KVKK Privacy Notice

1. Data Controller

Your personal data is processed by ASSOC. PROF. DR. HAMZA YILDIZ, acting as the data controller, located at Yenibağlar Mahallesi, İsmet İnönü 1 Bulvarı No:140, İBA Deluxia Business Center, Floor 3, Office 323, Tepebaşı, Eskişehir, within the framework of Law No. 6698 on the Protection of Personal Data ("KVKK"), the Regulation on Personal Health Data, and other relevant legislation, as well as the regulations of the Republic of Turkey Ministry of Health and related authorities, and this Privacy Notice Regarding the Processing of Personal Data of Patients and Patient Relatives ("Privacy Notice").

The corporate identity information of ASSOC. PROF. DR. HAMZA YILDIZ, the "Data Controller," is as follows:

• Headquarters Address: Yenibağlar Mahallesi, İsmet İnönü 1 Bulvarı No:140, İBA Deluxia Business Center, Floor 3, Office 323, Tepebaşı, Eskişehir
• Phone: +90 506 044 22 26
• Website: www.hamzayildiz.com
• Email Address: info@sovereignclinic.com

Assoc. Prof. Dr. Hamza Yıldız adopts the principle of 'protecting patient confidentiality' while providing healthcare services and, in this context, respects the privacy and personal data protection rights of both patients and their relatives. Accordingly, Assoc. Prof. Dr. Hamza Yıldız processes your personal data in compliance with all legislation concerning the protection of personal data, primarily KVKK, ensures the secure storage of your data, and takes all necessary security measures against possible unlawful access. This Privacy Notice explains the scope in which your personal data collected within the framework of services provided by our clinic is processed.

2. Method of Collecting Your Personal Data and Legal Grounds for Processing

Your personal data is collected through fully or partially automated means, or through non-automated means provided they are part of a data recording system, from electronic and/or physical environments including patient registration processes at our clinic, printed forms and surveys, examinations conducted by the Doctor, medical tests/analyses, and other communications with the Doctor and our staff, through the information management system of the Doctor's clinic, the Doctor's website, communication channels, email, telephone, other online and/or offline electronic communication platforms, our social media accounts, health institutions and laboratories we cooperate with due to consultations or services received, and their integrated systems, as well as through authorized public institutions and private organizations, for the purposes of protecting public health, preventive medicine, conducting medical diagnosis, treatment and care services, and planning and managing healthcare services and their financing.

3. Categories of Personal Data Processed and Purposes of Processing

Your personal and special categories of personal data contained in the registration form, particularly your health data, include:

• Identity information: Name, Surname, Turkish ID Number and/or passport number, place and/or date of birth, marital status, gender, occupation, insurance card number, and other identity data that can identify you.
• Contact information: Address, phone number, email address, and other contact data.
• Financial data: Bank account number, IBAN number, invoicing and billing information.
• Health data: Patient medical reports, diagnostic data, laboratory results, test results, examination data, doctor's analyses and opinions, appointment information, prescription information, and all other types of health information and data.
• Browsing data: IP address, cookies, and other personal data obtained during the use of our website and mobile applications.

Your personal data may be processed for the purposes of identity verification and validation, conducting medical diagnosis and treatment services, notifying you about appointments, providing information to the Ministry of Health and other public institutions as required by law, issuing invoices for the services we provide, and carrying out promotional and informational activities tailored to you.

4. Transfer of Your Personal Data to Third Parties Located Domestically and Abroad

Within the Doctor's clinic, your personal data can only be accessed to the extent necessary to fulfill their duties. Furthermore, your collected personal data may be transferred to:

• Our suppliers from whom we receive services for the conduct of our clinic's activities (financial advisor, IT services, etc.),
• Patient family members/relatives in compliance with legislation, in cases of medical necessity, court order, or patient consent,
• Banks and insurance companies for the purposes of conducting financial and accounting transactions related to healthcare services,
• Other healthcare institutions and laboratories for the purposes of conducting medical diagnosis and treatment processes and obtaining consultations,
• The Republic of Turkey Ministry of Health, Social Security Institution (SGK), and judicial authorities for the purpose of fulfilling legal obligations.

5. Duration of Personal Data Processing

Your personal data obtained during our clinic's activities is stored and disposed of in accordance with the retention and disposal policy principles prepared in compliance with legislation. Processing will continue throughout the statutory limitation periods.

6. Your Rights Under KVKK

As a personal data subject, pursuant to Article 11 of KVKK, you have the rights to learn whether your data has been processed, learn the purpose of processing, know the third parties to whom your data has been transferred, request correction or deletion, and request compensation for damages. To exercise your rights, you may submit your requests to Yenibağlar Mahallesi, İsmet İnönü 1 Bulvarı No:140, İBA Deluxia Business Center, Floor 3, Office 323, Tepebaşı, Eskişehir or to the email address info@sovereignclinic.com.