CLARIFICATION TEXT AND LEGAL NOTICES REGARDING THE PROTECTION OF PERSONAL DATA LAW

ECHOMAR Clarification Text Regarding the Protection of Personal Data

1- Identity of the Data Controller

As the data controller, operating at 19 Mayıs Cad. Nova Baran Plaza No:4 K:5 Şişli-İstanbul, TÜMMED Sağlık Kontrol Merkezi A.Ş. (“Echomar”) attaches great importance to ensuring that all your personal data is processed and preserved with the utmost care. Accordingly, in order to act in compliance with the Personal Data Protection Law No. 6698 (“Law”) and the relevant legislation, we provide the following information within the scope of our obligation to inform you.

2- Purpose of Processing Personal Data

Your personal data may be collected in accordance with the fundamental principles set forth in the Law, for the purposes stated in Articles 5 and 6 of the Law, and depending on the nature of the service, for the reasons stipulated in the Law and for the performance of contractual relationships, within the framework of carrying out our activities, managing, and improving our services.

To provide you with services at the highest standards, your personal data processed by Echomar may be obtained verbally, in writing, visually, or electronically depending on the nature of the healthcare services, through call centers, internet, online services, mobile applications, physical locations, counters, and similar channels, either by automated or non-automated methods.

Your sensitive personal data, especially your health data, and general personal data processed by Echomar may include: your name, surname, Turkish ID number, passport number or temporary/foreign Turkish ID number if you are not a Turkish citizen, place and date of birth, marital status, gender, Echomar-specific protocol number and other identity data; your address, phone number, e-mail address, and other communication data; your bank account number, IBAN number, and financial data such as payment and billing information; your laboratory and imaging results, test results, examination data, prescription information, and other health and sexual life-related data obtained during the provision of medical diagnosis, treatment, and care services; audio and digital data obtained by electronic or non-electronic means; personal health data obtained during medical diagnosis, treatment, and care services; data related to private health insurance and Social Security Institution for the financing and planning of health services; health and identity data you provide via our websites; your responses and feedback shared to evaluate our services; CCTV images and audio recordings taken during your visits to Echomar and its affiliates; audio call records kept when you contact our Call Center; your license plate and registration data if you use valet or parking services; browsing information, IP address, and browser information obtained during your use of our website and mobile application; medical documents, surveys, form information, and location data you voluntarily submit; personal data you share when participating in training, seminars, or organizations organized by Echomar; all of which may be processed within the framework of the personal data processing conditions and purposes stated in the Law and relevant regulations.

Your personal data, including sensitive personal data, may be processed for protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, notifying you of appointments, planning and managing Echomar’s internal operations, conducting analysis to improve healthcare services, training and developing employees, monitoring and preventing unauthorized transactions, risk management and quality improvement activities, conducting research, fulfilling legal and regulatory obligations, billing for services, verifying your identity, confirming your relationship with contracted institutions, sharing required information with the Ministry of Health and other public institutions, sharing requested information with insurance companies, responding to all questions and complaints related to healthcare services, ensuring data security of Echomar systems and applications, analyzing your use of health services for improvement purposes, preserving data required by legislation, ensuring financial reconciliation with contracted institutions, increasing patient satisfaction, and other purposes including but not limited to research and development of healthcare services.

The “Personal and Sensitive Data” specified above may be processed within the framework of the provisions of the Law and related legislation, the Basic Law on Health Services No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and Its Affiliates, the Regulation on Private Hospitals, the Regulation on Processing and Protecting Privacy of Personal Health Data, Ministry of Health regulations, and other legislation. They may be transferred to Echomar’s and/or external service providers’ physical archives and IT systems and preserved both digitally and physically.

Test results, reports, x-rays, and similar health data you deliver to Echomar related to diagnosis and treatment processes in other healthcare institutions will be destroyed within three months if not collected upon discharge.

3- Transfer of Processed Personal Data

Your personal data collected may be shared or transferred for the purposes explained in Article 2 of this Clarification Text, for Echomar’s compliance with legislation, with suppliers, service providers, legally authorized third parties, the Ministry of Health and its sub-units, family medicine centers, private insurance companies (health, retirement, life, etc.), Social Security Institution, law enforcement agencies, Population Directorate, Turkish Pharmacists’ Association, courts, medical centers, other healthcare providers, healthcare institutions to which you are referred or apply, your authorized representatives, institutions you are affiliated with or work for, consultants (lawyers, tax consultants, auditors, etc.), regulatory and supervisory authorities, laboratories, systems, and business partners at home or abroad, within the scope of Articles 8 and 9 of the Law and limited to the purposes specified in this Clarification Text (for more detailed information you may apply to Echomar in writing).

4- Method and Legal Grounds for Collecting Personal Data

Your personal data may be collected automatically or non-automatically by Echomar, based on the necessity of performance of contractual relationships or our legitimate interests, and with your explicit consent for promotional activities if you accept the use of optional cookies. Your data is collected electronically by Echomar via our website and for the purposes stated in Article 2 of this Clarification Text.

However, as explicitly stated in Article 6(3) of the Law, personal data concerning health and sexual life may be processed without explicit consent by persons under confidentiality obligation or authorized institutions and organizations for protecting public health, preventive medicine, medical diagnosis, treatment and care services, and planning and management of health services and financing.

5- Rights of the Personal Data Owner

According to Article 11 of the Law, the person whose personal data is processed may apply to Echomar and request the following:

  • To learn whether their personal data is processed,
  • If processed, to request information about it,
  • To access their personal health data and request a copy,
  • To learn the purpose of processing and whether it is used in accordance with that purpose,
  • To learn the third parties to whom personal data is transferred at home or abroad,
  • To request correction if personal data is processed incompletely or incorrectly,
  • To request deletion, destruction, or anonymization of personal data if the reasons requiring processing are eliminated,
  • To request that these corrections or deletions be notified to third parties to whom data was transferred,
  • To object to a result against themselves arising from the analysis of processed data solely by automated systems,
  • To request compensation if they suffer damage due to unlawful processing of personal data.

6- Data Security and Right to Apply

To exercise your rights listed above, please submit your request with necessary identity information and explanations regarding the right you wish to exercise under Article 11 of the Law by filling out the “Application Form Under the Personal Data Protection Law” available at https://echomar.com/KVKK/kvkk-application-form-echomar.pdf; deliver the signed copy to 19 MAYIS CAD. NOVA BARAN PLAZA NO:4 K:5 ŞİŞLİ-İSTANBUL in person, send it via Notary, or send it to Echomar’s registered e-mail address info@echomar.com.tr using a secure electronic signature, mobile signature, or the electronic mail address previously notified to and registered in the data controller’s system.

Download the Application Form Under the Personal Data Protection Law

Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and within thirty days at the latest; however, if the transaction requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.

Commercial Communication and Commercial Electronic Message Clarification Text

With the completion of any communication or information forms available on Echomar’s website (echomar.com), the personal data and contact information you send to Echomar, including your health-related information, may be processed and stored by TÜMMED SAĞLIK KONTROL MER. A.Ş. within the scope of planning and execution of marketing processes, in accordance with the Law on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages. They may be used for the customization of products and services provided by Echomar according to the needs and habits of the data subject, for creating campaigns and opportunities, and may be transferred to group companies and suppliers with whom Echomar cooperates. In this context, by submitting the communication form and approving the relevant fields, you give consent to receive test and examination results, surveys, advertisements, promotions, campaigns, and similar commercial electronic messages to the communication details you provided.

Legal Notice

THIS WEBSITE IS OWNED BY ECHOMAR HEALTH GROUP AND ALL USAGE RIGHTS ARE RESERVED.

The articles and information on our site are for educational purposes only and are not intended as medical advice. Any decision made based on this information is the sole responsibility of the visitor and does not bind our center in any way. Our Center reserves the right to make any changes, reorganize, or discontinue the publication of our website without prior notice. We are not responsible for any issues arising from outdated information on the website. The articles, information, graphics, pictures, logos, designs, slogans, and the presentation style of our website are the property of our Center and may not be used, copied, modified, published, printed, or distributed for commercial purposes without written permission. All copyrights belong to Echomar Health Group. Our Center declares that names, addresses, and personal information reaching our website will not be disclosed to third parties unless legally required.

Privacy Policy

User information recorded in the database via forms filled on the Echomar Health Group website (www.echomar.com) and through various channels will not be shared with third parties without the consent and responsibility of Echomar Health Group. Echomar Health Group disclaims liability for any malfunctions that may occur due to attacks on the website and database or technical issues.

User Agreement

Users are deemed to have accepted the terms of the legal notice and privacy policy in every transaction they perform on www.echomar.com and during site traffic.