Protection of Personal Data
Data Controller
This notice is prepared by Doruk Hospitals (Nilüfer Campus, Bursa) as the data controller, pursuant to the Personal Data Protection Law No. 6698 (“KVKK”). To reach the data controller: international@doruktip.com · +90 444 0 455.
Personal Data We Process
To provide healthcare services, we may process the following categories of data:
- Identity and contact details (name, phone, e-mail).
- Health data (medical history, test and treatment records).
- Appointment, application and consultation request details.
- Travel and accommodation coordination details for international patients.
Purposes of Processing
Your personal data is processed to carry out diagnosis and treatment, to respond to appointment and consultation requests, to fulfil legal obligations, and to improve service quality.
Legal Basis
Your personal data is processed on the following legal bases, within the scope of Articles 5 and 6 of the KVKK:
- Protection of public health and the provision of medical diagnosis, treatment and care services (Art. 6/3).
- Direct relation to the conclusion or performance of a contract (Art. 5/2-c).
- Fulfilment of obligations arising from the legislation to which we are subject as a hospital (Art. 5/2-a).
- For processing outside the above bases, your explicit consent (Art. 5/1); you may withdraw your consent at any time.
Transfers
Your data may be shared only to the extent required by the treatment process and within the legal framework; with your care team, relevant public authorities and — where you have given explicit consent — with contracted insurers/institutions.
Retention and Erasure
Your data is retained for as long as the processing purpose requires and legislation prescribes; at the end of that period it is deleted, destroyed or anonymized.
- Application and consultation records you submit through the website, together with the medical documents attached to them, are retained for 365 days from the date of application and destroyed at the end of that period.
- Uploads left orphaned because the form was never submitted are destroyed within 24 hours.
- Health records constituting a patient file are subject to the minimum retention periods prescribed by health legislation.
- The version of the notice/consent text you approved is recorded; the retention period applicable to your record is the one in force at the moment you gave consent.
Your Rights
Under Article 11 of the KVKK, you have the right to:
- Learn whether your data is processed and request information.
- Learn the purpose of processing and whether the data is used in line with that purpose.
- Know the third parties to whom your data is transferred, domestically or abroad.
- Request correction if it is incomplete or inaccurate.
- Request its erasure or destruction.
- Request that correction, erasure and destruction be notified to third parties to whom the data was transferred.
- Object to a result arising against you from analysis exclusively by automated systems.
- Claim compensation where you suffer damage due to unlawful processing.
Contact
You may submit requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, together with information verifying your identity, by e-mail to international@doruktip.com or in writing to our hospital. Requests are concluded free of charge within 30 days at the latest.