1. Data Controller
Pursuant to the Personal Data Protection Law No. 6698 ("KVKK"), the data controller responsible for processing your personal data is:
Curavita Evde Sağlık (Ges Global Sağlık Hizmetleri Limited Şirketi)
Email: info@curavitaevdesaglik.com
Phone: +90 216 235 10 45
Address: Tatlısu Mah. Şenol Güneş Blv. Mira A Blok No: 2 A, Ümraniye/İstanbul
2. Personal Data Processed
The following personal data is processed in the course of our services:
2.1. Identity Information
- First and last name
- Turkish national identification number (T.C. Kimlik No.)
- Date of birth
- Gender
2.2. Contact Information
- Phone number
- Email address
- Postal address
- Emergency contact details
2.3. Health Information (Special Categories of Personal Data)
- Medical history
- Diagnoses
- Information on medications used
- Medical reports and test results
- Appointment history
- Treatment plans
2.4. Financial Information
- Payment information
- Private health insurance information (insurance company, policy details, etc.)
- Billing information
2.5. Transaction Security Information
- IP address
- Cookie data
- Device information
- Platform usage logs
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Providing healthcare services and managing appointments
- Patient follow-up and keeping health records
- Communicating with and informing patients
- Improving service quality
- Fulfilling legal obligations (notifications to the Ministry of Health, etc.)
- Billing and payment transactions
- Handling insurance procedures
- Responding to emergencies
- Ensuring platform security
- Statistical analysis and reporting
4. Legal Grounds for Processing Personal Data
Your personal data is processed on the following legal grounds:
- Explicit Consent: Your explicit consent for the provision of healthcare services
- Establishment or Performance of a Contract: Establishing and performing the service contract
- Compliance with a Legal Obligation: Notification obligations under health legislation
- Protection of Vital Interests: Intervention in medical emergencies
- Protection of Public Health: Notifications of epidemic diseases, etc.
- Legitimate Interest: Improving service quality
5. Transfer of Personal Data
Your personal data may be shared with the following parties where required by law and where necessary for the provision of healthcare services:
5.1. Public Institutions and Organizations
- Ministry of Health
- Provincial Health Directorates
- Judicial authorities (where required by law)
5.2. Healthcare Institutions and Professionals
- Partner healthcare institutions
- Laboratories and imaging centers
- Doctors, nurses and other healthcare professionals
- Pharmacies (for prescription processing)
5.3. Service Providers
- Payment processors
- Server hosting services
- Software and technology providers
- Consulting firms
5.4. Insurance Companies
- Private health insurance companies (if permission is given)
6. Retention Period of Personal Data
Your personal data is retained for as long as the purpose of processing requires and in accordance with statutory retention periods:
- Health Records: 10 years under Ministry of Health legislation
- Account Information: For as long as the account is active and for 5 years after it is closed
- Invoice and Payment Records: 10 years under tax legislation
- Cookie and Log Data: For cookies, the periods stated in the Cookie Policy (session cookies for the duration of the session, preference cookies for 6 months); for server logs, the periods prescribed by the relevant legislation
Data whose retention period has expired is securely deleted or anonymized.
7. Your Rights Under the KVKK
Under Article 11 of the KVKK, you have the following rights:
- To learn whether your personal data is being processed
- To request information about your processed personal data
- To learn the purpose of processing your personal data and whether it is used in line with that purpose
- To know the third parties, in Türkiye or abroad, to whom your personal data is transferred
- To request the correction of your personal data if it is incomplete or inaccurately processed, and to request that the action taken in this regard be notified to third parties to whom your personal data has been transferred
- To request the deletion or destruction of your personal data if the reasons requiring its processing no longer exist, even though it has been processed in accordance with the KVKK and other applicable laws, and to request that the action taken in this regard be notified to third parties to whom your personal data has been transferred
- To object to any outcome to your detriment that arises from the analysis of your processed data exclusively by automated systems
- To claim compensation for damage if you suffer damage as a result of the unlawful processing of your personal data
8. How to Exercise Your Rights
To exercise your rights under the KVKK:
- Email: You can send your application to info@curavitaevdesaglik.com
- Phone: You can call +90 216 235 10 45
- Post: You can send a written application to Tatlısu Mah. Şenol Güneş Blv. Mira A Blok No: 2 A, Ümraniye/İstanbul
Your application must include information that verifies your identity. Your application will be concluded within 30 days at the latest, and you will be informed of the outcome.
9. Applying to the Personal Data Protection Board
If you believe that your rights have been violated:
- You can file a complaint with the Personal Data Protection Board
- Board address: Nasuh Akar Mah. 1407. Sokak No:4 06520 Balgat/Ankara
- Board website: www.kvkk.gov.tr
- Board phone: 0312 216 50 00
10. Data Security
To ensure the security of your personal data:
- SSL/TLS encryption technologies are used
- A secure server infrastructure is used
- Regular security audits are carried out
- Staff training is provided
- Preparedness plans are in place for data breaches
11. Updates
This privacy notice may be updated due to legal regulations and operational changes. The current version will always be published on our platform.