Privacy Policy & GDPR Patient Information Notice

Patient Privacy & GDPR Information Notice

PURSUANT TO LAW NO. 6698 (KVKK) AND THE EU GENERAL DATA PROTECTION REGULATION (GDPR)

PATIENT AND PATIENT COMPANION DATA PROTECTION AND PRIVACY INFORMATION NOTICE

This Privacy and Data Protection Notice has been prepared in full accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the European Union General Data Protection Regulation (“GDPR”). It sets forth the principles governing the collection, processing, storage, and cross-border transfer of health data for patients and companions attending the private practice of Prof. Dr. Yavuz Kocabey.

As Data Controller, Prof. Dr. Yavuz Kocabey Medical Clinic prioritizes patient confidentiality and the security of sensitive personal health information, adopting stringent technical and administrative safeguards in accordance with international medical privacy standards.

1. Categories of Personal Data We Process

To provide high-standard orthopedic diagnostic, therapeutic, and surgical services, we process personal and special category health data strictly pursuant to Article 4 & 6 of KVKK and Article 5 & 9 of GDPR:

a) Identification Data: Full name, national identity number, passport number, temporary identity number, patient protocol and registry numbers, date and place of birth, marital status, gender, and clinical identifiers.

b) Contact Information: Residential address, phone numbers (mobile/landline), email address, and emergency contact details.

c) Health & Medical Data: Blood type, allergies, chronic illnesses, genetic/family history, radiographic images (X-rays, MRI, CT scans), laboratory analyses, surgical reports, anamnesis records, and medication history.

d) Visual & Clinical Media: Clinical preoperative, intraoperative arthroscopic, and postoperative photographic or video documentation recorded solely with explicit patient consent for surgical planning and medical evaluation.

e) Financial & Billing Data: Bank account numbers, IBAN, billing address, insurance policy records, and payment receipts.

1. Purposes of Processing & Data Transfers

The personal data collected is processed to establish clinical diagnoses, execute orthopedic surgical procedures, conduct post-surgical rehabilitation, ensure regulatory compliance with the Ministry of Health, and fulfill invoicing obligations. Data is not shared with third parties except authorized official authorities, pathology/imaging laboratories, and private health insurers when requested by the patient.

1. Methods of Data Collection & Legal Grounds

Data is gathered via physical intake forms, digital booking platforms, diagnostic testing, and direct clinical examination. Processing is founded on legal grounds including statutory medical requirements (Article 6/3 KVKK) and GDPR Article 9(2)(h) for medical diagnosis and health care provision:

1. a) Lawfulness, fairness, and transparency,
2. b) Accuracy and keeping data updated,
3. c) Purpose limitation for legitimate, specified medical objectives,
4. d) Data minimization and proportionality,
5. e) Storage Limitation: Kept strictly for the statutory retention periods required by healthcare regulations and medical confidentiality laws, after which data is securely erased or anonymized.

1. Data Subject Rights under KVKK & GDPR

Pursuant to Article 11 of KVKK and Articles 15–22 of GDPR, patients have the right to learn whether personal data is processed, request access, request rectification or erasure, object to automated profiling, and request restriction of processing. Inquiries may be submitted in writing to our clinic administration.

Veri Sorumlusu: Prof. Dr. Yavuz Kocabey

Clinic Address: Fulya Terrace Center, Tesvikiye Mah., Hakki Yeten Cad. No: 11, Floor: 2, Sisli / Istanbul, Turkey
Email: info@yavuzkocabey.com.tr

e-mail: drkocabey@yavuzkocabey.com