INFORMATION TEXT UNDER THE PERSONAL DATA PROTECTION LAW

DATA CONTROLLER
FLORYA ORAL AND DENTAL HEALTH SERVICES LIMITED COMPANY
Güzeloba Mah. Çağlayangil Cad. A9 Center No:7/A 07230 Muratpaşa/Antalya
(MERSIS No: 0388113688400001)

The Information Text under the Personal Data Protection Law No. 6698 is prepared by Florya Oral and Dental Health Services Limited Company, acting as the data controller, to fulfill its obligation of informing our patients, patient relatives, legal guardians, employees, supplier representatives, supplier employees, business partners, and third parties in accordance with the Personal Data Protection Law No. 6698 (KVKK).
As Florya Oral and Dental Health Services Limited Company, we show the necessary sensitivity and take the required measures regarding the processing, storage, and transfer of your personal data within the scope of our healthcare services, in accordance with KVKK and relevant legislation.

The “Information Text under the Personal Data Protection Law” is prepared in accordance with Article 10 of KVKK, titled “Obligation of the Data Controller to Inform,” to transparently inform you about the identity of the data controller, the method and legal basis for collecting your personal data, the purposes for which the data will be processed, to whom and for what purposes the data may be transferred, the duration of data processing, and the rights you have under Article 11 of KVKK.

Your personal data will be processed: • In accordance with the law and the principle of honesty,
• In connection with, and limited to, the purposes of processing,
• Accurately and up to date,
• For specified, clear, and legitimate purposes,
• It will be stored for the duration required by relevant legislation and for the purpose for which it was processed.

Let me know if you need any further adjustments!

PROCESSED PERSONAL DATA
Your personal data is collected, transferred, and stored securely in accordance with the Personal Data Protection Law due to our legal obligations and business activities, in order to provide you with more suitable services in our business transactions.

In case you are an employee at our clinic:

Detailed information about the personal data processed for employees has been provided to them. If your employment contract with the company has ended, you may use the methods of application provided in this Information Text to exercise your rights regarding your processed personal data.

In case you are a “PATIENT” with our clinic:

Processed Personal Data	Purposes of Processing	Legal Basis
Identity (Name, Surname, Date of Birth)	Diagnosis and treatment processes, managing patient relations and contract processes, personal data is obtained directly from the patient for the patient card.	KVKK Article 5/2 (c): Based on the establishment or performance of a contract.
Health Information (Blood type, Medications, Medical History)	Public health protection, preventive medicine, medical diagnosis, treatment, and care services, planning and management of health services and financing, processing by persons or authorized institutions with confidentiality obligation without the need for explicit consent.	KVKK Article 6/3
Identity (Name, Surname, Date of Birth)	Data storage and archiving activities, storage of information in the patient card.	KVKK Article 5/2a: Based on an explicit provision in the laws.
Identity (Name, Surname, Date of Birth, Gender, Nationality)	Diagnosis and treatment processes, managing patient relations and contract processes, personal data obtained from the patient is processed in the Macro Dental program.	KVKK Article 5/2 (c): Based on the establishment or performance of a contract.
Communication (Phone number)	Public health protection, preventive medicine, medical diagnosis, treatment, and care services, processing by persons or authorized institutions with confidentiality obligation without the need for explicit consent.	KVKK Article 6/3
Health Information (Treatment, Diagnosis, Radiological images)	Storing and archiving Macro Dental program records for storage and archiving activities.	KVKK Article 5/2a: Based on an explicit provision in the laws.

Let me know if you’d like any further changes or additional assistance!

Processed Personal Data

Identity (Name, Surname, Turkish ID Number, Age, Gender)
Contact (Address)
Health Information (Diagnosis)
Personal data obtained from the patient for the purpose of ensuring the proper execution of activities in accordance with the regulations is processed into the Protocol Book.
Identity (Name, Surname, Turkish ID Number, Age, Gender)
Contact (Address)
Health Information (Diagnosis)
Personal data in the Protocol Book is shared with the Provincial Directorate of Health for the purpose of executing activities in compliance with the regulations.
Identity (Name, Surname, Turkish ID Number, Age, Gender)
Contact (Address)
Health Information (Diagnosis)
Personal data in the Protocol Book is stored for the purpose of executing storage and archiving activities.
Identity (Name, Surname, Turkish ID Number, Date of Birth)
Contact (Address, Phone Number)
Health Information (Diagnosis, Treatment, Family Doctor)
Personal data obtained from the patient is processed into the HSYS records for the purpose of carrying out patient treatment processes, contract processes, and conducting activities in compliance with the regulations.
Identity (Name, Surname, Turkish ID Number, Date of Birth)
Contact (Address, Phone Number)
Health Information (Diagnosis, Treatment, Family Doctor)
HSYS records are transferred online to the Ministry of Health for the purpose of executing activities in compliance with the regulations.
Identity (Name, Surname, Turkish ID Number, Date of Birth)
Contact (Address, Phone Number)
Health Information (Diagnosis, Treatment, Family Doctor)
HSYS records are stored for the purpose of executing activities in compliance with the regulations and carrying out storage and archiving activities.
Identity (Name, Surname, Turkish ID Number)
Contact (Address, Phone Number)
Information is obtained to issue an invoice for the purpose of carrying out activities in compliance with the regulations, managing finance and accounting, and conducting diagnosis/treatment processes.
Identity (Name, Surname, Turkish ID Number)
Contact (Address, Phone Number)
The invoice is stored for the purpose of conducting storage and archiving activities.
Identity (Name, Surname, Turkish ID Number)
Contact (Address, Phone Number)
The invoice issued for the patient is transferred to the Tax Office for the purpose of conducting service sales processes, executing activities in compliance with the regulations, and managing finance and accounting.
Identity (Name, Surname, Turkish ID Number, Date of Birth)
Health Information (Diagnosis, Treatment, and other health data)
Personal data is obtained in the patient consent form for the purpose of conducting diagnosis/treatment processes and executing activities in compliance with the regulations.
Identity (Name, Surname, Turkish ID Number, Date of Birth)
Health Information (Diagnosis, Treatment, and other health data)
Personal data is stored in the patient consent form for the purpose of conducting storage and archiving activities.
Identity (Name, Surname, Country of origin)
Visual and Audio Records (Photographs, Videos)
Personal data such as photos, videos, and identity information is obtained for the purpose of conducting marketing, advertising, and managing social media accounts.
Identity (Name, Surname, Country of origin)
Visual and Audio Records (Photographs, Videos)
Personal data such as photos, videos, and identity information is shared on the clinic’s social media accounts for the purpose of conducting marketing, advertising, and managing social media accounts.

Let me know if you need further assistance or modifications!

Personal Data to Be Collected and Legal Basis for Collection:

• Identity (Name, Surname, Country of Origin)
• Visual and Audio Records (Photo, Video): Personal data, including photos and videos, as well as identity information, will be collected and stored for marketing, advertising, and management of social media accounts, with the patient’s explicit consent.
• Physical Security of the Premises (Camera Recording): To ensure the physical security of the premises and to conduct storage and archiving activities, security camera recordings will be obtained and stored in accordance with the Turkish Personal Data Protection Law (KVKK) Article 5/2(f): It is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

METHOD AND LEGAL BASIS OF PERSONAL DATA COLLECTION: Your personal data will be collected using automated, semi-automated, or non-automated methods, orally or in writing, via email, WhatsApp, through delivery by the relevant person, printed forms, or electronically. Your personal data will be processed, stored, and transferred for the following purposes:

To fulfill our legal obligations,
To establish and execute contracts,
For reasons specified in laws,
For our legitimate interests, provided that they do not harm your fundamental rights and freedoms,
For reasons necessary to establish, use, or protect a right,
For the protection of public health, preventive medicine, medical diagnosis, treatment, and care services, and the planning and management of health services and financing,
In cases where the law requires explicit consent, it will be obtained and stored accordingly.

PURPOSES OF PERSONAL DATA PROCESSING: Your personal data will be processed for the purposes stated above, in accordance with the following laws and regulations: the Turkish Commercial Code No. 6102, the Turkish Civil Code, the Personal Data Protection Law No. 6698, the Basic Health Services Law No. 3359, the Decree Law on the Organization and Duties of the Ministry of Health and its Affiliated Organizations No. 663, the Regulation on the Processing of Personal Health Data and the Protection of Privacy, and other relevant regulations. Personal data will be processed under the provisions and purposes stated in Articles 5 and 6 of the Personal Data Protection Law (Law No. 6698), in line with regulatory and legal requirements.

WHO YOUR PERSONAL DATA MAY BE SHARED WITH AND FOR WHAT PURPOSE: In compliance with the Personal Data Protection Law (KVKK) and relevant legislation, your personal data will be shared with the necessary public institutions and organizations, service providers, business partners, and authorized bodies, and only when necessary for the purposes outlined above. The following entities may receive your personal data:

Authorized Public Institutions and Organizations: For the execution of activities in accordance with the legislation and to inform authorized persons, institutions, and organizations, your personal data may be shared in a limited manner.
Natural Persons or Legal Entities with Whom We Cooperate Clinically: For conducting business activities, purchasing/selling goods/services, and for other relevant processes, your data may be shared in a limited manner.
Our Business Partners (Accountants, Law Firms): For the execution of activities in accordance with the legislation, legal activities, and financial and accounting operations, your data may be shared in a limited manner.
Suppliers (Dental Laboratories, etc.): Your data may be shared with suppliers for purchasing goods/services in a limited manner.
Company Shareholders: Your data may be shared with shareholders.
Authorized Authorities: Personal data may be shared with authorized bodies under the law, either periodically or upon request, based on legal regulations. If there is a court decision or a request from an authorized administrative body, your data may be shared with the authorized persons or institutions.

IF YOU ARE A “PATIENT’S RELATIVE”:
Personal Data Processed:
• Identity (Name, Surname)
• Contact (Phone Number)
• Finance (Bank Information)

Purpose of Processing:

To perform financial operations, manage contract processes, and communication activities.

Legal Basis:

KVKK Article 5/2(c): Processing based on the establishment or performance of a contract.

Personal Data Collection Method and Legal Basis: Your personal data is collected verbally or in writing, via email, WhatsApp, through direct delivery by the relevant person, printed forms, or electronically for the purpose of establishing and performing contracts.

IF YOU ARE A “PATIENT’S GUARDIAN”:
Personal Data Processed:
• Identity (Name, Surname)
• Contact (Phone Number)
• Finance (Bank Information)

Purpose of Processing:

To manage financial and accounting operations, contract processes, and communication activities.

Legal Basis:

KVKK Article 5/2(c): Processing based on the establishment or performance of a contract.

WHO YOUR PERSONAL DATA MAY BE SHARED WITH AND FOR WHAT PURPOSE: In compliance with the Personal Data Protection Law (KVKK) and relevant legislation, your personal data will be shared with authorized public institutions, business partners, suppliers, and other relevant parties, and only when necessary for the purposes outlined above.

This translation covers the main points, with a focus on how personal data is processed, stored, shared, and the legal bases for each process.

In case you become a BUSINESS PARTNER of our clinic:

Personal Data Processed | Purpose of Processing | Legal Grounds

Identity (Name, Surname, ID Number, Tax Number, Title)
Contact Information (Phone Number, Email Address, Business Address, Fax, KEP Address)
Financial (Bank IBAN Number)
Legal Process (Signature, Signature Circular)

To carry out/monitor business activities, purchase processes of goods/services, communication activities, financial and accounting activities, and contract processes, personal data of our business partners are collected.
KVKK Article 5/2(c): Personal data processing is necessary for the performance of a contract to which the data subject is a party.

Identity (Name, Surname, ID Number, Tax Number, Title)
Contact Information (Phone Number, Email Address, Business Address, Fax, KEP Address)
Financial (Bank IBAN Number)
Legal Process (Signature, Signature Circular)

For the purpose of providing information to authorized persons, institutions, and organizations.
KVKK Article 5/2(ç): According to the legal obligation of the data controller.

Identity (Name, Surname, ID Number, Tax Number, Title)
Contact Information (Phone Number, Email Address, Business Address, Fax, KEP Address)
Financial (Bank IBAN Number)
Legal Process (Signature, Signature Circular)

For the purpose of storing and archiving.
KVKK Article 5/2(f): Personal data processing is necessary for the legitimate interests of the data controller, provided it does not infringe on the fundamental rights and freedoms of the data subject.

Physical Security (Camera Record)

For ensuring physical security and conducting storage and archiving activities (camera recordings).
KVKK Article 5/2(f): Personal data processing is necessary for the legitimate interests of the data controller, provided it does not infringe on the fundamental rights and freedoms of the data subject.

METHOD OF COLLECTING YOUR PERSONAL DATA AND LEGAL BASIS
Your personal data is collected automatically, semi-automatically, or manually through verbal or written communication, email, WhatsApp, delivered by the relevant person, printed forms, or electronically.
Your personal data is collected, stored, and transferred for:

Fulfilling our legal obligations,
Contract formation and execution,
For the legitimate interests of our clinic.

PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data will be processed for the purposes mentioned above in accordance with the following laws:

Turkish Commercial Code No. 6102,
Turkish Code of Obligations,
Law No. 6698 on the Protection of Personal Data,
Income Tax Law,
Occupational Health and Safety Regulation,
Law No. 5651,
All relevant laws and secondary regulations for fulfilling legal and regulatory requirements.
The duties of inspection or regulation carried out by authorized public institutions and organizations,
To fulfill the information and document requests of judicial bodies or administrative authorities in accordance with Articles 5 and 6 of Law No. 6698.

WHO YOUR PERSONAL DATA MAY BE TRANSFERRED TO AND FOR WHAT PURPOSE
In accordance with KVKK and relevant legislation, your personal data may be transferred to the following entities for the purposes stated above and only when necessary:

Authorized public institutions and organizations,
Individuals or private legal entities,
Our suppliers,
Our business partners,
Shareholders, and other persons or organizations permitted by relevant legislation.
Due to legal regulations in our country, personal data may be shared with authorized entities as specified in the legislation or upon request. Additionally, in the case of a court order or a request from an administratively authorized body, your personal data may be shared with authorized persons or institutions.

In case you become a SUPPLIER EMPLOYEE of our clinic:

Personal Data Processed | Purpose of Processing | Legal Grounds

Identity (Name, Surname, ID Number)
Contact Information (Phone Number, Email Address, Business Address, Fax, KEP Address)
Professional Experience (Profession, Workplace Doctor Certificate Date and Number)
Education Information (Diploma Information)
Personnel (Position)

For conducting educational activities, business activities/monitoring, occupational health and safety activities, contract processes, and supply processes.
KVKK Article 5/2(c): Personal data processing is necessary for the performance of a contract to which the data subject is a party.

Identity (Name, Surname, ID Number)
Contact Information (Phone Number, Email Address, Business Address, Fax, KEP Address)
Professional Experience (Profession, Workplace Doctor Certificate Date and Number)
Education Information (Diploma Information)
Personnel (Position)

For ensuring that activities comply with legal requirements and transferring information to authorized institutions.
KVKK Article 5/2(ç): According to the legal obligation of the data controller.

Identity (Name, Surname, ID Number)
Contact Information (Phone Number, Email Address, Business Address, Fax, KEP Address)
Professional Experience (Profession, Workplace Doctor Certificate Date and Number)
Education Information (Diploma Information)
Personnel (Position)

For storage and archiving activities related to educational minutes and other supply processes.
KVKK Article 5/2(ç): According to the legal obligation of the data controller.

Visual and Audio Recordings (Photo, Camera Footage)

For the purposes of conducting contract processes, marketing products/services, business activities/monitoring. (Data collection and storage for training and marketing activities).
Based on the explicit consent of the relevant person (photos and video recordings taken during training and meeting activities).

Physical Security (Camera Record)

Let me know if you’d like any further clarifications or adjustments.

Here is the translation of the provided text into English:

METHOD OF COLLECTION AND LEGAL BASIS OF YOUR PERSONAL DATA

Your personal data is collected through automatic, semi-automatic, or non-automatic methods, orally or in writing, via email, WhatsApp, delivered by the relevant person, printed forms, or electronically.

Your personal data is collected, stored, and transferred for the following purposes:

To fulfill our legal obligations,
For the establishment and performance of contracts,
For the legitimate interest of our clinic,
In cases where the law requires explicit consent, it will be collected, stored, and transferred with your explicit consent.

PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data will be processed for the purposes listed above, in accordance with:

Turkish Commercial Code No. 6102,
Turkish Code of Obligations,
Personal Data Protection Law No. 6698,
Income Tax Law,
Occupational Health and Safety Services Regulation,
Law No. 5651,
Relevant laws and secondary regulations to fulfill legal and regulatory requirements and to take necessary precautions,
Supervisory or regulatory tasks to be carried out by competent and authorized public institutions and professional organizations of public institutions,
To meet the information and documentation requests from judicial authorities or administrative bodies.

WHO YOUR PERSONAL DATA CAN BE SHARED WITH AND FOR WHAT PURPOSES

In accordance with the Personal Data Protection Law (KVKK) and relevant legislation, your personal data will be transferred to authorized public institutions, real persons or private legal entities, our suppliers, business partners, shareholders, and other institutions or organizations authorized by law, with necessary technical and administrative measures, only when necessary for the purposes listed above.

Due to legal regulations in our country, personal data may be shared with authorized authorities periodically or upon request. Additionally, in case of a court decision or the request of an authorized administrative body, your personal data will be shared with authorized persons or institutions.

IF YOU ARE A SUPPLIER EMPLOYEE OF OUR CLINIC:

Personal Data Processed	Purpose of Processing	Legal Grounds
Identity (Name, Surname, TC ID No, Tax No, Title)	To conduct business activities/monitoring, purchase/supply processes, communication activities, supply chain management, compliance with legal requirements, finance and accounting activities, contract management	KVKK Art. 5/2(c): Personal data processing is necessary for the establishment or performance of a contract.
Identity (Name, Surname, TC ID No, Tax No, Title)	To conduct business activities/monitoring, compliance with regulations, and providing information to authorized persons or institutions	KVKK Art. 5/2(ç): Personal data processing is necessary for the legal obligation of the data controller.
Identity (Name, Surname, TC ID No, Tax No, Title)	To carry out archiving and storage activities (e.g., storing supply agreements and training reports)	KVKK Art. 5/2(ç): Personal data processing is necessary for the legal obligation of the data controller.
Identity (Name, Surname, TC ID No, Tax No, Title)	To ensure physical security of the premises and storage and archiving activities	KVKK Art. 5/2(f): Personal data processing is mandatory for the legitimate interests of the data controller, without infringing on the rights and freedoms of the individual.

METHOD OF COLLECTION AND LEGAL BASIS OF YOUR PERSONAL DATA

Your personal data is collected, stored, and transferred for the following purposes:

To fulfill our legal obligations,
For the establishment and performance of contracts,
For the legitimate interest of our clinic.

PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data will be processed for the following purposes:

To fulfill the legal and regulatory requirements of various laws, including the Turkish Commercial Code, Turkish Code of Obligations, Personal Data Protection Law No. 6698, and related regulations,
To ensure compliance with occupational health and safety regulations,
To meet the information and documentation requests from judicial authorities or administrative bodies.

WHO YOUR PERSONAL DATA CAN BE SHARED WITH AND FOR WHAT PURPOSES

In accordance with the Personal Data Protection Law (KVKK) and related legislation, your personal data will be transferred to authorized public institutions, suppliers, business partners, shareholders, and other authorized entities for processing purposes, with necessary technical and administrative measures.

VIDEO SURVEILLANCE IN OUR CLINIC

Your personal data may be recorded through surveillance cameras for the following purposes:

Personal Data Processed	Purpose of Processing	Legal Grounds
Physical Security (Camera Recording)	To ensure physical security, manage emergency situations, protect movable assets, ensure operational security, share information with authorized institutions, and for archiving purposes.	KVKK Art. 5/2(f): Personal data processing is necessary for the legitimate interests of the data controller, without infringing on the rights and freedoms of the individual.

METHOD OF COLLECTION AND LEGAL BASIS OF YOUR PERSONAL DATA

Your personal data is collected automatically and electronically. It is collected, stored, and transferred for the legitimate interest of the company.

WHO YOUR PERSONAL DATA CAN BE SHARED WITH AND FOR WHAT PURPOSES

In accordance with the Personal Data Protection Law (KVKK) and related legislation, personal data may be shared with authorized public institutions and upon request by legal authorities. Outside of our legal obligations, no transfer of personal data will be made.

STORAGE PERIOD OF YOUR PERSONAL DATA

Your personal data is processed in accordance with the principle of purpose limitation and for as long as necessary to fulfill the purposes described in this Privacy Notice. After the specified period, your data will be deleted, destroyed, or anonymized. If there are changes in the processing periods prescribed by law, the new periods will apply.

For detailed information regarding the storage periods of your personal data, you can contact us through the addresses listed in the “Rights of the Person Concerned” section.

YOUR RIGHTS REGARDING PERSONAL DATA

Under Article 11 of the Personal Data Protection Law (KVKK), you have the right to:

Learn whether your personal data is processed,
Request information about how your personal data is processed,
Learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
Know the third parties to whom your personal data is transferred, domestically or internationally,
Request correction of incorrect or incomplete personal data,
Request deletion or destruction of personal data under the conditions specified by the law,
Request the notification of corrections or deletions of personal data to third parties to whom it has been shared,
Object to any adverse consequences arising from the automatic processing of personal data,
Request compensation for damages caused by the unlawful processing of your personal data.

To exercise your rights, you must submit your request to us, along with necessary identification documents, at the following address:
Güzeloba Mah. Çağlayangil Cad. A9 Center No: 7/A 07230 Antalya, or by email at info@klinik7.com. Your request will be processed within thirty days at no charge. However, if the process incurs additional costs, a fee may be charged as per the regulations determined by the Personal Data Protection Board.

To verify your identity and ensure your rights are protected, we may request additional verification (such as sending a message to your registered phone number or contacting you). For example, if you apply via email, we may contact you through other registered communication methods to verify the authenticity of the request.

Privacy Policy

INFORMATION TEXT UNDER THE PERSONAL DATA PROTECTION LAW