{"id":17594,"date":"2026-11-04T03:36:50","date_gmt":"2026-11-04T00:36:50","guid":{"rendered":"https:\/\/www.galaksidisklinigi.com\/kvkk-aydinlatma-metni\/"},"modified":"2026-11-04T03:38:52","modified_gmt":"2026-11-04T00:38:52","slug":"kvkk-privacy-notice","status":"publish","type":"page","link":"https:\/\/www.galaksidisklinigi.com\/en\/kvkk-privacy-notice\/","title":{"rendered":"KVKK Privacy Notice"},"content":{"rendered":"<div class=\"wpb-content-wrapper\" id=\"wpb-content-root\"><p>[vc_row pix_background_effect=&#8221;&#8221; pix_particles_check=&#8221;&#8221;][vc_column pix_background_effect=&#8221;&#8221;][vc_column_text]<\/p>\n<h2>KVKK PATIENT PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA<\/h2>\n<p><strong>I. Data Controller<\/strong><\/p>\n<p>Pursuant to the Turkish Personal Data Protection Law No. 6698 (\u201cKVKK\u201d or the \u201cLaw\u201d), your personal data is processed by ELEGAN A\u011eIZ VE D\u0130\u015e SA\u011eLI\u011eI VE T\u0130C LTD (\u201c<strong>ELEGAN A\u011eIZ VE D\u0130\u015e SA\u011eLI\u011eI VE T\u0130C LTD<\/strong>\u201d or the \u201cCompany\u201d), acting as the data controller, within the scope described below.<\/p>\n<p><strong>II. Methods of Collecting Personal Data and Legal Grounds<\/strong><\/p>\n<p>Our Company collects personal data directly from you, our patients, through our contractual relationship with you, our online branch, mobile applications, social media accounts, email, postal services, fax, notifications received from administrative and judicial authorities, and other communication channels, whether verbally, electronically, or in writing.<\/p>\n<p>Such data is collected in accordance with the personal data processing conditions specified in the Law, primarily for the performance of our contractual relationship with you and ensuring that our activities comply with applicable legislation, as well as for the purposes outlined below, based on the following legal grounds specified in Articles 5 and 6 of the Law:<\/p>\n<ul>\n<li>Processing personal data where necessary for the establishment or performance of a contract with you, provided that such processing is directly related to the contract (for example, processing identity, contact, and related information during contract formation).<\/li>\n<li>Processing personal data where necessary for the establishment, exercise, or protection of a legal right (for example, managing and planning health insurance processes, ensuring information security, maintaining the security of legal transactions, conducting legal proceedings, and retaining personal data that may be required during statutory limitation periods).<\/li>\n<li>Processing personal data where explicitly provided for by law (for example, maintaining transaction records under the Law and Law No. 5651).<\/li>\n<li>Processing personal data where necessary to comply with our legal obligations (including financial, tax, and similar obligations, and responding to lawful requests within regulatory and supervisory activities).<\/li>\n<li>Processing personal data where necessary for our legitimate interests, provided that your fundamental rights and freedoms are not adversely affected (for example, conducting and auditing business activities, ensuring operational security, and providing relevant parties or institutions with documents containing payment records during mergers, divisions, or acquisitions).<\/li>\n<li>Processing personal data based on your explicit consent where required (for example, transferring biometric data to the Social Security Institution, SGK).<\/li>\n<\/ul>\n<p><strong>IV. Purposes of Processing Personal Data<\/strong><\/p>\n<p>Your personal data may be processed primarily to establish and manage our contractual relationship with you, ensure information security and the security of legal transactions, fulfill our legal obligations, and achieve the purposes for which you have provided your information, including the following:<\/p>\n<ul>\n<li><strong>Information Security Management:<\/strong> Ensuring transaction security during diagnosis and treatment, maintaining accurate and up-to-date data, establishing and operating IT infrastructure, ensuring physical and cybersecurity, securing online services, and processing IP addresses, MAC addresses, similar technical information, and log records for security purposes. [Identity data, contact data, request\/complaint\/reputation management data, call center records]<\/li>\n<li><strong>Audit and Ethical Compliance Activities:<\/strong> Conducting audits during diagnosis and treatment, identifying and preventing fraudulent transactions, and managing internal control and audit processes. [Identity data, contact data, financial data, health data, request\/complaint\/reputation management data]<\/li>\n<li><strong>Compliance with Legislation:<\/strong> Ensuring that business processes comply with legal requirements, particularly Law No. 6698, and planning and conducting activities in accordance with internal procedures and applicable regulations. [Identity data, contact data, financial data, request\/complaint\/reputation management data, health data]<\/li>\n<li><strong>Financial and Accounting Operations:<\/strong> Managing financial and accounting processes relating to diagnosis and treatment and monitoring accounting and purchasing transactions. [Identity data, contact data, financial data]<\/li>\n<li><strong>Legal Affairs Management:<\/strong> Managing contractual processes, legal matters and claims, alternative dispute resolution procedures, litigation, and interactions with notaries, judicial authorities, and administrative bodies. [Judicial case reports, traffic accident reports]<\/li>\n<li><strong>Communication Activities:<\/strong> Contacting you when necessary using the information you have provided, providing contractual information, sending payment reminders, communicating via SMS, email, or telephone for contractual purposes, and planning or providing after-sales support services. [Identity data, contact data, call center records, financial data]<\/li>\n<li><strong>Business Operations and Auditing:<\/strong> Providing diagnosis and treatment services, auditing business operations, planning internal reporting and business development activities, and monitoring patient interactions and follow-up activities conducted by clinic employees. [Identity data, contact data, financial data, request\/complaint\/reputation management data]<\/li>\n<li><strong>Product and Service Sales Processes:<\/strong> Using personal data for online appointments, technical support, and administrative processes. [Identity data, contact data, financial data, audio data, request\/complaint\/reputation management data]<\/li>\n<li><strong>Patient Relationship Management:<\/strong> Managing relationships concerning the diagnosis and treatment services provided to you, responding to your requests, and providing feedback. [Identity data, contact data]<\/li>\n<li><strong>Supply Chain Management:<\/strong> Managing processes involving business partners, suppliers, and other stakeholders in connection with diagnosis and treatment services. [Identity data, contact data, financial data]<\/li>\n<li><strong>Providing Information to Authorized Persons, Institutions, and Organizations:<\/strong> Disclosing information as required by applicable legislation and responding to requests from legally authorized authorities. [Identity data, contact data, financial data, health data]<\/li>\n<\/ul>\n<p><strong>V. Transfer of Processed Personal Data<\/strong><\/p>\n<p>Our Company takes care to process your personal data in accordance with the principles of \u201cneed to know\u201d and \u201cneed to use,\u201d applying appropriate data minimization practices and implementing necessary technical and administrative security measures.<\/p>\n<p>The conduct and supervision of business activities, business continuity, and operation of digital infrastructure require ongoing data exchanges with various stakeholders. Accordingly, we may need to transfer personal data to third parties for specific purposes.<\/p>\n<p>Furthermore, maintaining accurate and up-to-date personal data is essential for fulfilling our contractual and legal obligations properly. For this reason, we work with various business partners and service providers.<\/p>\n<p>Your personal data may be transferred, solely to the extent necessary to achieve the purposes described above, to the following parties:<\/p>\n<ul>\n<li>Business partners and service providers offering call center services for the provision of diagnosis and treatment services.<\/li>\n<li>Insurance companies and agencies in connection with private health insurance coverage.<\/li>\n<li>Parties involved in contractual assignments, transfers of receivables, or financing transactions.<\/li>\n<li>Relevant business partners, consultants, service providers, banks, and financial advisors for financial and accounting management, risk identification and assessment, and fraud prevention.<\/li>\n<li>Electronic invoicing partners for delivering e-invoices to patients, and cargo or courier companies for delivering physical contracts or invoices.<\/li>\n<li>Tax offices for fulfilling tax obligations and representatives of the Ministry of Finance for providing invoices and payment receipts during tax audits.<\/li>\n<\/ul>\n<p>In addition, your personal data may be transferred to business partners and service providers that supply, operate, or support our IT infrastructure; lawyers and other consultants involved in contractual processes, litigation, and enforcement proceedings; business partners providing private integration, independent auditing, customs, financial advisory, or accounting services; legally authorized public institutions and private individuals or organizations; and third parties involved in fulfilling legal obligations.<\/p>\n<p>These parties may include lawyers, auditors, digital forensic specialists, cybersecurity consultants, tax advisors, other consultants and service providers, regulatory and supervisory authorities, courts, enforcement offices, shareholders involved in relevant processes, and public institutions or organizations legally authorized to request your personal data.<\/p>\n<p>Such transfers shall be limited to the purposes specified in this Privacy Notice, and your personal data may be processed within T\u00fcrkiye.<\/p>\n<p><strong>VI. Rights of the Data Subject<\/strong><\/p>\n<p>As a person whose personal data is processed, you may exercise your rights under Article 11 of the Law, which regulates the rights of data subjects.<\/p>\n<p>These rights include:<\/p>\n<ul>\n<li>Learning whether your personal data is being processed.<\/li>\n<li>Requesting information if your personal data has been processed.<\/li>\n<li>Learning the purpose of processing your personal data and whether it is used in accordance with that purpose.<\/li>\n<li>Knowing the third parties to whom your personal data has been transferred.<\/li>\n<li>Requesting the correction of incomplete or inaccurate personal data.<\/li>\n<li>Requesting the deletion or destruction of your personal data under the applicable legal conditions.<\/li>\n<li>Requesting notification of correction, deletion, or destruction operations to third parties to whom your personal data has been transferred.<\/li>\n<li>Objecting to any result arising against you through the analysis of your personal data exclusively by automated systems.<\/li>\n<li>Requesting compensation for damages resulting from the unlawful processing of your personal data.<\/li>\n<\/ul>\n<p>To exercise these rights in accordance with the Communiqu\u00e9 on the Procedures and Principles of Application to the Data Controller, you may contact us at:<\/p>\n<p><strong>Atak\u00f6y 7.8.9.10. K\u0131s\u0131m Mah., \u00c7oban\u00e7e\u015fme E-5 Yanyol Cad., No: 20\/3, Atakoy Towers, Block B, Apartment 130, T\u00fcrkiye.<\/strong><\/p>\n<p>You may also submit your request using the <a href=\"https:\/\/www.galaksidisklinigi.com\/en\/contact\/\">contact form<\/a> available at www.galaksidisklinigi.com.<\/p>\n<p>[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>[vc_row pix_background_effect=&#8221;&#8221; pix_particles_check=&#8221;&#8221;][vc_column pix_background_effect=&#8221;&#8221;][vc_column_text] KVKK PATIENT PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA I. Data Controller Pursuant to the Turkish Personal Data Protection Law No. 6698 (\u201cKVKK\u201d or the \u201cLaw\u201d), your personal data is processed by ELEGAN A\u011eIZ VE&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-17594","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.galaksidisklinigi.com\/en\/wp-json\/wp\/v2\/pages\/17594","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.galaksidisklinigi.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.galaksidisklinigi.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.galaksidisklinigi.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.galaksidisklinigi.com\/en\/wp-json\/wp\/v2\/comments?post=17594"}],"version-history":[{"count":2,"href":"https:\/\/www.galaksidisklinigi.com\/en\/wp-json\/wp\/v2\/pages\/17594\/revisions"}],"predecessor-version":[{"id":17596,"href":"https:\/\/www.galaksidisklinigi.com\/en\/wp-json\/wp\/v2\/pages\/17594\/revisions\/17596"}],"wp:attachment":[{"href":"https:\/\/www.galaksidisklinigi.com\/en\/wp-json\/wp\/v2\/media?parent=17594"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}