PURPOSE The purpose of this policy is to define the principles regarding the storage and destruction of personal data processed by Dr. Sevgi Kurt Private Practice and to fulfill the obligations determined by the legislation.
DEFINITIONS
-
Destruction: Deletion, destruction, or anonymization of personal data.
-
Anonymization: Rendering personal data impossible to link with an identified or identifiable natural person, even through matching with other data.
-
Periodic Destruction: The deletion, destruction, or anonymization process carried out ex officio at recurring intervals specified in this Policy regarding personal data for which all processing conditions in the Law have ceased to exist.
REASONS REQUIRING STORAGE AND DESTRUCTION Our practice stores personal data based on the processing conditions specified in Articles 5 and 6 of the KVKK (Law on Protection of Personal Data). In the event that all of these conditions cease to exist, personal data is destroyed ex officio or upon the request of the data subject.
METHODS OF DESTRUCTION Unless a contrary decision is taken by the Personal Data Protection Board, our practice selects the appropriate method of deletion, destruction, or anonymization based on technological possibilities and cost of implementation.
RETENTION AND DESTRUCTION PERIODS Our practice retains personal data only for the period specified in the relevant legislation or for the period necessary for the purpose for which they are processed.
-
Patient Health Records: Retained for the period specified in the relevant health legislation.
-
Camera Records: Retained for at least 2 months in accordance with the Private Hospitals Regulation.
-
Financial Records: Retained for 10 years from the end of the relevant period.
Upon the expiration of the retention period, personal data is destroyed in the first periodic destruction cycle (every 6 months).
