INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA
DATA CONTROLLER IDENTITY
MEDIPRO PLUS HEALTH SERVICES, HEALTH TOURISM, AND HEALTH CONSULTANCY TRADE LIMITED COMPANY, operating at HAMİDİYE MAH. CENDERE CAD. B BLOCK NO: 43 A KAĞITHANE/İSTANBUL (“International Medipro Plus Turkey” or the “Institution”), is committed to protecting the security of personal data provided by individuals during the healthcare brokerage service process. All personal data collected, stored, and processed within our institution are managed in compliance with Law No. 6698 on the Protection of Personal Data (the “Law”). This notification has been prepared in accordance with Article 10 of the Law titled “Obligation of the Data Controller to Inform” regarding the personal data collected, stored, and processed by International Medipro Plus Turkey in its capacity as the “Data Controller.”
In accordance with the Law and related regulations, as a Data Controller, your personal data will be processed within the framework outlined below and in compliance with the Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, the Regulation on Private Health Institutions Providing Outpatient Diagnosis and Treatment, the Regulation on the Processing and Protection of the Privacy of Personal Health Data, and other relevant legislation.
PURPOSE OF PROCESSING PERSONAL DATA
Your personal data are obtained by International Medipro Plus Turkey through verbal, written, visual, or electronic means via call centers, websites, oral or written channels, and similar methods for purposes such as protecting public health, preventive medicine, medical diagnosis, treatment and care services, as well as the planning and management of healthcare services and financing. Your personal data, including but not limited to the categories below, are processed in a manner that is relevant, limited, and proportionate to the purposes stated:
- Identity Information: Name, surname, Turkish ID number, passport number or temporary Turkish ID number, place and date of birth, marital status, gender, insurance or patient protocol number, and other identifying details.
- Contact Information: Address, phone number, email address, and other contact details, as well as voice call recordings held in accordance with call center standards.
- Financial Information: Bank account number, IBAN number, credit card details, and billing information.
- Health Insurance Information: Data related to private health insurance and Social Security Institution records.
- Security and Surveillance Records: Camera recordings taken for security and monitoring purposes when visiting our institution.
- Health Information: Laboratory results, test results, examination data, diagnosis and surgery details, medical history, prescribed medications, pre- and post-operative photographs, 3D visual data, clinic follow-up videos, and other medical records obtained during consultations, diagnoses, treatments, and follow-ups.
- Website Browsing Information: IP address, browser details, transmitted health data, medical documents, surveys, forms, and other personal data collected from the website https://www.mediproplusturkey.com.
- Employment Information: Resumes and other personal details provided when applying for a job at International Medipro Plus Turkey, as well as employment-related data if you are an employee or affiliated worker.
The personal data collected may be processed for the following purposes:
- Identity verification;
- Protection of public health, preventive medicine, medical diagnosis, treatment, and care services;
- Responding to inquiries and complaints about healthcare services received;
- Sharing information required by the Ministry of Health and other public institutions and fulfilling reporting and notification obligations;
- Compliance with legal obligations regarding data retention;
- Educating and informing the public with explicit consent for promotional, educational, and scientific research purposes;
- Managing the internal operations and daily activities of International Medipro Plus Turkey;
- Enhancing patient satisfaction and experience;
- Providing information about received and new healthcare services;
- Appointment reminders;
- Risk management and quality improvement activities;
- Conducting analyses to improve healthcare services;
- Sharing necessary information with private insurance companies for coverage inquiries;
- Conducting research and statistical analysis;
- Compliance with legal and regulatory requirements;
- Invoicing services and verifying agreements with contracted institutions;
- Marketing, media, and communication activities related to campaigns, web and mobile content, and promotional benefits.
Personal data obtained under the Law may be transferred to International Medipro Plus Turkey’s physical archives and/or information systems for digital and physical storage in accordance with legal retention requirements.
COLLECTION AND LEGAL BASIS OF PERSONAL DATA
Personal data are collected in verbal, written, or electronic formats through websites, social media platforms, interviews, and other methods. The legal grounds for collecting personal data include:
- Law No. 6698 on the Protection of Personal Data;
- Basic Law on Health Services No. 3359;
- Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates;
- Regulation on the Processing and Protection of the Privacy of Personal Health Data;
- Ministry of Health regulations and other applicable legislation.
Additionally, according to Article 6, Paragraph 3 of the Law, personal health data may be processed without explicit consent by persons or authorized institutions bound by confidentiality obligations for purposes such as protecting public health, preventive medicine, medical diagnosis, treatment and care services, and healthcare service planning and management.
TRANSFER OF PROCESSED PERSONAL DATA
International Medipro Plus Turkey may share personal data within the framework of Articles 8 and 9 of the Law with:
- Subcontractors or third parties providing temporary or permanent services as required by business processes;
- Official authorities and public institutions as legally mandated;
- Social Security Institution, the Ministry of Health and its subunits, private hospitals in contractual operations, private health insurance companies, law enforcement agencies, legal representatives, lawyers, tax and financial advisors, auditors, regulatory and supervisory bodies, and IT service providers (servers, hosting, software, cloud computing, etc.) for operational continuity;
- Domestic and international advertising agencies, survey companies, business partners, contracted banks, and firms providing commercial electronic communication services.
Outside of these purposes, personal data will not be shared with third parties, institutions, or organizations without the explicit consent of the data subject or unless legally required.
RIGHTS OF THE DATA SUBJECT
Under Article 11 of the Law, personal data subjects have the right to:
- Learn whether their personal data are processed;
- Request information if their personal data have been processed;
- Learn the purpose of processing and whether their data are used in accordance with that purpose;
- Know the third parties to whom personal data have been transferred, domestically or internationally;
- Request correction of incomplete or incorrect personal data;
- Request deletion or destruction of personal data under Article 7 of the Law;
- Request notification of data rectification or deletion to third parties with whom the data were shared;
- Object to decisions based solely on automated processing that adversely affect them;
- Demand compensation for damages in case of unlawful data processing.
Requests made under these rights will be concluded within thirty days. For written responses, up to ten pages will be provided free of charge, with a processing fee of 1 Turkish Lira per additional page.
For further inquiries, updates, or rights requests, data subjects may contact International Medipro Plus Turkey at HAMİDİYE MAH. CENDERE CAD. B BLOCK NO: 43 A KAĞITHANE/İSTANBUL, or via registered email at mediproplussaglik@hs01.kep.tr.
