LÜLEBURGAZ ÖZEL SAĞLIK HİZMETLERİ A.Ş. INFORMATION/NOTIFICATION TEXT ON THE PROTECTION OF VISITOR PERSONAL DATA
As LÜLEBURGAZ ÖZEL SAĞLIK HİZMETLERİ A.Ş. (Medikent Hospital), we show maximum sensitivity to the security of your personal data. As Medikent Hospital, we carry out all transactions regarding personal data in accordance with Law No. 6698.
Dear visitor, in this context, we would like to enlighten/inform you about the protection of personal data within the scope of the Personal Data Protection Law No. 6698.
Data Controller and Data Subject Information
This clarification text has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data, and Özel Lüleburgaz Sağlık Hizmetleri A.Ş. is the data controller due to the processing of personal data about you, determining the purposes of data processing, establishing and operating the data processing system. Real persons whose personal data are processed by Medikent Hospital are recognized as data subjects by the law.
According to Article 10 of the Law regulating the Obligation to Inform, data controllers are obliged to inform natural persons whose personal data they process about data processing.
This text has been prepared to inform you as the data subject and contains the rights and obligations of the data subject (data subject) and the data controller.
Data Controller
Name/Surname/Title : Lüleburgaz Özel Sağlık Hizmetleri A.Ş.
Tax Number : 6090375330
Tax Office : Lüleburgaz Tax Office
Mailing Address : Dere Mah., Cumhuriyet Caddesi Özel Medikent Hastanesi No:16 Lüleburgaz/Kırklareli
Telephone : (0288) 417 50 50
E-mail : info @medikent.com.tr
Internet Address : www.medikent.com.tr
Personal Data Processing Purposes and Processed Data
Your personal data specified below are processed for the purposes of Ensuring Physical Space Security for visitors, including our customers, employees and employee candidates.
The data processed for the site visitor are the following personal data.
– Knowledge of Physical Space Security
Which data is included in the specified data categories is detailed in the data map we have organized as the data controller.
Legal Grounds for Personal Data Processing
Personal data for the visitor,
– Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
It is processed based on legal grounds.
Processed Personal Data Acquisition Method
Personal data are collected electronically for the purposes specified in this clarification text.
Personal Data Transfer and Purposes
Your personal data may be transferred to the relevant authorities upon request within the framework of Article 28/1 of the KVKK without the obligation to inform and without seeking your explicit consent.
Processed personal data may be shared with judicial authorities or relevant law enforcement agencies or administrative authorities, Lüleburgaz Özel Sağlık Hizmetleri A.Ş. Business partner, Affiliates and subsidiaries, Suppliers, Authorized Public Institutions and Organizations, real persons or private legal entities within the scope of the purposes and limitations stipulated in the legislation and within the scope of the obligations stipulated in Articles 8 and 9 of Law No. 6698.
Rights and Obligations of the Data Controller
As a data controller, it has the rights and obligations to process personal data in accordance with 6698 KVKK and other relevant laws, to prevent unlawful processing and access to personal data, to take adequate security measures in line with technical and actual possibilities for the safe processing and storage of personal data.
We undertake to keep Personal Data confidential, to take all necessary technical and administrative measures to ensure confidentiality and security and to exercise due diligence. Protection of Personal Data is an important issue for our Company. All necessary technical and administrative measures are taken to protect Personal Data against unauthorized access or loss, misuse, disclosure, alteration or destruction of such information. We use generally accepted security technology standards when processing Personal Data. Despite taking the necessary information security measures, in the event that Personal Data is damaged as a result of attacks on our company’s website and data processing systems or if it is obtained by third parties, we will immediately notify you and the Personal Data Protection Board and take the necessary measures.
In the event that at least one of the following issues is present, personal and sensitive personal data may be processed for the specified purposes even if explicit consent is not obtained, as stated in Articles 5 and 6 of the KVKK.
– Explicitly stipulated in the relevant laws.
– Data processing is mandatory for the establishment, exercise or protection of a right.
– It is necessary to process personal data of the parties to a contract, provided that it is directly related to the conclusion or performance of the contract.
– It is mandatory for the data controller to fulfill its legal obligation.
– It has been made public by the data subject (data subject) himself/herself.
– It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid.
– Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
– Processing is stipulated by law for sensitive personal data other than data relating to health and sexual life (data relating to race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, criminal convictions and security measures, and biometric and genetic data).
– Processing by persons or authorized institutions and organizations under the obligation of confidentiality for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing in terms of data on health and sexual life.
Data Subject Rights and Obligations
Data subject is subject to Article 11 of Law No. 6698. It has the rights written in the article.
a) Learn whether personal data is being processed,
b) Request information if personal data has been processed,
c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
ç) To know the third parties to whom personal data are transferred domestically or abroad,
d) To request correction of personal data in case of incomplete or incorrect processing,
e) To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,
f) (d) and To request notification of the transactions made pursuant to subparagraphs (e) to third parties to whom personal data are transferred,
g) To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
ğ) In case of damage due to unlawful processing of personal data, to demand compensation for the damage,
Request and Application
In order to use all your rights mentioned above, you can send the application form and the text containing your explanations regarding the right you want to use to Medikent Hospital as the data controller using one of the following methods.
– Dere Mah., Cumhuriyet Caddesi Özel Medikent Hastanesi No:16 Lüleburgaz/Kırklareli with your wet signed petition.
– You can send your request signed with Secure Electronic Signature to luleburgazozelsaglik@hs03.kep.tr electronic notification address.
Within 30 days after we receive your request, you will be notified through the channels specified here.
Within the scope of the new regulations to be introduced by the Personal Data Protection Authority, we reserve the right to make changes in the clarification text according to all developments that will occur in the future.
By transmitting this text to you, the obligation to inform you within the scope of the Personal Data Protection Law No. 6698 has been fulfilled.