Explicit Consent Form Regarding the Processing of Personal Data
I have been informed that my personal data, as detailed in the Clarification Text on the Processing of Personal Data by BCT ESTETİK SAĞLIK TURZ. VE DAN. HİZ. TİC.A.Ş. (hereinafter referred to as "Estetik"), may be processed and transferred to the extent necessary for the performance of a contract, as explicitly provided for by law, for the fulfillment of legal obligations, for the protection of public health, for the execution of preventive medicine, medical diagnosis, treatment, and nursing services, and for the planning and management of healthcare services and their financing. Aside from these cases, your explicit consent is requested regarding the matters stated below:
1. Collection, Processing, and Purposes of Processing Personal Data
I have been informed by reading the Clarification/Information Text on the Processing of Personal Data that, in order to provide me with high-standard services, my personal data is obtained verbally, in writing, visually, or electronically through the Call Center, internet, mobile applications, physical locations, and similar channels depending on the nature of the service provided. In this context, my personal health data required for the execution of all medical diagnosis, examination, treatment, and care services, as well as other general and special categories of personal data obtained for this purpose, are listed below:
- Identity Data: My name, surname, TR ID number, passport number or temporary TR ID number if I am not a Turkish citizen, place and date of birth, marital status, gender information, and a photocopy of the TR Identity Card or Driver’s License I presented;
- Contact Data: My address, telephone number, e-mail address;
- Financial Data: My bank account number, IBAN number;
- Health and Sexual Life Data: Laboratory and imaging results, test results, examination data, and prescription information provided by me for follow-up in my file, obtained during the execution of medical diagnosis, treatment, and care services;
- Evaluation Data: Responses and comments I share for the purpose of evaluating your services;
- Visual/Audio Data: Closed-circuit camera system (CCTV) images and audio recordings taken during my visit to your hospitals, and voice call recordings held if I contact your Call Center;
- Insurance Data: Data regarding my private health insurance and Social Security Institution (SGK) data for the purpose of financing and planning health services;
- Vehicle Data: My license plate data if I use the parking and valet services;
- Digital Data: Navigation information, IP address, browser information obtained during the use of your website and mobile application, and medical documents, surveys, form information, and location data I submitted with my own consent.
I have been informed that my personal data and special categories of personal data listed above may be processed for the following purposes:
- Protection of public health, execution of preventive medicine, medical diagnosis, treatment, and care services;
- Sharing requested information with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation;
- Fulfillment of legal and regulatory requirements;
- Financing of health services, analysis of diagnosis and treatment expenses by Patient Services, Financial Affairs, and Marketing departments, and sharing information requested by insurance companies within the scope of customer satisfaction;
- Informing me about my appointments through the Call Center and Digital Channels;
- Confirmation of my identity by Patient Services, Health Professionals, and Call Center departments;
- Planning and management of internal operations by the Hospital Management;
- Analysis by Quality, Patient Experience, and Information Systems departments for the purpose of improving health services;
- Providing training to employees by Human Resources and Quality departments;
- Monitoring and preventing abuse and unauthorized transactions by Audit and Information Systems departments;
- Fulfillment of risk management and quality improvement activities by Quality, Patient Experience, and Information Systems departments;
- Invoicing for services by Patient Services, Financial Affairs, and Marketing departments;
- Confirmation of my relationship with institutions contracted with your hospital by Patient Services, Financial Affairs, and Marketing departments;
- Responding to any questions and complaints regarding the health services provided/to be provided to me by Hospital Management, Patient Experience, Patient Rights, and Call Center departments;
- Taking all necessary technical and administrative measures within the scope of data security of the hospital's systems and applications by Hospital Management and Information Systems departments;
- Providing information about campaigns and participation in campaigns by Marketing, Media and Communication, and Call Center departments; designing and delivering special content, and tangible and intangible benefits on web and mobile channels;
- Ensuring, increasing, and researching patient satisfaction by Hospital Management, Patient Rights, and Patient Experience departments;
- Execution of education and training activities by educational institutions with which the institution cooperates.
I have been informed in detail that my "Personal and Special Category Data" mentioned above may be stored in physical and electronic archives within Estetik International and external service providers with great care and in compliance with legislative provisions.
2. Transfer of Personal Data
My personal data may be shared within the framework of the Health Services Basic Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Law No. 6698 on the Protection of Personal Data, Private Hospitals Regulation, Regulation on the Processing and Privacy of Personal Health Data, and Ministry of Health regulations and other legislative provisions for the purposes explained above with:
- The Ministry of Health, sub-units affiliated with the ministry, and family medicine centers;
- Private insurance companies (health, pension, life insurance, etc.);
- Social Security Institution (SGK);
- General Directorate of Security and other law enforcement agencies;
- General Directorate of Population Affairs;
- Turkish Pharmacists' Association;
- Judicial authorities;
- Laboratories, medical centers, ambulances, medical devices, and institutions providing health services located in Turkey or abroad with which you cooperate as Estetik International for medical diagnosis and treatment;
- Another health institution to which I am referred or to which I apply myself;
- Legal representatives I have authorized;
- Third parties from whom you receive consultancy, including lawyers, tax consultants, and auditors you work with;
- Regulatory and supervisory institutions and official authorities;
- Systems located in Turkey or abroad and/or companies within the group of companies to which your Hospital belongs;
- My employer, if the invoicing is to be made to the employer;
- Suppliers, support service providers, archive service providers, and business partners whose services you benefit from or cooperate with as a company (I know that I can obtain more detailed information by applying in writing to our hospital).
3. Method and Legal Grounds for Collecting Personal Data
I have been informed that my personal data is collected and processed in any verbal, written, visual, or electronic environment, for the purposes stated above and for the execution of all kinds of work included in the field of activity of Estetik International within the legal framework, and for Estetik International to fully and properly fulfill its contractual and legal obligations. The legal grounds for collecting my personal data are:
- Law No. 6698 on the Protection of Personal Data;
- Health Services Basic Law No. 3359;
- Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates;
- Private Hospitals Regulation;
- Regulation on the Processing and Privacy of Personal Health Data;
- Ministry of Health regulations and other legislative provisions.
Furthermore, as stated in Article 6, paragraph 3 of the Law, I am aware that personal data regarding health and sexual life can only be processed without my explicit consent by persons or authorized institutions and organizations under the obligation of confidentiality for the purpose of protecting public health, performing preventive medicine, medical diagnosis, treatment, and care services, planning and management of health services and their financing.
4. Your Rights Regarding the Protection of Personal Data
In accordance with the Law and related legislation, I have been informed that I have the right to:
- Learn whether my personal data is being processed;
- Request information if my personal data has been processed;
- Access and request my personal health data;
- Learn the purpose of processing my personal data and whether they are used in accordance with their purpose;
- Know the third parties to whom my personal data is transferred domestically or abroad;
- Request correction of my personal data if it is processed incompletely or incorrectly;
- Request the deletion or destruction of my personal data;
- Request that the processes of correction, deletion, or destruction of my personal data be notified to third parties to whom the data has been transferred;
- Object to the occurrence of a result against me by analyzing my processed data exclusively through automated systems;
- Request compensation for the damage in case I suffer damage due to the unlawful processing of my personal data.
I know that I can submit my requests within the scope of the Law by filling out the "Application Form Pursuant to the Law on the Protection of Personal Data" at the web address …………………. and:
Doc. No: GDR-F01/P25 Rev. No: 0 4 / 4 Effective Date: 14.04.2018 Delivering it in person to the address ……………………….;
- Sending it via notary public;
- Sending it to the address ……………………………….. with a secure electronic or mobile signature, through a registered electronic mail address (KEP), or via my e-mail address registered in your system.
I declare that I have read and understood the Clarification/Information Text on the Processing of Personal Data prepared by Estetik International; that I have been informed about the purposes of processing my personal data, the institutions, organizations, companies, and health professionals to whom it is transferred, the collection methods and legal grounds, my rights regarding the protection of my personal data, data security, and the right of application; and aside from the cases where processing is mandatory for the performance of the contract, explicitly provided for by law, for Estetik International to fulfill its legal obligations, for the protection of public health, for the execution of preventive medicine, medical diagnosis, treatment, and care services, and for the planning and management of health services and their financing, I GIVE MY EXPLICIT CONSENT for the storage, processing, and transfer of my Personal and Special Category data in accordance with the matters specified in the Clarification/Information Text on the Processing of Personal Data.