Health Professional and Consultant Information Text
Health Professional and Consultant Information Text
EHEALTH TEKNOLOJİ A.Ş. (EHEALTH) processes your personal data in accordance with all legislative provisions regarding the protection of personal data, especially the Personal Data Protection Law No. 6698 (“KVKK”), and takes all necessary security measures to ensure the security of your data.
This Information Text, prepared in accordance with Article 10 of the KVKK and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Information Obligation, aims to inform you about the personal data we process during your use of the website "www.ehealth.com.tr".
1. DATA CONTROLLER
Your personal data will be transferred to EHEALTH TEKNOLOJİ A.Ş., which is registered with the Ankara Trade Registry Office with the Trade Registry Number 496077, as the Data Controller, with its headquarters located at “Kızilirmak Mahallesi Dumlupınar Bulvarı Next Level No: 3A/10 Çankaya/ANKARA”. .Processed by .
2. METHODS OF COLLECTION OF PERSONAL DATA
Your personal data is collected automatically, in whole or in part, from you through applications you make in electronic, physical or digital environments (website, customer contact center, etc.) through various channels such as your browser, third-party applications, social media platforms or other technology providers, especially the website at the address "www.ehealth.com.tr", your identity, address, education, certificate, employment. Your information is collected from the databases of public institutions and other organizations where your information is registered, organizations from which we receive support services such as secure payment infrastructures that mediate the establishment and maintenance of a contractual relationship with us, your workplaces, and organizations with which we cooperate in advertising and marketing for referral purposes, such as comparison websites.
3. PROCESSED PERSONAL DATA
Personal data processed by us asEHEALTH are listed within the personal data groups in the table below. In this way, you can obtain information about your personal data processed under each data group.
| Personal Data Group | Personal Data |
| Credentials | Name-surname, T.R. Identity or Foreign Identification Number, Nationality, Date of Birth. |
| Contact Information | E-mail Address, Work and/or Home Address, Phone Number, Social Media Addresses. |
| Customer Information | Educational Information, Profession and Expertise Information, Work History, Workplace Information, Tax Certificate, Tax Number. |
| Customer Transaction Information | Call Center Records, Message Records, Customer Instructions, Order and Purchasing Records. |
| Transaction Security Information | Device Operating System and Version, Device Type, Device ID, Hardware Model, IP address information, Website Login and Exit Information, Authentication Information (Password, Token, etc.), Username and Password, Log records, Mandatory Cookies. |
| Financial Information | Depending on Payment Methods, Payment Records and Card Information, IBAN Information, Invoice Information, Debt and Credit Information, Delay and Number of Days of Delay Information and other Accounting Records. |
| Legal Transaction Information | Court and Administrative Authority Decisions, Warnings Between the Parties, Legal Applications and Notifications, Contract and its annexes. |
| Visual Records | Profile Photo. |
| Request and Complaint Management Information | Information about the Information and Records Collected Regarding Requests and Complaints and the reports in which their results are evaluated by the relevant business units. |
| Marketing Information | Site Usage Information (Cookies), Surveys and Forms. |
| Public Institution Records | Records of relevant official institutions such as the Ministry of Health, SGK, Tax Offices. |
4. PURPOSES AND LEGAL REASONS FOR PROCESSING PERSONAL DATA
You can find general information about the purposes for which the personal data processed by us as EHEALTH are processed according to data groups and on what legal grounds within the scope of Article 5 of the KVKK, in the table below.
| Purpose of Processing Personal Data | Processed Personal Data Group | Legal Reasons for Processing Personal Data |
Registering to the Platform, Checking the Membership Conditions, Creating a Profile. |
Identity Information, Contact Information, Customer Information, Financial Information, Visual Records, Official Institution Records. | It is directly related to the Establishment and Execution of the Platform Usage Agreement, It is mandatory for the fulfillment of legal obligations, It is mandatory for the establishment, use or protection of a right. |
| Entering the Platform, Using the Platform. |
Identity Information, Contact Information, Transaction Security Information. | It is directly related to the Establishment and Execution of the Platform Usage Agreement, It is mandatory for the fulfillment of legal obligations. |
| Creating an Appointment and Performance of the Service. | Identity Information, Contact Information, Customer Information, Visual Records, Financial Information, Official Institution Records. | It is directly related to the Establishment and Execution of the Platform Usage Agreement, It is mandatory for the establishment, use or protection of a right. |
| Ensuring the Security of Data Controller Operations, Performing Identity Verification Procedures, Making the Website Functional. | Identity Information, Contact Information, Transaction Security Information. | It is mandatory for the fulfillment of legal obligations. It is mandatory for the establishment, exercise or protection of a right. It is mandatory due to legitimate interests. |
| Finance, Accounting and Payment Transactions, Invoicing | Identity Information, Contact Information, Customer Information, Customer Transaction Information, Financial Information, Legal Transaction Information. | Being directly related to the Establishment and Execution of the Platform Usage Agreement, Being mandatory for the fulfillment of legal obligations, Being mandatory for the establishment, use or protection of a right. |
| Receiving and Evaluation of Requests and Complaints, Improving Platform Service Processes. | Identity Information, Contact Information, Legal Transaction Information, Request and Complaint Management Information. | Being directly related to the Establishment and Performance of the Platform Usage Agreement, Being mandatory for the establishment, use or protection of a right, Being mandatory due to legitimate interests. |
| Providing Information to Authorized Persons, Institutions and Organizations, especially the Ministry of Health, and Carrying out Storage and Archiving Activities in Pursuance of Relevant Legislation. | Identity Information, Contact Information, Customer Information, Transaction Security Information, Financial Information, Legal Transaction Information. | It is prescribed by law, It is mandatory for the fulfillment of legal obligations. |
| Performing Personalized Marketing Activities. | Identity Information, Contact Information, Customer Information, Customer Transaction Information, Marketing Information. | Having your explicit consent. |
5. TRANSFER OF PERSONAL DATA
Personal data processed by us asEHEALTH is in line with the realization of the above-mentioned purposes and limited to the fulfillment of these purposes; It can only be transferred to the following recipient groups within the country, in accordance with Articles 8 and/or 9 of the KVKK and if the above-mentioned legal reasons for the relevant data category are also present in terms of transfer purposes.
- To the Financial Consultancy firm, accounting software and payment institutions from which we receive services regarding the execution of finance, accounting and payment transactions and invoicing purposes, and to the Tax Office regarding payment institutions,
- To suppliers for the purpose of providing products and/or services for the conduct of company activities,
- T.R. To authorized institutions and organizations, especially the Ministry of Health, in cases where authorized institutions or organizations request our Company or we are expected to notify these institutions,
- To our lawyers and authorized public institutions and organizations in order to fulfill the company's legal obligations and follow up on legal affairs,
- To business partners (for example, search engines, social media platforms, data management platforms and digital advertising platforms) for the purpose of carrying out personalized advertising/marketing activities, if you prefer.
6. RIGHTS OF THE DATA OWNER
We would like to remind you that, as the data owner, you have the following rights in accordance with Article 11 of the KVKK:
- Learning whether personal data is processed or not,
- Requesting information if personal data has been processed,
- Learning the purpose of processing personal data and whether they are used for their intended purpose,
- Knowing the third parties to whom personal data are transferred domestically or abroad,
- In case personal data has been processed incompletely or incorrectly, to request correction of these and to request that the action taken in this context be notified to third parties to whom personal data has been transferred,
- Requesting the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of KVKK and other relevant laws, and requesting that the transaction carried out within this scope be notified to third parties to whom the personal data has been transferred,
- Objecting to the emergence of a result against the person by analyzing the processed data exclusively through automatic systems,
- Requesting compensation for the damage in case of loss due to personal data being processed contrary to the Law.
7. USE OF RIGHTS
Applications of data owners regarding the rights listed above in accordance with Article 13 of the KVVK; In accordance with the provisions of the "Communiqué on the Procedures and Principles of Application to the Data Controller", by filling out the Data Owner Application Form, which can be accessed at the address "www.ehealth.com.tr/kvkk-basvuru-formu/", and adding information and documents suitable for identification, physically "Kızilirmak Mahallesi Dumlupınar Bulvarı Next Level No: 3A/10 Çankaya/ANKARA” or electronically via registered electronic mail (KEP) address, secure electronic signature, mobile signature or the e-mail addresses they used when registering to the site “ehealthteknolojia.s@hs01.kep.tr” or It can be sent to "info@ehealth.com.tr".
The Data Owner's application will be finalized free of charge as soon as possible, within 30 (THIRTY) days at the latest, depending on the nature of the relevant request. However, if the process requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.