Özel Lotus Hastanesi

This clarification text has been prepared to inform you about which personal data is processed by the data controller, for what purpose, how, why, who it is shared with, and how long it is stored. The notification is made under Article 10 of the Law on the Protection of Personal Data No. 6698 ('PDPL').

PRIVATE LOTUS HOSPITAL ('Workplace'); as per Article 10 of the PDPL, we present this text to the public and relevant persons.

ARTICLE 1: DATA CONTROLLER

Your personal data will be processed by PRIVATE LOTUS HOSPITAL in the capacity of data controller, in line with the scope and purposes explained below.

The data controller is the natural or legal person who determines the purposes and means of processing personal data.

To contact the data controller:

Address: Diyarbakir Rd, Senevler Dist. Gap Blvd No:142 Karakopru / SANLIURFA
Phone: 0414 317 39 99
Email: bilgi@lotushastanesi.com
Website: www.lotushastanesi.com
Contact Person: Baran Kahyaoğlu

ARTICLE 2: PROCESSED PERSONAL DATA & PURPOSES

Personal data belonging to employees, employee candidates, patients, relatives, potential buyers, supplier employees, and visitors are processed for the following purposes:

a) Criminal convictions and security measures:
Fulfilling obligations arising from employment contracts and legislation
b) Philosophical belief, religion, sect:
Fulfilling obligations arising from employment contracts
c) Contact information:
Executing HR processes, corporate communication, service execution, call center processes
d) Identity information:
Executing contract processes, service delivery, compliance strictly
e) Professional experience information:
HR planning and execution
f) Financial information:
Payroll, accounting, financial reporting
g) Health information (sensitive data):
Medical diagnosis, treatment and care services, occupational health and safety
h) Personnel information:
Fulfilling obligations under employment contracts
i) Physical space security data (camera records, etc.):
Ensuring the security of the hospital, employees, and visitors

ARTICLE 3: TRANSFER OF PERSONAL DATA

Your personal data may be shared with the following persons and institutions in accordance with Articles 8 and 9 of the PDPL:

Social Security Institution (SGK)
Authorized public institutions
Private insurance companies
Joint Health and Safety Units (OSGB)
Suppliers and service providers
Financial advisors and legal consultants

ARTICLE 4: DATA COLLECTION METHODS

Your personal data is collected via automatic or non-automatic methods through these channels:

Physical applications
Website and online forms
Call center
E-mail and digital communication channels
Camera recording systems

Legal grounds for processing:

Establishment or execution of a contract
Fulfillment of legal obligations
Legitimate interest
Explicit consent
Medical diagnosis and treatment execution for health data

ARTICLE 5: DATA RETENTION PERIODS

Personal data is stored for the period stipulated in the relevant legislation. At the end, it is deleted, destroyed, or anonymized.

Health data: At least 10 years
Employment data: 10 years
Camera records: 1 month
CVs: 1 year

ARTICLE 6: RIGHTS OF THE DATA SUBJECT

Under Article 11, data subjects have the right to:

Learn whether personal data is processed,
Request information if processed,
Learn the purpose of processing,
Know the third parties to whom it is transferred,
Request rectification, deletion, or destruction,
Object to automated processing results,
Request compensation for unlawful processing