1. DATA CONTROLLER AND REPRESENTATIVE
In accordance with the Personal Data Protection Law No. 6698 (“Law No. 6698”), Madalyon Sağlık Hizmetleri A.Ş. acts as the data controller and attaches importance to personal data privacy and the confidentiality of private life.
We may:
- Process your personal data for the purposes stated below and within the scope of our commercial relations;
- Process them in a limited and proportionate manner, in accordance with the law and principles of honesty, within the framework of the purpose that necessitates processing;
- Maintain the accuracy and up-to-date status of personal data provided to us or reported to us;
- Process, record, store, preserve, classify, update, and, where legally permitted, disclose and/or transfer them to third parties, limited to the purpose for which they are processed.
2. PERSONAL DATA THAT MAY BE PROCESSED:
The following personal data may be collected:
Identity Data: Information related to the individual’s identity (name and surname, ID number, signature, mother’s name, father’s name, place/date of birth, registered place of residence, ID card serial number, family number, marital status, license photocopy, employee card, gender, nationality, etc.).
Contact Data: Information to contact the individual (phone numbers, address, email).
Health Data: Includes medical and psychological information, test results, medication, medical history, alcohol/tobacco use, diagnosis, lab results, doctor analyses, pregnancy/disability status, and genetic information of family members.
Biometric Data: Fingerprints, biometric and genetic tests and data.
Visual/Audio Data: Photographs, voice recordings, video recordings, ID/license scans.
Financial Data: Bank account/IBAN, card information, bank name, invoices, account records.
Signature Data: Wet signatures, e-signatures, signature scans, ID copies.
Professional Data: Workplace and profession information.
Education Data: School and education details.
Employment Data: Company, department, and position information.
Family and Relative Data: Names, phone numbers, ID numbers of relatives.
Legal Transactions: Correspondence with official institutions, files related to enforcement and debt.
Other: Job applications, resumes, military status, center applied for, if provided.
Website Data: Log records, browser data, cookies.
3. PURPOSE OF PROCESSING YOUR PERSONAL DATA:
- Your personal data obtained from clients, patients, visitors, and suppliers may be processed for the following purposes, including but not limited to:
- Compliance with legal obligations under health and financial regulations;
- Execution of public health, diagnosis, treatment, preventive care, and healthcare services;
- Fulfilling regulatory requirements;
- Notification to relevant institutions if deemed necessary by the physician;
- Providing information about medical, educational services, newsletters, events, and publications;
- Appointment management and notifications;
- Billing and payment processes;
- Responding to questions and complaints;
- Planning and conducting internal operations;
- Measuring patient satisfaction;
- Scientific research and analysis;
- Risk management, quality, and performance improvement;
- Archiving and storing health data required by law;
- Cooperation with partner institutions, doctors, online services;
- Legal procedures, contract management, and strategic planning;
- Security and corporate communication management;
- Website improvement and personalization;
- Marketing, customer relationship management, and after-sales support;
- Any other activities related to the above purposes.
4. TRANSFER OF PERSONAL DATA WITHIN TURKEY:
Your personal data may be shared with Social Security Institution, Ministry of Health, Provincial Health Directorate, Public Prosecutor’s Offices, Courts, enforcement offices, contracted laboratories, affiliated companies, authorized doctors, and online service units for effective service delivery, under the legal requirements and in accordance with Articles 8 and 9 of Law No. 6698.
5. TRANSFER OF PERSONAL DATA ABROAD:
Personal data may be transferred to foreign countries that provide adequate protection, as declared by the Board, or with your explicit consent, for purposes related to the services you receive, in accordance with Articles 8 and 9 of Law No. 6698.
6. METHOD AND LEGAL BASIS OF PERSONAL DATA COLLECTION:
As the data controller, your personal data are collected:
- Directly from you or via our website/phone;
- To fulfill legal obligations, conduct our business activities, protect legitimate interests, perform distance sales agreements, provide health and treatment services.
The data are collected securely in physical and electronic form, in compliance with legal obligations, and processed only as necessary for the above purposes.
Processing is based on:
- Execution of contract (Art. 5/2-c);
- Legal obligations (Art. 5/2-ç);
- Legitimate interests of the company (Art. 5/2-f);
- Explicit consent where necessary.
7. RIGHTS OF THE DATA SUBJECTS (ARTICLE 11, LAW NO. 6698):
Data subjects may submit requests to Madalyon Sağlık Hizmetleri A.Ş. in writing. Requests will be answered free of charge within 30 days, unless additional costs are required, in which case fees determined by the Personal Data Protection Board may apply.
Under Article 11, you have the right to:
- Learn whether your personal data is processed;
- Request information if it has been processed;
- Learn the purpose of processing and whether data is used accordingly;
- Know domestic or foreign third parties to whom data is transferred;
- Request correction of incomplete or inaccurate data and notification to third parties;
- Request deletion or anonymization if reasons for processing no longer exist;
- Object to automatic decision-making;
- Claim compensation for damages arising from unlawful processing.
- Requests must be submitted clearly, with identification and address documents, in writing with wet signature or via the approved methods below:
Application Method Address Required Information
In-person Atatürk Bulvarı No: 229 Kavaklıdere-Çankaya/Ankara Mark envelope: “KVKK Information Request”
Via Notary Atatürk Bulvarı No: 229 Kavaklıdere-Çankaya/Ankara Mark envelope: “KVKK Information Request”
Secure e-mail [email protected]
Subject: “KVKK Information Request”
Registered e-mail [email protected]
Subject: “KVKK Information Request”
8. RETENTION OF PERSONAL DATA:
Personal data are retained as long as required for processing purposes. When purposes are fulfilled, legal obligations are lifted, or contracts expire, personal data are deleted, destroyed, or anonymized.
9. REQUEST FOR DATA UPDATE:
You may request updates or corrections to your personal data to ensure accuracy and currency.
Social Security Consent:
I acknowledge that Private Madalyon Psychiatry Center has a Health Services Agreement with my Social Security Institution. I voluntarily choose Private Examination and agree to pay the fee before examination without requesting reimbursement from the institution.
Click here for the Information Request Form