Dr. Andan Clinic
Online
×
Data Controller: Dr. Cengiz Andan (Dr. Andan Clinic)
Address: Cumhuriyet Mh. Halaskargazi Cd. Selamet Apt, 93/4, D:7 34380 Şişli, İstanbul
Website: www.drandanclinic.com
At Dr. Andan Clinic (“Clinic”), we attach great importance to the privacy and security of the personal data of our patients, employees, and visitors. In accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) and relevant legislation, we would like to inform you about the purposes for which your personal data is processed, to whom it is transferred, the methods and legal reasons for data collection, and your rights.
During your utilization of the health services provided by the Clinic, your personal data in the categories specified below are processed:
Identity Information: Name, surname, T.R. identity number (passport number or temporary identity number for foreign patients), place and date of birth, marital status, gender, and a photocopy of your identity document.
Contact Information: Residential address, mobile phone number, e-mail address, and registered electronic mail (KEP) address.
Health Information (Special Category Personal Data): Medical history (anamnesis), examination findings, laboratory and radiological imaging results, prescription information, details of treatments and operations performed, allergy status, blood type, and other medical data.
Visual and Auditory Records: Photographs and video recordings taken before, during, and after the medical procedure to follow the treatment process, and closed-circuit television (CCTV) recordings taken within the scope of clinical security.
Financial Information: Bank account number, IBAN information, data required for invoicing, credit card information (processed only at the time of payment; not recorded).
Other Data: Appointment information, call center voice recordings, patient satisfaction surveys, and messages sent via the website.
Your personal data is processed by our Clinic for the purposes stated below and in accordance with the general principles set forth in Articles 4, 5, and 6 of the KVKK:
Provision of Medical Services: Carrying out medical diagnosis, examination, treatment, and care services; planning and management of aesthetic and plastic surgery operations.
Fulfillment of Legal Obligations: Making notifications to the Ministry of Health and other public institutions within the scope of the Basic Law on Health Services No. 3359, Decree Law No. 663, the Regulation on Private Health Institutions for Outpatient Diagnosis and Treatment, and other relevant legislation.
Management of Clinical Operations: Organizing appointment processes, performing identity verification, and managing patient relations.
Financial Transactions: Invoicing for service fees, performing collection processes, and ensuring financial reconciliation.
Security: Ensuring physical space security within and around the clinic building.
Supply of Medicines and Materials: Supplying medicines, medical supplies, or prosthetics (implants, silicone, etc.) required for your treatment.
Promotion and Information (Subject to Explicit Consent): Using pre-operative/post-operative photographs (de-identified or with explicit consent) for scientific or promotional purposes; making campaign and informative announcements.
Your personal data is collected verbally, in writing, or in electronic environment through your personal application to our clinic, phone/call center, website, e-mail, social media, and instant messaging applications (WhatsApp, etc.).
These data are processed based on the following legal grounds specified in Articles 5 and 6 of the KVKK:
Explicitly Provided by Laws: Obligations arising from health legislation.
Execution of Medical Diagnosis, Treatment, and Care Services: (In accordance with KVKK Article 6/3; processing by a physician under the obligation of confidentiality).
Performance of a Contract: Requirements of the treatment/service contract established between the patient and the clinic.
Legal Obligation: Pursuant to the Tax Procedure Law and Ministry of Health legislation.
Legitimate Interest: Legitimate interests of the clinic such as ensuring patient safety and appointment tracking.
Explicit Consent: Based on the legal ground of the patient’s explicit consent for situations such as sharing visual content for promotional purposes and sending commercial electronic communications.
Your collected personal data may be transferred to the following recipient groups in line with the realization of the purposes listed above and in accordance with Articles 8 and 9 of the KVKK:
Official Institutions: Ministry of Health, Provincial/District Health Directorates, Social Security Institution (SGK), General Directorate of Security, Courts, and Execution Offices.
Health Service Stakeholders: Other physicians for consultation purposes, laboratories, medical imaging centers, and contracted hospitals.
Suppliers and Business Partners: Financial advisors, law firms, information technology (IT) support companies, and patient tracking software providers.
Private Insurance Companies: Relevant insurance companies in case of using private health insurance or complementary insurance.
As a personal data subject, you may exercise the following rights by applying to our Clinic:
To learn whether your personal data is processed,
To request information if it has been processed,
To learn the purpose of processing and whether they are used in accordance with their purpose,
To know the third parties to whom personal data is transferred at home or abroad,
To request correction of personal data if it is processed incompletely or inaccurately,
To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
To request notification of correction, deletion, and destruction processes to third parties to whom the data has been transferred,
To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
To request compensation for the damage in case you suffer damage due to unlawful processing of personal data.
To exercise your rights stated above, you may deliver your requests in writing with a wet signature to «Cumhuriyet Mh. Halaskargazi Cd. Selamet Apt, 93/4, D:7 34380 Şişli, İstanbul» in person, send them via notary public, or forward them to info@drandanclinic.com (via registered electronic mail or with an e-signature, if available).
The Clinic will conclude the request free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.