KVKK Policy

Your personal data processed by NCR International Hospital is collected orally, in writing, or electronically through the call center, website, online services, and similar channels depending on the healthcare services provided. Your processed data includes: name, surname, ID or passport number, contact details, address, telephone, e-mail, voice recording logs, financial data, IBAN and billing information, Social Security Institution data, medical reports, laboratory results, biometric and genetic data, camera records, IP address, and resume details in case of job applications.

Your personal data, including special categories of personal data, will be processed within legal frameworks for: protecting public health, preventive medicine, medical diagnosis, treatment, and care services; scheduling and notification of appointments; internal operations, quality improvement, billing, identity verification, data sharing with the Ministry of Health and other public institutions, implementing data security measures, and measuring patient satisfaction.

Your personal data may be shared, by taking all necessary technical and administrative security measures in accordance with the KVKK Law and relevant health legislation, with: the Ministry of Health, the Social Security Institution, private insurance companies, judicial authorities, our subsidiaries and affiliates, group companies, independent auditors, business partners, and third-party institutions from which we receive contractual services.

Your personal data is collected orally, in writing, or electronically during your visit to NCR International Hospital branches through the website, email, call center records, and physical forms, and is retained for legal preservation periods. In accordance with Article 7 of the KVKK Law, when the processing purposes cease to exist, your data will be deleted, destroyed, or anonymized.

Pursuant to Article 11 of the KVKK Law, you have the right to: learn whether your personal data is processed, request information regarding processing, learn if data is used in accordance with its purpose, know the third parties to whom data is transferred domestically or abroad, request correction of incomplete/incorrect data, request deletion or destruction of data, and demand compensation for damages incurred due to unlawful processing.

Pursuant to Article 5 of the KVKK Law, your personal data may be processed without explicit consent in cases: explicitly stipulated in laws, mandatory for the protection of physical integrity due to actual impossibility, directly related to the establishment or performance of a contract, necessary for the data controller to fulfill legal obligations, made public by the data subject, or required for the legitimate interests of the data controller.

NCR International Hospital protects your personal data in full compliance with all technical and administrative security controls required by information security standards and procedures, and at an appropriate level against potential risks. Advanced encryption and network security measures are implemented to protect the confidentiality and integrity of your data.