Hekimay Sağlık Hizmetleri A.Ş. (the "Data Controller") values the security of your personal data under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"). This notice is prepared pursuant to Article 10 of the Law and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
Data controller
Hekimay Sağlık Hizmetleri A.Ş. — Eskişehir Yolu 7. Km, Mustafa Kemal Mah. No: 214, Çankaya / Ankara. Contact: kvkk@hekimay.com.tr
Personal data processed
- Identity and contact details (name, national ID number, phone, e-mail, address)
- Health data (examination, test, lab, treatment and report records) — special category personal data
- Insurance and payment details (policy number, invoice information)
- Appointment, CCTV and website usage records
Purposes of processing
- Delivering diagnostic, treatment and care services and keeping the patient file
- Providing appointments, result notifications and patient communication
- Carrying out insurance, social security and institutional authorisation processes
- Meeting statutory retention and reporting obligations (Ministry of Health, SGK)
- Ensuring patient and facility security
Transfers
Your personal data may be transferred to authorised public bodies within legal obligations, and to business partners and service providers to the extent necessary to perform the service, in line with Articles 8 and 9 of KVKK.
Collection method and legal basis
Data is collected through our website, contact and application forms, telephone, e-mail and in-person applications, based on the establishment or performance of a contract, compliance with a legal obligation, legitimate interest and, where required, explicit consent.
Retention
Health records are kept for the periods required by law (at least 20 years for patient files) and then deleted, destroyed or anonymised.
Your rights
Under Article 11 of KVKK you may learn whether your data is processed, request information, ask for correction or deletion, learn the third parties to whom data is transferred and claim compensation for damages. Send your requests to kvkk@hekimay.com.tr; they are concluded within 30 days at the latest.
