Purpose of processing
The Company processes personal data for the following purposes:
(a) Provision of health services – medical diagnostics, treatment, clinical tests, etc.;
(b) Implementation of the Company's legal obligations, in particular under the Health Act, the Health Insurance Act, the Medical Facilities Act, the secondary legislation on their application, the National Framework Agreement;
(c) Compliance with the staff-related requirements of the labour and social security legislation;
(d) Ensuring the security of patients, employees and property through video surveillance, registration, physical security and access control;
(e) Other legitimate purposes such as accounting services, maintenance and security of the Company's website and IT systems, protection of the Company's legitimate interests, including by court, etc.
Legal grounds for processing
Acibadem City Clinic DCC processes special categories of personal data such as health data, genetic data, or sexual life or sexual orientation data, only if any of the conditions of the General Regulation exists, and in particular:
(a) For the purposes of preventive or occupational medicine, assessment of patients' and employee's ability to work, medical diagnostics, provision of health or social care or treatment;
(b) To protect the vital interests of the data subject or of another natural person when the data subject is physically or legally incapable of giving his/her consent;
(c) To protect the public interest in public health, such as protection against serious cross-border health threats or ensuring high standards of quality and safety of healthcare and medicinal products or medical devices;
(d) Subject to the explicit consent of the data subject for processing data for one or more specific purposes, unless the legislation does not allow for such consent.
The Company also processes other personal data in the presence of any of the alternative legal grounds under the General Regulation, in particular:
(a) Statutory obligations of the Company;
(b) Implementation of a contract, including the pre-contractual relations prior to its execution;
(c) The Company's legitimate interests, in so far as they prevail the interests or the fundamental rights and freedoms of the data subjects;
(d) Freely expressed specific informed and unambiguous consent of the data subject. The consent already granted may be withdrawn by the data subject at any time in the same manner as it was granted.
|