This notice explains how your personal data is collected, processed and shared by Göz Vakfı under Law No. 6698 on the Protection of Personal Data (KVKK).
Data Controller
As the data controller for the processing of your personal data, Göz Vakfı fulfils all obligations under the law.
Purposes of Processing Personal Data
Your personal health data is processed primarily for the provision of healthcare services, as well as for security services and the conduct of legal processes where necessary.
Transfer of Personal Data
Your data may be shared with public institutions, banks and insurance companies (including mandatory and complementary insurance) within the exceptions related to the provision of healthcare services or on the basis of your explicit consent.
Legal Grounds for Processing
Your personal data is processed under Article 5(2) and Article 6 of the KVKK; special categories of health data are handled in accordance with the relevant legislation.
Retention Periods
- Patient files: 20 years
- Laboratory processes: 20 years after the process is completed
- Accounting records: 5 years
- Camera recordings: 2 months
Categories of Personal Data Processed
Our foundation processes identity information, contact information, location data, financial records, health information and employee data in line with our fields of activity.
Your Rights
Under Article 11 of the KVKK, you have the right to learn whether your data is being processed; to request information if it has been processed; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred domestically or abroad; to request correction if it is incomplete or inaccurate; and to request its deletion or destruction under Article 7 of the KVKK. To exercise your rights, you may submit a written application to our institution.
