Legal

Protection of Personal Data

Last updated: August 24, 2026

INFORMATION FORM ON THE COLLECTION AND PROCESSING OF PERSONAL DATA

As Acıbadem Sağlık Hizmetleri ve Ticaret A.Ş. (“Acıbadem”) and its dominant and affiliated companies (collectively referred to as the “Acıbadem Group”), acting in the capacity of Data Controller under the Law No. 6698 on the Protection of Personal Data (“Law”) and relevant legislation, your personal data may be processed within the framework described below and in accordance with the Basic Law on Health Services No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, the Private Hospitals Regulation, Ministry of Health regulations, and other applicable legislation.

1. Collection and Processing of Personal Data and Purposes of Processing

Your personal data is collected via oral, written, visual, or electronic means—including the call center, website, and similar channels—for the purposes of protecting public health, performing preventive medicine, medical diagnosis, treatment, and nursing services, as well as the planning and management of healthcare services and their financing, in accordance with the field of activity of Acıbadem Group.

The following categories of data (including special categories of personal data, specifically health data) may be processed in a limited and proportionate manner:

Identity Information: Name, surname, T.R. Identity number, passport number or temporary T.R. identity number, place and date of birth, marital status, gender, insurance or patient protocol number, and other identification data.
Contact Information: Address, telephone number, e-mail address, and other contact data; voice call recordings kept by customer representatives or patient services as per call center standards; and personal data obtained when you contact us via e-mail, letter, or other means.
Financial Information: Bank account number, IBAN, credit card information, billing information, and other financial data.
Insurance Information: Private health insurance data and Social Security Institution (SGK) data for the purpose of financing and planning healthcare services.
Visual/Auditory Data: Camera recordings kept for security and inspection purposes during visits to our hospitals or medical centers.
Vehicle Information: License plate data if the parking lot is used.
Health Information: All personal data relating to health and sexual life obtained during or as a result of medical diagnosis, treatment, and nursing services, including but not limited to laboratory results, test results, examination data, appointment information, check-up information, and prescription details.
Online Data: Health data and other personal data you submit or enter at www.acibademinternational.com or www.acibadem.com.tr/AcibademOnline/TR/MainPage.
Employment Data: If you apply for a job, your CV and other related personal data; if you are an employee or related personnel, data regarding your service contract and job suitability.

Purposes for processing include:

Confirming your identity.
Planning and managing healthcare services and their financing.
Sharing requested information with the Ministry of Health and other public institutions in accordance with the legislation.
Managing internal operations, patient satisfaction measurement, and research.
Supply of medication and notifying you of appointments.
Risk management, quality improvement, and analysis to enhance healthcare services.
Invoicing for services and verifying relationships with contracted institutions.
Designing special content and benefits for web and mobile channels.

2. Transfer of Personal Data

For the purposes mentioned above and within the scope of the Law, your personal data may be shared with:

Acıbadem Group companies.
Private insurance companies.
The Ministry of Health and its sub-units, Social Security Institution (SGK), General Directorate of Security (Police), and other law enforcement agencies.
General Directorate of Population, Turkish Pharmacists’ Association.
Courts and all types of judicial authorities.
Third parties including authorized representatives, lawyers, tax and financial consultants, and auditors.
Regulatory and supervisory bodies and official authorities.
Business partners and other third parties with whom we cooperate to develop or carry out healthcare services.

3. Method and Legal Basis for Collecting Personal Data

Your data is collected to ensure that Acıbadem can fulfill its contractual and legal obligations within the legal framework of its operations. The legal bases are:

Law No. 6698 (KVKK).
Basic Law on Health Services No. 3359 and Decree Law No. 663.
Private Hospitals Regulation and Regulation on the Processing and Privacy of Personal Health Data.

Note: Pursuant to Article 6/3 of the Law, personal data regarding health and sexual life may be processed without explicit consent only by persons under the obligation of confidentiality or authorized institutions for the purposes of public health protection, preventive medicine, medical diagnosis, treatment, nursing services, and the management/financing of healthcare.

4. Your Rights Regarding Personal Data Protection

Under the Law and relevant legislation, you have the right to:

Learn whether your personal data is processed.
Request information if it has been processed.
Access and request personal health data.
Learn the purpose of processing and whether it is used accordingly.
Know the third parties to whom data is transferred (domestic/abroad).
Request correction of incomplete or incorrect data.
Request the deletion or destruction of personal data.
Object to results occurring exclusively through automated systems.

5. Data Security and Contact

Acıbadem protects your personal data in full compliance with technical and administrative security controls. To exercise your rights, you may fill out the Data Subject Application Form at the web address provided and submit it via:

Mail: Atatürk Mah. Feza Sk. No:3/8 Ataşehir, Istanbul (Attn: Corporate Secretariat).
Notary Public.
KEP: [email protected].
Email: [email protected] (with secure e-signature).