1. Data Controller
In accordance with Law No. 6698 on the Protection of Personal Data (KVKK), the data controller is Biosan Biomedical Investment and Industry JSC (hereinafter "Biosan").
Address: Büyükdere Cad. No:15 Hür Han, 34381 Sisli / Istanbul
Phone: 0212 234 54 55 · Email: biosan@biosan.com.tr
2. Personal Data Processed
In the course of our services, the following personal data may be processed:
- Identity data: Name, surname, ID / passport number, date of birth
- Contact data: Phone number, email address, postal address
- Health data: Diagnosis, treatment records, imaging and laboratory results, medical history
- Financial data: Insurance policy number, billing information
- Transaction security data: IP address, browser information, visit logs
3. Purposes of Processing
Your personal data is processed for the following purposes:
- Provision of medical diagnosis, treatment and follow-up services
- Appointment scheduling and communication
- Fulfilment of legal obligations toward the Ministry of Health and SGK
- Insurance billing and reimbursement processes
- Service quality monitoring and improvement
- Legal claim management and defence
4. Legal Grounds
Your personal data is processed under KVKK articles 5 and 6 based on explicit consent, necessity for a contract, legal obligations, legitimate interests, and for the establishment, exercise or defence of legal claims. Health data (special category) is processed under article 6(3) for protection of public health, preventive medicine, medical diagnosis, treatment and healthcare services by persons bound by professional secrecy.
5. Transfer of Personal Data
Your personal data may be shared with: SGK and the Ministry of Health; your private health insurance provider; laboratories and imaging centres where additional testing is required; authorised public authorities in line with legal obligations; and our electronic medical records service provider within the framework of contractual obligations. Your data is not transferred abroad.
6. Your Rights under Article 11 of KVKK
As a data subject, you have the right to:
- Learn whether your personal data is being processed
- Request information if your personal data has been processed
- Learn the purpose of processing and whether data is used in accordance with that purpose
- Know the third parties to whom your data has been transferred
- Request correction of incomplete or inaccurate data
- Request deletion or destruction of your data within the conditions of article 7
- Request that corrections, deletions or destructions be notified to third parties
- Object to adverse results arising from automated analysis of your data
- Claim compensation for damages arising from unlawful processing
7. How to Exercise Your Rights
To exercise your rights listed above, you may submit a written application to our clinic address, or email us at biosan@biosan.com.tr. Your application will be evaluated as soon as possible and within the statutory 30-day period.
8. Data Retention
Personal data is retained for the periods required under the Regulation on Patient Rights, the Turkish Code of Obligations, the Tax Procedure Law and other relevant legislation. Health records are generally kept for at least 20 years. At the end of the retention period, data is deleted, destroyed or anonymised.