Estediş Sağlık Hizmetleri Tic. A.Ş. (hereinafter referred to as Estediş and/or Estediş Oral and Dental Health Clinic) processes personal data in accordance with the provisions of the Personal Data Protection Law No. 6698 (KVKK). This includes collecting, using, processing, transferring, and determining the retention period of personal data, as well as ensuring its privacy and protection. We take security measures and provide information about your rights regarding the protection of your personal data, which we value greatly.

All personal data shared by our patients are handled with utmost care for patient privacy and are stored by implementing all necessary technical and administrative measures to ensure the appropriate level of security for your personal data.

This Personal Data Protection Notification explains how we collect, use, transfer, and protect your personal data during the services we provide.

1. Collection, Processing, and Purposes of Personal Data

Estediş Oral and Dental Health Clinic processes and stores your personal data within the legal framework provided by KVKK and relevant secondary legislation. Your personal data is collected to provide healthcare services in compliance with the law and to fulfill Estediş‘s contractual and legal obligations.

Personal data is collected using automated or non-automated methods, through call centers, websites, online services, WhatsApp, and other means, either verbally, in writing, or electronically.

Your Personal Data Includes:

  • Your name, surname, Turkish ID number, passport number, or temporary Turkish ID number, place and date of birth, marital status, gender, and other identity information.
  • Your address, phone number, email address, and other contact details.
  • Financial data such as payment, credit card, and billing information.
  • Audio/digital information collected electronically or physically and video/audio recordings obtained during clinic visits.
  • Medical data, including diagnoses, examinations, treatment, and care services.
  • Private health insurance and Social Security Institution (SGK) information.
  • Health, identity, and financial information submitted via our website.

In addition, your personal data may be processed when you use our call center or website, participate in training, seminars, or events organized by our clinic, or visit and browse our website.

Your personal data will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of KVKK, including but not limited to the following purposes:

Purposes of Processing Personal Data:

  • Protecting public health, preventive medicine, medical diagnosis, treatment, and care services.
  • Financing and planning healthcare services.
  • Invoicing for services rendered.
  • Sharing financial information with private insurance companies as part of health insurance.
  • Informing you about appointments.
  • Sending campaigns and notifications via SMS, email, or other means.
  • Planning the internal operations of the clinic.
  • Monitoring and preventing abuse or unauthorized activities.
  • Conducting scientific research.
  • Responding to all inquiries and complaints about our healthcare services.
  • Taking all necessary technical and administrative measures to ensure data security.
  • Analyzing healthcare service usage to improve the quality of our services.
  • Storing data as required by legal regulations.
  • Measuring patient satisfaction.

2. Transfer of Personal Data

Your personal data may be shared with the following entities within the scope of KVKK and for the purposes mentioned above:

  • The Ministry of Health and its affiliated subunits.
  • The Social Security Institution (SGK).
  • Private insurance companies (e.g., health, retirement, and life insurance).
  • Law enforcement agencies (e.g., the General Directorate of Security).
  • The Population Directorate.
  • The Turkish Pharmacists’ Association and the Turkish Dental Association.
  • Public prosecutors, courts, or arbitrators in arbitration proceedings.
  • Laboratories, medical centers, and other third parties collaborating for medical diagnosis.
  • Authorized representatives you appoint.
  • Other healthcare institutions to which patients are referred or self-referred.
  • Lawyers, tax consultants, and auditors providing consultancy services.
  • Regulatory and supervisory authorities, official bodies.
  • Suppliers, service providers, business partners, and other third parties involved in our services.

3. Method and Legal Basis for Collecting Personal Data

Your personal data is collected through verbal, written, or electronic means, including call centers, websites, and other communication channels, in accordance with KVKK and relevant regulations. The collection is performed to fulfill Estediş‘s contractual and legal obligations.

4. Your Rights Regarding the Protection of Personal Data

Under KVKK, you have the following rights regarding your processed personal data:

  • To learn whether personal data is being processed.
  • To request information about processed data.
  • To learn the purpose of processing personal data and whether it is used for its intended purpose.
  • To learn the third parties to whom personal data has been transferred domestically or internationally.
  • To request correction of incomplete or inaccurate personal data.
  • To request the deletion or destruction of personal data.
  • To request that corrections, deletions, or destructions be notified to third parties to whom data has been transferred.
  • To object to the occurrence of a result against you by analyzing processed data exclusively through automated systems.
  • To demand compensation for damages arising from the unlawful processing of personal data.

Estediş takes all administrative and technical measures to protect your personal data in compliance with the law. You can submit your requests under KVKK by filling out the application form on www.estedis.com and delivering it in person to Güneşli Mah. Cumhuriyet Cad. No: 40 Güneşli / İstanbul, via notary, or by sending an electronically signed email to [email protected].