PERSONAL DATA PROTECTION LAW (KVKK) CLARIFICATION TEXT
Data Controller: Dr. Semih Yıldız / Adres: Meşrutiyet Mah. Vali Konağı Cad. Hasan Varol Apt. No:105 İç Kapı No:2 Şişli / İstanbul / E-mail: contact@drsemihyildiz.com
This document has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) to inform patients who apply to Dr. Semih Yıldız Clinic about the processing, protection, and transfer of their personal data.
-
Your Processed Personal Data: For the purposes of diagnosis, treatment, surgery, follow-up, patient registration, fulfilling legal obligations, managing appointments and patient satisfaction, financial transactions, clinic security, and health tourism services; identity data (name-surname, date of birth, national ID number, etc.), contact data (address, e-mail, phone, etc.), customer transaction data (invoice, receipt, call center records, etc.), physical space security data (camera recordings, etc.), financial data (payment and bank information), visual/audio data (photos, videos), marketing data (surveys, cookies, campaign records), and special categories of personal data (health condition, treatment details, etc.), as well as financial performance and professional experience (only for employees), may be processed.
-
Methods of Collecting, Protecting, and Transferring Personal Data: Data may be collected via forms, e-mail, website, social media, messaging applications, camera systems, and similar methods, either automatically or manually. For security, measures such as encryption, network protection, physical security, backups, logging, antivirus software, employee training, and confidentiality agreements are implemented. Data may be shared with business partners (laboratories, hospitals, medical device suppliers, hotels, etc.), public institutions (Ministry of Health, Ministry of Finance, judiciary, etc.), and service providers (software, accounting, technical support, etc.) in accordance with legal regulations. Our clinic does not transfer data abroad directly; however, if you choose to communicate via WhatsApp, Zoom, Instagram, etc., which operate with servers abroad, such transfers are deemed to have occurred with your prior explicit consent. Health data is retained for at least 20 years, financial data for 5 years, and communication and transaction records are stored for a reasonable period before being destroyed.
-
Your Rights as a Data Subject: Under Article 11 of KVKK and Articles 15–21 of the GDPR, you have the right to: learn whether your personal data is being processed, request access, correction or deletion, request restriction of processing, object to processing, request data portability, and withdraw previously given consent.
-
Consent and Approval: By reading this text, you declare that you have been informed within the scope of KVKK and GDPR, and that you freely accept the processing of your personal data as specified above. Personal data of individuals under 18 can be processed only with the consent of a parent or legal representative.
By interacting with us with www.drsemihyildiz.com , you agree to our Personal Data Protection Policy.