Personal Data Protection Law (KVKK) and General Data Protection Regulation (GDPR) Disclosure and Consent Statement
At Dalyan Dentist (as Dt. Hayrettin Ersan) , it may be necessary to process, record, and store your personal and health data for the purpose of providing the health services we offer. These data will be used solely within the limits required for our services and in compliance with both the Turkish Personal Data Protection Law (KVKK) and the European Union General Data Protection Regulation (GDPR).
1. Purpose of Processing Personal Data and Collection Methods
As part of the health services provided by our clinic, we collect your personal information, including identity details (name, surname, Turkish ID number, place and date of birth, marital status, gender), contact information (address, phone number, email address), financial data (bank account number, IBAN), and health information (medical history, examination data, laboratory and imaging results, prescription details). These data are collected and processed through written, oral, visual, or electronic means and are used solely for the purpose of providing our services.
2. Special Categories of Personal Data and Consent
The health data we collect are considered special categories of personal data under both KVKK and GDPR. Therefore, processing such data is only permitted with your explicit consent. Thus, explicit consent is required for processing your health data in the context of the health services provided by our clinic.
3. Storage and Sharing of Personal Data
The personal data we collect will be stored only for the duration necessary to provide the services and will be kept in our archives for no longer than necessary. Your data will be protected as professional secrets and will be kept confidential. Sharing with third parties will only occur in cases of legal obligations or as necessary for the service. For example, in cases of reporting communicable diseases to authorities or fulfilling legal reporting requirements, your data may be disclosed to authorized entities strictly for these purposes. Additionally, consultation with another physician regarding your health condition may be required.
4. International Data Transfer
Your personal data may be transferred internationally only if adequate protection is ensured in accordance with GDPR and KVKK.
5. Rights of Data Subjects
Under KVKK and GDPR, you have the following rights regarding your personal data:
- To know whether your personal data are being processed,
- To request information about the processing of your personal data,
- To learn the purpose of processing your personal data and whether they are being used in accordance with these purposes,
- To request correction of incomplete or inaccurate data,
- To request deletion or destruction of your personal data,
- To seek compensation for damages caused by unlawful processing of your personal data,
- To withdraw your consent for data processing (withdrawal of consent is effective from the date of withdrawal).
6. Consent Statement
By reading and understanding this statement, you consent to the processing of your personal data in accordance with the principles outlined above. We confirm that our clinic has taken all necessary measures to ensure the protection and confidentiality of the information you provide.