Institutional General Clarification Text Regarding the Processing of Personal Data

As Doç. Dr. Arzu Akçal Clinic, within the framework of activities arising from the Law No. 6698 on the Protection of Personal Data ("KVKK") and relevant regulations, this clarification text has been prepared to inform you—our patients, online visitors, supplier employees, and supplier representatives—about the processing, storage, and transfer of your personal data.

1) Which Categories of Personal Data Do We Process, and For What Purposes?

Your personal data is processed by Doç. Dr. Arzu Akçal Clinic in accordance with Article 4.2 of KVKK, based on the following principles:

Compliance with the law and rules of honesty,
Accuracy and being up-to-date when necessary,
Being processed for specific, explicit, and legitimate purposes,
Being relevant, limited, and proportionate to the purposes for which they are processed,
Retaining data only for the duration required by relevant legislation or for the purpose for which they are processed.

Your personal data may be processed for the purposes outlined below as part of the ongoing business relationships established with our business partners (a person may fall into more than one category):

A. Online Visitors

For online visitors to our website, the following data is processed:

Transaction security information (e.g., IP address, cookie records)
Identity and contact information (if provided, e.g., your email address)

Purpose of processing:

Ensuring compliance with legal regulations,
Managing information security processes,
Monitoring requests/complaints,
Carrying out communication activities,
Informing authorized individuals, institutions, and organizations,
Enabling access to our website via the internet.

B. Our Patients

For our patients, the following categories of personal data are processed:

Identity information,
Contact information,
Physical space security information,
Health data,
Legal transaction information.

Purpose of processing:

Ensuring compliance with legal regulations,
Managing finance and accounting processes,
Supervising/monitoring business activities,
Conducting treatment processes,
Informing authorized individuals, institutions, and organizations,
Ensuring physical space security,
Resolving legal disputes,
Managing retention and archiving activities,
Managing loyalty processes related to company/product/services,
Conducting communication activities.

C. Our Supplier Representatives

For real-person suppliers or representatives of corporate suppliers, the following categories of personal data are processed:

Identity information,
Contact information,
Physical space security information,
Customer transaction information,
Legal transaction information.

Purpose of processing:

Conducting/supervising business activities,
Managing goods/services procurement processes,
Managing finance and accounting processes,
Managing contract processes,
Ensuring physical space security,
Managing legal affairs.

2) How Are Your Personal Data Collected?

Your personal data, categorized as outlined above, is collected through physical forms such as patient registration forms and anamnesis forms, or through electronic devices and information systems (e.g., telecommunications infrastructure, computers, and phones), our website, and other documents provided by the relevant person. These are collected through automated or non-automated methods.

3) What Are the Legal Grounds for Collecting Your Personal Data?

Your personal data is processed by Doç. Dr. Arzu Akçal Clinic based on the following legal grounds specified in Article 5 of KVKK, to fulfill the purposes stated above:

Explicitly provided for by laws,
Processing is necessary for the establishment or performance of a contract,
Processing is mandatory for the data controller to fulfill its legal obligations,
Processing is mandatory for the establishment, use, or protection of a right,
Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Additionally, for advertising, campaign, and promotional activities, identity and contact data of our patients may be processed based on their explicit consent.

4) Do We Share Your Personal Data with Third Parties?

Personal data of visitors may be shared with law enforcement and judicial authorities upon request in the context of resolving legal disputes and as required by relevant legislation.
Personal data of online visitors may be shared with judicial authorities and authorized public institutions and organizations for similar reasons.
Personal data of our customers may be shared with authorized public institutions and organizations as required by regulations, as well as judicial authorities in potential future disputes.
Personal data of potential customers may be shared with judicial authorities in potential future disputes.
Personal data of supplier employees may be shared with authorized institutions, suppliers, courier companies, banks, and financial advisors in the scope of compliance with regulations and resolving legal disputes.

5) Do We Transfer Your Personal Data Abroad?

As Doç. Dr. Arzu Akçal Clinic, we do not transfer your personal data abroad.

6) How Can You Exercise Your Rights Regarding Your Personal Data?

You may submit your requests under Article 11 of KVKK (regarding the rights of data subjects) to Doç. Dr. Arzu Akçal Clinic via the "Data Controller Application Form" available on our website, in accordance with the "Communiqué on the Principles and Procedures for Application to the Data Controller."

Data Controller:
Doç. Dr. Arzu Akçal Clinic
Address:
Şirinyalı Mah. İsmet Gökşen Cad. Elif Apt No:14/3 Muratpaşa, Antalya