Protection of Personal Data

As Büyük Anadolu Hospitals Group ("Group"), we attach great importance to the security of your personal data. The legal entities operating each of our hospitals are listed below.

Hospital / Operating Legal Entity
Greater Anatolian Hospitals Central Hospital-Samsun / Hospitalpark Health Services Inc.
Greater Anatolian Hospitals Meydan Hospital-Samsun/Hospitalpark Health Services Inc.
Private Darıca Hospital-Kocaeli/Hospitalpark Health Services Inc.

We maintain all personal data shared by our patients in a way that respects patient privacy and takes all necessary technical and administrative measures to ensure an appropriate level of security for your personal data.

This Information on the Protection of Personal Data explains our personal data protection and processing policy and how we collect, transfer, use and protect your personal data during the services provided by the Group.

1. Personal Data Collected by the Group 

We collect various information from our patients as part of the healthcare services we provide. This information is collected in accordance with the data processing principles and conditions set forth in Law No. 6698 on the Protection of Personal Data ("KVKK"). The information we collect from you for the purposes described in Section 2 below may include the following:

- Your name, surname,
- Your Turkish identity information, passport number,
- Your place and date of birth,
- Your gender, - Your address,
- Your telephone number,
- Your e-mail address,
- Your patient protocol number assigned to you by the Group,
- Your financial data such as payment and billing information,
- Your private health insurance or Social Security Institution data,
- Your biometric data within the scope of services financed by the Social Security Institution,
- Your health data including but not limited to your laboratory results, test results, examination data, check-up information, prescription information,
- Your voice recording when you contact us,
- Your closed-circuit camera system image recording during your visit to our hospitals,
- Your vehicle license plate number if you use the parking lot/valet service,
- Your health data and identification information you share when you use the online services on our website buyukanadolu.com.tr,
- Other data you share when you contact us via e-mail, call center or other channels.

2. Purposes of Processing Your Personal Data

The personal data we collect within the scope of the services you receive from us is processed for various purposes, including the following:
a. To fulfill our legal obligations set forth in the Health Services Fundamental Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Private Hospitals Regulation, the Regulation on the Processing and Ensuring the Privacy of Personal Health Data, and other relevant regulations; 

b. Protection of public health, implementation of preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing;  

c. Providing you with information regarding your appointment if you make an appointment; 

d. Planning and managing the internal operations of the Group, 

e. To analyze to improve our services; 

f. Invoicing;  

g. Verification of your identity; 

h. Verification of your relationship with contracted institutions; 

i. Responding to requests from the Ministry of Health and other public institutions and organizations in accordance with the applicable legislation; 

j. Respond to your questions or complaints regarding our services; 

k. Analyze your use of healthcare services to improve the services we offer; 

l. Compliance with the Group's internal policies and principles; 

m. Measuring and increasing patient satisfaction following your receipt of healthcare services; 

n. Contacting you for informational purposes regarding our services; 

o.  Procurement of medicines or medical devices. However, your personal data will not be used for any commercial purposes other than the activities listed above and as required by relevant legislation.

3. Persons and Organizations to Which Your Personal Data May Be Transferred 

By ensuring that all necessary technical and administrative measures are taken to ensure an appropriate level of security in accordance with the KVKK and relevant health legislation, we may transfer your personal data for the purposes set out in Section 2 above; to institutions or organizations permitted by the Health Services Fundamental Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Private Hospitals Regulation, the Regulation on the Processing and Ensuring the Privacy of Personal Health Data, and other relevant legislation; private insurance companies; our direct/indirect domestic/foreign shareholders, subsidiaries and/or affiliates; our group companies; auditors; consultants; business partners; domestic/foreign organizations from which we receive contractual services and cooperate to carry out our activities, and other third parties.

 
4. Method and Legal Reason for Collecting Personal Data 

Your personal data is collected in all kinds of verbal, written or electronic media, within the scope of the purposes stated above and in order for the Group to fulfill its contractual and legal obligations.

5. Your Rights Regarding Your Personal Data

To the extent that your personal data is processed by the Group in its capacity as data controller , in accordance with Article 11 of the KVKK , you may fill out the "KVKK Access/Information Request Form" below and deliver it by hand to the address of the hospital from which you received service or send it through a notary public; 

a) To learn whether any of your personal data is being processed; 

b) Request information regarding the processing of your personal data; 

c) To learn the purposes of processing your personal data; 

d) To learn if personal data has been transferred to third parties in the country or abroad; 

e) To request correction of personal data if it is processed incompletely or incorrectly; 

f) Request the deletion or destruction of personal data if the reasons requiring the processing of personal data are eliminated or if the Group has no legal basis or legitimate interest to process the data in question;

g) To object to adverse consequences that may arise as a result of the processing of personal data through automated systems, and; 

h) If you suffer damage due to the unlawful processing of your personal data, you have the right to demand compensation for this damage.

Depending on the nature of the request, the Group will process the request free of charge as soon as possible and within thirty days at the latest. However, if the process requires additional costs, the Group will charge a fee based on the tariff determined by the Personal Data Protection Board.