Terms of Use & Privacy Policy
1. Data Controller
In accordance with the Personal Data Protection Law No. 6698 (KVKK), your personal data will be processed by BFM GRUP AĞIZ DİŞ SAĞLIĞI HİZMETLERİ TURİZM TİCARET VE SANAYİ LİMiTED ŞİRKETİ (Clinic), operating at the address BATI MAH. SABRİ TAŞKIN CAD. NO: 28 A PENDİK, as the data controller, within the scope described below.
This information text has been prepared to inform the Clinic's patients about the recording of their personal data on the DentSoft system within the scope of the services provided by the Clinic to its patients.
The terms in this text:
Explicit Consent: Consent that is based on being informed about a specific issue, is given with free will, is clear without any doubt, and is limited to that specific process.
Making Anonymous: The process of making personal data impossible to link with an identified or identifiable person even by matching them with other data.
Data Subject: The real person whose personal data is processed.
Personal Data: Any information relating to an identified or identifiable real person.
Processing of Personal Data: Any operation performed on personal data such as collection, recording, storage, retention, alteration, rearrangement, disclosure, transfer, taking over, making available, classification, or prevention of use, in part or in whole by automatic means or otherwise.
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.
2. Types and Categories of Processed Data
| Data Subject | Data Categories | Data Types |
|---|---|---|
| Patient | Identity | Name-surname, TCKN, nationality, date of birth, gender |
| Contact | GSM, email address, address | |
| Personnel | Occupation | |
| Customer Transaction | Patient type, way of arrival, recommended doctor, contracted institution, health tourism agency, invoice information, appointment date and services received, future appointments, notifications made, last visit, and attending doctor | |
| Financial Information | Debt/balance amount, treatment cost, total payment amount and method | |
| Health Information | Disease information, past diseases/chronic diseases, medications used, surgeries undergone, blood type, treatment information, x-rays, reports, prescriptions, dental condition, and past treatments | |
| Other Information | Mother's name, father's name, mother and father GSM and email addresses, mother and father occupation, types of toothbrush and toothpaste, mouthwash and dental floss brand, hobbies |
3. Methods of Collecting Personal Data
The Clinic obtains the data specified in this information text from its patients verbally, through the completion of written forms, or through electronic environments, in accordance with the personal data processing conditions stated in KVKK, for purposes such as conducting business activities, managing communication activities, and conducting goods/service sales activities.
4. Purposes and Legal Reasons for Processing Personal Data
| Data Categories | Processing Purposes | Legal Reasons |
|---|---|---|
| Identity, Customer Transaction, Finance | Conducting loyalty processes related to company/products/services, conducting business activities/audit, ensuring business continuity, conducting activities in accordance with legislation, conducting finance and accounting activities, conducting goods/service sales activities, conducting post-sale support services for goods/services, conducting production and operation processes for goods/services, conducting storage and archiving activities, conducting supply chain management processes, conducting contract processes, conducting management activities | Necessary for the establishment or execution of a contract directly related to the personal data of the contract parties, necessary to fulfill the Clinic's legal obligations |
| Contact | Conducting loyalty processes related to company/products/services, conducting communication activities, conducting business activities/audit, ensuring business continuity, conducting production and operation processes for goods/services, conducting storage and archiving activities, conducting marketing processes for products/services, conducting contract processes | Necessary for the establishment or execution of a contract directly related to the personal data of the contract parties |
| Personnel | Conducting loyalty processes related to company/products/services, conducting business activities/audit, obtaining and evaluating suggestions for improving business processes, necessary for the Clinic's legitimate interests provided that it does not harm the fundamental rights and freedoms of the data subject, necessary for the establishment or execution of a contract directly related to the personal data of the contract parties | Ensuring business continuity, conducting post-sale support services for goods/services, managing customer relations processes, conducting customer satisfaction activities, conducting storage and archiving activities |
| Health Information | Conducting business activities/audit, ensuring business continuity, conducting activities in accordance with legislation, conducting goods/service sales activities, conducting storage and archiving activities | Necessary for the establishment or execution of a contract directly related to the personal data of the contract parties |
5. Transfer of Personal Data
The Clinic pays attention to processing personal data in accordance with the principles of "need to know" and "need to use," ensuring necessary data minimization, and taking necessary technical and administrative security measures. Personal data may be transferred to third parties for specific purposes as required by the processes such as procurement of goods and services, supply chain management, or managing or auditing digital infrastructure.
Your personal data may be transferred to the following groups within the country or, with your explicit consent, abroad for the purposes specified in this text:
- Sharing with suppliers located in the country or abroad for the continuation of internal Clinic activities and to ensure continuity
- Sharing with authorized public institutions or organizations to fulfill our legal obligations
6. Rights of the Data Subject
Under the legislation on the protection of personal data, you have the right to:
- Learn whether your personal data is processed or not,
- Request information if your personal data is processed,
- Learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
- Know the third parties to whom your personal data is transferred within the country or abroad,
- Request correction of your personal data if it is incomplete or incorrectly processed,
- Request deletion or destruction of your personal data under the conditions specified in KVKK,
- Request notification of the transactions made pursuant to the above two items to third parties to whom your personal data has been transferred,
- Object to any result that occurs against you due to the analysis of your processed data exclusively by automated systems,
- Request compensation if you suffer damage due to unlawful processing of your personal data.
7. Application to Data Controller
You can deliver your applications regarding your above-mentioned rights to our company in writing by filling out the Application Form or through other methods determined by the Personal Data Protection Board. Applications should be submitted to the Clinic at BATI MAH. SABRİ TAŞKIN CAD. NO: 28 A PENDİK, ISTANBUL, TURKEY.
Our company will finalize your request as soon as possible depending on its nature and within thirty days at the latest, free of charge. If the response requires a cost, we will charge you according to the tariff determined by the Personal Data Protection Board. In your application, which includes your explanations regarding the right you have and want to use, you must clearly and understandably state the right you want to exercise and provide the necessary documents proving your identity and address information.