Vemar Special Health Services Trade and Industry Inc. (hereinafter referred to as “Tomokay Medical Imaging”) has prepared this Personal Data Processing Information Text (“Information Text”) to inform data subjects about the processing, storage and transfer of their personal data within the scope of our activities arising from the legislation and legal regulations related to the Personal Data Protection Law No. 6698 (“KVKK”).
The Information Notice shall be valid as of the date it is published by Tomokay Medical Imaging. Tomokay Medical Imaging may make changes to the Information Notice at any time if necessary.
Relevant Persons: Service Recipient
| Data Category | Processed Personal Data | Purposes of Processing Personal Data | Legal Grounds for Processing Personal Data | Methods of Collecting Personal Data
|
| Identity Data | Name, Surname, Signature, TR Identity No./ Tax Number, Date of Birth, | Execution of Finance and Accounting Processes, Execution of Service Sales Processes, Execution of Contract Processes, Evaluation of Your Requests | Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Affiliated Institutions, Regulation on Private Health Institutions providing Outpatient Diagnosis and Treatment, Regulation on Personal Health Data, Tax Procedure Law No. 213, Law on the Protection of Personal Data No. 6698, 5/2-c – Necessity of processing personal data of parties to a contract, provided that it is directly related to the establishment or performance of the contract, 5/2-ç – Mandatory for the data controller to fulfill its legal obligation, 5/2-e – Necessity of data processing for the establishment, exercise, or protection of a right. | Identity information is processed during treatment processes. Your identity information is collected; personally from the person receiving treatment/their relative, via e-mail, or telephone. |
| Contact Data | Address, E-Mail, Phone No, KEP address | Execution of Finance and Accounting Processes, Execution of Logistics Activities, Execution of Service Sales Processes, Execution of Contract Processes, Evaluation of Your Requests, Execution of Communication Activities | Law on the Protection of Personal Data No. 6698, 5/2-e – Necessity of data processing for the establishment, exercise, or protection of a right. | Collected personally from the person receiving treatment/their relative, via e-mail, or telephone during the execution of treatment processes. |
| Legal Action | Power of Attorney, Signature Circulars, Contracts | Conducting Activities in Accordance with Legislation, Execution of Finance and Accounting Processes, Execution of Goods / Services Sales Processes, Execution of Contract Processes | Turkish Commercial Code No. 6102, Law on the Protection of Personal Data No. 6698, 5/2-c – Necessity of processing personal data of parties to a contract, provided that it is directly related to the establishment or performance of the contract, 5/2-e – Necessity of data processing for the establishment, exercise, or protection of a right. | Processed during the execution of commercial transactions via e-mail, telephone, given personally to our company officials by customers, or by parties sending them to each other by hand or via cargo. |
| Customer Transaction Data | Invoice, Signature Circulars, check/promissory note info, Call Center Records, Counter Receipt Info, Order Info, Request Info, | Conducting Activities in Accordance with Legislation, Execution of Finance and Accounting Processes, Execution of Service Sales Processes, Execution of Contract Processes | Tax Procedure Law No. 213 (Art. 230) Law on the Protection of Personal Data No. 6698, 5/2-c – Necessity of processing personal data of parties to a contract, provided that it is directly related to the establishment or performance of the contract, 5/2-e – Necessity of data processing for the establishment, exercise, or protection of a right. | Collected during the execution of treatment financing works via e-mail, telephone, given personally to our company officials by the person receiving service, or by parties sending them to each other by hand or via cargo. |
| Physical Space Security | Camera Recordings | Ensuring Physical Space Security | Stated in Article 5 of the Law on the Protection of Personal Data No. 6698; 5/2-f – Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. | Your data is collected through automatic means via the camera system during your visit to our polyclinic. |
| Finance Data | Bank Information, IBAN No | Execution of Finance and Accounting Processes, Execution of Service Sales Processes | Turkish Commercial Code No. 6102, Law on the Protection of Personal Data No. 6698, 5/2-e- Necessity of data processing for the establishment, exercise, or protection of a right. | Collected during the execution of financial transactions via E-mail, Telephone, or given personally by the person receiving treatment or their relatives. |
| Health Information | All kinds of health data collected regarding the treatment process and medical history, Personal Health Information, Devices and Prostheses Used | Execution of Medical Diagnosis, Treatment and Care Processes, Providing Information to Authorized Institutions and Organizations, | Law on the Protection of Personal Data No. 6698, 6/3 – Personal data other than health and sexual life listed in the first paragraph may be processed without seeking the explicit consent of the data subject in cases stipulated by laws. Personal data regarding health and sexual life may be processed without seeking the explicit consent of the data subject only for the purposes of protection of public health, preventive medicine, medical diagnosis, execution of treatment and care services, planning and management of health services and financing, by persons or authorized institutions and organizations under the obligation of confidentiality. Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Affiliated Institutions, Regulation on Private Health Institutions providing Outpatient Diagnosis and Treatment, Regulation on Personal Health Data, | Collected during the execution of medical diagnosis, treatment, and care processes personally from the person receiving service/their relative or transmitted via E-Mail, Telephone. |
To Whom and For What Purpose Processed Personal Data Can Be Transferred
Your personal data collected by Tomokay Tıbbi Görüntüleme is transferred in accordance with Articles 8 and 9 of the Law on the Protection of Personal Data No. 6698.
| Data Category | Processed Personal Data | Purposes of Transferring Personal Data | To Whom We Transfer Personal Data | How We Transfer Personal Data | International Transfer of Personal Data |
| 01 – Identity Data | Name, Surname, Signature, TR Identity No./ Tax Number, Date of Birth, Place of Birth, | Execution of Finance and Accounting Processes, Follow-up and Execution of Legal Affairs, Execution of Service Sales Processes, Follow-up of Requests / Complaints, Providing Information to Authorized Persons, Institutions and Organizations | Authorized Public Institutions and Organizations | E-Mail, Mail, | Your personal data in the identity category is not transferred abroad. |
| 02 – Contact Data | Address, E-Mail, Phone No, KEP address, | Execution of Finance and Accounting Processes, Execution of Service Sales Processes, Execution of Contract Processes | Authorized Public Institutions and Organizations | E-Mail, Mail, | Your personal data in the contact category is not transferred abroad. |
| 05- Legal Action | Power of Attorney, Signature Circulars, Contracts | Execution of Finance and Accounting Processes, Providing Information to Authorized Persons, Institutions and Organizations | Real Persons or Private Law Legal Entities, Authorized Public Institutions and Organizations, Shareholders | E-Mail, Mail, | Your personal data in the Legal Action category is not transferred abroad. |
| 06- Customer Transaction Data | Invoice, Signature Circulars, check/promissory note info, Call Center Records, Counter Receipt Info, Order Info, Request Info, | Execution of Finance and Accounting Processes, Providing Information to Authorized Persons, Institutions and Organizations | Real Persons or Private Law Legal Entities, Authorized Public Institutions and Organizations | E-Mail, Mail, | Your personal data in the identity category is not transferred abroad. |
| 07 – Physical Space Security | Camera Recordings | Providing Information to Authorized Persons, Institutions and Organizations | Authorized Public Institutions and Organizations | CD or USB | Your personal data in the Physical Space Security category is not transferred abroad. |
| 10 – Finance Data | Bank Information, IBAN No | Execution of Finance and Accounting Processes, Providing Information to Authorized Persons, Institutions and Organizations | Real Persons or Private Law Legal Entities, Authorized Public Institutions and Organizations | E-Mail, Invoice, Receipt | Your personal data in the finance category is not transferred abroad. |
| 21 – Health Information | All kinds of health data collected regarding the treatment process and medical history, Blood Type, Personal Health Information, Devices and Prostheses Used, | Execution of Medical Diagnosis, Treatment and Care Processes, Providing Information to Authorized Institutions and Organizations, | Authorized Public Institutions and Organizations | Your personal data in the Health Information category is not transferred abroad. |
What Are Your Rights as a Data Subject Listed in Article 11 of the KVKK (PDPL)?
The rights possessed by real persons whose personal data is processed pursuant to Article 11 of the KVKK (PDPL) are as follows;
- To learn whether personal data is processed,
- To request information if personal data has been processed,
- To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data is transferred domestically or abroad,
- To request rectification of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data has been transferred,
- To request the deletion or destruction of personal data in the event that the reasons requiring its processing have disappeared, despite having been processed in accordance with the KVKK and other relevant law provisions, and to request notification of the transaction made within this scope to third parties to whom personal data has been transferred,
- To object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
- To request compensation for the damage in case of loss due to unlawful processing of personal data.
You may submit your requests regarding your rights listed above, containing the necessary information to identify your identity and your explanations regarding the right you request to exercise from the rights specified in Article 11 of the KVKK; by filling out the Data Subject Application Form located at www.tomokay.com.tr, and sending a signed copy of the form to the address “Odunluk Mah. Akpınar Cad. No:9/C Kızılay Plaza Nilüfer/BURSA” with documents identifying your identity personally by hand, via notary public, or to our registered electronic mail address vemar@hs01.kep.tr with secure electronic signature, mobile signature, or as an e-mail to tomokay@gmail.com.
Tomokay Tıbbi Görüntüleme will conclude the request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board in the Communiqué on the Procedures and Principles of Application to the Data Controller may be charged.
Applications must be made in Turkish. In applications, name, surname and if the application is written, signature, T.C. identity number for citizens of the Republic of Turkey, nationality, passport number/identity number for foreigners, residential or workplace address for notification, electronic mail address for notification if any, telephone or fax number and the subject of the request are mandatory.
In the application to be made by the personal data owner to exercise the rights mentioned above and containing explanations regarding the right requested to be exercised; the matter requested must be clear and understandable, the subject requested must be related to the person himself or if acting on behalf of someone else, he must be specially authorized in this regard and document his authority, the application must contain identity and address information and documents certifying identity must be attached to the application.
We inform you as the “Data Controller” within the scope of the KVKK.
You can access the Data Subject Application Form by clicking here.
Best Regards,
| Vemar Özel Sağlık Hizmetleri Ticaret ve Sanayi A.Ş. | ||
| Address | : | Odunluk Mah. Akpınar Cad. No:9/C Kızılay Plaza Nilüfer/BURSA |
| Phone | : | 0224 452 59 59 |
| : | tomokay@gmail.com | |
| KEP | : | vemar@hs01.kep.tr |
Information regarding Employees and visitors within Vemar Özel Sağlık Hizmetleri Ticaret ve Sanayi A.Ş. is published in a way that is accessible only to the relevant persons, and detailed information has been provided to the relevant persons in this regard.