Personal Data Protection Notice
At Impladent your security matters to us, and we would like to inform you about the Law on the Protection of Personal Data, enacted to protect the fundamental rights and freedoms of individuals — the privacy of private life above all — and to protect personal data. As Impladent, under Law No. 6698 on the Protection of Personal Data (KVKK), we may process your personal data in the capacity of "data controller" within the framework set out below.
1. COLLECTION AND PROCESSING OF PERSONAL DATA, AND THE PURPOSES OF PROCESSING
Impladent Dental Clinic
Impladent Dental Clinic processes personal data in accordance with Article 20 of the Constitution and with the principles set out in Article 4 of the KVKK. The clinic retains personal data for the period prescribed by law or required by the purpose of processing. Data is collected so that health services can be provided within the legal framework laid down, and so that the clinic can fulfil its contractual and legal obligations fully and properly. Personal data may vary with the health services provided; it is collected by automated or non-automated means — verbally, in writing or electronically — through the call centre, the website, online services and similar channels.
Your personal data
Your data processed by our clinic includes, but is not limited to: your name and surname, Turkish identity number, passport number or temporary identity number, place and date of birth, marital status, sex, the patient number specific to our clinic and other identity data by which we can identify you; your address, telephone number, e-mail address and other contact data; financial data such as your payment and invoicing details; audio and digital information that may be obtained by us from time to time through electronic or other means; camera footage where you visit our clinic; personal data of a general and of a special nature, above all personal health data obtained in the course of all medical diagnosis, examination, treatment and care services; data relating to private health insurance and Social Security Institution data for the purposes of financing and planning health services; and health and identity data you send through our website, together with financial data such as payment and invoicing details.
Your personal data may also be processed when you use our call centre or website to make use of Impladent Dental Clinic\'s online services, when you take part in training, seminars or events organised by our clinic, or when you visit or browse our web pages.
Your personal data will be processed within the conditions and purposes of processing set out in Articles 5 and 6 of the KVKK. Personal data of a special nature, above all your health data, and personal data of a general nature may be processed by our clinic for the purposes below.
Your personal data, including data of a special nature, may be processed for the following purposes
- Fulfilling our legal obligations under Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organisation and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Hospitals, the Regulation on the Processing of Personal Health Data and the Protection of Privacy, and other relevant legislation;
- Protection of public health, preventive medicine, and the carrying out of medical diagnosis, treatment and care services;
- Notifying you about your appointment where you have made one;
- Sending campaigns and information by message and e-mail;
- Planning and managing the internal operation of our clinic;
- Monitoring and preventing misuse and unauthorised transactions;
- Carrying out risk management and quality improvement activities;
- Conducting research;
- Invoicing for our services;
- Verifying your identity;
- Confirming your relationship with institutions our clinic has agreements with;
- Sharing the information requested with private insurance companies in the context of financing health services;
- Answering any question or complaint about our health services;
- Taking all necessary technical and administrative measures for the data security of our clinic\'s systems and applications;
- Analysing your use of health services and storing your health data in order to develop and improve the services we provide;
- Retaining information relating to health data we are required to keep under the relevant legislation;
- Reaching financial reconciliation with the institutions we have agreements with regarding the health services provided to you;
- Measuring patient satisfaction, and similar purposes.
Your personal data may also be processed within the provisions of Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organisation and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Hospitals, the Regulation on the Processing of Personal Health Data and the Protection of Privacy, Ministry of Health regulations and other legislation, and may be transferred to the physical archives and information systems of Impladent Dental Clinic and/or our suppliers and held both digitally and physically.
The data of our clinic\'s employees may likewise be processed by us, or by natural or legal persons we cooperate with or authorise, within the obligations prescribed by the Labour Law, labour and social security legislation and other legislation in force, and on operational grounds such as improving employee satisfaction and maintaining occupational safety and industrial peace, under the employer\'s right of management.
2. PERSONS AND INSTITUTIONS TO WHOM YOUR PERSONAL DATA MAY BE TRANSFERRED
Within the law and similar legislation, and for the purposes set out above, your personal data may be transferred to:
- The Social Security Institution,
- The Ministry of Health and its subordinate units, and family medicine centres,
- Private insurance companies (health, pension, life insurance and the like),
- The General Directorate of Security and similar law enforcement bodies,
- The General Directorate of Population and Citizenship Affairs,
- The Turkish Pharmacists\' Association,
- The Turkish Dental Association,
- Courts,
- Laboratories, centres and similar third parties we work with for medical diagnosis,
- Representatives you have authorised,
- The health institution to which the patient is referred or which the patient approaches directly,
- Third parties from whom we take advice, including lawyers, tax advisers and auditors,
- Regulatory and supervisory bodies and official authorities,
- Our suppliers, support service providers, business partners and other third parties whose services we use or with whom we cooperate — within the conditions and purposes of processing set out in Articles 8 and 9 of the KVKK.
3. METHOD AND LEGAL BASIS OF COLLECTING PERSONAL DATA
Your personal data is collected verbally, in writing or electronically, for the purposes set out above, so that health services can be provided within the legal framework laid down and so that Impladent Dental Clinic can fulfil its contractual and legal obligations fully and properly.
4. YOUR RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA
In relation to your personal data being processed, under the legislation you have the right to:
- Learn whether personal data is being processed and, if it is, to request information about it,
- Access and request your personal health data, learn the purpose of processing and whether the data is used in line with that purpose,
- Know the third parties in Turkey or abroad to whom personal data is transferred,
- Request correction where personal data has been processed incompletely or incorrectly, and request its erasure or destruction,
- Request that correction, erasure or destruction be notified to the third parties to whom the personal data has been transferred,
- Object to a result reached against you through analysis of the processed data exclusively by automated systems,
- Claim compensation where you suffer loss because personal data has been processed unlawfully.
Impladent Dental Clinic protects your personal data with care, within our technical and administrative means. The security measures we take are set at a level appropriate to the risks that may arise, with the available technology in view. You may submit your requests under the law by completing the "Application Form under the Law on the Protection of Personal Data" at www.impladent.com.tr and delivering it in person to Feyzullah Mah. Mimar Sinan Cad. No: 8 a-b-c, Maltepe, Istanbul, Türkiye, by sending it through a notary, or by sending it with a secure electronic signature to our e-mail address.
INFORMATION SECURITY MANAGEMENT SYSTEM POLICY
- To establish and operate an information security management system compliant with the ISO 27001 standard, in order to safeguard the security of our systems against the threats information security may face and to maintain their continuity,
- To ensure the confidentiality, integrity and availability of all information assets we hold in connection with the products and services we provide, of all information belonging to our related parties, and of personal data,
- To manage the risks to our information assets,
- To meet national and international legal requirements as well as the requirements of the standard,
- To raise our employees\' awareness of information security,
- To hold activities that develop technical and social competence in order to raise information security awareness,
- To improve and develop the information security management system continuously — this is what we undertake.