the Internet, Regulation on Processing and Ensuring the Privacy of Personal Health Data, Law on the Regulation of Electronic Commerce, Electronic Signature Law, Electronic Communication Law, Regulation on Consumer Rights in the Electronic Communication Sector, Regulation on the Processing of Personal Data and Protection of Privacy in the Electronic Communication Sector, Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, Regulation on Commercial Communication and Commercial Electronic Messages, Law on Police Duties and Powers, Turkish Statistics Law, Social Security Institution Law, Law on Prevention of Laundering Proceeds of Crime, Communiqu\u00e9 on Electronic General Assembly System to be Applied in General Assemblies of Joint Stock Companies, Trade Registry Regulation, Regulation on Private Employment Agencies, Regulation on Websites to be opened by Capital Companies, Communiqu\u00e9 on Processes and Technical Criteria Related to Registered Electronic Mail System, Patient Rights Regulation, Regulation on Internal Systems of Banks, other relevant laws, regulations and communiqu\u00e9s.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In line with the above-mentioned purposes, based on your explicit consent and limited to these purposes only, it is collected, processed and stored within the framework of the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, provided that the legal obligation arising from the legislation, the execution and performance of the contracts made with our Muayenehan, the publicization of personal data, the necessity of data processing for the establishment, exercise or protection of a right, and the fundamental rights and freedoms of the person concerned.<\/span><\/p>\n<p><b>5.4. Reasons Requiring Destruction of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data shall be deleted, destroyed or anonymized by the Muayenehane in accordance with the procedures and principles stipulated in the policy, law and regulation upon the request of the person concerned for the reasons stated below, by filling out the application form. Accordingly<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In the event that the purpose requiring the processing or storage of personal data by the practice disappears,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amendment or repeal of the relevant legislation provisions that are the basis for the processing of personal data,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In cases where the processing of personal data by the practice is made only on the basis of explicit consent, the data subject&#8217;s withdrawal of explicit consent,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Pursuant to Article 11 of the Law No. 6698, the application made by the person concerned regarding the deletion and destruction of personal data within the scope of the application rights to the practice is accepted by the KVK Institution,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In cases where the PDP Board rejects the application made by the person concerned with the request for the deletion, destruction or anonymization of his personal data, finds the answer insufficient or does not respond within the period stipulated in Law No. 6698; In case he makes a complaint to the PDP Board and this request is approved by the PDP Board,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Pursuant to the relevant legal regulation, the maximum period that requires the retention of personal data has expired and there is no reason to retain personal data,<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In such cases, it shall be deleted, destroyed or ex officio deleted, destroyed or anonymized by the Practice upon the request of the person concerned.<\/span><\/p>\n<ol start=\"6\">\n<li><b> TECHNICAL AND ADMINISTRATIVE MEASURES FOR THE STORAGE AND DESTRUCTION OF PERSONAL DATA<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Within the scope of the regulations determined by the Policy, for the safe and proper storage of personal data, prevention of unlawful processing, access, prevention of data leaks and the destruction of personal data in accordance with the law, within the framework of the provision &#8220;In the processing of personal data of special nature, it is also necessary to take adequate measures determined by the Board.&#8221; regulated in Article 6 of Law No. 6698 and the necessary adequate measures determined and announced by the Board in order to ensure the security of personal data specified in Article 12 of the same law; Written technical and administrative measures are taken by the Practice as the data controller.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Administrative and Technical Measures have been determined and announced in detail at https:\/\/www.kvkk.gov.tr. These measures are given in Table-3.<\/span><\/p>\n<p><b>TABLE 3 &#8211; Technical and Administrative Measures<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Technical Measures<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Administrative Measures<\/span><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Authority Matrix<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Preparation of Personal Data Processing Inventory<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Authority Control<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Corporate Policies (Access, Information Security, Use, Storage and Destruction, etc.)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Access Logs<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Contracts (between Data Controller and Data Controller, Data Controller and Data Processor)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">User Account Management<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Confidentiality Undertakings<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Network Security<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Internal Periodic and\/or Random Audits<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Application Security<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Risk Analysis<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Encryption<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Labor Contracts, Internal Discipline Directive<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Penetration Test<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Corporate Communication (Crisis Management, Board and Relevant Person Information Processes, Reputation Management, etc.)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Intrusion Detection and Prevention Systems<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Training and Awareness Activities<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Log Records<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Notification to the Data Controllers Registry Information System (VERBIS)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data Masking<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data Loss Prevention Software (DLP)<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Backup<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firewalls<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Current Anti-Virus Systems<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Erasure, Destruction or Anonymization<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Key Management<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><b>6.1. Technical Measures<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Regarding the technical measures specified in the table above and announced by the KVK Institution, the necessary measures written below have been taken by the Practice as the data controller.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In the event that personal data is unlawfully obtained by others, the necessary policies have been established by the Practice in order to notify the relevant person and the Board,<\/span><\/li>\n<\/ul>\n<p><b>6.2. Administrative Measures<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Regarding the administrative measures specified in the table above and announced by the KVK Institution, the necessary measures written below have been taken by the Muayenehane as the data controller.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In order to improve the quality of employees, necessary trainings are provided to prevent unlawful processing of personal data, to ensure the protection of personal data and to raise awareness, and in-house periodic and random audits are carried out,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Confidentiality agreements are signed by employees regarding the activities carried out by the practice,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Before starting to process personal data, the Muayenehane fulfills its obligation to inform the relevant persons. A policy regarding this has been created and communicated to the relevant persons,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A personal data processing inventory has been prepared and necessary updates are made by the Muayenehane as the data controller,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A Disclosure and Information Text was prepared, an application form was prepared and published on the website,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data protection, processing, storage and destruction policy has been determined and its implementation is ensured by the KVKK Committee within the Practice,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The PDP Committee was established, its powers and responsibilities were determined and communicated to the relevant parties,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Separate explicit consent texts were created according to the groups of people concerned,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Work has been initiated to fulfill the retention and destruction requirements for personal data,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Necessary actions have been taken to ensure compliance with the KVK Law, and the practice contracts and texts containing personal data have been scanned and harmonized with the KVKK,<\/span><\/li>\n<\/ul>\n<ol start=\"7\">\n<li><b> EXPLANATIONS ON PERSONAL DATA DESTRUCTION TECHNIQUES<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">As written in the policy and personal data inventory created by our practice, at the end of the period stipulated in the relevant legislation regarding the personal data processed or at the end of the required retention period for the purpose for which they are processed; Personal data are destroyed by the authorized units of the practice spontaneously or upon the application of the relevant personal data owner to our practice, in accordance with Law No. 6698 and the relevant legislation, by the following methods and techniques.<\/span><\/p>\n<p><b>7.1. Deletion of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data on Servers: For the personal data on the servers, deletion is made by the system administrator by removing the access authorization of the relevant users for those whose retention period has expired.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data in Electronic Media: The personal data in electronic media that expire after the expiration of the period for which they are required to be stored shall be made inaccessible and non-reusable in any way for employees (relevant users) other than the database administrator.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data in Physical Environment: For the personal data kept in physical media, those that have expired for the period required to be kept are rendered inaccessible and non-reusable in any way for other employees, except for the unit manager responsible for the document archive. In addition, the blackout process is also applied by scratching\/painting\/erasing in a way that cannot be read.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data on Portable Media: Personal data stored on flash-based storage media, which expire after the period of time required for storage, are encrypted by the system administrator and access authorization is given only to the system administrator and stored in secure environments with encryption keys.<\/span><\/p>\n<p><b>7.2. Destruction of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data in Physical Media: The personal data in paper media that expire after the period of time required for their retention are irreversibly destroyed in paper shredding machines.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data on Optical \/ Magnetic Media: Personal data contained in optical media and magnetic media are physically destroyed, such as melting, incinerating or pulverizing those whose retention period has expired. In addition, the magnetic media is passed through a special device and the data on it is rendered unreadable by exposing it to a high magnetic field.<\/span><\/p>\n<p><b>7.3. Anonymization of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Anonymization of personal data is the removal of the identity of the person concerned from being identified or identifiable and making it impossible to link it to a natural person in any way, even when personal data is matched with other data.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In order for personal data to be anonymized; personal data cannot be linked\/associated with an identified or identifiable natural person even through the use of appropriate techniques in terms of the recording medium and the relevant field of activity, such as the return of personal data by the data controller or third parties and \/ or matching the data with other data.<\/span><\/p>\n<ol start=\"8\">\n<li><b> PERSONAL DATA STORAGE AND DESTRUCTION PERIODS<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Regarding the personal data of the practice being processed within the scope of this policy and the relevant legislation,<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retention periods on personal data basis for all personal data within the scope of the activities carried out depending on the processes in the Personal Data Processing Inventory;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retention periods based on data categories are recorded in VERBIS;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Process-based retention periods are defined in the Personal Data Retention and Destruction Policy.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">takes place.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">These periods are shown in the table in the Personal Data Retention and Destruction Policy of the practice. The retention and destruction periods of personal data are included in the table, taking into account the legitimate interest of the practice and the establishment and execution processes of the contracts made and to be made with the relevant data owner, the lawsuit and legal proceedings that may be filed.\u00a0<\/span><\/p>\n<p><b>TABLE 4- Personal Data Retention and Destruction Periods by Process<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Process<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Storage Time<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Destruction Period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Information on employees<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 Years from the end of the contract<\/span><\/td>\n<td><span style=\"font-weight: 400;\">During the first audit period following the end of the retention period, within 180 days at the latest<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Information in the CVs and job application forms of employee candidates, trainee candidates<\/span><\/td>\n<td><span style=\"font-weight: 400;\">1 year from the finalization of the request<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Within 30 days from the date of request and within 180 days at the latest during the first audit period following the end of the retention period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Interns (student)<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years from the beginning of the calendar year following the end of the internship<\/span><\/td>\n<td><span style=\"font-weight: 400;\">During the first audit period following the end of the retention period, within 180 days at the latest<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Service Providers Suppliers\/Customers<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years from the termination of the contract and employment relationship<\/span><\/td>\n<td><span style=\"font-weight: 400;\">During the first audit period following the end of the retention period, within 180 days at the latest<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Visitors<\/span><\/td>\n<td><span style=\"font-weight: 400;\">1 Year<\/span><\/td>\n<td><span style=\"font-weight: 400;\">During the first audit period following the end of the retention period, within 180 days at the latest<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Customers, Customer Relatives<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 Years from the End of the Purpose of Data Processing<\/span><\/td>\n<td><span style=\"font-weight: 400;\">During the first audit period following the end of the retention period, within 180 days at the latest<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"9\">\n<li><b> PERIODIC DESTRUCTION PERIOD OF PERSONAL DATA<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Pursuant to Article 11 of the Regulation, the Practice has set the periodic destruction period as 6 months. Accordingly, the periodic destruction process is carried out in February and August every year in the Practice.<\/span><\/p>\n<ol start=\"10\">\n<li><b> DELETION AND DESTRUCTION PERIODS UPON APPLICATION OF THE PERSON CONCERNED<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">The periods for deletion and destruction of personal data upon the application of the data subject are regulated in Article 12 of the Regulation as written below.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Accordingly, if all the conditions for processing personal data are no longer applicable, the data controller shall delete, destroy or anonymize the personal data subject to the request. The data controller shall finalize the request of the data subject within thirty days at the latest and inform the data subject. If all the conditions for processing personal data have disappeared and the personal data subject to the request have been transferred to third parties, the data controller shall notify the third party of this situation and ensure that the necessary actions are taken before the third party within the scope of this Regulation.\u00a0 If all the conditions for processing personal data have not been eliminated, this request may be rejected by the data controller by explaining the reason in accordance with the third paragraph of Article 13 of the Law and the rejection response shall be notified to the data subject in writing or electronically within thirty days at the latest.<\/span><\/p>\n<ol start=\"11\">\n<li><b> SITUATIONS WHERE THE PERSONAL DATA OWNER CANNOT ASSERT HIS RIGHTS<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Pursuant to the first paragraph of Article 28 of the Law No. 6698, the following matters are excluded from the scope of application of the law (exceptions) and personal data owners cannot assert their rights listed in the law.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data by natural persons within the scope of activities related to themselves or their family members living in the same residence, provided that personal data are not disclosed to third parties and the obligations regarding data security are complied with,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data for purposes such as research, planning and statistics by anonymizing them with official statistics,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public safety, public order, economic security, privacy of private life or personal rights or does not constitute a crime,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order or economic security,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data by judicial or enforcement authorities in relation to investigations, prosecutions, trials or executions,<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Pursuant to the second paragraph of Article 28 of the Law No. 6698, Article 10 regulating the data controller&#8217;s obligation to disclose, Article 11 regulating the rights of the data subject, except for the right to claim compensation for the damage, and Article 16 regulating the obligation to register with the registry of data controllers, provided that it is appropriate and proportionate to the purpose and basic principles of this law, shall not apply in the following cases:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data is necessary for the prevention of crime or criminal investigation,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data made public by the data subject himself\/herself,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data processing is necessary for the execution of supervisory or regulatory duties and disciplinary investigation or prosecution by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions based on the authority granted by law,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budgetary, tax and fiscal matters.<\/span><\/li>\n<\/ul>\n<ol start=\"12\">\n<li><b> PUBLICATION, STORAGE AND UPDATING OF THE POLICY<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">This policy, prepared by the Practice, is available in a wet-signed (printed paper) environment inside the Practice and<\/span><a href=\"https:\/\/gazimedicalclinic.com\/\"> <span style=\"font-weight: 400;\">https:\/\/gazimedicalclinic.com\/<\/span><\/a><span style=\"font-weight: 400;\"> is published on the website. It will be deemed to be disclosed to the public with the publication of the policy. The printed paper copy is kept in the PDP file. This policy is reviewed by the designated committee members within the scope of their powers and responsibilities, as needed, and the relevant sections will be updated as necessary.\u00a0<\/span><\/p>\n<ol start=\"13\">\n<li><b> ENTRY INTO FORCE AND REPEAL OF THE POLICY<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">This policy, written in the articles above, shall be deemed to have entered into force on 31.12.2021.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If it is decided to abolish the policy with the approval of the data controller and the decision of the personal data committee, the old wet signed copies of the policy are canceled by the committee (by stamping or writing cancellation) and signed by the committee and kept by the data contact person in the &#8220;Accounting Unit \/ Department&#8221; by the committee for at least 5 years.<\/span><\/p>\n<p><b>Website and Social Media Accounts<\/b><b><br \/>\n<\/b><b>Personal Data Sharing<\/b><b><br \/>\n<\/b><b>Explicit Consent Form<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Dear Patient\/Guardian\/Guardian;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medikal Klinik (&#8220;Practice&#8221;) takes photographs of customers before and after surgery, aesthetic operations, hair transplantation, birth, etc. during processes. Your personal data (photo, video) may be published on the website and social media accounts of the practice and the doctor performing the operation for promotional and advertising purposes. You can access our detailed clarification text on the protection of Personal Data from our practice secretariat \/ our website (<\/span><a href=\"https:\/\/gazimedicalclinic.com\/\"><span style=\"font-weight: 400;\">https:\/\/gazimedicalclinic.com\/<\/span><\/a><span style=\"font-weight: 400;\"> ) is available.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As the person concerned, you can access the application form from our secretariat \/ corporate section of our website under the Personal Data Protection menu<\/span><a href=\"https:\/\/gazimedicalclinic.com\/\"> <span style=\"font-weight: 400;\">https:\/\/gazimedicalclinic.com\/<\/span><\/a><span style=\"font-weight: 400;\">\u00a0 you can access.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To publish my personal data (photo, video) for the purposes listed above on the website and social media accounts of the practice and the doctor who performed the operation and to store them unless I request deletion<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0\u00a0I give permission I do not give permission<\/span><\/p>\n<p><span style=\"font-weight: 400;\">I Read\/Approve<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Date:&#8230;&#8230;&#8230;..\/&#8230;&#8230;.\/20&#8230;..<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Name Surname<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Signature:<\/span><\/p>\n<p><b>Gazi Medical Clinic<\/b><\/p>\n<p><b>PERSONAL DATA SUBJECT APPLICATION FORM<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Article 11 of the Law No. 6698 on the Protection of Personal Data stipulates that the data subject may exercise the following rights by applying to the data controller. The application procedures and principles of natural persons whose personal data are processed (Data Subject) to the data controller are regulated by the &#8220;Communiqu\u00e9 on Application Procedures and Principles to the Data Controller&#8221;. In this context, please mark your requests regarding your rights specified in the table below.<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Claimed Rights<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Please<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Please tick<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">a) Learn whether personal data is being processed,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">b) Request information if personal data has been processed,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">\u00e7) To know the third parties to whom personal data are transferred domestically or abroad,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">d) To request correction of personal data in case of incomplete or incorrect processing,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">e) To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">f) To request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data are transferred,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">g) To object to the emergence of a result to the detriment of the person himself\/herself by analyzing the processed data exclusively through automated systems,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">\u011f) In case of damage due to unlawful processing of personal data, to demand compensation for the damage,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">In order to exercise your rights arising from the legal legislation, you can apply using any of the following application methods.<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Secure Electronic Signature, mobile signature or by using the Electronic Mail address you have notified to our practice and registered in our practice system <\/span><span style=\"font-weight: 400;\">info@gazimedicalclinic.com<\/span><span style=\"font-weight: 400;\"> by sending an e-mail to,<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal application to be made by the relevant person to (Alsancak, Kahramanlar Mahallesi, Nevzat G\u00fczel\u0131rmak Sk. No:29, Konak\/\u0130zmir) by filling out this form completely,<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Application to be made through a notary public or by the methods determined by the KVK Institution<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">Please fill out the form below and send your application to our practice, which is the Data Controller, by any of the above methods.\u00a0<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Name-Surname<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">T.C. Identity Number<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">For Citizens of Other Countries<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Passport Number<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Residential Address for Notification<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Workplace Address<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Cell Phone<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Telephone Number<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Fax Number<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Email Address<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Registered Electronic Mail (KEP) Address<\/span><\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">Please indicate your legal relationship with our practice below.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">(Customer, business partner, prospective employee, former employee, third party company employee, shareholder, etc.)<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2610 Customer (Patient) \u2610 Visitor \u2610 Supplier \u2610 Shareholder\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2610Employee \u2610Former Employee \u2610Intern Student \u2610Candidate Employee\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2610Other &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You have worked in our practice<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Unit : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Subject : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Former Employee : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Years I Worked : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Other : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">I applied for a job : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Resume Shared\/Date : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Third Party Company Employee : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Please specify the company and position you work for<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;..<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Please specify your request in detail within the scope of KVKK:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Please select the method by which you will be notified of our response to your application:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2610 I want it sent to my address. \u2610 I want it sent to my e-mail address.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2610 I want to receive it by hand. \u2610 I want it sent to my registered e-mail address<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This form has been prepared in order to determine your legal relationship with our practice and your personal data processed by our practice, if any, and to respond to your application correctly and within the legal period. In order to prevent legal risks that may arise from illegal and unfair data sharing and to ensure the security of your personal data, our practice reserves the right to request additional documents and clarification information for identification and authorization. In the event that the information regarding your requests you submit within the scope of the Application Form is not correct and up-to-date or an unauthorized application is made, our practice does not accept any responsibility for the requests arising from such incorrect information and unauthorized application. If it is received by proxy, the original or certified copy of the power of attorney, certificate of representation or authorization certificate must be present.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Declaration of the Applicant Contact Person:\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As the Personal Data\/Applicant, I hereby accept and declare that I have read the general explanations in the application form, that I am aware of my rights and obligations under the PDP Law and the application form, and that all the information I have provided in the application form is correct and complete. I kindly request that I be informed within the legal period regarding this request.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Relevant Person\/Applicant<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Name Surname :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Application Date :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Signature :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<p><b>PERSONAL DATA PROTECTION LAW<\/b><b><br \/>\n<\/b><b>CLARIFICATION TEXT<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Our practice; In accordance with the Law No. 6698 on the Protection of Personal Data, it pays utmost attention to the processing and protection of your personal data. As the data controller; All necessary technical and administrative measures have been taken to prevent unlawful processing and access of personal data and to ensure the protection of personal data.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to Article 10 of the Law; we inform you with the policies established and this clarification text, covering customers, suppliers, managers and employees of service providers, Practice partners, employees, employee candidates, interns, visitors, relatives of Practice partners and employees, employees of public institutions and organizations and private law legal entities and relevant third parties.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This clarification text has been prepared by Gazi Medikal Klinik (Practice) in the capacity of data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 and the Communiqu\u00e9 on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation.<\/span><\/p>\n<p><b>1- Data Controller:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medical Clinic (Alsancak, Kahramanlar Mahallesi, Nevzat G\u00fczel\u0131rmak Sk. No:29, 35230 Konak\/\u0130zmir), Tax Office: BORNOVA VD. 0370232897 Processes your personal data in the capacity of &#8220;Data Controller&#8221; as defined in Article 3 of the Personal Data Protection Law No. 6698.<\/span><\/p>\n<p><b>2- Purpose for which Personal Data will be Processed:\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to the Law No. 6698 on the Protection of Personal Data, your personal data that you share with our Muayenehane is processed by our Muayenehane by obtaining, recording, storing, storing, changing, rearranging, subject to any kind of processing performed on your personal data, in whole or in part, automatically or by non-automatic means provided that it is part of any data recording system. The Muayenehane processes the personal data it processes within the scope of its activities in accordance with the relevant legislation for the following purposes.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In this direction;<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Your identity information (T.R. Identity Number, your first and last name, place and date of birth, mother and father&#8217;s name, marital status, identity card or other identity information on the identity sharing system),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Your contact information (Address No, telephone numbers, residential address, contact address, e-mail address),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal Information (Salary information, payroll information, disciplinary investigation information, employment document records, resume information, personnel performance evaluation reports, family members and relationship information),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Legal Transaction Information (Personal information in correspondence with judicial authorities, information in litigation and enforcement files),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Customer Transaction Information (Identity information such as Name, Surname, T.R. ID, written and electronic mail, telephone contact information),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Finance Information (Bank account information, Invoice information),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Professional experience information (education information, diploma information, reference information, courses attended, on-the-job training information, certificates, information in reported forms),\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Audiovisual Records (Photographic information on the forms received),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Health Information (Health Reports, Prescription Information, blood type information, personal health and physical disability status information, device and prosthesis information, laboratory and imaging results, test results, examination data (Diagnosis, Decision, Opinions), personal health information),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Records related to security measures (Criminal Records),\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Your personal data such as your personal data, your personal data that you will share directly or indirectly with our Muayenehane are processed and protected in accordance with the Personal Data Protection Law No. 6698 and the relevant legislation, limited to the activities of the Muayenehane. The purposes of personal data processing by our practice are set out below.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of emergency management processes, Management of information security processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting employee candidate \/ intern \/ student selection and placement processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Carrying out the application processes of employee candidates<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of employee satisfaction and loyalty processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Fulfillment of employment contractual and regulatory obligations for employees,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of fringe benefits and benefits processes for employees,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting audit\/ethics activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting training activities, Execution of access authorizations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of activities in accordance with the legislation,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Preparation of various reports, researches and presentations, planning of emergency management processes, follow-up of financial and accounting affairs, to ensure security in our practice,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting financial and accounting affairs,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Sending SMS and e-mails for the promotion and information of our products and services,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of company \/ product \/ service loyalty processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensuring physical space security, Execution of assignment processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Follow-up and execution of legal affairs,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting internal audit \/ investigation \/ intelligence activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting communication activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Planning of human resources processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution\/supervision of business activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting occupational health \/ safety activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Receiving and evaluating suggestions for improving business processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Carrying out activities to ensure business continuity,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of logistics activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of goods \/ service procurement processes, execution of sales processes, execution of after-sales support services,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of goods\/service production and operation processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of customer relationship management processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting activities for customer satisfaction,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Organization and event management,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of advertising \/ campaign \/ promotion processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Carrying out the activities of storage and archive processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Provision of Health Services<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Creating and Tracking Appointment Records<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Prescription Issuance<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of Activities Related to Patient Satisfaction<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Providing Support and Information After Health Care Services<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Planning and Management of Health Services and Financing,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Health Service Provision for the Person Concerned,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of Medical Diagnosis, Treatment and Care Services,<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">For its purposes, your personal data is processed in accordance with the conditions and purposes determined in accordance with Articles 4, 5 and 6 of the Law No. 6698 on the Protection of Personal Data. Your personal data will not be used for any other purpose other than the activities of our Practice.<\/span><\/p>\n<p><b>3- To whom and for what purpose the processed personal data can be transferred:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your personal data processed by our practice is transferred to the relevant real and legal persons for the purposes written below in accordance with Articles 8 and 9 of the Personal Data Protection Law No. 6698. Accordingly\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To our customers, service providers, suppliers, performance assistants and subcontractors in order to carry out the activities of the practice and to fulfill mutual obligations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To the relevant public institutions and organizations, including the Ministry of Health, Revenue Administration, Tax Offices, Social Security Institution and Municipalities, in order to fulfill the legal obligations stipulated in the relevant legislation and to ensure security,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In order to carry out the occupational health and safety processes of the relevant persons, within the scope of occupational health and safety measures, the health information of the employees to the relevant health service providers and insurance companies,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Banks, financial institutions, public and private legal entities, public officials in order to carry out financial transactions of the persons concerned,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In matters related to public security and legal disputes, upon request and limited to the purpose of the request in accordance with the legislation, to prosecutor&#8217;s offices, courts, enforcement offices and relevant legal institutions and organizations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In the domestic transfer of sensitive personal data, your personal data can be transferred by obtaining the explicit consent of the person concerned, and in terms of sensitive personal data other than health and sexual life, your personal data can be transferred in cases stipulated by law.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In summary, together with the relevant groups of persons listed above, it is transferred to authorized public institutions and organizations such as employees of our Practice, legal, financial and tax consultants, auditors, service providers within the scope of Practice activities, ministries, judicial authorities. In addition, your personal data is transferred to persons, institutions and organizations permitted by the provisions of the Law No. 6493 on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions in accordance with the legislation and limited to the purpose of transfer.<\/span><\/p>\n<p><b>4- Data Transfer Abroad:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In accordance with the principles regulated in the second paragraph of Article 4 of the Personal Data Protection Law No. 6698, our practice obtains Explicit Consent Texts regarding the personal data processed separately from employees, employee candidates, customers and suppliers, service providers and visitors. In addition, in the Personal Data Protection Law No. 6698; In cases stipulated in the second paragraph of Article 5 and the third paragraph of Article 6 of the Personal Data Protection Law No. 6698, without seeking explicit consent, in accordance with the rules in Article 9, after the foreign countries with adequate protection to be determined by the Personal Data Protection Board are announced, only to persons and organizations residing in these countries, and for the countries where it is determined and announced that there is no adequate protection, it can be transferred provided that the data controllers in Turkey and in the relevant foreign country undertake an adequate protection in writing and obtain the necessary permissions from the Personal Data Protection Authority in terms of the relevant transfer and on a limited basis.\u00a0<\/span><\/p>\n<p><b>5- Method and Legal Grounds for Collecting Personal Data:\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Within the scope of practice activities; Contracts made with our Practice, legal relations established, application forms, forms filled out on the website, application forms, forms filled out on the website, personal data written in the application form received for the maintenance of human resources processes, documents requested for the personnel file created with the personal data written in the application form received for the maintenance of human resources processes, accounting, financial information received for the establishment and maintenance of financial and social rights, including customers, suppliers, managers and employees of service providers, employees, employee candidates, visitors, relatives of employees, employees of public institutions and organizations and private legal entities and relevant third parties, Personal data processed for the purposes of procurement, marketing, planning, quality and corporate development, personal information forms, training forms, job application forms processed during trainings, personal information processed by automatic or non-automatic methods during your visit to the practice building and its annexes and internet web page, electronically stored data or image records, your personal data processed through electronic automation systems due to your explicit consent or obligation arising from legislation, are collected within the scope of the law and the legal reasons stated below.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Your personal data, in order to carry out the necessary activities and processes by our Practice; International regulations, Constitution, Code of Obligations, Labor Law, Turkish Commercial Code, Tax Procedure Law and related financial legislation, Turkish Criminal Code, Turkish Criminal Procedure Law, Law on the Regulation of Publications on the Internet and Combating Crimes Committed through These Publications, Law on the Regulation of Electronic Commerce, Electronic Signature Law, Law on Electronic Communications, Law on Police Duties and Powers, Turkish Statistics Law, Law on Social Security Institution, Law on Prevention of Laundering Proceeds of Crime, Regulation on the Procedures and Principles for the Regulation of Publications on the Internet, Regulation on the Processing of Personal Health Data and Ensuring Privacy, Regulation on Consumer Rights in the Electronic Communications Sector, Regulation on the Processing of Personal Data and Protection of Privacy in the Electronic Communications Sector, Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, Regulation on Commercial Communication and Commercial Electronic Messages, Communiqu\u00e9 on the Electronic General Assembly System to be Applied in the General Assemblies of Joint Stock Companies, Trade Registry Regulation, Regulation on Private Employment Agencies, Regulation on the Websites to be opened by Capital Companies, Communiqu\u00e9 on Processes and Technical Criteria Related to Registered Electronic Mail System, Regulation on Patient Rights, Regulation on Internal Systems of Banks. In addition, it is collected in accordance with the laws, regulations, communiqu\u00e9s and other relevant legislation in force that cannot be listed here and in accordance with the legal reasons specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698. Accordingly<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Obtaining explicit consent from data subjects whose personal data are processed,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Provided that it is directly related to the establishment or performance of contracts between our practice and third real and legal persons, it is necessary to process personal data belonging to the parties to the contract,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It is mandatory for the practice to fulfill its legal obligation,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The personal data has been made public by the data subject himself\/herself,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data processing is mandatory for the establishment, exercise or protection of a right,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Because it is expressly provided for in the law,<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Personal data processed within the scope of the activities of our practice are kept and stored for the periods determined by our practice according to the nature of the personal data processed and for the period written in the relevant legislation, as specified in the Personal Data Retention and Destruction Policy prepared.<\/span><\/p>\n<p><b>6- Rights of the Personal Data Owner in accordance with the Law No. 6698 on the Protection of Personal Data (Right of Application):<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your requests within the scope of Article 11 of the Law No. 6698 on the Protection of Personal Data &#8220;regulating the rights of the person concerned&#8221;, as the data controller according to the Communiqu\u00e9 on the Procedures and Principles of Application to the Data Controller;\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medical Clinic (Alsancak, Kahramanlar Mahallesi, Nevzat G\u00fczel\u0131rmak Sk. No:29, 35230 Konak\/\u0130zmir) address, by filling out the attached Application Form of the relevant person who is the Personal Data Owner, you can personally deliver a signed copy of the form to the address of the Muayenehane with documents identifying your identity, Secure Electronic Signature, mobile signature or by using the e-mail address you have notified to our Muayenehane and registered in the system of our Muayenehane <\/span><span style=\"font-weight: 400;\">info@gazimedicalclinic.com<\/span><span style=\"font-weight: 400;\">\u00a0 address, by sending an e-mail, by personal application, by application through a notary public or by the methods determined by the Personal Data Protection Board.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to Article 11 of the Law No. 6698 on the Protection of Personal Data; everyone can apply to the data controller regarding him\/her;<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Learn whether personal data is being processed,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Request information if their personal data has been processed,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To learn the purpose of processing personal data and whether they are used for their intended purpose,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To know the third parties to whom personal data is transferred domestically or abroad,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To request correction of personal data in case of incomplete or incorrect processing,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In case of correction, deletion or destruction of personal data, to request that these transactions be notified to third parties to whom personal data are transferred,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To object to the emergence of a result to the detriment of the person himself\/herself by analyzing the processed data exclusively through automated systems,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In case of damage due to unlawful processing of personal data, to demand compensation for the damage,\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">rights.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to the first paragraph of Article 13 of the Law No. 6698 on the Protection of Personal Data, you are required to submit your applications to our Practice in writing or by the above written methods determined by the Personal Data Protection Board in order to exercise your rights mentioned above. Our practice will finalize your requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board will be charged.<\/span><\/p>\n<p><b>Cookies:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Our Experience Enhancement services collect information about visitors to our website www.gazimedicalclinic.com using cookies. A cookie is a string of information that a website has stored on a visitor&#8217;s computer and that the visitor&#8217;s browser provides to the website each time the visitor returns. Most Internet browsers automatically accept cookies, but by editing their options, you can instruct your browser to accept cookies by accepting instructions, to stop accepting cookies, or to ask before accepting a cookie from websites you visit.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">All such collected information is collected on behalf of Gazi Medical Clinic. Except for legal processes, it is not transferred, sold or shared with any 3rd institution or person.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medikal Klinik reserves the right to change the Privacy Policy at any time.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0service to be provided.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Your health data that we have to record in order to provide health services to you is considered as special quality personal data by law. In this context, in accordance with the provision in the second paragraph of Article 6 of the Personal Data Protection Law No. 6698, &#8220;It is prohibited to process sensitive personal data without the explicit consent of the person concerned.&#8221; Since personal health data can only be processed and transferred with the explicit consent of the person, except for the special conditions specified in the law, it has become obligatory to obtain this consent from you.<\/span><\/p>\n<p><b>CLARIFICATION TEXT ON THE LAW ON THE PROTECTION OF PERSONAL DATA<\/b><\/p>\n<p><b>1- Data Controller:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medikal Klinik (Alsancak, Kahramanlar Mahallesi, Nevzat G\u00fczel\u0131rmak Sk. No:29, Konak\/\u0130zmir) processes your personal data in the capacity of &#8220;Data Controller&#8221; as defined in Article 3 of the Law No. 6698 on the Protection of Personal Data.<\/span><\/p>\n<p><b>2- Purpose for which Personal Data will be Processed:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to the Law No. 6698 on the Protection of Personal Data, your personal data that you share with our company is processed by the data controller by obtaining, recording, storing, storing, modifying, rearranging, and rearranging your personal data in whole or in part, automatically or by non-automatic means provided that it is part of any data recording system. The Data Controller processes the personal data it processes within the scope of its activities in accordance with the relevant legislation for the following purposes.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In this context, it covers your personal data that you provide to us verbally, in writing, visually, or electronically in our examination, and your personal data that you transmit to us via internet and mobile applications or electronically or obtained in our office (analysis result, prescription, camera recording, video, photo, etc.).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In this sense, personal health data that are necessary for the execution of the services we will provide to you and obtained for this purpose, in particular, your name, surname, Turkish ID number, (if you are not a Turkish citizen, your passport number or temporary Turkish ID number), place and date of birth, marital status, gender information, various identity documents, contact data such as your address, telephone number, e-mail address, financial data such as your bank account number, IBAN number, Your medical history in your clinical file, information showing your disease history, examination data, data regarding the procedures applied to you, prescription information, your health and sexual life data obtained during the execution of medical diagnosis, treatment and care services such as your photographs, all kinds of images, audio \/ camera recordings, laboratory and imaging results, test results, your data regarding private health insurance and your Social Security Institution data, etc. are considered personal data.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Within the framework of the Personal Data Protection Law No. 6698 and the relevant legislation, your personal data will be recorded only to the extent required by the health service to be provided to you and will be stored in our system \/ archive &#8216;&#8230;not exceeding the period required to fulfill the purposes for which it was recorded&#8217;. Your data processed within this scope will be protected as a professional secret and its confidentiality will be ensured.<\/span><\/p>\n<p><b>3- To whom and for what purpose the processed personal data can be transferred:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">We kindly remind you that in cases where the privacy of personal medical records should be limited for the protection of public health, such as the obligation to notify the competent authorities of infectious diseases regulated in Article 58 of the Public Hygiene Law No. 1593, or in cases of legal obligation, such as the obligation to report a crime, it may be necessary to notify the competent authorities in a limited and measured manner, or it may be shared with another physician for consultation (exchange of opinions) regarding your health status.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Requests from public institutions, judicial authorities and other official authorities to transmit your data to them will be evaluated in terms of the purpose of the request, whether the requested data and the purpose to be achieved coincide, whether it can be concretely demonstrated, whether the only way to achieve the stated purpose is to transmit your data without anonymization, whether data transmission is necessary in a democratic society, and data transmission requests that do not meet all of these elements will not be fulfilled.<\/span><\/p>\n<p><b>4- Data Transfer Abroad:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In accordance with the principles set out in the second paragraph of Article 4 of the Personal Data Protection Law No. 6698, our practice obtains Explicit Consent Texts from employees, employee candidates, customers and suppliers, service providers, and visitors separately regarding the personal data processed. In addition, in the Personal Data Protection Law No. 6698; In cases stipulated in the second paragraph of Article 5 and the third paragraph of Article 6 of the Personal Data Protection Law No. 6698, without seeking explicit consent, in accordance with the rules in Article 9, after the foreign countries with adequate protection to be determined by the Personal Data Protection Board are announced, only to persons and organizations residing in these countries, and for the countries where it is determined and announced that there is no adequate protection, it can be transferred provided that the data controllers in Turkey and in the relevant foreign country undertake an adequate protection in writing and obtain the necessary permissions from the Personal Data Protection Authority in terms of the relevant transfer and on a limited basis.<\/span><\/p>\n<p><b>5- Method and Legal Grounds for Collecting Personal Data:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your personal data is collected and processed in all kinds of verbal, written, visual or electronic media in order to carry out all kinds of work within the scope of the above-mentioned purposes and activities within the legal framework and to fulfill its contractual and legal obligations as a data controller in this context. The legal reason for collecting your personal data;<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Law No. 6698 on the Protection of Personal Data,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Basic Law No. 3359 on Health Services,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Regulation on Processing and Protection of Privacy of Personal Health Data,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ministry of Health regulations and other legislative provisions.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In addition, as stated in the third paragraph of Article 6 of the Law, personal data on health and sexual life can only be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, without seeking the explicit consent of the data subject.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When you enter our practice as a guest, your data is processed by our guest services staff for the purpose of registering you in the examination archive based on the legal reason that &#8220;it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract&#8221; and &#8220;it is mandatory for the data controller to fulfill its legal obligation&#8221;.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The data of our guests whose registration process has been completed will be processed by our healthcare personnel and physicians who are under the obligation of confidentiality during the provision of the health service they have requested and due to the nature of this service, by our healthcare personnel and physicians who are under the obligation of confidentiality, primarily for the legal reason of &#8220;conducting medical diagnosis, treatment and care services&#8221;, based on the cases clearly stipulated in the Health Services Basic Law No. 3359 and the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Affiliated Institutions, the Health Implementation Communiqu\u00e9 and the Patient Rights Regulation and the Turkish Code of Obligations No. 6098, and the information will be recorded through the cloud clinical program.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">After the medical services of our guests are completed, their data are processed for the purpose of receiving the medical service fee from our guests and issuing invoices according to the relevant situation and based on the legal reason that &#8220;it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract&#8221; and &#8220;it is mandatory for the data controller to fulfill its legal obligation&#8221;.<\/span><\/p>\n<p><b>6- Rights of the Personal Data Owner in accordance with the Law No. 6698 on the Protection of Personal Data (Right of Application):<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As the data controller, as per the Communiqu\u00e9 on the Procedures and Principles of Application to the Data Controller, you may submit your requests regarding your data recorded by us within the scope of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Council of Europe Convention No. 108), Article 8 of the European Convention on Human Rights, Article 20 of the Constitution, Article 11 of the Law No. 6698 on the Protection of Personal Data &#8220;regulating the rights of the data subject&#8221;;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medikal Klinik (Alsancak, Kahramanlar Mahallesi, Nevzat G\u00fczel\u0131rmak Sk. No:29, Konak\/\u0130zmir), to the address of the relevant person who is the Personal Data Owner, by filling out the attached Application Form, you can personally deliver a signed copy of the form to the company address with documents identifying your identity, Secure Electronic Signature, mobile signature or by using the e-mail address you have notified to our practice and registered in our company&#8217;s system <\/span><span style=\"font-weight: 400;\">info@gazimedicalclinic.com<\/span><span style=\"font-weight: 400;\"> \u00a0 address, by sending an e-mail, by personal application, by application through a notary public or by the methods determined by the Personal Data Protection Board.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to Article 11 of the Law No. 6698 on the Protection of Personal Data; everyone can apply to the data controller regarding him\/her;<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To learn whether your personal data is processed and the scope of your processed data,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">If your personal data has been processed, to obtain information about it, to access this data and to take samples from them,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To learn the purpose of processing your personal data and whether they are used in accordance with their purpose, whether they are transferred to a third person or institution at home or abroad, and to request notification of any changes in your personal data to the persons or institutions with whom the data is shared,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To request correction of your personal data in case of incomplete or incorrect processing, (We were informed that this right can be exercised by applying to our office address in person or in writing).<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">You have the right to request that some of your data be hidden, deleted or destroyed.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Pursuant to the first paragraph of Article 13 of the Law No. 6698 on the Protection of Personal Data, you are required to submit your applications to our company in writing or by the above-mentioned methods determined by the Personal Data Protection Board. Our Company will finalize your requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board will be charged.<\/span><\/p>\n<p><b>PATIENT (CUSTOMER) DECLARATION OF EXPLICIT CONSENT<\/b><\/p>\n<p><span style=\"font-weight: 400;\">I have read and understood the Personal Data Clarification and Consent Text prepared by Gazi Medikal Klinik, and that I have been verbally informed about the subject,<\/span><\/p>\n<p><span style=\"font-weight: 400;\">I have been informed about the purposes, collection methods and legal reasons for the processing of my personal data &#8220;Health Data&#8221;, which are detailed in the Personal Data Clarification text, my rights to protect my personal data, mandatory situations where my data can be transferred, data security and my application rights,<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Recording, storing and sharing my health data by Gazi Medikal Klinik and its employees within the framework of the above principles,<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In addition, Gazi Medical Clinic will be able to access my contact data specified below by mobile devices, over the internet or by mail to my address, etc.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0\u00a0I ACCEPT WITH MY EXPRESS CONSENT. I DO NOT ACCEPT*<\/span><\/p>\n<p><span style=\"font-weight: 400;\">* In this statement, we hereby inform you that if you do not accept the consent declaration for the processing of your personal data, including your relevant sensitive personal data, we will not be able to provide you with the necessary and sufficient service in terms of our processes that require your explicit consent, and that your commercial and operational activities will be adversely affected, except for the cases permitted to be processed in accordance with the KVKK legislation.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Patient Name Surname : Date: &#8230;&#8230;.\/&#8230;&#8230;.\/&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Address : Time: &#8230;&#8230;&#8230;&#8230;..<\/span><\/p>\n<p><span style=\"font-weight: 400;\">E-mail :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Tel :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Signature :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The patient is under 18 years of age or unconscious:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Patient&#8217;s Relative Name Surname :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Signature : Date: &#8230;&#8230;.\/&#8230;&#8230;.\/&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Degree of Proximity : Watch: &#8230;&#8230;&#8230;&#8230;.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Write &#8220;I understood what I read&#8221; in your own handwriting:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;..<\/span><\/p>\n<p><b>PERSONAL DATA STORAGE AND DESTRUCTION POLICY<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Telephone: 5017335707<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">E-mail: info@gazimedicalclinic.com<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Address:\u00a0 \u00a0 Alsancak, Kahramanlar Mahallesi, Nevzat Guzelirmak Sk. No:29, Konak\/ Izmir<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Mersis No:<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Tax Office<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Tax Number:<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Trade Registry No:<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Effective Date:<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Update Date:<\/span><\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">As Gazi Medical Clinic (Practice), we attach great importance to the processing and protection of all kinds of personal data belonging to all persons, including customers, suppliers, managers and employees of service providers, employees, employee candidates, interns, partners and employee relatives, visitors, public institutions and organizations, employees of private law legal entities and relevant third parties, in accordance with the Law No. 6698 on the Protection of Personal Data (KVKK). For this purpose, our practice takes the necessary administrative and technical measures in accordance with the legal regulations and decisions taken.\u00a0<\/span><\/p>\n<ol>\n<li><b> INTRODUCTION<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Law No. 6698 on the Protection of Personal Data and the Personal Data Retention and Destruction Policy prepared within the scope of the relevant legislation; The Personal Data Protection Law No. 6698 (Law) and the Regulation on the Deletion, Destruction or Anonymization of Personal Data have been prepared by Gazi Medikal Klinik (Practice) as the data controller.<\/span><\/p>\n<p><b>1.1. Objective<\/b><\/p>\n<p><span style=\"font-weight: 400;\">With this policy text prepared by our practice, Gazi Medikal Clinic, in line with the principles set out in the Law; personal data belonging to customers, suppliers, managers and employees of service providers, employees, employee candidates, interns, visitors, public institutions and organizations, employees of private law legal entities and relevant third parties; It is aimed to process the decisions published by the KVK Authority, the principles determined, the Constitution of the Republic of Turkey, International Conventions, the Law No. 6698 on the Protection of Personal Data and the relevant legislation and to ensure that the relevant persons use their rights effectively. The works and transactions regarding the storage and destruction of personal data are carried out in accordance with this policy.<\/span><\/p>\n<p><b>1.2. Scope<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data belonging to customers, suppliers, managers and employees of service providers, employees, employee candidates, interns, visitors, public institutions and organizations, employees of private legal entities and relevant third parties; This policy is within the scope of this policy, and this policy is applied in all recording media where personal data processed by automatic methods or non-automatic means are processed by our Muayenehane and in all activities of the Muayenehane for personal data processing.<\/span><\/p>\n<p><b>1.3. Abbreviations and Definitions<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Open Consent<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Consent on a specific subject, based on information and expressed with free will<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Buyer Group<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The category of natural or legal person to whom personal data is transferred by the data controller<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Anonymization<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Making personal data impossible to be associated with an identified or identifiable natural person under any circumstances, even by matching with other data<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Employee<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Includes Gazi Medical Clinic Employees<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Employee Candidate<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Those who fill out the job application form and apply for a job by using the website, through job search platforms on the internet or by coming to the workplace in person<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Electronic Media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Environments where personal data can be created, read, changed and written with electronic devices<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Non-Electronic Environment<\/span><\/td>\n<td><span style=\"font-weight: 400;\">All written, printed, visual, etc. media other than electronic media<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Service Provider<\/span><\/td>\n<td><span style=\"font-weight: 400;\">A natural or legal person who provides services under a specific contract with the practice<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Related User<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Persons who process personal data within the organization of the data controller or in accordance with the authorization and instruction received from the data controller, except for the person or unit responsible for the technical storage, protection and backup of the data<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Contact Person<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Natural person whose personal data is processed<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Recording Media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Any medium containing personal data that is fully or partially automated or processed by non-automatic means, provided that it is part of any data recording system<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Any information relating to an identified or identifiable natural person<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal Data Processing Inventory<\/span><\/td>\n<td><span style=\"font-weight: 400;\">It is the inventory that data controllers create by associating the personal data processing activities they carry out depending on their business processes, the purposes and legal grounds for processing personal data, the data category, the group of recipients transferred and the group of data subjects, and detail the maximum retention period required for the purposes for which personal data are processed, the personal data foreseen to be transferred to foreign countries and the measures taken regarding data security.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Processing of Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">All kinds of operations performed on personal data such as obtaining, recording, storing, storing, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that they are part of any data recording system<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Law<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Law No. 6698 on the Protection of Personal Data<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Board<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal Data Protection Board<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Institution<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal Data Protection Authority<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal Data Protection Committee<\/span><\/td>\n<td><span style=\"font-weight: 400;\">A unit consisting of more than one member responsible for supervision and oversight in the protection and processing of personal data, established by the decision of the Board of Directors of the Practice<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal Data Contact Person<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The real person notified to the Registry by the data controller for natural and legal persons resident in Turkey and by the representative of the data controller for natural and legal persons not resident in Turkey, in order to ensure communication with the Authority regarding their obligations under the Law and the secondary regulations to be issued based on this Law<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Destruction of Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Deletion, destruction or anonymization of personal data<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Deletion of Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The process of making personal data inaccessible and non-reusable in any way for the relevant users<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Destruction of Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The process of making personal data inaccessible, irretrievable and reusable by anyone in any way<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Sensitive Personal Data<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Periodic Disposal<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Deletion, destruction or anonymization to be performed ex officio at recurring intervals specified in the personal data retention and destruction policy in the event that all of the conditions for processing personal data specified in the law disappear<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Politics<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal Data Processing, Storage and Destruction General Policy<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Interns<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Students who receive applied vocational training and work for this purpose in the practice<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Trainee Candidates<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Students applying to the practice for internship<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Medical Practice<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Gazi Medical Clinic<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Data Processor<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Data Recording System<\/span><\/td>\n<td><span style=\"font-weight: 400;\">A recording system where personal data is structured and processed according to certain criteria.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Data Controller<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Data Controllers Registry Information System<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The information system created and managed by the Presidency, accessible via the internet, which data controllers will use in the application to the Registry and other related transactions regarding the Registry.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">VERBIS<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Data Controllers Registry Information System<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Board of Directors<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Practice Management Board<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Regulation<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Regulation on Deletion, Destruction or Anonymization of Personal Data published in the Official Gazette dated October 28, 2017<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"2\">\n<li><b> DISTRIBUTION OF RESPONSIBILITIES AND TASKS<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Pursuant to Law No. 6698 and the relevant legislation, within the scope of ensuring, maintaining and maintaining compliance with the personal data protection legislation, the &#8220;Practice PDP Committee (Committee)&#8221; in order to ensure the necessary coordination within the Practice determined. The titles, units and job descriptions of those involved in the storage and destruction of personal data are shown in Table 1.<\/span><\/p>\n<p><b>TABLE 1- Distribution of Responsibilities and Duties<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">STAFF<\/span><\/td>\n<td><span style=\"font-weight: 400;\">TASK<\/span><\/td>\n<td><span style=\"font-weight: 400;\">RESPONSIBILITY<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Doctor<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Manager<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal Data Contact Person, KVKK application officer<\/span><\/td>\n<td><span style=\"font-weight: 400;\">To carry out the KVKK process as a contact person on behalf of the Data Controller, to carry out the necessary controls, to ensure coordination between the units, to manage the storage and destruction processes, to make the information system technically compatible with the KVKK, to carry out audit and training activities.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Nurse\/Secretary<\/span><\/td>\n<td><span style=\"font-weight: 400;\">KVKK implementation officer<\/span><\/td>\n<td><span style=\"font-weight: 400;\">The Data Controller is to carry out the KVKK processes under the supervision and supervision of the contact person, to carry out this task instead of the contact person in cases where it is not possible for the contact person to continue this task for any reason, to ensure compliance with the storage period and method of data storage and to carry out the process of destruction of personal data.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">Technical and administrative measures to ensure data security in all environments where personal data is processed are carried out by the responsible units in order to ensure the proper implementation of the technical and administrative measures taken within the scope of this policy, to increase the training and awareness of the relevant unit employees, to prevent the unlawful processing and access of personal data and to ensure that personal data is stored in accordance with the law.<\/span><\/p>\n<ol start=\"3\">\n<li><b> MEDIA WHERE PERSONAL DATA ARE STORED<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Personal data kept by our practice are securely stored in the environments specified in Table-2 in accordance with the Law No. 6698 and the relevant legislation and international data security principles. Your personal data, in whole or in part, automatically or by non-automatic means, provided that it is part of any data recording system, by obtaining, recording, storing, storing, changing, rearranging, subject to any kind of processing performed on your personal data is processed by our Muayenehanemiz.<\/span><\/p>\n<p><b>TABLE 2- Environments where Personal Data are Recorded<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Electronic Media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Non-Electronic (Physical) Media<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal computers (desktop, laptop)<\/span><\/li>\n<\/ul>\n<\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data held in paper form<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Printer, scanner, photocopier, etc.<\/span><\/li>\n<\/ul>\n<\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Job Application Forms<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Contracts between the practice and third parties<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Manual data recording systems (survey forms, visitor logbook, etc.)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data kept in written, printed, visual media<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unit Cabinets<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Archive Rooms<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td colspan=\"2\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Prescriptions<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"4\">\n<li><b> PROCESSING OF PERSONAL DATA AND GENERAL PRINCIPLES<\/b><\/li>\n<\/ol>\n<p><b>4.1. Confidentiality Principle<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As explained in this policy, the data of both employees and all relevant persons who have personal data in contact with our practice are confidential. Within the scope of this policy and the measures taken, no one can use, reproduce, copy, copy, transfer to others and use the data of individuals for other purposes other than the purposes specified in the law.\u00a0<\/span><\/p>\n<p><b>4.2. Basic Principles<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data processed by our practice is processed in accordance with the principles specified in Article 4 of Law No. 6698. The practice processes personal data in accordance with the procedures and principles stipulated in the law, according to the principles written below in the processing, protection, deletion and destruction processes of the data.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Compliance with the law and good faith,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Accurate and, where necessary, up to date,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing for specific, explicit and legitimate purposes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Being relevant, limited and proportionate to the purpose for which they are processed,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retention for the period stipulated in the legislation or required for the purpose for which they are processed.<\/span><\/li>\n<\/ul>\n<p><b>4.3. Terms of Processing Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data processed by our practice is processed in accordance with Article 5 of Law No. 6698. Personal data cannot be processed without the explicit consent of the person concerned. However, in the presence of one of the principles we have stated below, it is possible to process personal data without seeking the explicit consent of the person concerned.\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Principle of legality) Explicitly stipulated in the law,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Actual impossibility) It is necessary for the protection of the life or physical integrity of the person who is unable to disclose his\/her consent due to actual impossibility or whose consent is not legally valid,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Performance of a contract) Processing of personal data of the parties to a contract is necessary, provided that it is directly related to the conclusion or performance of the contract,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Legal obligation) It is mandatory for the data controller to fulfill its legal obligation,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Publicity) The personal data has been made public by the data subject himself\/herself,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Obligation) Data processing is mandatory for the establishment, exercise or protection of a right,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">(Legitimate interest) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.<\/span><\/li>\n<\/ul>\n<p><b>4.4. Conditions for Processing Sensitive Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Sensitive Personal Data processed by our practice is processed in accordance with Article 6 of Law No. 6698. Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership to associations, foundations or trade unions, health, sexual life, criminal conviction and security measures, and biometric and genetic data are personal data of special nature.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It is regulated by the article of the law that the processing of sensitive personal data without the explicit consent of the data subject is prohibited. Accordingly, Special Categories of Personal Data cannot be processed without the explicit consent of the data subject. However, as written in the article of the law; personal data other than health and sexual life listed in the first paragraph of Article 6 of the law may be processed without the explicit consent of the data subject in cases stipulated by law.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal data relating to health and sexual life can only be accessed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing,<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It can be processed without seeking the explicit consent of the data subject. Our practice is processed in accordance with the Law No. 6698 and the relevant legislation and also by taking adequate measures determined by the Board in the processing of sensitive personal data.<\/span><\/p>\n<ol start=\"5\">\n<li><b> EXPLANATIONS ON PERSONAL DATA STORAGE AND DISPOSAL<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">With this policy created by our practice, personal data belonging to customers, suppliers, managers and employees of service providers, employees, employee candidates, interns, visitors, employees of public institutions and organizations and private law legal entities and relevant third parties; It is stored and destroyed in accordance with the laws and relevant legislation. Detailed explanations regarding storage and destruction are set out below.<\/span><\/p>\n<p><b>5.1. Storage of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Article 3 of the Law No. 6698 defines the processing of personal data, and Article 4 stipulates that the personal data processed must be linked, limited and measured for the purpose for which they are processed and must be retained for the period stipulated in the relevant legislation or for the purpose for which they are processed. In Articles 5 and 6 of the Law No. 6698, the processing conditions of personal data are listed. Accordingly, within the scope of the activities of the Practice, personal data are stored in accordance with the relevant legislation or in accordance with our processing purposes; by taking administrative and technical measures for the required period of time.<\/span><\/p>\n<p><b>5.2. Processing Purposes Requiring Retention of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The practice stores the personal data it processes for the following purposes, limited to the activities of the practice, in accordance with the relevant legislation. Accordingly; the processing purposes that require storing personal data are determined in the following items.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To improve the products and services of the practice and to continue growth and development activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Maintaining the financial and accounting affairs of the practice,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To maintain the commercial activities and service procurement transactions of the practice with third parties,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To fulfill legal obligations within the scope of practice activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Planning and execution of human resources processes, fulfillment of work and internship application processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Creating personnel files, fulfilling financial obligations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To make and fulfill the contracts and protocols that the practice has made or will make with its customers, suppliers, employees and third parties with whom it has a legal relationship,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Maintaining marketing activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensuring institutional communication with the practice,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To ensure the institutional quality of the practice, to ensure the safety of the relevant persons with whom it is in contact,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To carry out the works and transactions and processes before the PDP Authority within the scope of the PDP Law,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To liaise with real and legal persons with whom the practice has a legal relationship within the scope of its activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In accordance with the legislation; to make the necessary legal notifications to the relevant public institutions and organizations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To fulfill the practice&#8217;s burden of proof as evidence in legal disputes with third parties,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Participating in trainings, seminars or organizations organized by the practice to ensure corporate and personal development,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To maintain the necessary processes for your contact with our practice, your use of our website regarding the activities of the practice, your contact with the practice contact information, filling out the forms on our website,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To ensure the safety of customers, suppliers, managers and employees of service providers, employees, employee candidates, interns, visitors, employees of public institutions and organizations and private law legal entities and relevant third parties, the building and annexes of the practice, as well as the control of the entrance and exit of the practice building,<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Your personal data is processed in accordance with the conditions and purposes determined in accordance with Articles 5 and 6 of the Law. Your personal data is not used for any other purpose other than the activities of our Practice, which is the data controller, and is not shared with third parties except in cases determined by policies,<\/span><\/p>\n<p><b>5.3. Reasons for Retaining Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your personal data is kept within the framework of the activities of the Practice. In this context, Personal data;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">International regulations, the Constitution, the Personal Data Protection Law, the Code of Obligations, the Labor Law, the Turkish Criminal Code, the Turkish Criminal Procedure Code, the Tax Procedure Law and the relevant financial legislation, the Law on the Regulation of Publications on the Internet and Combating Crimes Committed through These Publications, the Regulation on the Procedures and Principles on the Regulation of Publications on the Internet, Regulation on Processing and Ensuring the Privacy of Personal Health Data, Law on the Regulation of Electronic Commerce, Electronic Signature Law, Electronic Communication Law, Regulation on Consumer Rights in the Electronic Communication Sector, Regulation on the Processing of Personal Data and Protection of Privacy in the Electronic Communication Sector, Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, Regulation on Commercial Communication and Commercial Electronic Messages, Law on Police Duties and Powers, Turkish Statistics Law, Social Security Institution Law, Law on Prevention of Laundering Proceeds of Crime, Communiqu\u00e9 on Electronic General Assembly System to be Applied in General Assemblies of Joint Stock Companies, Trade Registry Regulation, Regulation on Private Employment Agencies, Regulation on Websites to be opened by Capital Companies, Communiqu\u00e9 on Processes and Technical Criteria Related to Registered Electronic Mail System, Patient Rights Regulation, Regulation on Internal Systems of Banks, other relevant laws, regulations and communiqu\u00e9s.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In line with the above-mentioned purposes, based on your explicit consent and limited to these purposes only, it is collected, processed and stored within the framework of the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, provided that the legal obligation arising from the legislation, the execution and performance of the contracts made with our Muayenehan, the publicization of personal data, the necessity of data processing for the establishment, exercise or protection of a right, and the fundamental rights and freedoms of the person concerned.<\/span><\/p>\n<p><b>5.4. Reasons Requiring Destruction of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data shall be deleted, destroyed or anonymized by the Muayenehane in accordance with the procedures and principles stipulated in the policy, law and regulation upon the request of the person concerned for the reasons stated below, by filling out the application form. Accordingly<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In the event that the purpose requiring the processing or storage of personal data by the practice disappears,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amendment or repeal of the relevant legislation provisions that are the basis for the processing of personal data,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In cases where the processing of personal data by the practice is made only on the basis of explicit consent, the data subject&#8217;s withdrawal of explicit consent,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Pursuant to Article 11 of the Law No. 6698, the application made by the person concerned regarding the deletion and destruction of personal data within the scope of the application rights to the practice is accepted by the KVK Institution,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In cases where the PDP Board rejects the application made by the person concerned with the request for the deletion, destruction or anonymization of his personal data, finds the answer insufficient or does not respond within the period stipulated in Law No. 6698; In case he makes a complaint to the PDP Board and this request is approved by the PDP Board,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Pursuant to the relevant legal regulation, the maximum period that requires the retention of personal data has expired and there is no reason to retain personal data,<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In such cases, it shall be deleted, destroyed or ex officio deleted, destroyed or anonymized by the Practice upon the request of the person concerned.<\/span><\/p>\n<ol start=\"6\">\n<li><b> TECHNICAL AND ADMINISTRATIVE MEASURES FOR THE STORAGE AND DESTRUCTION OF PERSONAL DATA<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Within the scope of the regulations determined by the Policy, for the safe and proper storage of personal data, prevention of unlawful processing, access, prevention of data leaks and the destruction of personal data in accordance with the law, within the framework of the provision &#8220;In the processing of personal data of special nature, it is also necessary to take adequate measures determined by the Board.&#8221; regulated in Article 6 of Law No. 6698 and the necessary adequate measures determined and announced by the Board in order to ensure the security of personal data specified in Article 12 of the same law; Written technical and administrative measures are taken by the Practice as the data controller.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Administrative and Technical Measures have been determined and announced in detail at https:\/\/www.kvkk.gov.tr. These measures are given in Table-3.<\/span><\/p>\n<p><b>TABLE 3 &#8211; Technical and Administrative Measures<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Technical Measures<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Administrative Measures<\/span><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Authority Matrix<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Preparation of Personal Data Processing Inventory<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Authority Control<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Corporate Policies (Access, Information Security, Use, Storage and Destruction, etc.)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Access Logs<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Contracts (between Data Controller and Data Controller, Data Controller and Data Processor)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">User Account Management<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Confidentiality Undertakings<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Network Security<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Internal Periodic and\/or Random Audits<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Application Security<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Risk Analysis<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Encryption<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Labor Contracts, Internal Discipline Directive<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Penetration Test<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Corporate Communication (Crisis Management, Board and Relevant Person Information Processes, Reputation Management, etc.)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Intrusion Detection and Prevention Systems<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Training and Awareness Activities<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Log Records<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Notification to the Data Controllers Registry Information System (VERBIS)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data Masking<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data Loss Prevention Software (DLP)<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Backup<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firewalls<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Current Anti-Virus Systems<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Erasure, Destruction or Anonymization<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Key Management<\/span><\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><b>6.1. Technical Measures<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Regarding the technical measures specified in the table above and announced by the KVK Institution, the necessary measures written below have been taken by the Practice as the data controller.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In the event that personal data is unlawfully obtained by others, the necessary policies have been established by the Practice in order to notify the relevant person and the Board,<\/span><\/li>\n<\/ul>\n<p><b>6.2. Administrative Measures<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Regarding the administrative measures specified in the table above and announced by the KVK Institution, the necessary measures written below have been taken by the Muayenehane as the data controller.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In order to improve the quality of employees, necessary trainings are provided to prevent unlawful processing of personal data, to ensure the protection of personal data and to raise awareness, and in-house periodic and random audits are carried out,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Confidentiality agreements are signed by employees regarding the activities carried out by the practice,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Before starting to process personal data, the Muayenehane fulfills its obligation to inform the relevant persons. A policy regarding this has been created and communicated to the relevant persons,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A personal data processing inventory has been prepared and necessary updates are made by the Muayenehane as the data controller,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A Disclosure and Information Text was prepared, an application form was prepared and published on the website,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data protection, processing, storage and destruction policy has been determined and its implementation is ensured by the KVKK Committee within the Practice,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The PDP Committee was established, its powers and responsibilities were determined and communicated to the relevant parties,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Separate explicit consent texts were created according to the groups of people concerned,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Work has been initiated to fulfill the retention and destruction requirements for personal data,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Necessary actions have been taken to ensure compliance with the KVK Law, and the practice contracts and texts containing personal data have been scanned and harmonized with the KVKK,<\/span><\/li>\n<\/ul>\n<ol start=\"7\">\n<li><b> EXPLANATIONS ON PERSONAL DATA DESTRUCTION TECHNIQUES<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">As written in the policy and personal data inventory created by our practice, at the end of the period stipulated in the relevant legislation regarding the personal data processed or at the end of the required retention period for the purpose for which they are processed; Personal data are destroyed by the authorized units of the practice spontaneously or upon the application of the relevant personal data owner to our practice, in accordance with Law No. 6698 and the relevant legislation, by the following methods and techniques.<\/span><\/p>\n<p><b>7.1. Deletion of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data on Servers: For the personal data on the servers, deletion is made by the system administrator by removing the access authorization of the relevant users for those whose retention period has expired.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data in Electronic Media: The personal data in electronic media that expire after the expiration of the period for which they are required to be stored shall be made inaccessible and non-reusable in any way for employees (relevant users) other than the database administrator.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data in Physical Environment: For the personal data kept in physical media, those that have expired for the period required to be kept are rendered inaccessible and non-reusable in any way for other employees, except for the unit manager responsible for the document archive. In addition, the blackout process is also applied by scratching\/painting\/erasing in a way that cannot be read.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data on Portable Media: Personal data stored on flash-based storage media, which expire after the period of time required for storage, are encrypted by the system administrator and access authorization is given only to the system administrator and stored in secure environments with encryption keys.<\/span><\/p>\n<p><b>7.2. Destruction of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data in Physical Media: The personal data in paper media that expire after the period of time required for their retention are irreversibly destroyed in paper shredding machines.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal Data on Optical \/ Magnetic Media: Personal data contained in optical media and magnetic media are physically destroyed, such as melting, incinerating or pulverizing those whose retention period has expired. In addition, the magnetic media is passed through a special device and the data on it is rendered unreadable by exposing it to a high magnetic field.<\/span><\/p>\n<p><b>7.3. Anonymization of Personal Data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Anonymization of personal data is the removal of the identity of the person concerned from being identified or identifiable and making it impossible to link it to a natural person in any way, even when personal data is matched with other data.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In order for personal data to be anonymized; personal data cannot be linked\/associated with an identified or identifiable natural person even through the use of appropriate techniques in terms of the recording medium and the relevant field of activity, such as the return of personal data by the data controller or third parties and \/ or matching the data with other data.<\/span><\/p>\n<ol start=\"8\">\n<li><b> PERSONAL DATA STORAGE AND DESTRUCTION PERIODS<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Regarding the personal data of the practice being processed within the scope of this policy and the relevant legislation,<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retention periods on personal data basis for all personal data within the scope of the activities carried out depending on the processes in the Personal Data Processing Inventory;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retention periods based on data categories are recorded in VERBIS;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Process-based retention periods are defined in the Personal Data Retention and Destruction Policy.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">takes place.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">These periods are shown in the table in the Personal Data Retention and Destruction Policy of the practice. The retention and destruction periods of personal data are included in the table, taking into account the legitimate interest of the practice and the establishment and execution processes of the contracts made and to be made with the relevant data owner, the lawsuit and legal proceedings that may be filed.\u00a0<\/span><\/p>\n<p><b>TABLE 4- Personal Data Retention and Destruction Periods by Process<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Process<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Storage Time<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Destruction Period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Information on employees<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 Years from the end of the contract<\/span><\/td>\n<td><span style=\"font-weight: 400;\">During the first audit period following the end of the retention period, within 180 days at the latest<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Information in the CVs and job application forms of employee candidates, trainee candidates<\/span><\/td>\n<td><span style=\"font-weight: 400;\">1 year from the finalization of the request<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Within 30 days from the date of request and within 180 days at the latest during the first audit period following the end of the retention period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Interns (student)<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years from the beginning of the calendar year following the end of the internship<\/span><\/td>\n<td><span style=\"font-weight: 400;\">During the first audit period following the end of the retention period, within 180 days at the latest<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Service Providers Suppliers\/Customers<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years from the termination of the contract and employment relationship<\/span><\/td>\n<td><span style=\"font-weight: 400;\">During the first audit period following the end of the retention period, within 180 days at the latest<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Visitors<\/span><\/td>\n<td><span style=\"font-weight: 400;\">1 Year<\/span><\/td>\n<td><span style=\"font-weight: 400;\">During the first audit period following the end of the retention period, within 180 days at the latest<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Customers, Customer Relatives<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 Years from the End of the Purpose of Data Processing<\/span><\/td>\n<td><span style=\"font-weight: 400;\">During the first audit period following the end of the retention period, within 180 days at the latest<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"9\">\n<li><b> PERIODIC DESTRUCTION PERIOD OF PERSONAL DATA<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Pursuant to Article 11 of the Regulation, the Practice has set the periodic destruction period as 6 months. Accordingly, the periodic destruction process is carried out in February and August every year in the Practice.<\/span><\/p>\n<ol start=\"10\">\n<li><b> DELETION AND DESTRUCTION PERIODS UPON APPLICATION OF THE PERSON CONCERNED<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">The periods for deletion and destruction of personal data upon the application of the data subject are regulated in Article 12 of the Regulation as written below.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Accordingly, if all the conditions for processing personal data are no longer applicable, the data controller shall delete, destroy or anonymize the personal data subject to the request. The data controller shall finalize the request of the data subject within thirty days at the latest and inform the data subject. If all the conditions for processing personal data have disappeared and the personal data subject to the request have been transferred to third parties, the data controller shall notify the third party of this situation and ensure that the necessary actions are taken before the third party within the scope of this Regulation.\u00a0 If all the conditions for processing personal data have not been eliminated, this request may be rejected by the data controller by explaining the reason in accordance with the third paragraph of Article 13 of the Law and the rejection response shall be notified to the data subject in writing or electronically within thirty days at the latest.<\/span><\/p>\n<ol start=\"11\">\n<li><b> SITUATIONS WHERE THE PERSONAL DATA OWNER CANNOT ASSERT HIS RIGHTS<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Pursuant to the first paragraph of Article 28 of the Law No. 6698, the following matters are excluded from the scope of application of the law (exceptions) and personal data owners cannot assert their rights listed in the law.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data by natural persons within the scope of activities related to themselves or their family members living in the same residence, provided that personal data are not disclosed to third parties and the obligations regarding data security are complied with,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data for purposes such as research, planning and statistics by anonymizing them with official statistics,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public safety, public order, economic security, privacy of private life or personal rights or does not constitute a crime,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order or economic security,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data by judicial or enforcement authorities in relation to investigations, prosecutions, trials or executions,<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Pursuant to the second paragraph of Article 28 of the Law No. 6698, Article 10 regulating the data controller&#8217;s obligation to disclose, Article 11 regulating the rights of the data subject, except for the right to claim compensation for the damage, and Article 16 regulating the obligation to register with the registry of data controllers, provided that it is appropriate and proportionate to the purpose and basic principles of this law, shall not apply in the following cases:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data is necessary for the prevention of crime or criminal investigation,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data made public by the data subject himself\/herself,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data processing is necessary for the execution of supervisory or regulatory duties and disciplinary investigation or prosecution by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions based on the authority granted by law,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budgetary, tax and fiscal matters.<\/span><\/li>\n<\/ul>\n<ol start=\"12\">\n<li><b> PUBLICATION, STORAGE AND UPDATING OF THE POLICY<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">This policy, prepared by the Practice, is available in a wet-signed (printed paper) environment inside the Practice and<\/span><a href=\"https:\/\/gazimedicalclinic.com\/\"> <span style=\"font-weight: 400;\">https:\/\/gazimedicalclinic.com\/<\/span><\/a><span style=\"font-weight: 400;\"> is published on the website. It will be deemed to be disclosed to the public with the publication of the policy. The printed paper copy is kept in the PDP file. This policy is reviewed by the designated committee members within the scope of their powers and responsibilities, as needed, and the relevant sections will be updated as necessary.\u00a0<\/span><\/p>\n<ol start=\"13\">\n<li><b> ENTRY INTO FORCE AND REPEAL OF THE POLICY<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">This policy, written in the articles above, shall be deemed to have entered into force on 31.12.2021.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If it is decided to abolish the policy with the approval of the data controller and the decision of the personal data committee, the old wet signed copies of the policy are canceled by the committee (by stamping or writing cancellation) and signed by the committee and kept by the data contact person in the &#8220;Accounting Unit \/ Department&#8221; by the committee for at least 5 years.<\/span><\/p>\n<p><b>Website and Social Media Accounts<\/b><b><br \/>\n<\/b><b>Personal Data Sharing<\/b><b><br \/>\n<\/b><b>Explicit Consent Form<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Dear Patient\/Guardian\/Guardian;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medikal Klinik (&#8220;Practice&#8221;) takes photographs of customers before and after surgery, aesthetic operations, hair transplantation, birth, etc. during processes. Your personal data (photo, video) may be published on the website and social media accounts of the practice and the doctor performing the operation for promotional and advertising purposes. You can access our detailed clarification text on the protection of Personal Data from our practice secretariat \/ our website (<\/span><a href=\"https:\/\/gazimedicalclinic.com\/\"><span style=\"font-weight: 400;\">https:\/\/gazimedicalclinic.com\/<\/span><\/a><span style=\"font-weight: 400;\"> ) is available.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As the person concerned, you can access the application form from our secretariat \/ corporate section of our website under the Personal Data Protection menu<\/span><a href=\"https:\/\/gazimedicalclinic.com\/\"> <span style=\"font-weight: 400;\">https:\/\/gazimedicalclinic.com\/<\/span><\/a><span style=\"font-weight: 400;\">\u00a0 you can access.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To publish my personal data (photo, video) for the purposes listed above on the website and social media accounts of the practice and the doctor who performed the operation and to store them unless I request deletion<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0\u00a0I give permission I do not give permission<\/span><\/p>\n<p><span style=\"font-weight: 400;\">I Read\/Approve<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Date:&#8230;&#8230;&#8230;..\/&#8230;&#8230;.\/20&#8230;..<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Name Surname<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Signature:<\/span><\/p>\n<p><b>Gazi Medical Clinic<\/b><\/p>\n<p><b>PERSONAL DATA SUBJECT APPLICATION FORM<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Article 11 of the Law No. 6698 on the Protection of Personal Data stipulates that the data subject may exercise the following rights by applying to the data controller. The application procedures and principles of natural persons whose personal data are processed (Data Subject) to the data controller are regulated by the &#8220;Communiqu\u00e9 on Application Procedures and Principles to the Data Controller&#8221;. In this context, please mark your requests regarding your rights specified in the table below.<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Claimed Rights<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Please<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Please tick<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">a) Learn whether personal data is being processed,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">b) Request information if personal data has been processed,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">\u00e7) To know the third parties to whom personal data are transferred domestically or abroad,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">d) To request correction of personal data in case of incomplete or incorrect processing,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">e) To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">f) To request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data are transferred,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">g) To object to the emergence of a result to the detriment of the person himself\/herself by analyzing the processed data exclusively through automated systems,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">\u011f) In case of damage due to unlawful processing of personal data, to demand compensation for the damage,<\/span><\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">In order to exercise your rights arising from the legal legislation, you can apply using any of the following application methods.<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Secure Electronic Signature, mobile signature or by using the Electronic Mail address you have notified to our practice and registered in our practice system <\/span><span style=\"font-weight: 400;\">info@gazimedicalclinic.com<\/span><span style=\"font-weight: 400;\"> by sending an e-mail to,<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal application to be made by the relevant person to (Alsancak, Kahramanlar Mahallesi, Nevzat G\u00fczel\u0131rmak Sk. No:29, Konak\/\u0130zmir) by filling out this form completely,<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Application to be made through a notary public or by the methods determined by the KVK Institution<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">Please fill out the form below and send your application to our practice, which is the Data Controller, by any of the above methods.\u00a0<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Name-Surname<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">T.C. Identity Number<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">For Citizens of Other Countries<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Passport Number<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Residential Address for Notification<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Workplace Address<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Cell Phone<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Telephone Number<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Fax Number<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Email Address<\/span><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Registered Electronic Mail (KEP) Address<\/span><\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">Please indicate your legal relationship with our practice below.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">(Customer, business partner, prospective employee, former employee, third party company employee, shareholder, etc.)<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2610 Customer (Patient) \u2610 Visitor \u2610 Supplier \u2610 Shareholder\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2610Employee \u2610Former Employee \u2610Intern Student \u2610Candidate Employee\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2610Other &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You have worked in our practice<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Unit : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Subject : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Former Employee : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Years I Worked : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Other : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">I applied for a job : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Resume Shared\/Date : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Third Party Company Employee : &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Please specify the company and position you work for<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;..<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Please specify your request in detail within the scope of KVKK:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Please select the method by which you will be notified of our response to your application:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2610 I want it sent to my address. \u2610 I want it sent to my e-mail address.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2610 I want to receive it by hand. \u2610 I want it sent to my registered e-mail address<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This form has been prepared in order to determine your legal relationship with our practice and your personal data processed by our practice, if any, and to respond to your application correctly and within the legal period. In order to prevent legal risks that may arise from illegal and unfair data sharing and to ensure the security of your personal data, our practice reserves the right to request additional documents and clarification information for identification and authorization. In the event that the information regarding your requests you submit within the scope of the Application Form is not correct and up-to-date or an unauthorized application is made, our practice does not accept any responsibility for the requests arising from such incorrect information and unauthorized application. If it is received by proxy, the original or certified copy of the power of attorney, certificate of representation or authorization certificate must be present.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Declaration of the Applicant Contact Person:\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As the Personal Data\/Applicant, I hereby accept and declare that I have read the general explanations in the application form, that I am aware of my rights and obligations under the PDP Law and the application form, and that all the information I have provided in the application form is correct and complete. I kindly request that I be informed within the legal period regarding this request.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Relevant Person\/Applicant<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Name Surname :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Application Date :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Signature :<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<p><b>PERSONAL DATA PROTECTION LAW<\/b><b><br \/>\n<\/b><b>CLARIFICATION TEXT<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Our practice; In accordance with the Law No. 6698 on the Protection of Personal Data, it pays utmost attention to the processing and protection of your personal data. As the data controller; All necessary technical and administrative measures have been taken to prevent unlawful processing and access of personal data and to ensure the protection of personal data.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to Article 10 of the Law; we inform you with the policies established and this clarification text, covering customers, suppliers, managers and employees of service providers, Practice partners, employees, employee candidates, interns, visitors, relatives of Practice partners and employees, employees of public institutions and organizations and private law legal entities and relevant third parties.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This clarification text has been prepared by Gazi Medikal Klinik (Practice) in the capacity of data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 and the Communiqu\u00e9 on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation.<\/span><\/p>\n<p><b>1- Data Controller:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medical Clinic (Alsancak, Kahramanlar Mahallesi, Nevzat G\u00fczel\u0131rmak Sk. No:29, 35230 Konak\/\u0130zmir), Tax Office: BORNOVA VD. 0370232897 Processes your personal data in the capacity of &#8220;Data Controller&#8221; as defined in Article 3 of the Personal Data Protection Law No. 6698.<\/span><\/p>\n<p><b>2- Purpose for which Personal Data will be Processed:\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to the Law No. 6698 on the Protection of Personal Data, your personal data that you share with our Muayenehane is processed by our Muayenehane by obtaining, recording, storing, storing, changing, rearranging, subject to any kind of processing performed on your personal data, in whole or in part, automatically or by non-automatic means provided that it is part of any data recording system. The Muayenehane processes the personal data it processes within the scope of its activities in accordance with the relevant legislation for the following purposes.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In this direction;<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Your identity information (T.R. Identity Number, your first and last name, place and date of birth, mother and father&#8217;s name, marital status, identity card or other identity information on the identity sharing system),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Your contact information (Address No, telephone numbers, residential address, contact address, e-mail address),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal Information (Salary information, payroll information, disciplinary investigation information, employment document records, resume information, personnel performance evaluation reports, family members and relationship information),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Legal Transaction Information (Personal information in correspondence with judicial authorities, information in litigation and enforcement files),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Customer Transaction Information (Identity information such as Name, Surname, T.R. ID, written and electronic mail, telephone contact information),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Finance Information (Bank account information, Invoice information),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Professional experience information (education information, diploma information, reference information, courses attended, on-the-job training information, certificates, information in reported forms),\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Audiovisual Records (Photographic information on the forms received),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Health Information (Health Reports, Prescription Information, blood type information, personal health and physical disability status information, device and prosthesis information, laboratory and imaging results, test results, examination data (Diagnosis, Decision, Opinions), personal health information),<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Records related to security measures (Criminal Records),\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Your personal data such as your personal data, your personal data that you will share directly or indirectly with our Muayenehane are processed and protected in accordance with the Personal Data Protection Law No. 6698 and the relevant legislation, limited to the activities of the Muayenehane. The purposes of personal data processing by our practice are set out below.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of emergency management processes, Management of information security processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting employee candidate \/ intern \/ student selection and placement processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Carrying out the application processes of employee candidates<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of employee satisfaction and loyalty processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Fulfillment of employment contractual and regulatory obligations for employees,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of fringe benefits and benefits processes for employees,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting audit\/ethics activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting training activities, Execution of access authorizations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of activities in accordance with the legislation,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Preparation of various reports, researches and presentations, planning of emergency management processes, follow-up of financial and accounting affairs, to ensure security in our practice,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting financial and accounting affairs,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Sending SMS and e-mails for the promotion and information of our products and services,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of company \/ product \/ service loyalty processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensuring physical space security, Execution of assignment processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Follow-up and execution of legal affairs,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting internal audit \/ investigation \/ intelligence activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting communication activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Planning of human resources processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution\/supervision of business activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting occupational health \/ safety activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Receiving and evaluating suggestions for improving business processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Carrying out activities to ensure business continuity,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of logistics activities,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of goods \/ service procurement processes, execution of sales processes, execution of after-sales support services,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of goods\/service production and operation processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of customer relationship management processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting activities for customer satisfaction,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Organization and event management,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of advertising \/ campaign \/ promotion processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Carrying out the activities of storage and archive processes,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Provision of Health Services<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Creating and Tracking Appointment Records<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Prescription Issuance<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of Activities Related to Patient Satisfaction<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Providing Support and Information After Health Care Services<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Planning and Management of Health Services and Financing,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Health Service Provision for the Person Concerned,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Execution of Medical Diagnosis, Treatment and Care Services,<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">For its purposes, your personal data is processed in accordance with the conditions and purposes determined in accordance with Articles 4, 5 and 6 of the Law No. 6698 on the Protection of Personal Data. Your personal data will not be used for any other purpose other than the activities of our Practice.<\/span><\/p>\n<p><b>3- To whom and for what purpose the processed personal data can be transferred:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your personal data processed by our practice is transferred to the relevant real and legal persons for the purposes written below in accordance with Articles 8 and 9 of the Personal Data Protection Law No. 6698. Accordingly\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To our customers, service providers, suppliers, performance assistants and subcontractors in order to carry out the activities of the practice and to fulfill mutual obligations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To the relevant public institutions and organizations, including the Ministry of Health, Revenue Administration, Tax Offices, Social Security Institution and Municipalities, in order to fulfill the legal obligations stipulated in the relevant legislation and to ensure security,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In order to carry out the occupational health and safety processes of the relevant persons, within the scope of occupational health and safety measures, the health information of the employees to the relevant health service providers and insurance companies,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Banks, financial institutions, public and private legal entities, public officials in order to carry out financial transactions of the persons concerned,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In matters related to public security and legal disputes, upon request and limited to the purpose of the request in accordance with the legislation, to prosecutor&#8217;s offices, courts, enforcement offices and relevant legal institutions and organizations,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In the domestic transfer of sensitive personal data, your personal data can be transferred by obtaining the explicit consent of the person concerned, and in terms of sensitive personal data other than health and sexual life, your personal data can be transferred in cases stipulated by law.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In summary, together with the relevant groups of persons listed above, it is transferred to authorized public institutions and organizations such as employees of our Practice, legal, financial and tax consultants, auditors, service providers within the scope of Practice activities, ministries, judicial authorities. In addition, your personal data is transferred to persons, institutions and organizations permitted by the provisions of the Law No. 6493 on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions in accordance with the legislation and limited to the purpose of transfer.<\/span><\/p>\n<p><b>4- Data Transfer Abroad:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In accordance with the principles regulated in the second paragraph of Article 4 of the Personal Data Protection Law No. 6698, our practice obtains Explicit Consent Texts regarding the personal data processed separately from employees, employee candidates, customers and suppliers, service providers and visitors. In addition, in the Personal Data Protection Law No. 6698; In cases stipulated in the second paragraph of Article 5 and the third paragraph of Article 6 of the Personal Data Protection Law No. 6698, without seeking explicit consent, in accordance with the rules in Article 9, after the foreign countries with adequate protection to be determined by the Personal Data Protection Board are announced, only to persons and organizations residing in these countries, and for the countries where it is determined and announced that there is no adequate protection, it can be transferred provided that the data controllers in Turkey and in the relevant foreign country undertake an adequate protection in writing and obtain the necessary permissions from the Personal Data Protection Authority in terms of the relevant transfer and on a limited basis.\u00a0<\/span><\/p>\n<p><b>5- Method and Legal Grounds for Collecting Personal Data:\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Within the scope of practice activities; Contracts made with our Practice, legal relations established, application forms, forms filled out on the website, application forms, forms filled out on the website, personal data written in the application form received for the maintenance of human resources processes, documents requested for the personnel file created with the personal data written in the application form received for the maintenance of human resources processes, accounting, financial information received for the establishment and maintenance of financial and social rights, including customers, suppliers, managers and employees of service providers, employees, employee candidates, visitors, relatives of employees, employees of public institutions and organizations and private legal entities and relevant third parties, Personal data processed for the purposes of procurement, marketing, planning, quality and corporate development, personal information forms, training forms, job application forms processed during trainings, personal information processed by automatic or non-automatic methods during your visit to the practice building and its annexes and internet web page, electronically stored data or image records, your personal data processed through electronic automation systems due to your explicit consent or obligation arising from legislation, are collected within the scope of the law and the legal reasons stated below.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Your personal data, in order to carry out the necessary activities and processes by our Practice; International regulations, Constitution, Code of Obligations, Labor Law, Turkish Commercial Code, Tax Procedure Law and related financial legislation, Turkish Criminal Code, Turkish Criminal Procedure Law, Law on the Regulation of Publications on the Internet and Combating Crimes Committed through These Publications, Law on the Regulation of Electronic Commerce, Electronic Signature Law, Law on Electronic Communications, Law on Police Duties and Powers, Turkish Statistics Law, Law on Social Security Institution, Law on Prevention of Laundering Proceeds of Crime, Regulation on the Procedures and Principles for the Regulation of Publications on the Internet, Regulation on the Processing of Personal Health Data and Ensuring Privacy, Regulation on Consumer Rights in the Electronic Communications Sector, Regulation on the Processing of Personal Data and Protection of Privacy in the Electronic Communications Sector, Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, Regulation on Commercial Communication and Commercial Electronic Messages, Communiqu\u00e9 on the Electronic General Assembly System to be Applied in the General Assemblies of Joint Stock Companies, Trade Registry Regulation, Regulation on Private Employment Agencies, Regulation on the Websites to be opened by Capital Companies, Communiqu\u00e9 on Processes and Technical Criteria Related to Registered Electronic Mail System, Regulation on Patient Rights, Regulation on Internal Systems of Banks. In addition, it is collected in accordance with the laws, regulations, communiqu\u00e9s and other relevant legislation in force that cannot be listed here and in accordance with the legal reasons specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698. Accordingly<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Obtaining explicit consent from data subjects whose personal data are processed,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Provided that it is directly related to the establishment or performance of contracts between our practice and third real and legal persons, it is necessary to process personal data belonging to the parties to the contract,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It is mandatory for the practice to fulfill its legal obligation,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The personal data has been made public by the data subject himself\/herself,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data processing is mandatory for the establishment, exercise or protection of a right,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Because it is expressly provided for in the law,<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Personal data processed within the scope of the activities of our practice are kept and stored for the periods determined by our practice according to the nature of the personal data processed and for the period written in the relevant legislation, as specified in the Personal Data Retention and Destruction Policy prepared.<\/span><\/p>\n<p><b>6- Rights of the Personal Data Owner in accordance with the Law No. 6698 on the Protection of Personal Data (Right of Application):<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your requests within the scope of Article 11 of the Law No. 6698 on the Protection of Personal Data &#8220;regulating the rights of the person concerned&#8221;, as the data controller according to the Communiqu\u00e9 on the Procedures and Principles of Application to the Data Controller;\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medical Clinic (Alsancak, Kahramanlar Mahallesi, Nevzat G\u00fczel\u0131rmak Sk. No:29, 35230 Konak\/\u0130zmir) address, by filling out the attached Application Form of the relevant person who is the Personal Data Owner, you can personally deliver a signed copy of the form to the address of the Muayenehane with documents identifying your identity, Secure Electronic Signature, mobile signature or by using the e-mail address you have notified to our Muayenehane and registered in the system of our Muayenehane <\/span><span style=\"font-weight: 400;\">info@gazimedicalclinic.com<\/span><span style=\"font-weight: 400;\">\u00a0 address, by sending an e-mail, by personal application, by application through a notary public or by the methods determined by the Personal Data Protection Board.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to Article 11 of the Law No. 6698 on the Protection of Personal Data; everyone can apply to the data controller regarding him\/her;<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Learn whether personal data is being processed,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Request information if their personal data has been processed,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To learn the purpose of processing personal data and whether they are used for their intended purpose,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To know the third parties to whom personal data is transferred domestically or abroad,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To request correction of personal data in case of incomplete or incorrect processing,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In case of correction, deletion or destruction of personal data, to request that these transactions be notified to third parties to whom personal data are transferred,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To object to the emergence of a result to the detriment of the person himself\/herself by analyzing the processed data exclusively through automated systems,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In case of damage due to unlawful processing of personal data, to demand compensation for the damage,\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">rights.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Pursuant to the first paragraph of Article 13 of the Law No. 6698 on the Protection of Personal Data, you are required to submit your applications to our Practice in writing or by the above written methods determined by the Personal Data Protection Board in order to exercise your rights mentioned above. Our practice will finalize your requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board will be charged.<\/span><\/p>\n<p><b>Cookies:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Our Experience Enhancement services collect information about visitors to our website www.gazimedicalclinic.com using cookies. A cookie is a string of information that a website has stored on a visitor&#8217;s computer and that the visitor&#8217;s browser provides to the website each time the visitor returns. Most Internet browsers automatically accept cookies, but by editing their options, you can instruct your browser to accept cookies by accepting instructions, to stop accepting cookies, or to ask before accepting a cookie from websites you visit.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">All such collected information is collected on behalf of Gazi Medical Clinic. Except for legal processes, it is not transferred, sold or shared with any 3rd institution or person.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Gazi Medikal Klinik reserves the right to change the Privacy Policy at any time.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u00a0\u00a0 PERSONAL DATA PROTECTION LAW PATIENT AND PATIENT RELATIVES INFORMATION As Gazi Medikal Klinik, we may need to learn your personal information and health data in order to carry out the services I will provide to you and to record and store them within the limits required by the\u00a0\u00a0 PERSONAL DATA PROTECTION LAW PATIENT AND [&#8230;]\n","protected":false},"author":8,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-7858","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/gazimedicalclinic.com\/en\/wp-json\/wp\/v2\/pages\/7858","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gazimedicalclinic.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/gazimedicalclinic.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/gazimedicalclinic.com\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/gazimedicalclinic.com\/en\/wp-json\/wp\/v2\/comments?post=7858"}],"version-history":[{"count":0,"href":"https:\/\/gazimedicalclinic.com\/en\/wp-json\/wp\/v2\/pages\/7858\/revisions"}],"wp:attachment":[{"href":"https:\/\/gazimedicalclinic.com\/en\/wp-json\/wp\/v2\/media?parent=7858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}