Disclosure Text on the Protection and Processing of Personal Data

As, Mia Health Turkey Pursuant to the Law No. 6698 on the Protection of Personal Data, we process the personal data for the purposes of collection, use, transfer, storage period and data privacy and protection activities within the scope of the relevant laws and regulations. For this purpose, we take the highest level of security measures, inform you about your rights, and attach great importance to the security of your personal data. We store all kinds of personal data shared by our patients in a way that respects patient privacy and take all necessary technical and administrative measures to ensure the appropriate level of security for your personal data.

This Disclosure text on the Protection of Personal Data explains our personal data protection and processing policy, how we collect, use, transfer and protect your personal data during the services performed.

 

1. Identity of the Person Responsible for Data

Mia Health Turkey (hereinafter referred to as Mia Health Turkey) within the scope described below, in accordance with the Personal Data Protection Law No. 6698, which entered into force on April 7, 2016 (hereinafter referred to as PDP Law).

 

2. Purpose and Legal Reason for Processing Your Personal Data

Articles 5 and 6 of the PDP Law regulate the conditions for the processing of personal data and private personal data. Private personal data are specified in the law in a limited way and include data related to race, ethnic origin, political opinions, religion, sect or other beliefs, appearance and dressing, membership of association, foundation or trade-union, health, sexual life, criminal conviction and security measures, and biometrics and genetics. While Article 5 of the Law specifies the conditions for the processing of non-private personal data, the conditions for the processing of private data are set out in Article 6.

Conditions of processing of non-private personal data according to article 5 of the PDP Law;

The personal data subject has given his/her explicit consent.

Data processing is clearly stated in the laws.

The relevant data should be processed in order to protect the life or body integrity of the person where the person is physically or legally incapable of giving consent.

It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract.

Data processing is mandatory for the data controller to fulfill its legal obligation.

Personal data are disclosed to the public by the person concerned.

When data processing is necessary for the establishment, exercise or protection of any right.

Data processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.

Conditions of processing of private personal data according to article 6 of the PDP Law;

The personal data subject has given his/her explicit consent.

Processing of private personal data, excluding data related to health and sexual life (race, ethnic origin, political opinions, religion, sect or other beliefs, appearance and dressing, membership of association, foundation or trade-union, criminal conviction and security measures and biometric data) and data related to genetics is stipulated in the laws.

Pursuant to these conditions, your personal data are archived, processed and used in electronic or physical environments within the specified purposes by taking necessary security, confidentiality and legal measures for the following purposes:

To fulfill our legal obligations in the relevant legal regulations,

To protect public health, plan and manage preventive medicine, medical diagnosis, treatment and care services, health services and their financing,

To inform you about your appointment, if you make an appointment,

Plan and manage internal functioning of Mia Health Turkey,

To analyze in order to improve our services,

To issue an invoice,

To verify your identity,

To verify your relationship with contracted institutions,

To respond to the requests of the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,

To respond to your questions or complaints about our services,

To analyze your use of healthcare services in order to improve the services we offer,

To comply with the internal policies and principles of Mia Health Turkey,

To measure patient satisfaction and increase patient satisfaction after the patient receives healthcare services,

To contact you for information about our services,

To provide medicines or medical devices.

However, your personal data will not be used for commercial purposes in any way, except for the activities listed above and the situations required by the relevant legislation.

 

3. Personal data collected by Mia Health Turkey

We collect various information from our patients within the framework of the health services we provide. The aforementioned information is collected in accordance with the data processing principles and conditions specified in the Personal Data Protection Law No.6698 (“PDP”). The information we collect from you for the purposes of processing personal data may include:

 

Your Name and Surname,

Your TR ID details, passport number,

Your place and date of birth,

Your gender,

Your address,

Your telephone number,

Your e-mail address

Your special patient protocol number allocated to you by Mia Health Turkey,

Your financial data such as payment and billing information,

Your private health insurance or Social Security Institution data,

Your biometric data within the scope of services financed by the Social Security Institution,

Your health data, including but not limited to your examination, x-ray and tomography data, prescription information,

If you contact us, your voice recording,

Your closed circuit camera system image recording during your visit to our hospitals,

If you are using the parking lot/valet service, your vehicle license plate,

Your health data and identity information you share when you use the online services on our website https://www.miahealthturkey.com,

Other data you share when you reach us via e-mail, call center or other channels.

 

4. Persons and Organizations Your Personal Data Can Be Transferred To

To fulfill our legal obligations in the Basic Law on Health Services No.3359, the Decree Law No.663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Hospitals, the Regulation on the Processing of Personal Data.

Health data and ensuring privacy and other relevant regulations:

All technical and administrative measures are taken to ensure the security level in accordance with the regulations related to Law on PDP and relevant health legislation, and necessary studies are performed by the relevant units so that the people concerned benefit from the products.

Services provided by our Institution:

In line with the purposes laid down in article 2 of this disclosure text, including the services offered by our institution, fulfillment of the administrative and economic activities of our institution, ensuring and supervising physical security in the buildings belonging to our institution, carrying out legal, financial and administrative compliance processes, your personal data may be transferred to institutions or organizations permitted by the provisions of the relevant legislation (Turkish Medical Association, İzmir Provincial Health Directorate, Turkish Dental Association, Social Security Institution, etc.), to all Ministries, judicial bodies, private insurance companies, directly/indirectly to our domestic/foreign shareholders, affiliates and/or subsidiaries, auditors, consultants, business partners in order to conduct our operations.

 

5. Personal Data Collection Method and Legal Reason for Collection

Your personal data is collected in order to provide our services in line with the above-mentioned purposes and to fulfill our institution's contractual and legal responsibilities in a complete and correct manner. Your personal data collected may also be processed and transmitted for the purposes set out in articles 2 and 4 of this text in accordance with personal data processing requirements and purposes laid down in Articles 5 and 6 of Law on PDP.

Within the legal reasons stated above, your personal data are collected through all kinds of verbal statements (all kinds of statements etc.), written (tests, job application forms, contact forms, patient consent forms, etc.) documentation, your identity document, website, social media areas, our corporate website, mobile applications and existing camera recording systems.

 

6. Your Rights Regarding Your Personal Data

As per article 11 of the Personal Data Protection Law, by applying to the data controller, you have the right:

To learn whether your personal data have been processed,

To request information in case your personal data have been processed,

To find out the purpose for processing of your personal data and whether they have been used in accordance with that purpose,

To know the third parties to whom your personal data have been transmitted at home or abroad,

To request correction of your personal data if they are incompletely or incorrectly processed and ask that the process carried out in this context be notified to the third parties to whom personal data have been transmitted,

To request deletion or destruction of personal data if the reasons for processing the same have ceased to exist although they have been processed in accordance with PDP, Law and other relevant laws, and ask that the process carried out in this context be notified to the third parties to whom personal data have been transmitted,

To object to occurrence of any result, if any, which is to your detriment by means of analysis of personal data exclusively through automated systems,

To demand indemnification of loss if you suffer loss due to processing of such data in breach of the law.

You can send your applications for your rights mentioned above pursuant to paragraph 1 of article 13 of Law on PDP and your request including your ID details, necessary information describing your rights laid down in article 11 of Law on PDP and your statements related to your right to use to the following address by hand:

İslam Kerimov Cad.Lider Centrio B blok kat:4 Daire:38, 35530 Bayraklı/İzmir

through Notary Public or by other methods stipulated in the Law on PDP,

and you can send the relevant form to the e-mail address info@miahealthturkey.com  with secure electronic signature. Your request will be concluded free of charge in no later than thirty days, however, if the respective processing requires any additional cost, our Company reserves the right to charge you for this processing according to the relevant tariff determined by the Personal Data Protection Board.

 

7. Express Consent Statement related to Processing, Use and Sharing of Personal Data

Dear Data Owner;

In accordance with the law no 6698 on Protection of Personal Data ("PDP"), any kind of information serving to make a real person identified or identifiable is in the scope of personal data.

In this context, your personal data will be processed, stored, preserved, updated when necessary, disclosed/transferred to third parties in accordance with the conditions specified in the Disclosure Text of Mia Health Turkey and the legislation and legal limits and processed as specified in the Law on PDP. As per article 11 of the Personal Data Protection Law, by applying to our company, you have the right:

a) To learn whether your personal data have been processed,

b) To request information if such data have been processed,

c) To find out the reason for processing of such data and whether such data have been used properly for that purpose,

d) To know the third parties to whom your personal data has been transferred at home or abroad,

e) To request rectification of your personal data if they have been processed incompletely or inaccurately,

f) To request deletion/destruction of personal data within the framework of the conditions set forth under article 7,

g) To demand indemnification of loss if you suffer loss due to processing of such data in breach of the law.

 

Within the scope of the Law numbered 6698 on Protection of Personal Data (“Law on Protection of Personal Data"):

we, as Mia Health Turkey data controller as per the "Regulation on the Processing and Providing the Privacy of Personal Health Data", declare that we'll archive and process your personal data to provide healthcare services (diagnosis, treatment, care services, etc.) for the benefit of the patient and public health,

that we are liable to record the identity, address, telephone, medical history and all other necessary information to determine the information of the patient who is being served and to arrange all records and documents in the medical patient file which will be the basis of processing in electronic or paper environment, in order to provide health service to you as a healthcare provider in accordance with the relevant legislation,

that if you use your private health insurance upon request of competent authorities, particularly of your insurance company or within the scope of e-nabız (electronic health platform) and similar systems or of our notification and/or liability to notify we impose, we'll share relevant information with authorities and people.

I agree, declare and undertake that I've read, examined and consented to the above-mentioned information and all issues set out below by Mia Health Turkey on the date I've indicated below, that I'm aware of, understand and consent to the Disclosure Text with my free will and that I've expressly consented to the aforementioned.

Processing, use and transfer of my personal data within the scope defined in the Law on PDP.

This Consent Declaration will be valid until it is declared invalid in writing by me.