PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA

As the Gaziantep Özel Umay IVF Center (“Center”), we place the highest priority on the protection, confidentiality, and security of the personal data of our patients, their relatives, our visitors, and all individuals who use our website. As the “Data Controller” under the Law on the Protection of Personal Data No. 6698 (“KVKK”) and related legislation, we process your personal data within the terms and limits explained below.

1. Identity of the Data Controller

Data Controller: Gaziantep Özel Umay IVF Center

Address: Gaziantep, Turkey

Email: info@umaytupbebek.com.tr

2. Your Personal Data and Special Category Personal Data Being Processed

Within the scope of the assisted reproductive treatment (IVF), diagnostic, treatment, and care services provided by our center, the following data is processed:

  • Identification Information: First name, last name, Turkish ID number, passport number (for foreign patients), place and date of birth, marital status (to verify the legal requirement of marriage for IVF treatment), gender, and signature.
  • Contact Information: Address, phone number, email address.
  • Special Category Personal Data (Health and Genetic Data): Laboratory test results (andrology, embryology, semen analysis, hormone tests), ultrasound images, preimplantation genetic testing (PGT) results, surgical notes (OPU, embryo transfer), medications used, medical history, chronic conditions, family history, and all medical records related to reproductive health.
  • Visual and Audio Records: Closed-circuit television (CCTV) footage captured by security cameras, audio recordings of phone calls.
  • Financial Information: Bank account information, IBAN, billing, and payment information.
  • Digital Data: Data you submit via contact, appointment, or information request forms on our website, as well as IP addresses and browsing information collected through cookies.

3. Purposes of Processing Personal Data

Your collected personal data is processed for the following purposes:

  • To fulfill legal obligations under all relevant health legislation, including the Basic Law on Health Services No. 3359, Decree Law No. 663, and the Regulation on Assisted Reproductive Treatment Practices and Assisted Reproductive Treatment Centers,
  • To provide personalized medical diagnosis, treatment (IVF, ICSI, OPU, embryo freezing/transfer, etc.), and care services;
  • Verifying the marital status and identity information required by law in IVF treatment processes,
  • Scheduling, tracking, and managing patient appointments and communication processes,
  • Planning and managing our center’s internal operations, medical processes, and laboratory safety (including safety protocols to prevent the mixing of embryo and sperm samples),
  • Managing the financing, accounting, billing, and processes related to contracted institutions for healthcare services,
  • Ensuring the physical security of our center,
  • Measuring patient satisfaction and improving service quality.

4. Parties to Which Processed Personal Data Is Disclosed and Purposes of Disclosure

Your personal data may be transferred to the following institutions and organizations within the framework of the conditions and legal restrictions specified in Articles 8 and 9 of the Personal Data Protection Law (KVKK):

  • The Ministry of Health of the Republic of Turkey, Provincial Health Directorates, Public Health Centers, and other subordinate units under the Ministry (for the purpose of legal notifications via information systems such as Sağlık Net, etc.),
  • Social Security Institution (SGK),
  • Judicial authorities, law enforcement agencies, and enforcement offices authorized by law to request information,
  • Private insurance companies (for verifications within the scope of service financing),
  • Referral hospitals and laboratories with which we collaborate for medical diagnosis, external laboratory tests, or consultations,
  • Attorneys, auditors, financial advisors, and our business partners for the conduct of legal proceedings.

5. Method and Legal Basis for Collecting Personal Data

Your personal data is collected through automated or non-automated methods via online forms on our website, by phone, through our WhatsApp support line, via email, through patient admission forms filled out during your in-person visits to our Center, during physician examinations, upon submission of laboratory samples, and through security cameras in our physical facilities.

The legal grounds for processing your personal data are as follows:

  • KVKK Article 5/2-a: Explicit provision in laws,
  • KVKK Article 5/2-c: Directly related to the establishment or performance of a contract (health service contract),
  • KVKK Article 5/2-ç: Necessity for the data controller to fulfill its legal obligations,
  • KVKK Article 6/3: The processing of special-category personal data (health data) without requiring explicit consent by persons subject to a duty of confidentiality or by authorized institutions and organizations for the purposes of protecting public health and providing preventive medicine, medical diagnosis, treatment, and care services.

6. The Data Subject’s (Patient’s) Rights Under the KVKK

Pursuant to Article 11 of the KVKK, as a data subject, you may exercise the following rights by submitting a request to our Center:

  • To learn whether your personal data has been processed,
  • To request information regarding the processing of your personal data, if it has been processed,
  • To learn the purpose of the processing of your personal data and whether it is being used in accordance with that purpose,
  • To know the third parties to whom your personal data has been transferred, whether within or outside the country,
  • To request the correction of your personal data if it has been processed incompletely or incorrectly,
  • To request the erasure or destruction of your personal data within the framework of the conditions set forth in Article 7 of the KVKK (subject to the statutory retention periods required by law for the preservation of health records),
  • To request that third parties to whom your personal data has been transferred be notified of any corrections or deletions,
  • To object to a decision made solely through the automated processing of your personal data that adversely affects you,
  • To request compensation for damages incurred as a result of the unlawful processing of your personal data.

7. Method of Submission

To exercise the rights listed above, you may submit your requests in writing or via a secure electronic signature, mobile signature, or via the email address you previously provided to our Center and which is registered in our system, to info@umaytupbebek.com.tr.