PRIVACY POLICY

1. Introduction

At Omega CRO (“Company” or “Omega”), we attach great importance to the security and confidentiality of your personal data.
This Privacy Policy has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 (KVKK) and the relevant legislation to inform you about the principles regarding the processing, storage, and transfer of your personal data, as well as your legal rights.

Our Company is licensed by the Turkish Ministry of Health and conducts all data processing activities, including those involving special categories of personal data (such as health and genetic data), under the highest standards of security and confidentiality.

2. Methods and Legal Grounds for Collecting Personal Data

Your personal data may be collected through the following methods:

  • Contact forms, appointment requests, and Biological Material Transfer Request Forms available on our website

  • In-person meetings and consultancy services

  • E-mail, telephone, and other communication channels

  • Medical diagnosis and analysis processes

  • Requests from legally authorized public institutions

Legal grounds for data processing include:
KVKK Article 5/2-a (explicit consent), 5/2-ç (establishment or performance of a service relationship), 5/2-e (legal obligation), and 5/2-f (legitimate interest).

3. Categories of Personal Data Processed

We process the following categories of personal data:

  • Identity Information: Name, surname, Turkish ID number, date of birth

  • Contact Information: Address, phone number, e-mail address

  • Special Categories of Personal Data: Health data, genetic data, biometric data

  • Financial Information: Billing and payment details

  • Service Information: Appointment records, requests, and complaint logs

  • Technical Data: IP address, cookies, browser information

4. Purposes of Data Processing

Your personal data are processed for the following purposes:

  • Medical diagnosis, treatment, and healthcare service provision

  • Maintenance and management of patient records

  • Fulfillment of legal obligations to the Ministry of Health and other public authorities

  • Financial, billing, and accounting operations

  • Improvement and development of service quality

  • Compliance with legal and regulatory requirements

  • Communication and information activities

5. Data Transfers

In accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred to:

  • The Ministry of Health and its affiliated institutions (as required by law)

  • The Social Security Institution (SGK) (for service provision and billing purposes)

  • Courts and other public authorities (when legally mandated)

  • Contracted private insurance companies (within the scope of healthcare services)

  • Consultancy, IT, and archiving service providers (under contractual obligations ensuring data protection)

6. Data Security

Our Center protects your personal data against unauthorized access, loss, damage, disclosure, alteration, or misuse through the following measures:

  • Two-factor authentication systems

  • Encryption and masking techniques

  • Firewalls and intrusion detection systems

  • Strict access authorization policies

  • Regular security audits and data backups

  • Employee confidentiality agreements and training programs

7. Cookie Policy

Our website uses cookies to enhance user experience and analyze site performance.
You may manage your cookie preferences through your browser settings.

8. Rights of Data Subjects (KVKK Article 11)

Under the KVKK, you have the right to:

  • Learn whether your personal data have been processed

  • Request information regarding such processing

  • Request correction of incomplete or inaccurate data

  • Request deletion or destruction of your data

  • Request notification of such actions to third parties to whom the data have been disclosed

  • Object to adverse results arising from automated data analysis

  • Demand compensation for damages resulting from unlawful data processing

9. Exercising Your Rights

To exercise your rights, you may submit a request:

  • By completing the “Data Subject Application Form”

  • Together with identity verification documents

  • Via post to: Piri Reis Caddesi No: 2/4, Beytepe, Çankaya, Ankara, Türkiye

  • Or via secure electronic signature to: [kvkk@omegaprogenetik.com]

Your request will be processed free of charge within 30 (thirty) days.

10. Policy Updates

This Privacy Policy may be updated in line with legislative changes and company practices.
The most current version will always be available on our website.

Last Updated: [DD/MM/YYYY]

Contact: info@omega-cro.com.tr