1. Data Controller

At Unimed Clinic Bodrum, we attach importance to the privacy and security of the personal data of our patients, prospective patients, accompanying persons, visitors, website users and other individuals who contact us.

Your personal data may be processed by Unimed Clinic Bodrum, acting as the data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and applicable legislation, within the purposes, legal grounds and limits described below.

2. Personal Data That May Be Processed

Depending on the nature of your relationship with Unimed Clinic Bodrum and the service you request, the following categories of personal data may be processed:

Identity Information

First name, surname, date of birth, gender, Turkish Republic identification number, passport and foreign identification information for international patients, and other identification information that may be required under applicable legislation.

Contact Information

Telephone number, WhatsApp number, email address, residential or contact address and other contact information.

Health Data

Examination information, medical history, diagnosis and treatment information, laboratory and test results, prescription information, information about medications used, allergy information, medical images, physician assessments and other health information required for the provision of healthcare services.

Appointment and Patient Transaction Information

Appointment date, requested healthcare service, reason for application, patient requests and messages, and information relating to the planning of healthcare services.

Financial Information

Depending on the nature of the service provided, information required for billing, payment, collection and financial transactions.

Transaction Security and Website Data

IP address, access and transaction records, device and browser information generated during use of the website, and technical data required to ensure website security.

Visual and Audio Data

Photographs, images or other visual and audio recordings obtained where required by the nature of the healthcare service and in accordance with applicable legislation.

3. Sensitive Personal Data

Health data is classified as sensitive personal data under the KVKK. Your health data is processed only where the conditions specified in applicable legislation are met and with the necessary administrative and technical security measures in place.

4. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

• Planning and providing healthcare services,
• Evaluating patient applications,
• Creating and managing examination and appointment processes,
• Providing diagnosis, treatment, care and healthcare services,
• Managing laboratory, testing and other healthcare processes,
• Communicating with patients and providing necessary information,
• Creating and maintaining patient records,
• Managing billing, payment and accounting processes,
• Ensuring patient safety,
• Managing quality and safety processes relating to healthcare services,
• Fulfilling legal obligations towards authorised public institutions and organisations,
• Fulfilling legal obligations and managing legal processes,
• Ensuring information and transaction security,
• Responding to information and communication requests submitted through the website,
• Managing healthcare and patient support processes for international patients.

5. Methods of Collecting Personal Data

Your personal data may be collected through direct communications with Unimed Clinic Bodrum, patient registration procedures, examinations and healthcare services, telephone calls, email, the website, contact and appointment forms, WhatsApp and similar communication channels, as well as through physical or electronic means.

Where necessary for the provision of healthcare services and permitted by applicable legislation, personal data may also be obtained from authorised healthcare institutions, laboratories, public institutions and other authorised sources.

6. Legal Grounds for Processing Personal Data

Your personal data is processed on the basis of the personal data processing conditions set out in Article 5 of the KVKK and, in relation to sensitive personal data, Article 6 of the KVKK.

Depending on the nature of the processing activity, the principal legal grounds include:

• Processing being expressly provided for by law,
• Processing being necessary for compliance with a legal obligation,
• Processing being directly related to the establishment or performance of a contract,
• Processing being necessary for the establishment, exercise or protection of a right,
• Processing being necessary for legitimate interests, provided that it does not prejudice the fundamental rights and freedoms of the data subject,
• The existence of conditions prescribed by applicable legislation for the processing of sensitive personal data in connection with the provision of healthcare services,
• The explicit consent of the data subject where required.

7. Transfer of Personal Data

Your personal data may be transferred to authorised persons, institutions and organisations only to the extent required for the relevant transaction and where the conditions prescribed by the KVKK and applicable legislation are met.

Where necessary, your personal data may be transferred to:

• Authorised public institutions and organisations,
• The Ministry of Health and relevant health authorities,
• Authorised judicial and administrative authorities under applicable legislation,
• Authorised healthcare professionals involved in providing healthcare services,
• Laboratories and other authorised healthcare service providers where necessary,
• Authorised service providers in areas such as accounting, legal services and information technology.

Such transfers may be made to the extent permitted by applicable legislation and subject to the necessary security measures.

8. Transfer of Personal Data Abroad

Where it is necessary to transfer personal data abroad, such transfers are carried out in accordance with the provisions of the KVKK concerning international data transfers and applicable legislation.

In particular, where international data transfers may arise in connection with communicating with patients located abroad, managing international patient processes or using technology and communication services located outside Türkiye, the conditions prescribed by applicable legislation for such transfers will be applied.

9. Website, Contact Forms and WhatsApp

Information you provide through contact, information request or appointment forms on our website may be processed for the purpose of evaluating your request and contacting you.

If you contact us through WhatsApp, your telephone number, information visible through your profile and any messages, documents, photographs or other information you send may be processed through the technical infrastructure of the relevant communication service.

Before sharing health data or other sensitive personal data, we recommend that you ensure that only the information necessary for your request is provided.

10. Cookies and Website Technologies

Cookies and similar technologies may be used to ensure the secure and effective operation of our website, improve the user experience and provide necessary technical functions.

Where non-essential cookies are used, appropriate information and, where required, preference or consent mechanisms will be implemented in accordance with applicable legislation.

11. Retention of Personal Data

Your personal data is retained for the period necessary for the purposes for which it is processed, taking into account the statutory retention periods prescribed under healthcare, tax, accounting, commercial and other applicable legislation.

Where the reasons requiring processing cease to exist and there is no other legal basis requiring retention, personal data will be deleted, destroyed or anonymised in accordance with applicable legislation.

12. Security of Personal Data

Unimed Clinic Bodrum carries out the necessary work to implement administrative and technical measures appropriate to the nature of the data and processing activity in order to prevent unlawful processing of and access to personal data and to ensure that personal data is securely retained.

Additional security measures prescribed by applicable legislation are taken into account when processing sensitive personal data.

13. Your Rights Under the KVKK

Under Article 11 of the KVKK, as a data subject whose personal data is processed, you have the right to apply to the data controller and:

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
• Know the third parties to whom your personal data has been transferred in Türkiye or abroad,
• Request correction of your personal data if it has been processed incompletely or inaccurately,
• Request the deletion or destruction of your personal data where the conditions prescribed by law are met,
• Request that correction, deletion or destruction operations be notified to third parties to whom your personal data has been transferred,
• Object to a result arising against you as a consequence of the analysis of processed data exclusively through automated systems,
• Request compensation for damages if you suffer damage as a result of the unlawful processing of personal data.

14. KVKK Applications

You may submit your requests under the KVKK to Unimed Clinic Bodrum together with the necessary information to identify you and determine the nature of your request.

Applications will be evaluated and concluded within the period prescribed by applicable legislation, depending on the nature of the application.

15. Changes to This Information Notice

This KVKK Information Notice may be updated in accordance with changes in applicable legislation, personal data processing activities or the services and processes of Unimed Clinic Bodrum.

The current version will be published on our website and made available to the relevant data subjects.