GDPR - General Data Protection Regulation

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data privacy law that regulates the protection of personal data of European Union citizens. At BVS Doctors, we process the data of all our patients from the EU in accordance with GDPR standards.

Data We Collect

We collect the following personal data to provide our healthcare services:

• Identity information (name, surname, date of birth, passport number)
• Contact information (email, phone, address)
• Health data (medical history, diagnosis, treatment information, radiological images)
• Financial information (payment details, invoice information)
• Technical data (IP address, browser information, cookies)
• Communication records (email, WhatsApp messages)

Legal Basis for Data Processing

We process your personal data based on the following legal grounds: Performance of contract (for treatment services), legal obligations (health legislation), protection of vital interests (medical emergencies) and your explicit consent (for marketing communications).

Your Rights Under GDPR

You have the following rights under GDPR:

• Right of Access: You can request access to your personal data and obtain a copy.
• Right to Rectification: You can request correction of incorrect or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request deletion of your data under certain conditions.
• Right to Restrict Processing: You can request restriction of processing of your data.
• Right to Data Portability: You can receive your data in a structured format or request transfer to another organization.
• Right to Object: You can object to the processing of your data in certain situations.
• Automated Decision Making: You have the right not to be subject to decisions based solely on automated processing.
• Withdraw Consent: You can withdraw your previously given consent at any time.

International Data Transfer

Your personal data is processed in Turkey. Turkey is not considered by the EU to have an adequate level of data protection, however we protect your data through standard contractual clauses and additional security measures.

Data Retention Period

We retain your personal data for the period required by health legislation (usually 20 years) or for the period necessary to fulfill our legal obligations. Marketing data is deleted when you withdraw your consent.