At Rami Hospital, we attach great importance to the security of your personal data.
We store all personal data shared by our patients with due regard for patient confidentiality, taking all necessary technical and administrative measures to ensure an appropriate level of security for your personal data.
This Personal Data Protection Notice explains our personal data protection and processing policy, and how we collect, transfer, use and protect your personal data while providing hospital services.
1) Personal Data Collected by Rami Hospital
We collect various information from our patients in the course of the healthcare services we provide. This information is always collected in accordance with the data processing principles and conditions set out in the Personal Data Protection Law (KVKK) No. 6698. The information we collect from you for the purposes described in Section 2 below may include the following:
- Your first name and surname,
- Your Turkish ID details and passport number,
- Your place and date of birth,
- Your gender,
- Your address,
- Your telephone number,
- Your e-mail address,
- Your patient protocol number,
- Your financial data, such as payment and billing information,
- Your private health insurance or Social Security Institution (SGK) data,
- Your biometric data in connection with services funded by the Social Security Institution (SGK),
- Your health data, including but not limited to laboratory results, test results, examination data, check-up information and prescription information,
- Your voice recording if you contact us,
- CCTV footage recorded during your visits to our hospitals,
- Your vehicle licence plate if you use the car park/valet service,
- The health data and identity information you share when using the online services on our website ramihastanesi.com,
- Other data you share when contacting us by e-mail, via the call centre or through any other channel.
2) Purposes for Processing Your Personal Data
The personal data we collect in connection with the services you receive from us is processed for various purposes, including the following:
- a. Fulfilling our legal obligations under the Basic Law on Health Services No. 3359, Decree-Law No. 663 on the Organisation and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Hospitals, the Regulation on the Processing of Personal Health Data and Ensuring Privacy, and other relevant regulations,
- b. Protecting public health, preventive medicine, medical diagnosis, providing treatment and care services, and planning and managing healthcare services and their financing,
- c. Providing you with information about your appointment if you have booked one,
- d. Planning and managing the hospital’s internal operations,
- e. Carrying out analyses to improve our services,
- f. Invoicing,
- g. Verifying your identity,
- h. Verifying your relationship with contracted institutions,
- i. Responding to requests from the Ministry of Health and other public institutions and organisations in accordance with applicable legislation,
- j. Responding to your questions or complaints about our services,
- k. Analysing your use of healthcare services in order to improve the services we offer,
- l. Ensuring compliance with the hospital’s internal policies and principles,
- m. Measuring and improving patient satisfaction after you have received healthcare services,
- n. Contacting you to provide information about our services,
- o. Procuring medicines or medical devices.
Your personal data will not be used for any commercial purpose other than the activities listed above and the cases required by the relevant legislation.
3) Persons and Organisations to Whom Your Personal Data May Be Transferred
While taking all necessary technical and administrative measures to ensure an appropriate level of security in accordance with the KVKK and the relevant health legislation, we may transfer your personal data, for the purposes set out in Section 2 above, to: institutions or organisations permitted by the Basic Law on Health Services No. 3359, Decree-Law No. 663 on the Organisation and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Private Hospitals, the Regulation on the Processing of Personal Health Data and Ensuring Privacy and other relevant legislation; private insurance companies; our direct/indirect domestic/foreign shareholders, subsidiaries and/or affiliates; auditors; consultants; business partners; domestic/foreign organisations from which we receive services under contract or with which we cooperate in order to carry out our activities; and other third parties.
4) Method and Legal Basis for Collecting Personal Data
Your personal data is collected verbally, in writing or electronically, for the purposes listed above and to enable the hospital to fulfil its contractual and legal obligations.
5) Your Rights Regarding Your Personal Data
To the extent that your personal data is processed by the hospital as data controller, under Article 11 of the KVKK you have the right, by completing the “KVKK Access/Information Request Form” below and delivering it by hand to the address of the hospital where you received services, sending it through a notary public, or sending it to info@ramihastanesi.com with a secure electronic signature, to:
- a) Find out whether any of your personal data is being processed,
- b) Request information about the processing of your personal data,
- c) Find out the purposes for which your personal data is processed,
- d) Know the third parties, in Türkiye or abroad, to whom your personal data has been transferred,
- e) Request correction of your personal data if it has been processed incompletely or inaccurately,
- f) Request the deletion or destruction of your personal data if the reasons requiring its processing no longer exist, or if the hospital has no legal basis or legitimate interest for processing it,
- g) Object to any adverse outcome resulting from the processing of your personal data exclusively through automated systems, and
- h) Claim compensation for any damage you suffer as a result of the unlawful processing of your personal data.
Depending on the nature of the request, the hospital will conclude your request free of charge as soon as possible and within thirty days at the latest. However, if the process involves an additional cost, the hospital will charge the fee set out in the tariff determined by the Personal Data Protection Board.
For the KVKK Information Request Form, click here.