Personal Data Processing Disclosure Text
Dear Visitor,
We would like to inform you within the scope of the Law on the Protection of Personal Data.
In accordance with Law No. 6698 on the Protection of Personal Data (“KVK Law”), any information that identifies or makes you identifiable, including your sensitive personal data, may be processed by Ada Mert Sağlık Hizmetleri Tic. A.Ş. (“Hospital”) as the data controller.
Processing of personal data refers to any operation performed on such data, including the collection, recording, storage, retention, alteration, reorganization, disclosure, transfer, classification, or prevention of use of personal data.
The protection of your personal data is of vital importance to us. We would like to assure you that we will take all necessary measures and maintain full transparency in this regard.
Collection, Processing, and Purposes of Processing Personal Data
Depending on the nature of the service we provide, we collect your personal data verbally, in writing, visually, or electronically through our Call Center, website, mobile applications, physical locations, and similar channels. In this context, and particularly for the execution of all necessary medical diagnosis, examination, treatment, and care services, the main types of general and special category personal data we collect include the following:
Your name, surname, Turkish ID number, passport number or temporary ID number (if you are not a Turkish citizen), place and date of birth, marital status, gender, and copies of your ID or driver’s license; your contact information such as address, phone number, and email address; your financial data such as bank account number and IBAN; laboratory and imaging results, test results, examination data, and prescription information submitted for follow-up in your file; health and sexual life data obtained during the execution of medical diagnosis, treatment, and care services; responses and feedback shared for service evaluation purposes; other data you may voluntarily share during requests or feedback; closed-circuit camera footage recorded during your visit to our hospital; voice recordings from calls made to our Call Center; data related to private health insurance or the Social Security Institution (SGK) for the financing and planning of health services; vehicle plate data if you use our parking service; browsing data, IP address, browser information, and location data obtained during use of our website or mobile application; and medical documents, surveys, and forms you voluntarily submit.
Your personal and sensitive data mentioned above may be processed for the following purposes:
Protection of public health; preventive medicine; medical diagnosis, treatment, and care services; sharing of information with the Ministry of Health and other public institutions as required by law; compliance with legal and regulatory obligations; financial management of health services and coverage of diagnosis and treatment expenses; sharing of required information with private insurance companies for eligibility checks; appointment reminders via our Call Center and digital channels; verification of identity by our Hospital staff and Call Center; planning and management of internal hospital operations; analysis to improve healthcare services; staff training; monitoring and prevention of abuse or unauthorized transactions; implementation of risk management and quality improvement activities; invoicing of services; verification of institutional affiliations; responding to questions and complaints regarding healthcare services; ensuring data security in hospital systems and applications; providing information about campaigns; designing personalized content through web and mobile channels; measuring and improving patient satisfaction; and enabling educational activities in cooperation with educational institutions.
All personal and sensitive data listed above may be securely stored in physical or electronic archives, in compliance with applicable legal requirements, by the data controller and external service providers.
Transfer of Personal Data
Your personal data may be processed and stored for the purposes listed above and will not be shared with third parties except in cases required by law or with your explicit consent. However, in accordance with obligations arising from laws such as the Turkish Commercial Code, Tax Procedure Law, Social Security Law, Labor Law, Occupational Health and Safety Law, and the Vocational Qualification Authority Law, your data may be transferred to authorized public institutions and organizations, intermediary financial institutions for risk evaluation, independent audit firms, educational institutions providing vocational training, our business partners, affiliates, shareholders, group companies, and domestic or international entities that support our business processes, based on legal grounds and your consent.
Method of Collecting Personal Data
Your personal data is collected by our hospital through various channels and legal bases, including CCTV systems, notification forms, registration forms, application documents, and reports. Data may be obtained verbally, in writing, or electronically from our hospital or from external sources such as partner institutions, official authorities, or third parties, in both physical (paper-based) and digital environments.
Your Rights Under Article 11 of the KVK Law
As a personal data owner, you may submit your requests regarding your rights listed below to our hospital, using the methods specified in this Disclosure Text. Our hospital will evaluate your request based on its nature and respond free of charge as soon as possible, and no later than thirty (30) days. However, if a fee is determined by the Personal Data Protection Board, such fee will be charged according to the applicable tariff.
You have the right to:
a) Learn whether your personal data is being processed,
b) Request information regarding the processing of your personal data,
c) Learn the purpose of processing and whether it is used appropriately,
ç) Know the third parties to whom your personal data is transferred domestically or abroad,
d) Request correction if your data is incomplete or inaccurate, and request notification of such correction to third parties to whom data has been transferred,
e) Request deletion or destruction of your personal data if the reasons requiring processing no longer exist, and request notification of this to third parties,
f) Object to any result that may arise against you through analysis of your data exclusively by automated systems,
g) Request compensation for damages in case you suffer harm due to unlawful processing of personal data.
Data Controller and Methods for Submitting Requests
In accordance with the KVK Law, you may submit your requests regarding the above rights in writing or through other methods determined by the Personal Data Protection Board, using the communication channels provided below.
You must submit your request in writing, along with necessary identification documents. To ensure proper and timely handling of applications, you are advised to use the “Data Subject Information Request Form” available at www.adatiphastanesi.com
under the “Protection of Personal Data” section and submit it along with the required supporting documents either in person or by post.
Alternatively, you may send the completed and electronically signed form to adamertsaglik@hs01.kep.tr via secure electronic signature.
Applications can also be submitted in writing using the “Data Subject Information Request Form,” as per the Law No. 6698 and the methods specified or to be specified by the Personal Data Protection Authority.
