KVKK (Personal Data Protection Law)

This Information Notice has been prepared by AKL Poliklinik, in its capacity as data controller, for the purpose of explaining the procedures and principles regarding the processing of your personal data in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) and the relevant legislation.

1. Data Controller

The legal entity responsible for the processing of your personal data is:

AKL Poliklinik
Address: Barbaros, Halk Cd. NO:49, 34746 Ataşehir/İstanbul
E-mail: [email protected]
Phone: 0 (216) 334 8282
Website: www.aklpoliklinik.com

As AKL Poliklinik, we exercise the utmost care with regard to the security and confidentiality of your personal data. We process your data in compliance with the relevant legislation and in accordance with the principles set out below.

2. Categories of Personal Data Processed

As AKL Poliklinik, depending on the nature of the healthcare services we provide and our legal obligations, we may process your personal data in the following categories:

Identity Data
Your name, surname, Turkish ID number, passport number or temporary identity number, place and date of birth, marital status, gender.

Contact Data
Your address, phone number, e-mail address.

Health Data (Special Category Personal Data)
Your medical history, diagnoses, treatments applied, laboratory results, radiology images, medications used, health reports and all other medical data.
Physical measurement information such as your blood type, height, weight.

Financial Data
Your payment information, financial data relating to invoicing and insurance transactions.

Visual and Audio Records
Image recordings obtained through the security cameras of our polyclinic.

Other Data
Your IP address collected during your visit to our website and browsing information collected via cookies.
Service usage data such as appointment history, satisfaction surveys.

3. Purposes of Processing Personal Data

Your personal data collected will be processed by AKL Poliklinik for the purposes set out below, within the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK:

Provision and Management of Healthcare Services
Planning and execution of medical diagnosis, treatment and care services.
Contacting you or your relatives in emergencies or situations requiring medical intervention.
Creation, updating and retention of hospital and polyclinic records.

Fulfilment of Legal Obligations
For the purpose of fulfilling our obligations arising from legal regulations towards the Ministry of Health, the Social Security Institution (SGK) and other relevant public institutions and organizations.
Fulfilment of obligations regarding tax legislation, financial reporting and audits.
Prevention of crime and responding to judicial investigations.

Management of Financial Processes
Invoicing and collection of service fees.
Execution of authorization (provision) processes with insurance companies.

Execution and Improvement of Operational Activities
Organization of internal operational processes of the polyclinic (appointment management, patient flow).
Analyses and improvement activities aimed at increasing service quality.
Measuring patient satisfaction and evaluating feedback.
Ensuring the physical and information security of the polyclinic.

Communication and Marketing Activities (Subject to Consent)
Sending appointment reminders and informative messages.
If you so request and give your consent, sending promotional and informational e-mails/SMS.

4. Methods of Collecting Personal Data and Legal Grounds

Your personal data may be collected, for the purposes stated above, in whole or in part by automated means or by non-automated means provided that they form part of a data recording system.

Main Methods of Data Collection:

Through the forms you fill in during appointment booking and registration procedures.
Through your communications via telephone, e-mail, website or social media.
During medical diagnosis and treatment processes, through laboratory tests, radiological examinations and physician consultations.
Through security cameras that record images inside and around the polyclinic building.
Through cookies and similar tracking technologies used during your visit to our website.

Legal Grounds:
Your personal data is processed on the basis of the following legal grounds specified in Articles 5 and 6 of the KVKK:

The presence of your explicit consent.
It is clearly provided for by laws (e.g. the Fundamental Law on Healthcare Services, the Medical Deontology Regulation).
It is necessary for the processing of personal data of the parties to a contract, provided that it is directly related to the conclusion or performance of the contract.
It is mandatory for the data controller to fulfil its legal obligations.
The data has been made public by the data subject.
It is mandatory for the establishment, exercise or protection of a right.
Provided that it does not harm the fundamental rights and freedoms of the data subject, it is mandatory for the legitimate interests of the data controller.
For health data: For the purposes of protection of public health, preventive medicine, execution of medical diagnosis, treatment and care services, planning and management of healthcare services and their financing, processing by persons or authorized institutions and organizations under the obligation of confidentiality.

5. Recipients and Purposes of Transfer of Personal Data

Your personal data collected may be transferred to the following persons and institutions for the purposes of processing described above, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK:

Transfers Required by Legal Obligations

To the Ministry of Health, the Social Security Institution (SGK), the General Directorate of Security and other authorized public institutions and organizations, for the purpose of fulfilling our obligations arising from legal regulations.
To judicial authorities and public prosecutors’ offices, for the execution of legal processes and responding to judicial requests.

Transfers for Service Purposes

To our business partners, contracted laboratories, imaging centers and other healthcare providers, for the provision of necessary medical services as part of your treatment processes.
To contracted pharmacies, for the fulfilment of your prescriptions.
To insurance companies, for the execution of financial processes and obtaining authorization (provision).
To professional organizations from which we receive consultancy services for finance and accounting transactions.

Transfers within AKL Poliklinik

To the relevant departments within AKL Poliklinik, for the provision of services and the execution of internal operations.

Transfer of Data Abroad
As AKL Poliklinik, we do not, as a rule, transfer your personal data abroad. However, if the transfer of data abroad becomes necessary due to international health standards, cooperation with contracted global entities or based on your explicit consent, we will act in compliance with the conditions set out in Article 9 of the KVKK (countries with adequate protection or data controllers providing adequate protection commitments).

6. Our Measures Regarding Data Security

As AKL Poliklinik, we take the necessary technical and administrative measures to ensure the security of your personal data. These measures are aimed at preventing unlawful processing, unlawful access, loss and destruction of data.

Technical Measures:

Strong encryption and access control mechanisms for the security of databases.
Ensuring system security through penetration tests and firewalls.
Back-up of data and disaster recovery plans.
Regular security scans of systems containing personal data.

Administrative Measures:

Regular training of personnel who process data and raising their awareness on the KVKK.
Establishing an authorization matrix for access to personal data and imposing access restrictions.
Signing confidentiality agreements.
Periodic risk analyses and review of data processing processes.

7. Rights of the Data Subject (Article 11 of the KVKK)

As a data subject, you may apply to AKL Poliklinik pursuant to Article 11 of the KVKK and exercise the following rights:

To learn whether your personal data is being processed.
If your personal data has been processed, to request information regarding this.
To learn the purpose of the processing of your personal data and whether they are used in accordance with their purpose.
To know the third parties to whom personal data is transferred domestically or abroad.
To request the correction of personal data if it is incomplete or incorrectly processed and to request that the transaction carried out in this context be notified to third parties to whom the personal data has been transferred.
To request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, even though it has been processed in accordance with the KVKK and other relevant legal provisions, and to request that the transaction carried out in this context be notified to third parties to whom the personal data has been transferred.
To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems.
To demand compensation for the damage you have suffered due to the unlawful processing of personal data.

8. Method of Exercising Your Rights and Application

Pursuant to Article 13/1 of the KVKK, you may submit your requests regarding the exercise of the rights listed above to AKL Poliklinik in writing or by other methods determined by the Personal Data Protection Board.

Application Methods:

Written Application:
You may deliver your request together with documents proving your identity by hand to the address below, or send it via notary public or registered mail with return receipt:

AKL Poliklinik
Address: Barbaros, Halk Cd. NO:49, 34746 Ataşehir/İstanbul

Electronic Application:
You may send your request via secure electronic signature, mobile signature or from your e-mail address previously notified to us and registered in our system, to the e-mail address below:

E-mail: [email protected]

Your application will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.

9. Cookie Policy

Information regarding the cookies and similar tracking technologies used on our website is provided below:

Necessary Cookies: Cookies that are mandatory for the basic functions of the site to operate.
Analytical Cookies: Cookies used to analyze visitor behavior (e.g. number of visits, page browsing time).
Consent for the Processing of Personal Data: Where necessary, cookies are used with the user’s consent. Cookie preferences can be managed from the website.

You can change your cookie preferences and tracking settings via the cookie management tool on the site. For more detailed information on the use of cookies and to manage your preferences, please visit our Cookie Policy.

10. Changes to the Information Notice

AKL Poliklinik reserves the right to make changes to this Information Notice due to possible amendments to the KVKK, decisions of the Board or updates in its activities. The changes will come into force upon publication of the updated text on our website. Therefore, we recommend that you regularly review this Information Notice.

This Information Notice was updated on [CURRENT DATE, e.g. 11.12.2025].

This document has been prepared by AKL Poliklinik for informational purposes under the KVKK.

📅11 Aralık 2025

🔄5 Ocak 2026