KVKK

DR. YUSUF ORHAN UÇAL (DR. Y.O.U. RHINOCLINIC) (“Dr. Y.O.U” or the “Clinic”) attaches utmost importance to the protection of your personal data. In this regard, we prioritize the processing and preservation of personal data belonging to individuals interacting with our Clinic in compliance with the Law on the Protection of Personal Data No. 6698 (“Law”), its secondary regulations (regulations, communiqués, circulars) enacted or to be enacted, and binding decisions of the Personal Data Protection Board. With full awareness of this responsibility, we process your personal data within the scope and limits set by the Law as a “Data Controller” as defined in the Law, as explained below.

1. Data Controller Information
In accordance with the Law, DR. YUSUF ORHAN UÇAL (DR. Y.O.U. RHINOCLINIC), located at Küçükbakkalköy Mh. Dudullu Cd. No:23-25B Brandium Residence R2 Blok Kat:10 Daire:97-98, 34788 Ataşehir/Istanbul, is the Data Controller.

2. Purposes of Processing Personal Data
Your personal data is processed by the Clinic within the framework of the Law, fairly and transparently, limited and proportionate to the purposes stated below: to conduct the necessary operations by the Clinic’s business units to carry out its commercial activities in compliance with relevant legislation and Clinic policies; to determine, plan, and implement the Clinic’s short, medium, and long-term commercial policies; to design and carry out the Clinic’s human resources policies and processes; to fulfill legal obligations arising from relevant regulations; to manage patient relations and corporate communication processes; and to ensure the commercial and legal security of individuals and legal entities with whom the Clinic has a business relationship.

3. Transfer of Personal Data
Your personal data may be transferred for the purposes specified above, in accordance with Articles 8 and 9 of the Law, to legally authorized healthcare institutions, public authorities, judicial and administrative bodies, private individuals or legal entities permitted by law, institutions authorized to audit the Clinic, contracted payment institutions for fulfilling financial obligations, business partners and service providers to ensure the conduct and development of Clinic activities, and suppliers when necessary. Additionally, if you contact us via email, your data may be transferred abroad due to the location of email servers. Data may also be transferred to lawyers authorized under a duly executed power of attorney, provided that necessary data security measures stated in the Law are taken.

4. Method and Legal Basis for Collecting Personal Data
Your personal data is collected verbally, in writing, or electronically by the Clinic’s authorized units and employees, using automatic or non-automatic means. Personal data categories include identity, contact, personnel, legal transaction, patient transaction, health data, physical security, transaction security, risk management, finance, professional experience, marketing, and visual and audio data. These are processed based on the legal grounds stipulated in Article 5(2) of the Law: necessity for the performance of a contract, necessity for compliance with the Data Controller’s legal obligations, data made public by the data subject, and necessity for the legitimate interests of the Clinic, provided it does not harm your fundamental rights and freedoms. Sensitive personal data related to health and sexual life are processed without explicit consent under Article 6(3) for the protection of public health, preventive medicine, medical diagnosis, treatment, and care services, by persons or entities under a confidentiality obligation.

5. Data Subject Rights under the Law

• You may at any time contact the Clinic to:
• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of the processing and whether your personal data is used accordingly,
• Know the third parties to whom your personal data is transferred domestically or abroad,
• Request the correction of incomplete or inaccurate data,
• Request the deletion or destruction of your personal data under the conditions set forth in Article 7 of the Law,
• Request notification of the actions taken in response to (d) and (e) above to third parties to whom the personal data has been transferred,
• Object to any outcome against you resulting from the automated processing of your personal data,
• Request compensation for damages if you suffer harm due to unlawful processing of your personal data,

You may exercise these rights by completing the Application Form, available at the Clinic or at https://orhanucal.com/, and sending it with a wet signature to Küçükbakkalköy Mh. Dudullu Cd. No:23-25B Brandium Residence R2 Blok Kat:10 Daire:97-98, 34788 Ataşehir/Istanbul via notary, registered mail, or in person; or by signing the form electronically with your mobile signature or secure electronic signature and sending it via your KEP address or from the email address registered in the Clinic’s data recording system to info@orhanucal.com. The Clinic will respond to such requests in writing free of charge for up to ten pages; a processing fee of 1 Turkish Lira will be charged for each page beyond ten. If the response is provided on a CD, flash drive, or another storage medium, the fee will not exceed the cost of that medium.

DR. YUSUF ORHAN UÇAL (DR. Y.O.U. RHINOCLINIC)

Click here for more information about our Personal Data Retention and Destruction Policy.