Personal Data Protection

Your personal data may be processed by Nev Health Group (“Private Nev Anadolu Hospital” and “Private Nev Esentepe Hospital” and “Private Nev Fsm Hospital” and “Private Nev Bandirma Hospital”) and its affiliated companies (collectively referred to as Nev Health Group) in the capacity of Data Controller within the scope of the Personal Data Protection Law No. 6698 (the “Law”) and the relevant legislation within the framework described below and in accordance with the Basic Law No. 3359 on Health Services, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, the Regulation on Private Hospitals and the regulations of the Ministry of Health and other legislation.

1. Obtaining, Processing and Purposes of Processing the Personal Data

Your personal data is obtained through verbal, written, visual or electronic media, call center, website, verbal, written and similar channels in accordance with the activities of Nev Health Group companies for the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing provided by Nev Health Group. Your sensitive personal data, particularly your medical data, and your general personal data can be processed by Nev Health Group in connection with and as limited and restricted to the purposes specified in this article, including but not limited to the following:

• Your credentials: Your name, surname, T.R. ID number, passport number or temporary TR ID number, place and date of birth, marital status, gender, insurance or patient protocol number and other identification data that we can identify you with.

• Your Contact Details: Your address, telephone number, e-mail address and other contact data, your voice call records kept by customer representatives or patient services in accordance with call center standards, and your personal data obtained when you contact us by e-mail, letter or other means.

• Your Medical Details: Your personal data regarding any health and sexual life obtained during or as a result of the performance of medical diagnosis, treatment and care services, including but not limited to your laboratory results, test results, examination data, appointment details, check-up details and prescription details.

• Your data regarding private health insurance and data regarding the Social Security Institution for financing and planning of health services.

• Your camera recordings that are kept for security and inspection purposes if you visit our hospitals or medical centers.

• Your Accounting Information: Your financial data such as your bank account number, IBAN number, credit card information, invoicing details.

• If you use the parking lot, provide a license plate.

• Your health data and other personal data that you send or enter into https://bursaanadoluhastanesi.com.tr/ - Http://bursaanadoluhastanesi.com.tr/randevu/ or https://www.esentepehastanesi.com.tr/ - http://esentepehastanesi.com.tr/randevu/.

• If you apply for a job to Private Anadolu Hospital/ Private Esentepe Hospital/Metafiz Medical Center or any of the affiliates of Nev Health Group Companies, your other personal data, including the curriculum vitae provided in this regard, and if you are an employee of Nev Health Group or an associated employee, your service contract and any personal data related to your predisposition to work.

All kinds of personal data (including but not limited to sensitive personal data) obtained by Nev Health Group may be processed for the following purposes:

• Confirming your identity,

• Conducting the public health protection, preventive medicine, medical diagnosis, treatment and care services, planning and managing the health services and financing.

• Sharing the information requested with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation.

• Planning and managing daily operations with the internal functioning of our Hospitals and Medical Centers.

• Measuring, increasing and researching patient satisfaction by Hospital Management, Patient Rights, Patient Experience departments.

• Supply of medicines.

• Ability to inform you about the appointment if you make an appointment.

• Performing the risk management and quality improvement activities.

• Conducting an analysis to improve the health services.

• Covering your financing, examination, diagnosis and treatment expenses of your health services by the Patient Services, Financial Affairs, Marketing departments, and sharing the information requested with the private insurance companies within the scope of the entitlement inquiry.

• Making investigation.

• Fulfilling the legal and regulatory requirements.

• Sharing the requested information with private insurance companies within the scope of financing health services.

• Performing the risk management and quality improvement activities by the Quality, Patient Experience, Information Systems departments.

• Invoicing by the Patient Services, Financial Affairs, Marketing departments in return for our services and confirming your relationship with the contracted institutions.

• Participation in campaigns and providing campaign details by Marketing, Media and Communication, Call Center departments, designing and communicating special content, tangible and intangible benefits on web and mobile channels.

Your Personal Data obtained and processed in accordance with the relevant legislation may be transferred to Nev Health Group or the physical archives and/or information systems of Nev Health Group and kept both in digital environment and in physical environment.

2. Transfer of the Personal Data

Your personal data may be shared by NEV Health Group within the scope of the Law and other legislation and for the aforementioned purposes with the companies included in NEV Health Group, Private insurance companies, the Ministry of Health and its affiliates, the Social Security Institution, the General Directorate of Security and other law enforcement agencies, the General Directorate of Census, the Turkish Pharmacists' Association, the Courts and all kinds of judicial authorities, central and other third parties, your authorized representatives, attorneys, tax and financial advisors and auditors, third parties from whom we receive consultancy services, regulatory and supervisory authorities, and our business partners and other third parties with whom we cooperate to develop or carry out the health services for the aforementioned purposes.

3. Method and Legal Reason for Obtaining Personal Data

Your personal data is collected and processed in all kinds of verbal, written, visual or electronic media in order to carry out all kinds of works within the scope of the activities of Nev Health Group  within the legal framework and to fulfill the contractual and legal obligations of Nev Health Group fully and as required. The legal reasons for collecting your data are as follows;

• Personal Data Protection Law No. 6698,

• Basic Law No. 3359 on Health Services,

• Decree No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates,

• Regulation on Private Hospitals,

• Regulation on Processing of Personal Health Data and Protection of Privacy,

• These are the regulations of the Ministry of Health and other legislation provisions.

In addition, as stated in the Article 6 (3) of the Law, the personal data related to health and sexual life may only be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, without the explicit consent of the data subject.

4. Your Rights for Protection of Personal Data

In accordance with the Law and the relevant legislation;

• To learn whether the personal data is processed or not,

• To request relevant information if the personal data has been processed,

• To request personal health data and access to them,

• To learn the purpose of processing personal data and whether they are used for that purpose,

• To know the third parties to whom the personal data has been transferred in the country or abroad,

• To request for correction of the personal data if incompletely or incorrectly processed,

• To request deletion or destruction of the personal data,

• To request the notification of the transactions related to the correction of the personal data if the personal data is incompletely or incorrectly processed and/or the removal or destruction of the personal data to the third parties to whom the personal data are transferred,

• You have the right to object to any result arising against you by analyzing the processed personal data exclusively through automated systems.

If you exercise one or more of your aforementioned rights, the relevant information shall be notified to you in written or electronically, through the contact details provided by you.

5. Data Security

Nev Health Group protects your personal data in full compliance with all technical and administrative security controls required to be taken in accordance with the information security standards and procedures. Such security measures are provided at a level suitable for the potential risk by taking into account the technological possibilities.

6. Complaints and Communication

Your personal data is meticulously protected within the technical and administrative possibilities and provided at a level suitable for possible risks by taking into account the necessary security measures and technological possibilities. We kindly request you to forward your requests under the law to us by the methods specified in form by filling in "Application Form Pursuant to Personal Data Protection Law" at the website address  “https://www.nevsaglikgrubu.com.tr/kisisel-verilerin-korunmasi”.

• By Mail: Application form bearing your wet signature to the address of Esentepe Mh.169 Mudanya Yolu Cd. No: 169 Nilufer/ Bursa/ Turkey by writing “Information Request under Personal Data Protection Law” on the envelope,

• Via Notary Public: To the address of Nev Health Group Esentepe Mh. Mudanya Yolu Cd. No: 169 Nilufer/ Bursa/ Turkey,

• Via Kep Address: To the address of nevsaglikgrubu@hs06.kep.tr with safe electronic signature or mobile signature by filling in the application form,

• By Email: You can send the application form you filled in to Nev Sagli Grubu by filling in the form in “Word or PDF” format and signing the file with a safe e-signature to the address of kisiselveri@esentepehastanesi.com.tr by writing “Information Request under Personal Data Protection Law” in the subject area of the e-mail.