Skip to main content
444 1 587
Özel Lotus Hastanesi
LEGAL INFORMATION

PDPL Clarification Text

This clarification text has been prepared to inform you about which personal data is processed by the data controller, for what purpose, how, why, who it is shared with, and how long it is stored. The notification is made under Article 10 of the Law on the Protection of Personal Data No. 6698 ('PDPL').

PRIVATE LOTUS HOSPITAL ('Workplace'); as per Article 10 of the PDPL, we present this text to the public and relevant persons.

ARTICLE 1: DATA CONTROLLER

Your personal data will be processed by PRIVATE LOTUS HOSPITAL in the capacity of data controller, in line with the scope and purposes explained below.

The data controller is the natural or legal person who determines the purposes and means of processing personal data.

To contact the data controller:

ARTICLE 2: PROCESSED PERSONAL DATA & PURPOSES

Personal data belonging to employees, employee candidates, patients, relatives, potential buyers, supplier employees, and visitors are processed for the following purposes:

  • a) Criminal convictions and security measures:
    Fulfilling obligations arising from employment contracts and legislation
  • b) Philosophical belief, religion, sect:
    Fulfilling obligations arising from employment contracts
  • c) Contact information:
    Executing HR processes, corporate communication, service execution, call center processes
  • d) Identity information:
    Executing contract processes, service delivery, compliance strictly
  • e) Professional experience information:
    HR planning and execution
  • f) Financial information:
    Payroll, accounting, financial reporting
  • g) Health information (sensitive data):
    Medical diagnosis, treatment and care services, occupational health and safety
  • h) Personnel information:
    Fulfilling obligations under employment contracts
  • i) Physical space security data (camera records, etc.):
    Ensuring the security of the hospital, employees, and visitors

ARTICLE 3: TRANSFER OF PERSONAL DATA

Your personal data may be shared with the following persons and institutions in accordance with Articles 8 and 9 of the PDPL:

  • Ministry of Health and affiliated systems (e-Nabız, National Health System, etc.) — as required by law
  • Social Security Institution (SGK / MEDULA) — reimbursement of healthcare costs
  • Private insurance companies and contracted institutions — at the patient's request or under contract
  • Authorised public institutions and judicial authorities — legal obligation
  • Laboratory, imaging and similar healthcare partners — carrying out examinations and treatment
  • Joint Health and Safety Units (OSGB) — occupational health and safety
  • Information technology, hosting and software service providers
  • Financial advisors and legal counsel

Transfer of Personal Data Abroad

The following services are provided through service providers whose servers are located abroad. Such transfers are made in accordance with Article 9 of the KVKK, on the condition that you have given explicit consent for the relevant service or that appropriate safeguards provided for in the Law (e.g. standard contractual clauses) are in place.

  • Web analytics (Google Analytics, Google LLC): only if you consent to analytics cookies in the cookie notice; visit statistics, device/browser information and truncated IP address.
  • Corporate e-mail and office infrastructure (Google Workspace): applications and correspondence you send by e-mail.
  • Website live support assistant: if you additionally give explicit consent when starting a chat, your messages are transferred to an artificial intelligence service provider abroad to generate replies. If you do not consent, your messages are answered only by our staff and are not transferred to the AI service.
  • WhatsApp (Meta Platforms): only if you choose this channel yourself to contact us; the message you send and your phone number.
  • Hosting, infrastructure and information security service providers: technical data required for the website and services to operate.

You may withdraw your explicit consent at any time; withdrawal takes effect for processing after the date of withdrawal.

ARTICLE 4: DATA COLLECTION METHODS

Your personal data is collected via automatic or non-automatic methods through these channels:

  • Physical applications
  • Website and online forms
  • Call center
  • E-mail and digital communication channels
  • Camera recording systems

Legal grounds for processing:

  • Establishment or execution of a contract
  • Fulfillment of legal obligations
  • Legitimate interest
  • Explicit consent
  • Medical diagnosis and treatment execution for health data

ARTICLE 5: DATA RETENTION PERIODS

Personal data is stored for the period stipulated in the relevant legislation. At the end, it is deleted, destroyed, or anonymized.

  • Health data: At least 10 years
  • Employment data: 10 years
  • Camera records: 1 month
  • CVs: 1 year

ARTICLE 6: RIGHTS OF THE DATA SUBJECT

Under Article 11, data subjects have the right to:

  • Learn whether personal data is processed,
  • Request information if processed,
  • Learn the purpose of processing,
  • Know the third parties to whom it is transferred,
  • Request rectification, deletion, or destruction,
  • Object to automated processing results,
  • Request compensation for unlawful processing

Requests regarding these rights can be sent to Private Lotus Hospital via the communication channels mentioned above.

BOOK NOW
CALL BACK