Corporate General Information Text Regarding The Processing Of Personal Data
As Doç. Dr. Arzu Akçal Clinic, we have prepared this information text to inform our patients, online visitors, supplier employees, and supplier representatives regarding the processing, storage, and transfer of your personal data within the scope of the Personal Data Protection Law No. 6698 ("PDPL") and relevant legislation and regulations.
1) What Categories of Personal Data Do We Process, and For What Purposes?
Your personal data is processed by Doç. Dr. Arzu Akçal Clinic in accordance with the principles outlined in Article 4.2 of PDPL:
- Compliance with the law and the rules of honesty,
- Accuracy and, where necessary, up-to-date,
- Processing for specific, explicit, and legitimate purposes,
- Being relevant, limited, and proportionate to the purpose for which they are processed,
- Retaining for the period stipulated in the relevant legislation or as necessary for the purposes for which they are processed.
The categories of personal data we process and their purposes are detailed below based on the business relationships we establish and maintain with our stakeholders (a person may belong to more than one category):
A. Online Visitors
Personal data such as transaction security information (e.g., IP address, cookie records) and, if provided by you, identity information and contact details (e.g., email address):
- Ensuring compliance with legislation,
- Managing information security processes,
- Following up requests/complaints,
- Conducting communication activities,
- Providing access to our website via the internet.
B. Patients
Patients' identity information, contact details, physical security information, health data, and legal transaction information:
- Ensuring compliance with legislation,
- Conducting finance and accounting processes,
- Managing business activities/monitoring,
- Conducting treatment processes,
- Providing information to authorized individuals, institutions, and organizations,
- Ensuring physical security,
- Resolving legal disputes,
- Managing storage and archiving activities,
- Conducting customer loyalty processes,
- Managing communication activities.
C. Supplier Representatives
Identity, contact, physical security, customer transaction, and legal transaction information of individual suppliers or representatives of corporate suppliers:
- Managing business activities/monitoring,
- Conducting goods/service procurement processes,
- Managing finance and accounting processes,
- Managing contract processes,
- Ensuring physical security,
- Monitoring and managing legal processes.
2) How Are Your Personal Data Collected?
Your personal data, categorized above, is collected through physical means (e.g., patient registration and anamnesis forms) or via information systems and electronic devices (e.g., telecommunication infrastructure, computers, telephones), our website, and other documents provided by the relevant person. This collection can occur through both automatic and non-automatic means.
3) What Is the Legal Basis for Collecting Your Personal Data?
Your personal data is processed by Doç. Dr. Arzu Akçal Clinic under the legal bases outlined in Article 5 of PDPL, including but not limited to:
- Explicit stipulation in laws,
- Necessity for the establishment or execution of a contract,
- Obligation to fulfill legal responsibilities,
- Necessity for the establishment, exercise, or protection of a right,
- Legitimate interests of the data controller, provided that fundamental rights and freedoms are not harmed.
4) Do We Transfer Your Personal Data to Third Parties?
- Personal data of visitors may be shared with judicial authorities or law enforcement agencies if required by legal disputes or relevant legislation.
- Patients' personal data may be shared with authorized public institutions and organizations to comply with legal regulations and for legal dispute resolutions.
- Supplier representatives' personal data may be shared with suppliers, courier services, banks, financial advisors, and judicial authorities if required by legal disputes.
5) Do We Transfer Your Personal Data Abroad?
As Doç. Dr. Arzu Akçal Clinic, we do not transfer your personal data abroad.
6) How Can You Exercise Your Rights Regarding Your Personal Data?
You can submit your requests under Article 11 of PDPL, which regulates the rights of data subjects, through the "Application Form to the Data Controller" available on the official website of Doç. Dr. Arzu Akçal Clinic, prepared in line with the “Communiqué on the Procedures and Principles of Application to the Data Controller.”
Data Controller:
Doç. Dr. Arzu Akçal Clinic
Address: Şirinyalı Mah. İsmet Gökşen Cad. Elif Apt. No:14/3, Muratpaşa, Antalya, Turkey