CCTV Privacy Notice

Effective and last updated: 11 September 2026

Medicus Clinic Özel Sağlık Hizmetleri ve Tic. Ltd. Şti. (“Medicus Clinic” or the “Clinic”) uses closed-circuit television (CCTV) in certain areas to protect the safety of its premises, patients, visitors and employees. This notice informs data subjects about the processing of personal data obtained from camera recordings under Turkish Personal Data Protection Law No. 6698 (“KVKK”).

1. Data Controller

Medicus Clinic Özel Sağlık Hizmetleri ve Tic. Ltd. Şti. is the data controller under the KVKK.

2. Personal Data Processed

The system processes images of people in clinic service areas together with the location, date and time of recording. These visual personal data may reveal a person’s physical presence and movements. The system records images only; no audio is recorded.

3. Purposes of Monitoring

CCTV is used to secure clinic service areas; protect the lives and property of patients, visitors and staff; maintain physical security; prevent crime and security incidents; identify events and, where necessary, provide evidence to authorised authorities; manage emergencies; and operate the clinic safely and in an orderly, controlled manner.

4. Legal Grounds

Processing is carried out under Article 5 of the KVKK. Article 5(2)(f) provides the ground of legitimate interests in protecting the controller and persons on the premises, while Article 5(2)(ç) provides the ground of necessity to meet security and inspection obligations imposed by applicable law.

5. Camera Locations

Cameras are placed only where needed for security and with respect for privacy: entrances and exits, floor corridors, waiting areas, information and reception desks, parking areas, the clinic perimeter and shared spaces. Placement is determined under the KVKK, the Patient Rights Regulation and related legislation. Recording does not take place inside examination or patient rooms, toilets, changing rooms, staff rest areas used privately or other areas requiring privacy. Monitoring is limited and proportionate to safety and risk-prevention purposes.

6. Transfers

Where necessary and upon request, recordings may be shared with authorised public institutions, police, prosecutors, courts and inspection bodies. Transfers are limited to legal duties and valid authority requests, in accordance with the KVKK and data-security requirements.

7. Retention

Recordings are generally retained for 30 days under applicable rules and security needs. This period may be extended in accordance with law where there is a legal dispute, an official request or a security need. Once the applicable period expires, recordings are automatically deleted, destroyed or anonymised in accordance with data-security principles.

8. Security

Technical and organisational measures prevent unauthorised access. Viewing and use are restricted to authorised staff. Recordings are stored on secure systems; authorised staff are bound by confidentiality and access only what their duties require.

9. Your Rights

Under Article 11 of the KVKK, you may ask whether your data are processed; request information; learn the purpose and whether data are used accordingly; request correction of incomplete or inaccurate data; request erasure or destruction; and claim compensation for damage caused by unlawful processing.

10. How to Apply

Send a written application to Karabekir Cad. No.50 Side 07330 Manavgat Antalya Türkiye, or use electronic methods permitted by law at info@medicus.com.tr. Applications are concluded as soon as possible according to their nature and no later than 30 days.