Personal Data Protection
Information Notice Regarding the Processing of Personal Data
As IVA Sağlık ve Bilişim Teknolojileri A.Ş. (operating under the license name “Medical Center” as a home healthcare and care services provider), we place great importance on the security of your personal data. With this awareness, we are committed to ensuring that all personal data entrusted to us is processed and stored with the utmost care and in compliance with applicable legislation. Acting in our capacity as the Data Controller, and pursuant to the Turkish Law on the Protection of Personal Data No. 6698 (“KVKK”) and relevant legislation, we hereby inform you of the following:
Collection, Processing, and Purpose of Personal Data
In order to provide high-quality healthcare services, we may collect your personal data—depending on the nature of the service provided—through verbal, written, visual, or electronic means via our Call Center, website, mobile applications, physical locations, or similar channels.
We may collect and process the following general and sensitive personal data, particularly those necessary for medical diagnosis, examination, treatment, and care services:
Identity data: Name, surname, Turkish ID number (or passport/temporary ID number if a non-citizen), place and date of birth, marital status, gender, and a copy of your identity card or driver’s license.
Contact information: Address, phone number, and email address.
Financial data: Bank account and IBAN numbers.
Medical data: Laboratory and imaging results, test results, examination details, prescription information, and other data obtained during diagnosis, treatment, and care processes.
Feedback: Your responses and comments regarding our services.
Call records: Audio recordings of calls made to our Call Center.
Insurance data: Information related to private health insurance, used for healthcare financing and planning.
Online behavior data: Browsing history, IP address, browser information, medical documents, surveys, forms, and location data shared via our website or mobile application with your consent.
These personal and sensitive data may be processed for the following purposes:
Protection of public health, preventive medicine, medical diagnosis, treatment, and care services.
Compliance with legal and regulatory obligations and sharing requested data with the Ministry of Health and other public authorities.
Verification of identity and coordination of appointments via our Patient Services, Call Center, and Digital Channels.
Execution and management of internal operations by our administration.
Financial operations, billing, insurance eligibility verification, and cost reimbursement by the Financial Affairs, Patient Services, and Marketing departments.
Improving healthcare quality and patient experience through analysis by the Quality, Information Systems, and Patient Experience departments.
Internal training provided by the Human Resources and Quality departments.
Monitoring and prevention of fraud and unauthorized activities by the Audit and IT departments.
Conducting risk management and quality improvement activities.
Responding to inquiries and complaints via the Call Center, Patient Experience, and Patient Rights units.
Taking all necessary technical and administrative measures to ensure data security in home care service systems and applications.
Sending campaign-related content, benefits, or updates through Marketing, Media & Communications departments.
Measuring and improving patient satisfaction.
Supporting educational activities of partner institutions.
All the aforementioned personal data may be securely stored in physical or electronic archives by Medical Center or its third-party service providers, in strict compliance with legal obligations.
Transfer of Personal Data
Your personal data may be shared with the following parties in accordance with the relevant provisions of:
Law No. 3359 on Basic Health Services
Decree-Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions
Law No. 6698 on the Protection of Personal Data
The Regulation on Private Home Healthcare Centers
The Regulation on the Processing and Protection of Personal Health Data
Other regulations and directives issued by the Ministry of Health.
These parties include:
The Ministry of Health and its affiliated units, and family health centers
Private insurance companies (health, life, retirement)
Law enforcement agencies
The General Directorate of Civil Registration and Nationality
Judicial authorities
Laboratories, medical centers, ambulance services, and other domestic or foreign medical institutions involved in diagnosis and treatment
Healthcare providers referred to or directly visited by the patient
Your authorized legal representatives
Legal consultants, tax advisors, and auditors
Regulatory and supervisory institutions
Our suppliers, support service providers, archiving service providers, and business partners
Method and Legal Basis of Data Collection
Your personal data may be collected via verbal, written, visual, or electronic means for the purposes mentioned above and to enable Medical Center to fulfill its contractual and legal obligations effectively. The legal grounds for data collection are:
Law No. 6698 on the Protection of Personal Data
Law No. 3359 on Basic Health Services
Decree-Law No. 663
Regulation on Private Home Care Centers
Regulation on Processing and Protection of Personal Health Data
Applicable regulations of the Ministry of Health
As stated in Article 6, paragraph 3 of the KVKK, personal data concerning health and sexual life may be processed without explicit consent by individuals or institutions under the obligation of confidentiality, solely for the purposes of public health protection, preventive medicine, medical diagnosis, treatment, care services, and the planning and management of healthcare services and their financing.
Your Rights Regarding Personal Data
Under KVKK and related legislation, you have the right to:
Learn whether your data is being processed;
Request information about the processing;
Access and request your health-related data;
Learn the purpose of processing and whether it is used accordingly;
Know the third parties (domestic or foreign) to whom your data is transferred;
Request correction of incomplete or inaccurate data;
Request deletion or destruction of your data;
Request notification of corrections/deletions to third parties who received your data;
Object to decisions made solely based on automated data processing;
Seek compensation if you suffer damage due to unlawful processing.
Data Security and Right to Apply
Your personal data is carefully protected using administrative and technical measures appropriate to the risk and technological capabilities.
To exercise your rights under the Law, you may:
Complete the [Application Form under the Law on the Protection of Personal Data] on our website at [https://www.istanbulmedicalcenter.com]
Deliver it in person to: Kozyatağı Mah. Değirmen Sk. Ar Plaza E Blok No:13/3, Floor 2, Kadıköy / Istanbul
Send it via notary