The GDP Law

Informing about the Protection of Personal Data

At Okan University Hospital, we attach great importance to the security of your data. Therefore, the information on the legal entity to which each of our hospitals is affiliated is included in the list below.

Hospital / Operating Legal Entity

• Okan University Hospital
• Okan University Acıbadem Polyclinic

We keep all kinds of personal data shared by our patients/companions/visitors/employees/employee candidates, taking all necessary technical and administrative measures to take care of patient privacy and ensure the appropriate security level for your personal data.

This Information on the Protection of Personal Data explains our data protection and processing policy and how we collect, transfer, use, and protect your data during the services performed by our Health Group.

1. Personal Data Collected by Okan Health Group

We collect various information from our patients, companions, visitors, employees, and employee candidates within the framework of our health services and administrative services. The information is collected by the data processing principles and conditions in the Law on the Protection of Personal Data No. 6698 ("KVKK") under all circumstances. The information we collect from you for the purposes described in Section 2 below may include the following:

- Your name, surname, T.C. identity information, passport number,

- Place and date of birth, Gender,

- Your address, phone number, e-mail address,

- Your patient protocol number was created for you by the Hospital,

- Your financial data, such as payment and billing information (IBAN, etc.),

- Your private health insurance or Social Security Institution data,

- Your biometric data within the scope of services financed by the Social Security Institution,

- Your health data, including but not limited to your laboratory results, test results, examination data, check-up information, prescription information,

- If you communicate with us, your voice recording,

- Your closed circuit camera system video recording during your visit to our hospitals,

- If you use the car park/valet service, give your license plate,

- Your health data and identity information that you share when you use the online services on our website okanüniversitesi.com

 - the other data you share when you contact us via e-mail, call center, or other channels.

2. Purposes of Processing Your Personal Data

The personal data we collect as part of the services you receive from us is processed for various purposes, including:

a. Fulfilling our legal obligations in the Health Services Basic Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Regulation on Private Hospitals, Regulation on the Processing and Privacy of Personal Health Data and other relevant regulations;

b. protection of public health, preventive medicine, medical diagnosis, execution of treatment and care services, planning and management of health services and financing;

c. providing you with information about your appointment if you have made an appointment;

d. Planning and managing the internal functioning of the Health Group,

e. to analyze to improve our services;

f. billing;

g. verification of your identity;

h. verification of your relationship with the contracted institutions;

i. responding to the requests of the Ministry of Health and other public institutions and organizations by the applicable legislation;

j. responding to your questions or complaints about our services;

k. analyzing your use of health services to improve the services we offer;

l.To comply with the internal policies and principles of the Health Group;

m. measuring patient satisfaction and increasing patient satisfaction after receiving health services;

n. contacting you for informational purposes regarding our services;

o. supply of drugs or medical devices.

However, your personal data will not be used for any other purpose except for the activities listed above and in cases required by the relevant legislation.

3. Persons and Organizations to which Your Personal Data can be Transferred

By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security per the KVKK and the relevant health legislation, we may transfer the information to institutions or organizations; private insurance companies; our direct/indirect domestic/foreign shareholders, subsidiaries and affiliates; our group companies; auditors; consultants, our business partners, domestic/foreign organizations and other third parties from whom we receive contractual services, cooperate with us to carry out our activities, permitted by the Health Services Basic Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Regulation on Private Hospitals, Regulation on the Processing and Privacy of Personal Health Data and other relevant legislation.

4. Method and Legal Reason for Personal Data Collection

Your personal data is collected in all kinds of oral, written, or electronic media within the scope of the above purposes and for Okan Health Group to fulfill its contractual and legal obligations.

5. Your Rights Regarding Your Personal Data

To the extent that your personal data is processed by Okan Health Group in the capacity of the data controller, per Article 11 of the KVKK, your personal data by filling in the "KVKK Access/Information Request Form" below and delivering it by hand to the address of the Hospital where you received the service, by sending it through a notary public or by submitting it via the Contact Form on the website, you have the following rights;

a) learning whether any of your personal data has been processed;

b) requesting information regarding the processing activities of your personal data;

c) learning the purposes of processing your personal data;

d) If personal data has been transferred to third parties in the country or abroad, learning these persons;

e) Requesting correction of personal data in case of incomplete or incorrect processing;

f) Requesting the deletion or destruction of personal data in case the reasons requiring the processing of personal data disappear or the Group does not have a legal basis or legitimate interest to process the said data;

g) to object to the adverse results that may arise as a result of the processing of personal data through automated systems, and;

h) You have the right to demand compensation if you suffer damage due to the unlawful processing of your personal data.

Our Health Group will finalize the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires a separate cost, the Hospital will charge the tax fee determined by the Personal Data Protection Board.