KVKK

Within the scope of Personal Data Protection Law No. 6698 (the “Law”) and related legislation, your personal data may be processed by Hacettepe University Hospitals in its capacity as Data Controller in accordance with the Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliated Institutions, the Regulation on the Operation of Inpatient Treatment Institutions, Personal Data Protection Law No. 6698, the Regulation on the Processing of Personal Health Data and Ensuring Privacy, Higher Education Law No. 2547, the Law on the Manner of Practicing Medicine and Allied Professions, Ministry of Health regulations and legislation.

Your personal data is obtained verbally, in writing, visually or electronically, through the website and similar channels, for the purposes of protecting public health, preventive medicine, carrying out medical diagnosis, treatment and care services, and planning and managing health services and their financing, which are provided by Hacettepe University Hospitals, and in a manner appropriate to the areas of activity of Hacettepe University Hospitals. Your special categories of personal data, particularly your health data, and your general categories of personal data may be processed by Hacettepe University Hospitals, in a limited and proportionate manner and connected to the purposes specified in this article, including but not limited to the following:

- Your identity information; your first name, surname, Turkish Republic ID number, passport number or temporary Turkish Republic ID number, place and date of birth, marital status, gender, insurance or patient protocol number and other identity data by which we can identify you,

- Your contact information; your address, telephone number, e-mail address and other contact data, your voice call recordings kept by customer representatives or patient services in accordance with call center standards, and personal data obtained when you contact us by e-mail, letter or other means,

- Your financial information; financial data such as your bank account number, IBAN number, credit card information and billing information,

- Your data relating to private health insurance and your Social Security Institution data, for the purpose of financing and planning health services,

- Your camera recording footage kept for security and monitoring purposes if you visit our hospitals,

- Your health information; all kinds of personal data relating to health and sexual life obtained during or as a result of carrying out medical diagnosis, treatment and care services, including but not limited to your laboratory results, test results, examination data, appointment information, check-up information and prescription information,

- Surveys you have completed, thank-you and complaint letters, and your notifications made to evaluate satisfaction results, etc., may be processed.

Within the personal data processing conditions set out in Articles 5 and 6 of the Law, it may be processed by Hacettepe University Hospitals for the following purposes, without being limited to these purposes:

- Protecting public health, preventive medicine, carrying out medical diagnosis, treatment and care services, and planning and managing health services and their financing,

- Sharing requested information with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,

- Planning and managing the internal operation of our hospitals and daily operations,

- Verifying and evaluating patient identity,

- Measuring, increasing and researching patient satisfaction by the Hospital Administration, the Quality Coordination Office and the Patient Rights Unit,

- Procurement of medicines and related supplies,

- Taking all necessary technical and administrative measures within the scope of data security for the systems and applications of our hospitals,

- Carrying out medication preparation processes and checks on whether medications are administered appropriately,

- Conducting analyses for the purpose of improving health services,

- Conducting research,

- Carrying out the patient's inpatient or outpatient treatment,

- Carrying out surgical activities,

- Analyzing your use of health services and storing your health data in order to develop and improve the health services offered by our hospitals,

- Fulfilling legal and regulatory requirements,

- Carrying out risk management and quality improvement activities by the Quality Coordination Office and the Information Technology Directorate,

- Verifying your relationship with institutions that have agreements with our hospitals, or ensuring financial reconciliation with these institutions regarding the health services provided to you,

- Carrying out billing and finance processes,

- Sharing requested information with the Ministry of Health and relevant public institutions and organizations in accordance with the relevant legislation,

- Receiving and evaluating requests and complaints,

- Following up and carrying out legal affairs,

- Fulfilling requests of official institutions,

Your personal data obtained and processed in accordance with the relevant legislation may be transferred to the physical archives and/or information systems of Hacettepe University Hospitals and kept under protection in both digital and physical form.

Your personal data may be transferred to legally authorized public institutions and legally authorized private persons, within the data processing conditions set out in Articles 5 (Conditions for Processing Personal Data) and 6 (Conditions for Processing Special Categories of Personal Data) of the Law, in accordance with the rules on the transfer of personal data set out in Articles 8 (Transfer of Personal Data) and 9 (Transfer of Personal Data Abroad) of the Law.

In accordance with the KVKK and the relevant health legislation, your personal data;

- Higher Education Law No. 2547,

- Basic Law on Health Services No. 3359,

- Social Insurance and General Health Insurance Law No. 5510,

- Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliated Institutions,

- Law on the Manner of Practicing Medicine and Allied Professions,

- Regulation on the Operation of Inpatient Treatment Institutions,

- Institutions or organizations permitted by the Regulation on Personal Health Data and other relevant legislation,

- Occupational Health and Safety Law No. 6331,

- Private insurance companies,

- Auditors, consultants,

- Where necessary, the relevant tax offices and banks, public institutions, courts, enforcement offices, law enforcement,

- Third-party natural and legal persons with whom we are associated where necessary and on the basis of a legal ground,

- Service provider companies and their authorized representatives with whom we work while processing personal information,

may be transferred in accordance with the above laws and regulations, together with all other relevant legislation.

If you give your explicit consent, your relevant health data and other personal data may be transferred to the relatives you name or to third parties, at your request and limited to that request.

If patients have opinion or second-opinion requests forwarded by an intermediary institution on the Hacettepe University Hospitals website, the opinions given by the Hospital, including health data, may be transferred to the intermediary institution.

Your personal data is collected through any verbal, written or electronic means, call center, membership form or other channel for the purposes set out above. Your collected personal data may be processed and transferred for the reasons stated above within the scope of the personal data processing conditions and purposes specified in the relevant articles of the Personal Data Protection Law.

Your Personal Data will be requested and stored by our institution in accordance with the KVKK and legislative provisions.

We inform you that, as a data subject, you have the following rights under Article 11 of Personal Data Protection Law No. 6698:

- To learn whether your personal data is processed,

- To request information if your personal data has been processed,

- To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,

- To know the third parties to whom your personal data is transferred, domestically or abroad,

- To request correction of your personal data if it is incomplete or incorrectly processed, and to request that the action taken in this context be notified to the third parties to whom your personal data has been transferred,

- To request deletion or destruction of your personal data if the reasons requiring its processing no longer exist, even though it has been processed in accordance with the Law and other relevant legal provisions, and to request that the action taken in this context be notified to the third parties to whom your personal data has been transferred,

- To object to the emergence of a result against you through the analysis of your processed data exclusively by automated systems.

Your personal data is protected within technical and administrative means. The necessary security measures are provided at an appropriate level within technological means.

We kindly ask you to submit your requests under the Law to us by filling in the “Application Form under the Personal Data Protection Law” at the web address “http://www.hastane.hacettepe.edu.tr/1081.html”.