As Private Bandırma Royal Hospital and Health Services Joint Stock Company (“ROYAL HOSPITAL”), you, as the Data Controller, are the Relevant Person who has contact with the Royal Hospital within the framework of the Personal Data Protection Law No. 6698 (“KVKK”) and relevant legislation (“Relevant Person”). ) This information text (“Information Text”) has been prepared for the purpose of informing you about the collection, processing and transfer of your personal data. You can learn detailed information about your personal data collected, processed and transferred through the Personal Data Protection Board's Data Controllers Registry Information System ("VERBİS"). VERBIS records of the Royal Hospital https://verbis.kvkk.gov.tr You can reach us by searching for the company title above in the "Registry Inquiry" section.

1 - İşlenen Kişisel Veriler

Detailed information about your personal data collected and processed is located under the "Data Categories" heading in VERBIS. Among your personal data collected and processed;

(a) Name, surname, Republic of Turkey (“T.R.”) identification number, T.R. For non-citizens, passport number or temporary Turkish ID number. Identity data such as identification number, place and date of birth, marital status, gender,
(b) Contact data such as address, telephone number, e-mail address,
(c) Personal data obtained during the execution of medical diagnosis, treatment and care services such as examination, diagnosis, test data and test, laboratory and imaging results, prescription information,
(d) Medical data of previous examinations, diagnoses and tests that you submit with your own consent,
(e) Data regarding private health insurance and Social Security Institution data for the purpose of financing and planning health services,
(f) Financial data such as bank account number depending on possible payments,
(g) Answers and comments shared for the purpose of evaluating the services received,
(h) Closed circuit camera system images and audio recordings taken during the hospital visit,
(i) Voice call records kept in case of contact with your Call Center,
(i) Vehicle license plate information if parking and valet services are used,
(j) Location information, IP address, browser information, form information obtained during the use of the website and mobile application

is located.

2 - Processing of Personal Data

Detailed information about the purposes of processing your personal data is available under the heading "Purposes of Personal Data Processing" in VERBIS.

Among the purposes of processing your personal data:

(a) Protection of public health, preventive medicine, medical diagnosis, treatment and care services,
(b) Sharing information requested by the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,
(c) Sharing requested medical information with private insurance companies within the scope of financing health services and covering examination, diagnosis and treatment expenses,
(d) Invoicing for the services you receive,
(e) Planning and managing the internal functioning of the institution,
(f) Monitoring and preventing abuse and unauthorized transactions,
(g) Answering all your questions and complaints regarding the health services you have received, measuring, increasing and researching patient satisfaction,
(h) Providing information about the services you receive, complementary services and new services
is located.

3 - Collection of Personal Data and Legal Reason

Detailed information about the retention periods of your collected personal data and the data security measures taken to protect the stored data is included in VERBIS under the headings "Data Retention Periods" and "Data Security Measures".

Among the means of collecting your personal data:
(a) Data entry into hospital management software,
(b) Electronically prepared or printed forms,
(c) Security camera recordings with or without sound,
(d) Call center voice recordings

is located.

In this context, your personal data is processed by the Royal Hospital in order to achieve the above-mentioned purposes, as specified in the relevant legislation and Article 5 of the KVKK;

(a) It is clearly prescribed by law and is mandatory for the data controller to fulfill its legal obligation;
(1) Health Services Basic Law No. 3359,
(2) Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Subsidiaries,
(3) Private Hospitals Regulation,
(4) Emergency Health Regulation,
(5) Patient Rights Regulation,
(6) Regulation on the Processing of Personal Health Data and Protection of Privacy,
(7) Communicable Diseases Surveillance and Control Principles Regulation
(b) It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
(c) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.

It is collected based on the reasons.

The Royal Hospital stores the collected and processed personal data for as long as it deems necessary, not shorter than the periods specified in the relevant laws and legislation, in order to fulfill obligations arising from contracts, to constitute evidence in possible legal disputes, to assert rights or to establish a defense.

4 - Transfer of Personal Data

Detailed information about the transfer of your collected and processed personal data is included in VERBIS under the headings "Data Transfer Recipient Groups" and "Information to be Transferred to Foreign Countries".

Your personal data;

(a) Ministry of Health, sub-units of the Ministry and family medicine centers,
(b) To private insurance companies within the scope of financing health services and covering examination, diagnosis and treatment expenses,
(c) To the Social Security Institution,
(d) To the General Directorate of Security and other law enforcement agencies,
(e) To the General Directorate of Population and Citizenship Affairs,
(f) To the Turkish Pharmacists Association,
(g) To judicial authorities,
(h) To laboratories, medical centers, ambulances, medical devices and institutions providing health services with which you cooperate for medical diagnosis and treatment,
(i) To the health institution to which you were referred or to which you applied yourself,
(i) To legal representatives you have authorized,
(j) In case of a possible legal dispute, to Royal Hospital lawyers, tax consultants and auditors, and third parties from whom consultancy is received, who are legally or under a contractual obligation to keep confidentiality,
(k) Regulatory and supervisory institutions and official authorities,
(l) To the workplace physician if invoicing will be made to the employer,
(m) To the Royal Hospital subsidiaries and affiliates within the legal limits for the continuity of the services you receive,
(n) In accordance with the legislation, the services you receive, complementary services, new services, etc. To our business partners who provide bulk SMS and e-mail sending in order to provide information on matters

is transferred.

5 - Kişisel Verilere İlişkin Kanuni Haklar

Within the scope of KVKK and relevant legislation, regarding your personal data;

(a) Learning whether personal data is being processed or not,
(b) Requesting information if personal data has been processed,
(c) Learning the purpose of processing personal data and whether they are used for their intended purpose,
(d) Knowing the third parties to whom personal data is transferred domestically or abroad,
(e) Requesting correction of personal data if they are incomplete or incorrectly processed,
(f) Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
(g) Requesting that the transactions carried out in accordance with clauses (e) and (f) be notified to third parties to whom personal data is transferred,
(h) Object to the emergence of a result against the person by analyzing the processed data exclusively through automatic systems,
(ı) Requesting compensation for damage in case of damage due to unlawful processing of personal data.

You have the rights.