1. General Description
Under the law, personal data encompasses any information related to an identifiable or identifiable natural person. A special category of personal data, known as Special Category Personal Data, refers to information regarding race, ethnic origin, political opinions, philosophical beliefs, religion, sect, other beliefs, attire and dress, association, foundation or union memberships, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.
The processing of personal data refers to any operation performed on data such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing their use by fully or partially automated means or through non-automated means that form part of a data recording system.
2. Data Controller
Your personal data may be processed by ÖZEL BEYHEKİM HOSPITAL HEALTH SERVICE TRADE COMPANY LIMITED (“Data Controller”), acting as the data controller, within the scope explained below in accordance with the Personal Data Protection Law No. 6698 (“Law”). You can review the tables below for details on what your personal data is, how it is collected, which personal data may be processed by us, and the purposes of processing these data.
3. Groups of Individuals Whose Personal Data is Processed
We process the personal data of the following groups of individuals within the hospital setting:
Employees
Interns
Board Members
Employee Candidates
Visitors
Supplier Authorities / Employees
Patients
Patient Relative
Parents/Guardians/Representatives
Third Parties Making Notifications
Personal Data of Employees and Interns
Detailed information about the personal data processed about employees and interns is published in a way only accessible to our employees and interns, and they have been provided detailed information about this matter. If you are a former employee or intern of Beyhekim Hospital, you can exercise your rights regarding the personal data processed during your period as an employee or intern through one of the application channels stated in this Information Text.
Personal Data of Board Members
Detailed information about the personal data processed about our Board Members is published in a way only accessible to the board, and they have been provided detailed information about this matter. If you are a former board member of Beyhekim Hospital, you can exercise your rights regarding the personal data processed during your period as a board member through one of the application channels stated in this Information Text.
Personal Data of Employee Candidates
Processed Personal Data
Identity Information: Name, Surname, Marital Status Information, Driver's License Information, Military Service Status Information, Date of Birth, Place of Birth, Driver's License Copy, Signature, Identity Card, Identity Copy, Photo)
Contact Information: Email Address, Mobile Phone Number
Personnel Information: Resume Information, Applied Position Information, Height/Weight Information, Reference Information
Professional Experience Information: Course Information, Certificates, In-Job Training Information, Foreign Language Knowledge, Computer Usage Knowledge, Diploma Information
Purposes of Personal Data Processing
Your personal data is processed for the purpose of Conducting Employee Candidate / Intern / Student Selection and Placement Processes, Conducting Employee Candidate Application Processes, Planning Human Resources Processes, and managing Contract Processes.
Method of Obtaining Your Personal Data:
They are collected via online electronic forms, email, job application form, İŞKUR, and private employment offices, electronic forms, and printed forms.
Legal Reasons for Processing Your Personal Data:
By Beyhekim Hospital; in line with the realization of the above-mentioned purposes, primarily under Article 5 of the KVKK and the relevant legislation;
It is necessary to process personal data of the parties to a contract being directly related to the establishment or performance of a contract,
It is processed based on legal reasons, provided that it does not harm the fundamental rights and freedoms of the related person, processing data is mandatory for the legitimate interests of the data controller.
Visitor Personal Data
Processed Personal Data
Identity Information: Name, Surname
Contact Information: Mobile Phone Number, Email Address
Transaction Security Information: Port Information, IP Address Information, Website Entrance and Exit Information, Device MAC Address
Physical Security Information: Entry-Exit Record Information, Visit Details, CCTV Records
Purposes of Personal Data Processing
Identity and Contact Information Data; Processed for the purpose of conducting and auditing Work Activities, Conducting Occupational Health and Safety Activities, Providing Information to Authorized Persons, Institutions and Organizations, Creating and Following Visitor Records,
Your Transaction Security data; Processed for the purpose of conducting Information Security Procedures, Conducting and Auditing Work Activities, Providing Information to Authorized Persons, Institutions, and Organizations,
Your Physical Space Security Data; Processed for ensuring Security of Physical Spaces, Conducting and Auditing Work Activities, Conducting Occupational Health and Safety Activities, Providing Information to Authorized Persons, Institutions and Organizations, Creating and Following Visitor Records.
Method of Obtaining Your Personal Data:
Your Identity Information; Collected via information systems and electronic devices.
Your Contact Information; Collected via online electronic forms, email, job application form, İŞKUR, and private employment offices, electronic forms, and printed forms.
Your Transaction Security Information; Collected via information systems and electronic devices.
Your Physical Space Security Information; Collected via printed forms.
Legal Reasons for Processing Your Personal Data:
By Beyhekim Hospital; in line with the realization of the above-mentioned purposes, primarily under Article 5 of the KVKK and the relevant legislation;
Explicitly stipulated by laws,
It is necessary to fulfill the data controller's legal obligation, based on legal reasons.
Necessary for the establishment or performance of a contract related directly to the parties' data processing,
It is processed based on legal reasons, provided that it does not harm the fundamental rights and freedoms of the related person, processing data is mandatory for the legitimate interests of the data controller.
Supplier/Supplier Employees Personal Data
Processed Personal Data
Identity Information: Name Surname, T.C. Identification Number, Signature, Signature Circular
Contact Information: Business Phone Number, Mobile Phone Number, Business Address, Business Name-Title, Email Address, Fax Number, Other Telephone Number Information
Personnel Information: Positional Title Information, Company Name
Finance Information: Bank Account Information
Purposes of Personal Data Processing:
Your personal data is processed for the purposes of Conducting Goods/Service Procurement Processes, Conducting Finance and Accounting Tasks, Conducting/Auditing Work Activities, Conducting Contract Processes, Conducting Supply Chain Management Processes.
Method of Obtaining Your Personal Data:
Your Identity Information; Collected through company-owned software, call center calls, customer experience surveys, social media accounts, platforms managed by third parties, printed forms, contracts, emails, and documents declared by you.
Your Personnel Information; Collected via company-owned software, contracts, emails, and printed forms.
Your Contact Information; Collected via contracts, company-owned software, platforms managed by third parties, printed forms, meetings, and events.
Your Finance Information; Collected via printed forms.
Legal Reasons for Processing Your Personal Data:
By Beyhekim Hospital; in line with the realization of the above-mentioned purposes, primarily under Article 5 of the KVKK and the relevant legislation;
Explicitly stipulated by laws,
It is necessary to fulfill the data controller's legal obligation, based on legal reasons.
Necessary for the establishment or performance of a contract related directly to the parties' data processing,
It is processed based on legal reasons, provided that it does not harm the fundamental rights and freedoms of the related person, processing data is mandatory for the legitimate interests of the data controller.
Patient Personal Data
Processed Personal Data
Identity Information: Name Surname, Date of Birth, Place of Birth, T.C. Identification Number, Foreign Identification Number, Marital Status, Patient Number, Nationality, Parent Names, Gender, SGK Registry Number, Identity Card-Identity Copy, Photo, Signature, Tax Identification Number, Identity Card Serial Number
Finance Information: Invoice Information, Amount Information, Collection Information, Contribution Share Information, Patient Debt Information, Provision Information, Discount Information, Fee Information, Bank Account Information, Bank Card Information, Credit Card Information
Contact Information: Business Phone Number, Mobile Phone Number, Home Phone Number, Other Phone, Residence-Mail Address, Treatment Institution, Email Address, Fax Number
Family Member Information: Health Information and Medical Information About Family Members, Number of Children, Degree of Kinship of Family Members, Marital Status Information, Names and Surnames of Family Members, Contact Information of Family Members, Bank Account Information of Family Members, T.C. Identification Numbers of Family Members
Personnel Information: Information on Contractual Institutions, Reference Information, Social Security Institution Information, Resume Information, Protocol Information, Institution Worked, Position-Title Information, Private Health Insurance Information, SGK Information, SGK Employment Entry Notice, SGK Termination Notice, Payroll Information
Professional Experience Information: Diploma Information
Special Categorical Personal Data / Health Information: Diagnostic Information, Treatment Information, Report Information, Surgery Information, Appointment Information, Anesthesia Information, Vaccination Information, Discharge Information, Prescription Information, E-Prescription Information, Laboratory Information, Referral Information, Blood Group Information, Test and Sample Information, Laboratory Information, Examination Information, Examination Test Information, Pregnancy Status Information, Health Status Information, Information on Used Devices and Protocols, Health Report, Session Information, Clinic Information, Radiological Imaging Information, Death Information, Special Condition Information
Purposes of Personal Data Processing
Your personal data is processed for the purposes of Conducting Information Security Processes, Conducting Finance and Accounting Jobs, Conducting Communication Activities, Conducting Customer Relationship Management Processes, Conducting Emergency Management Processes, Conducting Contract Processes, Conducting Activities in Compliance with Legislation, Maintaining Business Continuity Activities, Conducting Audit/Ethical Activities, Providing Information to Authorized Persons, Institutions, and Organizations, Conducting Retention and Archiving Activities, Conducting Communication Activities, Conducting Internal Audit/Investigation/Intelligence Activities, Conducting Work Activities/Auditing, Conducting Customer Relations Management Processes, Conducting Occupational Health/Safety Activities, Conducting Goods/Services Production and Operational Processes, Conducting Finance and Accounting Activities, Organization and Event Management, Conducting Management Activities, Conducting Training Activities, Ensuring Security of Data Controller Operations, Ensuring Security of Physical Spaces, Ensuring Security of Movable Properties and Resources, Conducting Goods/Services Sale Processes, Receiving and Evaluating Suggestions for Improving Business Processes.
Methods for Obtaining Your Personal Data
Your Identity Information; Collected via information systems/electronic devices, platforms managed by third parties, face-to-face, call center calls, documents declared by the relevant party, contracts, and other documents provided by you.
Finance Information; Collected via information systems/electronic devices, documents declared by the relevant party, contracts, face-to-face, and other documents provided by you.
Contact Information; Collected via information systems/electronic devices, documents declared by the relevant party, contracts, platforms managed by third parties, call center calls, face-to-face, and other documents provided by you.
Information on Family Members; Collected via platforms managed by third parties, call center calls, documents declared by the relevant party, contracts, and other documents provided by you.
Personnel Information; Collected via information systems/electronic devices, documents declared by the relevant party, contracts, and other documents provided by you.
Professional Experience Information; Collected via contracts, documents declared by the relevant party, and other documents provided by you.
Health Information; Collected via information systems/electronic forms, platforms managed by third parties, call center calls, documents declared by the relevant party, contracts, face-to-face, and other documents provided by you.
Legal Reasons for Processing Your Personal Data:
Your Personal Data, by Beyhekim Hospital; in line with the realization of the above-mentioned purposes, primarily under Article 5 of the KVKK and the relevant legislation;
Explicitly stipulated by laws,
Necessary for the establishment or performance of a contract related directly to the parties' data processing,
It is necessary to fulfill the data controller's legal obligation,
It is processed based on legal reasons, provided that it does not harm the fundamental rights and freedoms of the related person, processing data is mandatory for the legitimate interests of the data controller.
Your personal health data, by Beyhekim Hospital; in line with the realization of the above-mentioned purposes, primarily under Article 6 of the KVKK and the relevant legislation;
Subject to the individual's explicit consent,
Personal data regarding health and sexual life, however, can be processed without the individual's explicit consent by persons or authorized institutions and organizations covered by the confidentiality obligation for the purposes of protecting public health, conducting preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing.
Based on legal reasons.
Personal Data of Patient Relatives
Processed Personal Data
Identity Information: Name Surname, Date of Birth, Place of Birth, T.C. Identification Number, Foreign Identification Number, Marital Status, Patient Number, Nationality, Parent Names, Gender, SGK Registry Number, Identity Card-Identity Copy, Photo, Signature, Tax Identification Number, Identity Card Serial Number
Finance Information: Bank Account Information
Contact Information: Residence-Mail Address, Business Phone Number, Mobile Phone Number, Other Phone
Personnel Information: Resume Information, Payroll Information
Information on Family Members: Degree of Kinship of Family Members
Methods of Obtaining Your Personal Data
Your Identity Information; Collected via information systems and electronic devices, documents declared by the relevant party, contracts, and other documents provided by you.
Finance Information; Collected via documents declared by the relevant party, contracts, and other documents provided by you.
Contact Information; Collected via information systems and electronic devices, contracts, documents declared by the relevant party, and other documents provided by you.
Personnel Information; Collected via documents declared by the relevant party, contracts, and other documents provided by you.
Information on Family Members; Collected via printed forms provided by you.
Purposes of Personal Data Processing
Your personal data is processed for the purposes of Conducting Information Security Processes, Conducting Retention and Archiving Activities, Conducting Audit/Ethical Activities, Conducting Activities in Compliance with Legislation, Conducting Contract Processes, Conducting Communication Activities, Providing Information to Authorized Persons, Institutions, and Organizations, Conducting Social Responsibility and Civil Society Activities, Conducting Work Activities/Auditing, Maintaining Business Continuity Activities, Conducting Management Activities, Conducting Finance and Accounting Jobs, Conducting Internal Audit/Investigation/Intelligence Activities, Conducting Post-Sale Support Services, Conducting Goods/Services Production and Operational Processes, Ensuring Physical Space Security, Conducting Internal Audit/Investigation/Intelligence Activities.
Legal Reasons for Processing Your Personal Data
Your Personal Data by Beyhekim Hospital; in line with the realization of the above-mentioned purposes, primarily under Article 5 of the KVKK and the relevant legislation;
Necessary for the establishment or performance of a contract related directly to the parties' data processing,
It is necessary to fulfill the data controller's legal obligation, based on legal reasons.
Personal Data of Parent/Guardian/Representatives
Processed Personal Data
Identity Information: Name Surname, T.C. Identification Number, Foreign Identification Number, Signature
Finance Information: Bank Account Information
Contact Information: Mobile Phone Number
Purposes of Personal Data Processing:
Your personal data is processed for the purposes of Conducting Emergency Management Processes, Conducting Information Security Processes, Selecting and Placing Employee Candidates/Interns/Students, Conducting Training Activities, Conducting Activities in Compliance with Legislation, Conducting Communication Activities, Conducting Work Activities/Auditing, Conducting Occupational Health/Safety Activities, Conducting Retention and Archiving Activities, Conducting Social Responsibility and Public Society Activities, Conducting Contract Processes, Maintaining Business Continuity Activities, Conducting Organization and Event Management, Conducting Advertising/Campaign/Promotion Processes, Providing Information to Authorized Persons, Institutions, and Organizations, Conducting Management Activities.
Methods of Obtaining Your Personal Data: Your Personal Data is collected via printed forms.
Legal Reasons for Processing Your Personal Data:
Your Identity Information, by Beyhekim Hospital; in line with the realization of the above-mentioned purposes, primarily under Article 5 of the KVKK and the relevant legislation;
Necessary for the establishment or performance of a contract related directly to the parties' data processing,
It is necessary to fulfill the data controller's legal obligation, based on legal reasons.
Explicitly stipulated by laws,
It is processed based on legal reasons, provided that it does not harm the fundamental rights and freedoms of the related person, processing data is mandatory for the legitimate interests of the data controller.
Third Parties Making Notifications
Processed Personal Data
Identity Information: Name, Surname
Contact Information: Mobile Phone Number, Email Address
Purposes of Personal Data Processing
Your personal data is processed for the purposes of Conducting Company/Product/Service Loyalty Processes, Conducting Communication Activities, Conducting Customer Relationship Management Processes, Conducting Activities Aimed at Ensuring Customer Satisfaction, and Tracking Demand/Complaints Processes.
Methods for Obtaining Your Personal Data
Your Identity and Contact Information; collected via call center calls, social media accounts, and printed forms.
Legal Reasons for Processing Your Personal Data:
Your Contact and Identity Information, by Beyhekim Hospital; in line with the realization of the above-mentioned purposes, primarily under Article 5 of the KVKK and the relevant legislation;
It is processed based on legal reasons, provided that it does not harm the fundamental rights and freedoms of the related person, processing data is mandatory for the legitimate interests of the data controller.
4. Legal Reasons for Collection of Your Special Category Personal Data
Special category personal data requires a higher level of protection compared to other categories of data. According to KVKK, it is regulated that additional information should be provided for processing these types of data.
Special category personal data includes information about a person's race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, attire, association, foundation or union membership, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.
5. Transfer of Your Personal Data Within the Country
In accordance with legal regulations and the legislation we are subject to, primarily shared with authorized persons as explicitly authorized by the legislation, such as the Social Security Institution. Additionally, your personal data will be shared with authorized persons or public institutions and organizations upon request by a court decision or authorized administrative authorities.
Your personal data will be shared with third parties processing data to fulfill obligations within the scope of our employment contract (for instance, sharing your health data with our workplace doctors within the scope of the Occupational Health and Safety Law No. 6331, etc.).
Your personal data may be shared with individuals or private law legal entities we have a business collaboration with, for the purposes of conducting finance and accounting jobs and conducting contract processes within the scope of our service agreement.
Your personal data may be shared with our suppliers for the purposes of conducting supply chain management processes and fulfillment of the contract regarding the products or services supplied from the suppliers within the scope of our service agreement.
Your personal data may be shared with our business partners we have a business collaboration with, for conducting business activities and fulfilling the contract within the scope of our service agreement.
6. Are We Transferring Your Personal Data Abroad?
Your personal data is not transferred abroad.
7. How Long Are Your Personal Data Kept?
The storage period of your personal data is as follows:
If a period is specified in the law or relevant legislation for data retention, this data must be kept for at least that period. Unless otherwise stipulated by legislation, your personal data is generally retained for 10 years from the performance or termination of the contract.
In anticipation of possibilities such as a late receipt of a possible court request regarding the relevant data or a dispute we might be a party to occurring, an additional period of 6 months to 1 year is added to the periods stipulated by legislation for data retention, and at the end of the determined period, said data is deleted, destroyed, or anonymized.
If a period for keeping the processed data is not stipulated in the legislation, your data is kept for the duration of our relationship as required by our relationship and for the period specified in the contract made with you. After the end of said relationship or after the period specified in the contract has passed, your data is deleted, destroyed, or anonymized without requiring any request from you.
If all conditions for processing personal data have ceased or the period of retention declared by us or determined within the scope of legislation has expired, your data shall be deleted, destroyed, or anonymized ex officio on the first periodic destruction date or no later than 6 months. If you make a request due to a valid reason to delete your data, your data shall be deleted no later than within 30 days. If legislation stipulates a retention period for your data, and you request deletion before these periods, your request cannot be fulfilled.
8. What Are Your Rights Under Article 11 of KVKK?
You can fill out the “Data Owner Application Form” available on our website for all your requests or submit your application document prepared by yourself to our Company through the following channels. Applications you submit under Article 11 of KVKK will be evaluated comprehensively and promptly. Your application request will be responded to and concluded within no later than 30 days.
The rights you have under the said article are listed below:
Learn whether your personal data is being processed by the Company and request information regarding this,
Learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
Request correction of your personal data if incomplete or incorrectly processed,
Request the deletion or destruction of your personal data within the context of the conditions set forth in KVKK Article 7,
Request that the operations conducted under Article 11, paragraphs (d) and (e) of KVKK be reported to third parties to whom personal data has been transferred,
Object to any unfavorable outcome arising from the analysis of your personal data exclusively by automated systems,
Request compensation in the event that you incur a loss due to the unlawful processing of your personal data.
You can communicate your requests regarding your personal data via the Communications Form, if you wish;
By sending it with a wet signature and a photocopy of your identity card to Tepekum, Beyhekim Sk. No:10 Adapazarı/Sakarya address,
By personally applying to Beyhekim Hospital with a valid identification document,
By sending to our registered electronic mail address ozelbeyhekim@hs.01kep.tr using a registered electronic mail (KEP) address, and secured electronic signature or mobile signature,
By sending an email to bilgi@beyhekimhastanesi.com.tr by filling out a petition signed with a mobile signature or secured electronic signature by the Applicant or if they wish, filling out the “Relevant Person Application Form”.
Thank you for reading the Information text.
