GDPR and Information Texts

DATA CONTROLLER

In accordance with the Law on the Protection of Personal Data No. 6698 (KVKK), in the capacity of data controller, “TDM Information Technologies Education Health Call Center Tourism Dan. Mmm. Renown. and tic. Ltd. Şti. (tdmclinic.com)\" a number of your personal data are being processed by. KVKK Md. 10 and the Lighting Text prepared in accordance with the ”Communiqué on the Procedures and Principles to be Followed in Fulfilling the Lighting Obligation\" has been submitted to the information of the public and relevant persons.

PERSONAL DATA PROCESSED

• Identity data (name, surname, nationality, identity number, place of birth, date of birth, mother\'s name, father\'s name, marital status, gender, information contained in the identity card)
• Contact data (address, phone number, e-mail address, personal data obtained when you contact our website through other means)
• Customer transaction data (private health insurance information, Social Security Institution data, patient number/protocol number, appointment information)
• Transaction security information (tdmclinic.com if you visit the address, IP address information, website login and exit information, e-appointment information, e-result data, cookie records, contact form and data processed via chatbot)
• Financial information (Billing information, bank account information, private health insurance information, social security institution data)
• Audio and visual recordings (security camera recordings, call center audio recordings)
• Health data (blood type, laboratory results, test results, examination data, appointment information and all medical records processed within the scope of medical diagnostic and therapeutic care services)

PURPOSES OF PROCESSING OF PERSONAL DATA

• Personal data is processed limited to the purposes listed below:
• Protection of public health, preventive medicine, medical diagnosis, treatment and maintenance of services
• Planning and management of health services and their financing
• The internal functioning of our company and the planning and management of daily operations
• Registration of people who log in to our website through the Clinical Examination Management System (KMYS) and Remote Health Information System (USBS) within the framework of patient registration services
• Execution of finance and accounting works
• Ability to create appointment requests
• Answering information requests and/or receiving any requests or complaints
• To be able to exercise your rights within the scope of the patient rights regulation and to be able to finalize your requests and complaints within this framework
• Providing information to authorized persons, institutions and organizations, especially the Ministry of Health
• Execution of emergency management processes
• Measuring and increasing patient satisfaction

THE LEGAL REASON FOR THE PROCESSING OF PERSONAL DATA

These personal data are subject to Section 5 of the Law No. 6698. 2 of the article. Subsection

• (a) bendine (to be clearly stipulated in the laws)
• (c) to the point (provided that it is directly related to the establishment or performance of a contract, the processing of personal data belonging to the parties to the contract is required)
• (ç) bendine (mandatory for the data controller to fulfill his/her legal obligation)
• (e) to the point (that data processing is mandatory for the establishment, use or protection of a right)
• (f) to the point (that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned)

It is processed based on legal reasons.

“Health information” from private personal data is 6 of the Law No. 6698. Article 3. Since it is processed by persons who are under the obligation to keep secrets in accordance with the paragraph or by authorized institutions and organizations, it is processed without seeking explicit consent.   

METHOD OF COLLECTION OF PERSONAL DATA

This personal data, the legal grounds based on the above-mentioned forms, contracts, security cameras, call center, computers, KMYS, USBS and other software, through partially automated or automated data recording system to be part of the record or non-automatic means will be processed.

THE TRANSFER OF PERSONAL DATA

All these personal data are transferred to the relevant public institutions such as the Social Security Institution, the General Directorate of Population, the Pharmacists Association of Turkey, especially the Ministry of Health and its affiliated sub-units, as well as to judicial authorities and law enforcement agencies upon request.

Our partners also service provider for provision of your personal data, a team of health services, laboratories, medical device and healthcare institutions, and private insurance companies “public health protection, medical diagnosis, treatment and care services execution, planning and management of health services financing purposes can be transferred.

In addition, data transfer is made to third parties who have received services such as lawyers, consultants, auditors, financial consultants, on condition that they are connected with the received service, limited and measured, and limited to the duration of the service, and by obtaining the necessary October commitments.

A number of data are transferred through Medula, E-Pulse and other similar automatic systems established by authorized institutions and organizations, and some of them are transferred physically. Your data is not shared with third parties except for the persons and institutions mentioned above.

None of the personal data in question is transferred abroad without your explicit consent. All personal data processed are kept by taking administrative and technical measures in accordance with the provisions of the KVKK.

RIGHTS OF THE PERSON CONCERNED

11 of the law “regulating the rights of the relevant person”. By applying to the data controller within the scope of the Article about himself;

a) To learn whether personal data has been processed or not

b) If personal data has been processed, requesting information about it

c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose

ç) To know the third parties to whom personal data are transferred at home or abroad

d) To request correction of personal data in case of incomplete or incorrect processing

e) Law 7. requesting the deletion or destruction of personal data within the framework of the conditions specified in the article

f) to request that the transactions carried out in accordance with subparagraphs (d) and (e) be notified to the third parties to whom the personal data are transferred

g) To object to the occurrence of a result against yourself by analyzing the processed personal data exclusively through automated systems

ğ) To request the compensation of the damage in case of damage due to the unlawful processing of personal data

He has rights.

”In Accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller\";

• The relevant persons must submit these requests in Turkish.
• Requests in writing, TDM personal data by filling out an Information Request Form prepared by technologies pep to the address as previously reported by the person in charge of or related electronic signature or mobile data and data recorded in the system which are responsible for the use of it must be delivered by electronic mail address.
• Applications 5 of the above-mentioned communiqué. 2 of the article. It should contain the mandatory elements listed in the paragraph. Otherwise, the applications to be made will not be taken into consideration.

DATA CONTROLLER CONTACT INFORMATION

Address For Written Application: İstiklal Mahallesi Şair Fuzuli Caddesi No:25/A Odunpazarı/ Eskişehir

PEP: 

E-Mail: [email protected]

Tel: 0850 611 05 26