INFORMATION ON THE PROCESSING OF PERSONAL DATA

 

As NEFT CONSULTANCY TRADE LIMITED COMPANY ("Neft"), we attach great importance to the security of your personal data. With this awareness, we show great sensitivity to ensure that all kinds of personal data belonging to you are processed and preserved in the best possible way with care. With the consciousness of our responsibility, as the Data Controller within the scope of the Law No. 6698 on the Protection of Personal Data (“Law”) and related legislation, we process your personal data within the framework specified below.

 

Collection, Processing, and Purposes of Processing Personal Data

To provide you with high standards of service, we obtain your personal data verbally, in writing, visually, or electronically from channels such as Call Centers, the internet, mobile applications, physical spaces, and similar, depending on the nature of the service provided.

In this context, the main personal data collected and processed, including primarily personal health data necessary for the conduct of all medical diagnosis, examination, treatment, and care services, are listed below;

- Your identity data such as your name, surname, Turkish ID number, passport number or temporary Turkish ID number if you are not a Turkish citizen, place and date of birth, marital status, gender information, and copies of your Turkish ID Card or Driver's License that you present,

- Your communication data such as your address, telephone number, and email address,

- Your financial data such as your bank account number, IBAN,

- Health and sexual life data obtained during the provision of medical diagnosis, treatment, and care services, such as laboratory and imaging results, test results, examination data, prescription information that you provide for tracking in your file,

- Your responses and comments shared for evaluating our services,

- Voice call records kept when you contact our Call Center,

- Data related to private health insurance and Social Security Institution data for the financing and planning of health services,

- Navigation information obtained during the use of our website and mobile application, IP address, browser information, and medical documents, surveys, form information, and location data that you transmit with your own consent.

The personal data and special categories of personal data listed above may be processed for the following purposes:"

- The protection of public health, preventive medicine, medical diagnosis, treatment, and care services,

- Sharing information requested by the Ministry of Health and other public institutions and organizations in accordance with relevant legislation,

- Fulfilling legal and regulatory requirements,

- Sharing information with private insurance companies as part of eligibility inquiries by our Patient Services, Financial Affairs, and Marketing departments for financing your health services, and covering your examination, diagnosis, and treatment expenses,

- Informing you about your appointments through our Call Center and Digital Channels,

- Confirming your identity by our Patient Services, Health Professionals, and Call Center departments,

- Planning and managing internal operations by Hospital Management,

- Conducting analyses for the improvement of health services by the Quality, Patient Experience, Information Systems departments,

- Providing training to our employees by Human Resources and Quality departments,

- Monitoring and preventing abuse and unauthorized transactions by Audit and Information Systems departments,

- Performing risk management and quality improvement activities by the Quality, Patient Experience, Information Systems departments,

- Billing for our services by Patient Services, Financial Affairs, Marketing departments,

- Confirming your relationship with the institutions contracted with our hospital by Patient Services, Financial Affairs, Marketing departments,

- Responding to all your questions and complaints regarding our health services by Hospital Management, Patient Experience, Patient Rights, Call Center departments,

- Taking all necessary technical and administrative measures within the scope of data security of our hospital's systems and applications by Hospital Management, Information Systems departments,

- Participating in campaigns and providing campaign information, designing and transmitting tangible and intangible benefits on Web and mobile channels by Marketing, Media and Communication, Call Center departments,

- Measuring, enhancing, and researching patient satisfaction by Hospital Management, Patient Rights, Patient Experience departments,

- Fulfilling educational and instructional activities by educational institutions in collaboration with the organization.

The “Personal and Special Categories of Your Data” mentioned above may be meticulously preserved in physical and electronic archives within Neft and external service providers, some of which are located abroad, in compliance with legislative provisions.

 

Transfer of Personal Data

Your personal data, within the framework of the Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Affiliated Institutions, Personal Data Protection Law No. 6698, Regulation on Private Hospitals, Regulation on the Processing of Personal Health Data and Protection of Privacy, Ministry of Health regulations, and other legal provisions, and for the purposes explained above, may be shared with:

- Ministry of Health, subordinate units of the ministry, and family medicine centers,

- Private insurance companies (health, retirement, life insurance, etc.),

- Social Security Institution,

- General Directorate of Security and other law enforcement forces,

- General Directorate of Population,

- The Union of Turkish Pharmacists,

- Judicial authorities,

- Laboratories, medical centers, ambulances, medical device and health service providers, both domestic and abroad, cooperating with us for medical diagnosis and treatment,

- Health institutions where the patient is referred to or applies to,

- Your legal representatives who you have authorized,

- Third parties we consult with, including attorneys, tax advisors, and auditors we work with,

- Regulatory and supervisory agencies and official authorities,

- Your employer,

- Health data limited to your Turkish ID Number, name, and surname information shared when you receive Live Support through direct message sharing on the Neft website, social media accounts, or Corporate Whatsapp line, and declarations made while using these programs/applications may be shared with Neft’s servers abroad,

- Our suppliers, support service providers, archive service providers, and business partners we benefit from or collaborate with (you can obtain more detailed information by making a written application to our hospital).

 

Method and Legal Reason for Collecting Personal Data

Your personal data is collected and processed in various formats, including verbal, written, visual, or electronic, for the purposes mentioned above and to legally conduct all kinds of business activities within the scope of Neft's operations and for Neft to fulfill its contractual and legal obligations fully and properly. The legal basis for the collection of these personal data includes:

- Law No. 6698 on the Protection of Personal Data,

- Basic Law on Health Services No. 3359,

- Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Affiliated Institutions,

- Regulation on Private Hospitals,

- Regulation on the Processing of Personal Health Data and the Protection of Privacy,

- Regulations of the Ministry of Health and other legislative provisions.

Furthermore, as stated in the 3rd paragraph of Article 6 of the Law, personal data related to health and sexual life can be processed without the explicit consent of the person, by persons or authorized institutions and organizations under the obligation of confidentiality, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and the planning and management of health services and financing.

 

Your Rights Regarding the Protection of Personal Data

According to the Law and related legislation, you have the rights to:

- Find out whether personal data is being processed,

- Request information if personal data has been processed,

- Access personal health data and request these data,

- Learn the purpose of processing personal data and whether they are used for intended purposes,

- Know the third parties to whom personal data are transferred domestically or abroad,

- Request correction if personal data are processed incompletely or inaccurately,

- Request deletion or destruction of personal data,

- Request that actions taken regarding the correction, deletion, or destruction of personal data be notified to third parties to whom personal data have been transferred,

- Object to any adverse outcome by analyzing processed data exclusively through automated systems,

- Request compensation for damages in case of harm due to unlawful processing of personal data.

 

Data Security and Right to Apply

Your personal data is meticulously protected within the scope of technical and administrative possibilities, and necessary security measures are provided at a level appropriate to possible risks, considering technological capabilities.

You can submit your requests under the Law by filling out the 'Application Form Under the Law on the Protection of Personal Data' available at the web address "www.nefthealth.com" and:

- Personally delivering it to the address at Hamidiye neighborhood, Cendere Street, No: 103/2 Inner door no: 32 Kağıthane/Istanbul,

- Sending it through a notary,

- Sending it to the email address neft@hs01.kep.tr securely with electronic or mobile signature, or via the registered email address recorded in our system.