PERSONAL DATA PROCESSING AND INFORMATION NOTICE
1. Data Controller and Representative
Data Controller: Omega Genetics Laboratory Address: Piri Reis Caddesi No: 2/4, Beytepe, Çankaya, Ankara, Türkiye Phone: +90 312 920 13 62 E-mail: [email protected]
2. Personal Data Categories and Processing Purposes
In accordance with the Personal Data Protection Law No. 6698 (KVKK), our Company processes the following personal data:
Identity Information: Name, surname, Turkish ID number, date and place of birth Contact Information: Address, phone number, e-mail address, fax number Health Information: Medical history, laboratory results, genetic test data, reports Financial Information: Billing and payment information Service Information: Appointment records, requests, and complaint records
Processing Purposes:
Medical diagnosis, treatment, and healthcare service provision Creation and management of patient records Financing and billing of healthcare services Fulfillment of legal obligations arising from Ministry of Health regulations Improvement of service quality Measurement and enhancement of patient satisfaction Compliance with legal and regulatory requirements
3. Legal Bases for Data Processing
Your personal data is processed based on the following legal grounds:
KVKK Article 5/2-a: Explicit consent
KVKK Article 5/2-ç: Establishment or performance of a service relationship
KVKK Article 5/2-e: Fulfillment of legal obligations
KVKK Article 5/2-f: Legitimate interests of the Company
4. Data Transfers
In compliance with Articles 8 and 9 of the KVKK, your personal data may be transferred in the following cases:
Transfers to Public Institutions: Ministry of Health and affiliated units Social Security Institution (SGK) Courts and public institutions Prosecutors Other authorized public institutions and organizations
Transfers to Private Organizations: Contracted private insurance companies Laboratory information management system providers Consultancy and audit firms Archiving and data storage service providers
5. Methods of Personal Data Collection
Your personal data may be collected electronically, physically, verbally, or in writing through the following means:
Forms on our website In-person interviews Phone, e-mail, and other communication channels Medical examination and analysis processes Third parties and institutions (e.g., doctors, hospitals, laboratories)
6. Data Security Measures
Omega Genetics Laboratory implements both technical and administrative measures, including but not limited to the following, to ensure the security of personal data:
Access authorization and control matrix for data processing activities Periodic confidentiality commitments and staff training Data masking, encryption, and backup systems Firewalls and intrusion prevention systems Physical security and access control systems
7. Your Rights (KVKK Article 11)
In accordance with Article 11 of the KVKK, as the data subject, you have the following rights:
To learn whether your personal data is being processed To request information regarding such processing To learn the purpose of processing and whether data is used appropriately To learn to whom personal data is transferred domestically or abroad To request the rectification of incomplete or inaccurate data To request the deletion or destruction of your personal data within the scope of the law To request notification of such actions to third parties to whom data has been disclosed To object to adverse consequences resulting from automated processing To claim compensation for damages arising from unlawful processing of data
8. Exercising Your Rights
To exercise the rights listed above, you may submit your request as follows:
Along with documents verifying your identity By completing the "Data Subject Application Form"
Written Application: In person or via notary to the address: Piri Reis Caddesi No: 2/4, Beytepe, Çankaya, Ankara, Türkiye
Electronic Application: Submit your application via secure electronic signature to [email protected].
Your request will be evaluated and finalized free of charge within thirty (30) days.