PERSONAL DATA PROTECTION AND PROCESSING NOTICE

This Personal Data Protection and Processing Notice has been prepared to inform you regarding the collection, storage, processing, and transfer of your personal data provided to us during the healthcare services offered by Nur Özger Health and its staff. This notification is made by Nur Özger Health in its capacity as “data controller,” in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) and related regulations.

As Nur Özger Health, we are required to record certain health data to provide you with medical services. Health data is legally classified as “special category personal data.” Under Article 6/2 of the KVKK, personal health data may only be processed with explicit consent unless a legal exception applies. Therefore, your explicit consent is required. Within the framework of applicable legislation, your personal data and special category health data may be recorded, archived, updated, transferred, categorized, and processed in the ways described in this notice.

Your personal data is processed for the purpose of establishing and executing the health service relationship with you, fulfilling our legal obligations, protecting our legitimate interests without harming your fundamental rights and freedoms, ensuring preventive healthcare, conducting medical diagnosis processes, providing healthcare services, managing financing and administrative operations, improving service quality, ensuring workplace security, and complying with legal requirements and measures mandated by the Personal Data Protection Authority.

Personal Data We May Process With Your Explicit Consent and Their Purposes

Identity Information:

Name, surname, Turkish ID number, passport number, place/date of birth, photograph, marital status, gender, blood type, etc.

Contact Information:

Address, phone number, email address, etc.

Location Information:

Location data linked to your address.

Financial & Administrative Information:

Bank details, IBAN, credit card information, invoicing details, Social Security and private insurance information.

Health Information:

Examination notes, medical history, imaging results, laboratory results, prescriptions, appointment records, digital communication records (email, SMS, social media, etc.), and, where medically necessary, records received from other healthcare institutions.

Physical Security:

Image recordings obtained through security cameras within our clinic.

Your personal data is primarily used to ensure effective, safe, and high-quality healthcare service delivery. Data may also be processed for identity verification, doctor–patient communication, treatment planning and execution, operational coordination, medical supplies procurement, appointment notifications, satisfaction measurement, and compliance with legal obligations.

Cases Where Explicit Consent Is Not Required Under KVKK

Your data may be processed without explicit consent in the following situations:

• When explicitly required by law

• When the individual is unable to provide consent (e.g., emergencies)

• When processing is necessary for Nur Özger Health to fulfill its legal obligations

• When the individual has made their personal data public

• When processing is necessary for establishing, exercising, or protecting a legal right

• When processing is required for legitimate interests, provided fundamental rights are not harmed

Health data may be processed without explicit consent for the protection of public health, diagnosis, treatment, care services, and healthcare financing.

Domestic Transfer of Personal Data

Within the scope of the healthcare services provided by Nur Özger Health, your personal data may be transferred to:

• Other healthcare providers for medical consultation

• Private insurance companies

• The Ministry of Health, Social Security Institution (SGK), law enforcement, courts, and other public authorities

• Legal and financial advisors

• Authorized third parties

Such transfers are carried out in accordance with Articles 8 and 9 of the KVKK.

Collection Methods, Processing Purposes, and Legal Grounds

Your personal data may be collected through:

• In-person meetings

• Telephone calls

• Website forms

• Email

• Digital messaging platforms

• Social media

• Medical examinations and tests

• Other healthcare institutions

• Consent and information forms

Your data may be processed for healthcare service provision, communication, appointment management, satisfaction surveys, security, backup operations, invoicing, digital marketing communications, and compliance with legal obligations.

Retention of Personal Data

Your personal data is retained for the duration required by the processing purpose. At the end of this period, it is deleted, destroyed, or anonymized.

Data is stored securely within our clinic’s physical files, digital systems, and locked storage areas. All necessary technical and administrative measures are taken to prevent unauthorized access.

Rights of the Data Subject (KVKK Article 11)

Individuals whose data is processed have the right to:

• Learn whether their data is being processed

• Request information if it has been processed

• Learn the purpose of processing

• Know third parties to whom data is transferred

• Request corrections of inaccuracies

• Request deletion or destruction of data

• Object to automated processing decisions

• Seek compensation if they suffer damages

Applications must include identity information, contact details, and the subject of the request.

Data Processing Periods

Your personal data will be deleted, destroyed, or anonymized when the processing purpose no longer exists, either automatically or upon request, in accordance with Article 7/2 of the KVKK.

Data Security

Nur Özger Health takes all necessary technical and administrative measures to ensure the lawful processing of personal data, prevent unauthorized access, and maintain secure storage.

Data Controller Contact Information

Address: Teşvikiye Mah. Hüsrev Gerede Cad. No:12 D:2 Erbil Apt., Şişli / Istanbul
Email: info@busranurozger.com

If you wish to exercise your rights or submit a request, you may send a signed written application or an electronically signed email to info@busranurozger.com, or deliver it by mail/courier to the address above.