PERSONAL DATA PROCESSING AND INFORMATION NOTICE

1. Data Controller and Representative

Data Controller: Omega CRO
Address: Piri Reis Caddesi No: 2/4, Beytepe, Çankaya, Ankara, Türkiye
Phone: +90 312 426 77 22
E-mail: info@omega-cro.com.tr

2. Categories of Personal Data and Purposes of Processing

In accordance with the Law on the Protection of Personal Data No. 6698 (KVKK), the following personal data are processed by our Company:

Identity Information: Name, surname, Turkish ID number, date and place of birth
Contact Information: Address, phone number, e-mail address, fax number
Health Information: Medical history, laboratory results, genetic test data, reports
Financial Information: Billing and payment details
Service Information: Appointment records, requests, and complaint logs

Purposes of Processing:

  • Medical diagnosis, treatment, and healthcare service provision

  • Creation and management of patient records

  • Financing and billing of healthcare services

  • Fulfillment of legal obligations arising from Ministry of Health regulations

  • Improvement of service quality

  • Measurement and enhancement of patient satisfaction

  • Compliance with legal and regulatory requirements

3. Legal Grounds for Data Processing

Your personal data are processed based on the following legal grounds:

  • KVKK Article 5/2-a: Explicit consent

  • KVKK Article 5/2-ç: Establishment or performance of a service relationship

  • KVKK Article 5/2-e: Fulfillment of legal obligations

  • KVKK Article 5/2-f: Legitimate interests of the Company

4. Data Transfers

In accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred under the following circumstances:

Transfers to Public Institutions:

  • Ministry of Health and its affiliated units

  • Social Security Institution (SGK)

  • Courts and public prosecutors

  • Other authorized public authorities and institutions

Transfers to Private Entities:

  • Contracted private insurance companies

  • Laboratory information management system providers

  • Consultancy and auditing firms

  • Archiving and data storage service providers

5. Methods of Collecting Personal Data

Your personal data may be collected electronically, physically, verbally, or in writing through the following means:

  • Forms available on our website

  • In-person meetings

  • Telephone, e-mail, and other communication channels

  • Medical examination and analysis processes

  • Third parties and institutions (e.g., physicians, hospitals, laboratories)

6. Data Security Measures

Omega CRO implements both technical and administrative measures to ensure the security of personal data, including but not limited to:

  • Access authorization and control matrix for data processing activities

  • Periodic confidentiality undertakings and staff training

  • Data masking, encryption, and backup systems

  • Firewalls and intrusion prevention systems

  • Physical security and access control systems

7. Your Rights (KVKK Article 11)

Under Article 11 of the KVKK, as a data subject, you have the right to:

  • Learn whether your personal data are processed

  • Request information regarding such processing

  • Learn the purpose of processing and whether data are used appropriately

  • Learn the third parties to whom personal data are transferred domestically or abroad

  • Request correction of incomplete or inaccurate data

  • Request deletion or destruction of your personal data within the scope of the law

  • Request notification of such actions to third parties to whom the data were disclosed

  • Object to adverse results arising from automated processing

  • Request compensation for damages arising from unlawful processing of data

8. Exercising Your Rights

To exercise the rights listed above, you may submit your request:

  • Together with documents verifying your identity

  • By completing the “Data Subject Application Form”

Written Application:
In person or via notary to Piri Reis Caddesi No: 2/4, Beytepe, Çankaya, Ankara, Türkiye

Electronic Application:
Via secure electronic signature to info@omega-cro.com.tr

Your request will be evaluated and finalized free of charge within thirty (30) days.