Protection of Personal Data

For what purposes is your personal data processed?

Your data is processed strictly in connection with the planning and delivery of healthcare services, principally for the following purposes:

• Appointments and notifications — keeping you informed about your appointment where you have booked one.
• Delivery of the service — verifying your identity, planning tests and diagnostic processes, and sending your results to you.
• Payment and legal obligations — covering the cost of tests and treatment, eligibility enquiries with private insurers, invoicing and statutory obligations.
• Quality and safety — risk management, quality improvement activities and analyses aimed at improving healthcare services.
• Communications (subject to consent) — campaign and information messages where you have given explicit consent; you may withdraw that consent at any time.

Who may your data be shared with?

Within the scope of the Law and other applicable legislation, and limited to the purposes above, your personal data may be shared with Acıbadem Group companies, private insurance companies, the Ministry of Health and its affiliated units, the Social Security Institution, judicial authorities and competent public bodies, representatives you have authorised, and business partners engaged in the delivery of the service. Your data is not sold to third parties.

Method of collection and legal basis

Your personal data is collected verbally, in writing, visually or electronically, so that Acıbadem can fully meet its contractual and statutory obligations. The legal bases include Law no. 6698, the Basic Law on Health Services no. 3359, the Regulation on Private Hospitals, and the legislation on the processing of personal health data.

Under Article 6/3 of the Law, personal data relating to health may be processed without explicit consent by persons under a duty of confidentiality, for the purposes of medical diagnosis, treatment and care services.

Your rights

Under the Law, everyone has the right to:

• Be informed and request information — learn whether their personal data is being processed and, if so, request information about it.
• Purpose limitation — learn the purpose of processing and whether the data is used in line with that purpose.
• Information on transfers — know the third parties to whom the data is transferred, in Türkiye or abroad.
• Rectification and erasure — request that incomplete or inaccurately processed data be corrected, erased or destroyed.
• Objection — object to adverse outcomes arising from analysis carried out solely by automated systems.

Data security

Acıbadem protects your personal data with the technical and administrative security controls required by information security standards and procedures. Security measures are provided at a level appropriate to the risks involved, taking available technology into account.

Applications and contact

You may submit requests under the Law by completing the “Application Form under the KVKK” published by Acıbadem, and sending it to the company headquarters as a wet-signed petition, through a notary, or by email with a secure electronic signature. Your application will be answered within 30 days at the latest, free of charge.