PERSONAL DATA PROTECTION DISCLOSURE
This disclosure notice has been prepared by MLP Sağlık Hizmetleri A.Ş. ("MLPCARE") in its capacity as data controller, in accordance with Law No. 6698 on the Protection of Personal Data (KVKK), the Regulation on Personal Health Data, the Regulation on the Provision of Remote Healthcare Services, the Regulation on the Provision of Home Healthcare Services, the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation, and other applicable legislation.
The Happ application is a platform prepared by MLPCARE to enable data subjects to obtain information about and purchase Check-Up service packages, to book video consultation appointments, and to obtain information about and purchase home care and remote healthcare services; it provides service through both a website and a mobile application.
I - THE PERSONAL DATA WE PROCESS, THE METHODS AND PURPOSES OF PROCESSING, AND THE LEGAL GROUNDS RELIED UPON
1. Membership Process
As part of the membership process for the Happ application, the following personal data is processed on the legal grounds that “processing is necessary provided that it is directly related to the establishment or performance of a contract, for personal data belonging to the parties to the contract” and that “processing is mandatory for the data controller to fulfil its legal obligation”:
- Full name
- Turkish ID number
- Mobile phone number
- E-mail address
- Date of birth
- Nationality
- Gender information
- The name of the private health insurance company, if any
2. Purchase of Healthcare Services and Appointment Processes
2.1. Remote Healthcare / Home Healthcare / Home Care Services
Appointments and purchases for remote healthcare services and home healthcare/home care services can also be made by registering as a member of the Happ Platform, owned by MLPCARE.
- Full name
- Address
- Phone number
- Selected hospital information
- Selected service package
The personal data you provide to us in these processes will be processed entirely by automated means for the purposes of carrying out service delivery processes and increasing patient satisfaction, on the legal ground that “processing is necessary provided that it is directly related to the establishment or performance of a contract, for personal data belonging to the parties to the contract.”
2.2. E-Appointment Process
To book an e-appointment through the Happ application, you first enter your mobile number. You then enter the code sent to you by SMS, and once confirmed, an appointment is booked with the relevant physician at the selected time.
- Phone number
- Hospital and physician selection
2.3. Video Consultation Appointment Process
Data subjects may also book a video consultation appointment through Happ. The appointment process is the same as for e-appointments. In this process, the following personal data is processed on the legal ground that “processing is necessary provided that it is directly related to the establishment or performance of a contract, for personal data belonging to the parties to the contract”:
- Phone number
- Hospital and physician selection
2.4. Check-Up Service Information and Purchase Process
In order to respond to your request for information about the Check-Up service through the Happ application, your personal data will be processed for the purpose of carrying out activities to contact you within the scope of this request, on the legal ground that “processing is necessary provided that it is directly related to the establishment or performance of a contract, for personal data belonging to the parties to the contract”:
- Full name
- Phone number
- Hospital selection
- Check-Up package
If you add your credit card within the Happ application in order to make a payment, your credit card information will be processed by the licensed payment service provider from whom we receive services in this regard, for the purpose of collecting payment and on the legal basis of the performance of the contract. Your credit card information will never be recorded or seen by MLPCARE.
II. WHERE PERSONAL DATA IS TRANSFERRED, THE METHODS OF TRANSFER, AND THE LEGAL GROUNDS FOR TRANSFER
1. Services Received from Third Parties
Your personal data will be transferred to our subcontractors, business partners, the lawyers, consultants and auditors from whom we receive advisory services, authorized legal representatives and third parties, domestic organizations with which we have a contractual service or cooperation relationship in order to carry out our activities, and their legal representatives, only to the extent connected with, and limited and proportionate to, the service received, and on the precondition that undertakings have been obtained from them stating that they will take all technical and administrative measures required by the KVKK for the duration of the service.
2. Public Institutions and Organizations
Should the relevant public institutions and organizations so request, your personal data will be shared to the extent relevant and limited to such requests.
WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?
Your rights under Article 11 of the KVKK, which regulates the rights of the data subject, are as follows:
- To learn whether personal data is being processed;
- To request information if personal data has been processed;
- To learn the purpose of processing personal data and whether the data is used in accordance with that purpose;
- To know the third parties to whom personal data is transferred, domestically or abroad;
- To request that incomplete or inaccurately processed personal data be corrected, and to request that this be notified to third parties to whom the personal data has been transferred;
- To request the deletion or destruction of personal data if the reasons requiring its processing no longer exist, even though it was processed in accordance with Law No. 6698 and other applicable legal provisions, and to request that this be notified to third parties to whom the personal data has been transferred;
- To object to a result that is to the person's own detriment arising from the exclusively automated analysis of the processed data;
- To request compensation for damage suffered as a result of the unlawful processing of personal data.
You may submit your applications, in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller, in writing, together with identity-verifying information and documents, to Flatofis, Defterdar Mahallesi, Otakçılar Caddesi, No:78; or to MLPCARE by using a secure electronic signature, mobile signature, or the e-mail address registered in the system for the data subject, sent to [email protected]. You may also withdraw your explicit consent at any time without any restriction whatsoever.
In order to prevent the unlawful disclosure of your personal data, our hospital reserves the right to verify your identity.