KVKK privacy notice

The data controller is the operator of the HekimBis website and services. Empty fields are not shown.

• Legal name: MTY Teknoloji A.Ş.
• Address: Mersin Üniversitesi Teknopark (TechnoScope), 33110 Çiftlikköy, Yenişehir, Mersin, Türkiye
• Phone: +903246060923
• Email: [email protected]
• KVKK application email: [email protected]

This text covers the personal data of website visitors, people who make contact or demo requests and people who apply for a subscription. For patient data that a health organization manages through HekimBis, the data controller is that health organization; HekimBis acts as a data processor for that data. Patients should learn about the notice and application routes for their own data from the health organization where they receive care.

No special-category personal data (health data) is requested through website forms. Please do not write such information in the message field.

Your data is collected electronically, by automated or partly automated means, through website forms, email, phone, subscription applications and the site's technical infrastructure. If you arrive through a campaign link, a campaign-source cookie is set; details are on the Cookie Policy page.

Your personal data may be transferred, limited to the purposes above and in line with Articles 8 and 9 of the Law, to these recipient groups:

• Service providers that deliver or support the service on our behalf (such as hosting, email and message delivery); as data processors and under contractual confidentiality
• The payment service provider (for subscription payments)
• Advisers under a duty of confidentiality, such as accountants, lawyers and auditors
• Authorized public bodies where legislation requires

If a service requiring transfer abroad will be used, the conditions of Article 9 of the Law are met and this text is updated. Because data collected through website forms is not health data, the product principle on keeping health data in Türkiye is not the subject of this text; for patient data the Data Processing Agreement applies.

Personal data is kept for the time needed for the purpose of processing and for the periods set by relevant legislation; at the end of the period it is deleted, destroyed or anonymized. Periods are set by data class:

• Contact requests: For the conclusion of the request and a reasonable follow-up period
• Subscription and contract records: For the term of the contract and afterwards for limitation periods
• Invoices and financial records: For the periods in tax and commercial legislation
• Transaction security records: For as long as needed for security
• Campaign-source information: For the cookie duration; if attached to a request, together with the request record

The current retention and destruction policy can be provided on request.

Under Article 11 of the Law, as a data subject you have the right to:

1. Learn whether your personal data is processed
2. Request information if it has been processed
3. Learn the purpose of processing and whether it is used accordingly
4. Know the third parties to whom it is transferred, at home or abroad
5. Request correction if it is incomplete or incorrect
6. Request deletion or destruction under the conditions in Article 7 of the Law
7. Request that correction, deletion and destruction be notified to third parties to whom data was transferred
8. Object to a result against you arising from analysis of processed data solely by automated systems
9. Claim compensation for damage if you suffer harm because of unlawful processing

You can send your requests about your rights in accordance with the Communiqué on Procedures and Principles of Application to the Data Controller, by the following routes:

• Written application: to Mersin Üniversitesi Teknopark (TechnoScope), 33110 Çiftlikköy, Yenişehir, Mersin, Türkiye, with a document proving your identity and the note "KVKK Application"
• Email: to [email protected], by methods that allow identity verification such as a secure electronic signature or registered electronic mail, in line with the conditions in the Communiqué
• Other methods foreseen in the Law and the relevant Communiqué

Your application should include first name, last name, signature (for a written application), Republic of Türkiye ID number or, for foreigners, nationality/passport number, an address for notification, an email if any, and the subject of the request. Your request is concluded free of charge as soon as possible and within thirty days at the latest, depending on its nature; if the process requires a separate cost, a fee in the tariff set by the Board may be charged. If your application is rejected, the answer is found insufficient or no answer is given in time, you have the right to complain to the Personal Data Protection Board within thirty days of learning the answer and in any case within sixty days of the application date. For information about the Authority, see the KVKK website(opens in a new tab).