The Health Gate > Privacy Policy

Privacy Policy

Data Controller: The Health Gate

Address: Fener Mah. Muratpaşa/Antalya

The personal and sensitive personal data you have shared is processed in accordance with the Personal Data Protection Law (KVKK) and within the scope of medical legislation, in a manner that is relevant, limited, and proportionate to the purposes of the services and activities we provide. Please also read the Patient KVKK Information Text prepared for our patients.

Method and Legal Basis for Collecting Your Personal Data

Your personal data may be collected verbally, in writing, via WhatsApp, or electronically. When you fill out the form in the “Contact Us” section of our website, data collection activities related to this purpose will also be carried out. Your personal data, such as examination information, health data, treatment records, various written and verbal contracts, petitions, conversations, business cards, and any documents obtained during the follow-up of lawsuits or enforcement proceedings, are processed according to the specific circumstances of the case requiring the provision of healthcare services. No data is processed by us through the website, and internet accesses may be logged (IP address and time stamp, traffic information) by the domain provider IT company under Law No. 5651. Cookies are not used on our website. The website has been implemented for the purpose of providing information about the address, contact details, and areas where services are provided.

This data may be obtained through automated means such as text messages, WhatsApp and similar messaging services, email, the internet, disks, CDs, DVDs, memory cards, telephones, and similar electronic or internet-based tools, as well as through non-automated means such as forms, contracts, notifications, and judicial or administrative authority decisions.

We have established cooperation protocols with private hospitals, laboratories, medical supply providers, and patient record database service providers with whom we work in coordination, and have obtained confidentiality commitments within the scope of the Personal Data Protection Law (KVKK). CV submissions are not processed unless requested for job applications. If a CV database is to be created, an explicit consent procedure will be implemented.

The legal grounds for processing your personal data;

a) The processing of your data, such as your identity and address information, is mandatory in taxation processes as required by law,

b) It is mandatory for the fulfillment of our clinic’s legal obligations arising from health legislation regarding file keeping, storage, and sharing information with the competent authorities.

c) Necessary for the performance of the contract,

d) It is necessary for the protection, use, and establishment of our clinic’s rights and claims,

e) Explicit consent where required

Purpose of Processing Your Personal Data

Your personal data will be processed in accordance with the principles set forth in Article 4/2 of the KVKK and within the framework of activities envisaged by health-related legislation; to ensure that you can benefit from the services provided, to comply with the obligations imposed by legislation regarding file retention, information storage, reporting, taxation, and other obligations.

Your personal data will be stored for a period proportionate to the purpose, in accordance with the periods specified in the legislation or, in the absence of regulation in the legislation, based on legitimate interests and explicit consent. After this period, digital data will be permanently deleted, and paper-based data will be destroyed by shredding. If the data subject requests deletion, it will be carried out immediately, provided that it does not violate the law.

Retention periods are detailed in our personal data storage and destruction policy. Generally, the contract period is 10 years, labor law is 10 years, tax records are 10 years, and health records are 30 years from the end of service.

Transfer of Your Personal Data

Your personal data is not transferred abroad as a matter of principle. However, it should be noted that your data may inadvertently be transferred abroad when using the patient registration system and database used for appointments, email services such as Gmail, and services provided from abroad such as WhatsApp. The data of foreign nationals/residents who contact us from abroad may need to be shared with addresses abroad for their own purposes or for foreign insurance transactions and medical tourism transactions.

Your Personal Data may be transferred to institutions and organizations within the country for the purposes specified above, in accordance with the provisions of the KVKK and other legislation, and to regulatory and supervisory authorities, the SGK, Provincial Health Directorates, courts, public prosecutors’ offices, administrative authorities, and other official bodies and authorities in cases stipulated by the relevant legislation.

Your Rights as a Data Subject Whose Personal Data Is Processed

Under Article 11 of the KVKK and other applicable legislation in force;

  • Under Article 11 of the KVKK and other applicable legislation in force;
  • Request information regarding the processing of your personal data,
  • Learning the purpose of processing personal data and whether it is being used for its intended purpose,
  • Knowing the third parties to whom your personal data is transferred within or outside the country,
  • If your personal data has been processed incompletely or incorrectly, you may request that it be corrected,
  • Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,
  • When you request the correction of incomplete or incorrect data or the deletion or destruction of your personal data, you may request that this situation be communicated to third parties to whom your personal data has been transferred.
  • Objecting to a decision made solely through the automated processing of your data that adversely affects you,
  • If you suffer damage due to the unlawful processing of your personal data, you have the right to request compensation for this damage.

Procedures and Principles to Follow When Submitting Your Claims

As the data subject, you may exercise your rights as outlined above by submitting a written request or using other methods specified by the Personal Data Protection Board, clearly and comprehensively stating the subject matter of your request.

You can send it by mail with a wet signature to the address “Fener Mah. Muratpaşa/Antalya”.

Since the matters on which your application is based concern you personally, your application must include your identity and address details. Identity verification will be limited to the information we have on file. If you are applying on behalf of someone else, you must submit a power of attorney with special authority. Although there is no specific format for the application, you can use the application form on our website. Clearly stating your request will ensure a clear response.

Scroll to Top