Before-and-After Patient Privacy Notice

Pursuant to the Personal Data Protection Law No. 6698 (KVKK) (the “Law”), your personal data may be processed by Uğur Sağlık Hizmetleri Anonim Şirketi (“Özel Akademi Hospital”) (the “Institution”), acting in its capacity as data controller, within the scope described below.

1. 1Identity of the Data Controller Trade Name: Uğur Sağlık Hizmetleri Anonim Şirketi
2. 2MERSIS Number:
3. 3Address:
4. 4Telephone:
5. 5E-mail:
6. 6Registered Electronic Mail (KEP) Address:

Categories and Types of Personal Data Processed

Personal Data Categories Data Types

• In relation to the service you receive from AKADEMİ HOSPITAL; it covers photograph and video content showing your condition before receiving treatment under the treatment method you receive, and the developments and changes in the condition reached during the treatment processes, stages of progress and outcome phases.

Personal Data Processed, Purpose of Processing and Legal Basis

By Decision No. 2021/422 of the Personal Data Protection Board dated 27/04/2021;

• it was noted that paragraph (1) of Article 5 of the Law, entitled “Conditions for processing personal data”, provides that personal data cannot be processed without the explicit consent of the data subject, and paragraph (2) provides that personal data may be processed without seeking the explicit consent of the data subject where one of the conditions listed therein exists,
• On the other hand, Article 7 of the Law regulates the matter of the “Erasure, Destruction or Anonymisation of Personal Data”, and the article

“(1) Although processed in accordance with the provisions of this Law and other relevant laws, personal data shall be erased, destroyed or anonymised by the data controller ex officio or upon the request of the data subject where the reasons requiring their processing cease to exist.
(2) The provisions of other laws concerning the erasure, destruction or anonymisation of personal data are reserved.
(3) The procedures and principles concerning the erasure, destruction or anonymisation of personal data shall be governed by a Regulation.” contains these provisions,

• Article 12, entitled “Periods for Erasure and Destruction Where the Data Subject Requests Their Personal Data”, of the “Regulation on the Erasure, Destruction or Anonymisation of Personal Data” (the Regulation) published in the Official Gazette dated 28.10.2017 and numbered 30224, in turn

“(1) Where the data subject applies to the data controller pursuant to Article 13 of the Law and requests the erasure or destruction of their personal data;
a) If all of the conditions for processing personal data have ceased to exist, the data controller shall erase, destroy or anonymise the personal data subject to the request. The data controller shall conclude the data subject's request within thirty days at the latest and inform the data subject.
b) If all of the conditions for processing personal data have ceased to exist and the personal data subject to the request have been transferred to third parties, the data controller shall notify the third party of this situation and shall ensure that the necessary actions are taken by the third party within the scope of this Regulation.
c) If not all of the conditions for processing personal data have ceased to exist, this request may be rejected by the data controller pursuant to the third paragraph of Article 13 of the Law by stating the reasons, and the rejection shall be notified to the data subject in writing or electronically within thirty days at the latest.” contains this provision,

• and paragraph (2) of Article 8 of the Regulation, entitled “Erasure of personal data”, provides that “The data controller is obliged to take all necessary technical and administrative measures to ensure that erased personal data are inaccessible and cannot be reused by the relevant users.”; while paragraph (2) of Article 9, entitled “Destruction of personal data”, provides that “The data controller is obliged to take all necessary technical and administrative measures relating to the destruction of personal data.”
• We hereby inform you that various personal data of the data subject are processed in the patient file prepared pursuant to Article 48 of the Private Hospitals Regulation, and that such data may be processed lawfully, in compliance with the law and the rule of good faith, provided that they are accurate and up to date, limited to the legitimate purposes determined for the conduct and management of medical diagnosis, treatment and care services, in accordance with the principle of proportionality, and within the conditions set out in Articles 5 and 6 of Law No. 6698.

Parties to Whom Your Personal Data Are Transferred and Purposes of Transfer

Your collected personal data may be shared, in accordance with the basic principles set out in the Law and within the personal data processing conditions specified in Articles 8 and 9 of the Law, on the social media accounts, promotional advertisements, advertising brochures and website belonging to AKADEMİ HOSPITAL, and on similar hosting platforms serving the same purpose.

Your legal rights regarding your personal data, within the framework of Article 11 of KVKK;

1. a)To learn whether personal data are being processed,
2. b)To request information about it if personal data have been processed,
3. c)To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. d)To know the third parties to whom personal data are transferred domestically or abroad,
5. e)To request the rectification of personal data if they have been processed incompletely or inaccurately,
6. f)To request the erasure or destruction of personal data within the framework of the conditions set out in Article 7 of the Law,
7. g)To request that the operations carried out pursuant to subparagraphs (e) and (f) above be notified to the third parties to whom the personal data have been transferred,
8. h)To object to the emergence of a result against the person by means of the analysis of the processed data exclusively through automated systems,
9. i)To request compensation for the damage in the event of suffering damage due to the unlawful processing of personal data

Are defined as set out above.

In order to exercise their rights over personal data, data subjects may, after completing and signing the AKADEMİ HOSPITAL Application Form for Data Subjects Whose Personal Data Are Processed,

send it in person / through a notary public to the address Uğur Sağlık Hizmetleri A. Ş. Müftü Mahallesi Şehit Ömer Halisdemir Bulvar No: 18/ Ereğli Zonguldak, or via the e-mail addresses previously notified to our company to bilgi@eregliakademihastanesi.com.tr with the subject line “KVKK Başvuru”.