Medicus Clinic Özel Sağlık Hizmetleri ve Tic. Ltd. Şti. ("Medicus Clinic" or the "Clinic") uses closed-circuit television (CCTV) in certain areas of the Clinic to protect its premises, patients, visitors and employees.
This notice informs data subjects about the processing of personal data obtained through CCTV recordings under the Personal Data Protection Law No. 6698 ("KVKK").
1. Data Controller
In accordance with KVKK, your personal data is processed by Medicus Clinic Özel Sağlık Hizmetleri ve Tic. Ltd. Şti. as the data controller.
2. Processed Personal Data
Through the camera system, image recordings of people within the clinical service areas, as well as the location where the recordings were taken and the date-time information of the recording are processed. These data qualify as personal data within the scope of the Personal Data Protection Law No. 6698 and are considered as visual personal data that reveal the physical existence and movements of individuals. The camera system only records images, no audio.
3. Purpose of Camera Monitoring Activity
Camera monitoring activities; It is carried out with the aim of ensuring the security of clinical service areas, protecting the life and property of patients, visitors and employees, ensuring physical space security, preventing possible crimes and security violations, detecting possible events and presenting them as evidence to the competent authorities when necessary, effectively managing emergency situations and ensuring that clinic operations are carried out in a safe, orderly and controlled manner.
4. Legal Reason for Camera Monitoring
Personal data processing activities carried out with the camera are carried out in accordance with the law within the scope of Article 5 of the Personal Data Protection Law No. 6698. In this context, personal data is processed in accordance with subparagraph (f) of the second paragraph of Article 5 of the KVKK in order to protect the legitimate interests of the data controller and the people in the clinical service areas. In addition, in order to fulfill the security and control obligations arising from the relevant legislative provisions to which the clinic is subject, personal data is processed based on the legal reason that it is mandatory for the data controller to fulfill its legal obligations within the scope of subparagraph (c) of the second paragraph of Article 5 of the KVKK.
5. Scope of Camera Monitoring Activity
Closed circuit camera systems within Medicus Clinic; It is used to ensure the safety of patients, visitors and employees, to protect physical space security, to prevent or detect unauthorized entries and security incidents, to ensure facility and asset security and to fulfill legal obligations when necessary.
Camera monitoring activities, within the scope of Personal Data Protection Law No. 6698 and relevant legislation; It is carried out for specific, clear and legitimate purposes, in connection with the purpose for which it is processed, and by observing the principles of limitation and proportionality.
When determining the locations and viewing angles of camera systems, the basis is to monitor the areas required for security purposes, not to interfere with people's private life and privacy unnecessarily, and not to process more personal data than necessary.
Camera systems; It is not used to continuously monitor and evaluate employees' performance, work tempo, break times or behavior.
Imaging is not performed in examination and treatment areas where patient privacy is available, as well as in toilets, showers, locker rooms and similar areas where people have a high expectation of privacy.
In areas where cameras are located, appropriate warning and information methods are used to ensure that relevant people are informed that video recording is taking place.
The necessity, purpose of use, location and viewing angles of camera systems are periodically evaluated by Medicus Clinic; Camera applications that are deemed not necessary for security purposes or that the same purpose can be achieved with less intrusive methods are removed, limited or necessary technical arrangements are made.
Access to camera recordings is limited only to those who need to access them within the scope of their duties and authorities; Necessary administrative and technical measures are implemented to prevent records from being viewed, changed, copied, transferred or used unlawfully by unauthorized persons.
6. Transfer of Personal Data
Camera recordings can be shared with authorized public institutions and organizations, police units, prosecutor's offices, courts and authorized audit institutions upon request, within the framework of the relevant legislation provisions and only when necessary. Data transfers within this scope are carried out in accordance with the Personal Data Protection Law No. 6698 and other relevant legislation, ensuring data security and only for the purpose of fulfilling legal obligations and meeting the requests of competent authorities.
7. Storage Period of Personal Data
Camera recordings are generally stored for 30 days in line with the relevant legislative provisions and security requirements. However, this period can be extended in accordance with the legislation if there is a legal dispute, if requested by official authorities, or if it is deemed necessary for security reasons. After the retention period expires, camera recordings are automatically deleted, destroyed or anonymized in line with data security principles.
8. Data Security Measures
Necessary technical and administrative measures are taken to ensure the security of camera recordings. In this context, unauthorized access to camera recordings is prevented and viewing and use of the recordings is limited to authorized personnel only. Records are stored and protected on secure systems that comply with data security standards. Personnel authorized to access camera recordings are under the obligation of confidentiality regarding the protection of personal data and can only access this data within the scope of their duties and responsibilities and to the extent necessary.
9. Rights of the Data Subject
Within the scope of Article 11 of the Personal Data Protection Law No. 6698, as a data subject, you have the right to learn whether your personal data is being processed or not, to request information if it has been processed, to learn the purpose of processing of your personal data and whether it is used in accordance with its purpose, to request correction if it has been processed incompletely or incorrectly, to request the deletion or destruction of your personal data, and to request compensation for the damage if you suffer damage due to the unlawful processing of your personal data.
10. How to Submit a Request
You can submit your applications using the following methods:
Request Form:
Applications can be sent in writing to the address below or to the e-mail address help@medicus.com.tr.
Email: help@medicus.com.tr
Applications are finalized within 30 days at the latest.