PERSONAL DATA PROCESSING AND PROTECTION POLICY
1. PURPOSE AND SCOPE
As the joint practice of Dentist Gülşah Benkli and Orthodontist Assoc. Prof. Dr. Yasin Atakan Benkli, located at Kültür Mh. Talatpaşa Blv. Nazar Apt. No: 23 İç kapı No: 3 Konak-İZMİR (hereinafter referred to as Physician/Doctor/Clinic/Practice/Employer), we adhere to the provisions of Law No. 6698 on the Protection of Personal Data, a constitutional right, and the General Data Protection Regulation (GDPR) of the European Union; we attach importance to the protection of personal data of all natural persons with whom we come into contact in any way while carrying out our activities and to fulfilling the requirements set forth in the Personal Data Protection Law.
This Personal Data Protection Policy has been prepared to inform you about the processes related to the collection, use, sharing, and storage of personal data by Dentist Gülşah Benkli and Orthodontist Assoc. Prof. Dr. Yasin Atakan Benkli, located at Kültür Mh. Talatpaşa Blv. Nazar Apt. No: 23 İç kapı No: 3 Konak-İZMİR. In the process of processing and protecting personal data, the provisions of the relevant legislation in force will be applied primarily.
In this context, the main purpose of this Personal Data Protection and Processing Policy (“Policy”) is to present the rules, measures, duties, and responsibilities adopted by the Physician and her Clinic within the scope of personal data protection legislation, using a methodological approach, and to ensure transparency in the measures we implement to protect personal data.
2. DEFINITIONS AND ABBREVIATIONS
The terms used in the application of this Policy have the meanings given below.
Employees: Refers to the physician and the employees of their clinic.
Contact Person: The person responsible for monitoring the personal data processing activities within the physician and clinic, and the implementation of the GDPR Policies and Procedures on an individual basis.
Personal Data: Refers to any information relating to an identified or identifiable natural person. For example; name, surname, address, telephone number, date of birth, place of birth, eye color, Turkish Republic identity number.
Data Subject: The natural person whose personal data is processed. For example; employee, visitor, customer, patient, Interested Party.
Processing of Personal Data: Any operation performed on personal data, whether wholly or partly automated or non-automated, provided that it is part of a data recording system. For example; obtaining, recording, storing, modifying, transferring.
GDPR Law: Refers to the Law No. 6698 on the Protection of Personal Data.
GDPR: European Union General Data Protection Regulation
3. PRINCIPLES OF PROCESSING PERSONAL DATA
The Physician and Clinic processes personal data in accordance with the procedures and principles stipulated in the Personal Data Protection Law (KVKK) and other laws.
The following principles are adhered to in the processing of personal data:
Compliance with the law and rules of fairness: The Physician and Clinic processes personal data in accordance with the provisions of legal regulations, the law, and the rules of fairness. It informs the personal data owners.
Accuracy and, where necessary, up-to-date information: The Physician and Clinic takes the necessary measures to ensure that the personal data it processes is accurate and up-to-date.
Processing for specific, clear, and legitimate purposes: The Physician and Clinic clearly and precisely defines the legitimate and lawful purpose of personal data processing. The Physician and Clinic processes personal data only to the extent necessary and connected with the services it provides.
Being relevant, limited, and proportionate to the purpose for which they are processed: The Physician and Clinic processes personal data for the purposes determined within the scope of the services it provides, and avoids receiving, processing, and storing personal data that is not necessary for the achievement of the purpose.
Retention for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed: The Physician and Clinic stores personal data in accordance with the provisions of legal legislation. At the end of this period, personal data is deleted, anonymized, or destroyed.
CONDITIONS FOR PROCESSING PERSONAL DATA
The Physician and Clinic complies with the following conditions in accordance with the provisions of Law No. 6698 on the Protection of Personal Data (KVKK) when processing personal data:
Personal data cannot be processed without the explicit consent of the data subject. Personal data is processed only with the explicit consent of the data owner/relevant person. Accordingly, patients are informed about the matter, and their explicit consent based on free will is obtained.
Processing personal data without seeking the explicit consent of the data subject is possible if one of the following conditions exists:
It is explicitly provided for in the laws.
It is necessary for the protection of the life or physical integrity of the person who is unable to express their consent due to factual impossibility or whose consent is not legally valid, or for the protection of the life or physical integrity of another person.
It is directly related to the establishment or performance of a contract.