CLINICAL PSYCHOLOGIST EXPERT DAMLA KANKAYA
CLIENT INFORMATION TEXT REGARDING THE PROCESSING OF PERSONAL DATA
As PsikoTerap-İST Education and Counseling Center, we attach great importance to the protection and privacy of your personal data. This Privacy Policy has been prepared to inform you about the processing, storage, transfer and protection of your personal data in accordance with the Personal Data Protection Law No. 6698 ("KVKK/GDPR").
1. DATA CONTROLLER
The data controller responsible for the processing of your personal data is:
Clinical Psychologist Expert Damla Kankaya / PsikoTerap-İST Education and Counseling Center
Istanbul Office: Fulya Mahallesi Yeşilçimen Sokak No: 19/1 Şişli/Istanbul
Antalya Office: Şirinyalı Mahallesi 1512. Sokak No: 11/3 Muratpaşa/Antalya
Phone: +90 (545) 977 60 58 / +90 (544) 448 87 74
Email: [email protected]
2. CATEGORIES OF PERSONAL DATA PROCESSED
The following categories of personal data may be processed within the scope of the services we provide:
- Identity Information: Name, surname, date of birth, place of birth, nationality, gender
- Contact Information: Address, phone number, email address
- Health Information: Psychological evaluations, therapy session notes, test results, health reports
- Professional Information: Profession, workplace, education status
- Family Information: Marital status, family members, emergency contact information
- Financial Information: Payment information, invoice details
- Visual and Audio Data: Photography, audio or video recordings (with consent)
- Correspondence Information: Communication records, session notes
3. PURPOSES AND LEGAL REASONS FOR PROCESSING PERSONAL DATA
Your personal data may be processed for the following purposes in accordance with GDPR:
- Providing psychotherapy and counseling services
- Organizing and conducting therapy sessions
- Creating and managing session records and files
- Appointment management and reminder services
- Communication and information provision
- Payment transactions and invoice issuance
- Fulfilling legal obligations (insurance, reporting, etc.)
- Protecting the rights and safety of our center and clients
- Service quality improvement and client satisfaction surveys
- Online therapy platform management (if applicable)
Legal Bases for Processing:
- Your explicit consent
- Necessity for the establishment or performance of a contract
- Compliance with legal obligations
- Necessary for the legitimate interests of the data controller
- Processing of data relating to health (with special conditions)
4. TO WHOM AND FOR WHAT PURPOSES PERSONAL DATA MAY BE TRANSFERRED
Your personal data may be shared with the following parties when necessary and within the framework of the law:
- Healthcare Institutions: Referral to psychiatrists, neurologists or other specialists when necessary
- Insurance Companies: In case you want to use private health insurance
- Legal Authorities: When legal obligation exists (courts, law enforcement agencies, etc.)
- Technology Service Providers: Online therapy platform, data storage and backup services
- Payment Institutions: Banks and payment systems for payment transactions
- Professional Supervisors: Supervision sessions for professional development (anonymously)
Important Note: In all data sharing, professional confidentiality principles and GDPR requirements are strictly observed.
5. METHOD AND LEGAL REASON FOR COLLECTION OF PERSONAL DATA
Your personal data is collected through the following methods:
- During the first therapy session
- Registration forms and consent forms
- Phone and email communication
- Online appointment systems
- Website and online forms
- Test applications and evaluations
- Therapy session notes
6. YOUR RIGHTS AS A DATA SUBJECT
Within the scope of GDPR Article 11, you have the following rights:
- To learn whether your personal data is being processed
- To request information regarding the processing of your personal data
- To learn the purpose of processing your personal data and whether it is used in accordance with its purpose
- To know the third parties to whom your personal data is transferred domestically or abroad
- To request correction of your personal data if it is incomplete or incorrectly processed
- To request deletion or destruction of your personal data under the conditions stipulated in Article 7 of GDPR
- To request notification of correction, deletion or destruction operations to third parties to whom your personal data has been transferred
- To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems
- To request compensation for the damage you have suffered due to unlawful processing of your personal data
How to Apply: You can submit your requests regarding your rights to [email protected] or in writing to our center address. Your application will be concluded free of charge within 30 days at the latest.
7. DATA SECURITY
We take all necessary technical and administrative measures to protect your personal data:
- Encrypted data storage
- Secure server infrastructure
- Access control and authorization systems
- Regular security audits
- Confidentiality agreements with our personnel
- Physical security measures (locked files, secure storage)
- Regular data backups
8. STORAGE PERIOD OF PERSONAL DATA
Your personal data is stored for the following periods:
- Therapy Records: 15 years (in accordance with the Turkish Psychological Association Ethical Code)
- Financial Records: 10 years (in accordance with tax legislation)
- Communication Records: 2 years
- Appointment Records: 1 year
At the end of these periods, your data is securely deleted or destroyed.
9. SPECIAL CATEGORY PERSONAL DATA (HEALTH DATA)
Since your health data is special category personal data, it is processed with special care:
- Your explicit consent is obtained
- The data is processed only by authorized healthcare professionals
- Extra security measures are applied
- Sharing is limited
- Anonymization techniques are used
10. CHILDREN AND ADOLESCENTS
For clients under 18 years of age, consent of parents or legal guardians is required for the processing of personal data. In therapy processes for children and adolescents, age-appropriate information is provided and consent principles are observed.
11. ONLINE SERVICES
For online therapy and counseling services:
- Secure and encrypted platforms are used
- Session recordings are made only with your explicit consent
- Data security in the internet environment is given priority
- Secure connection protocols are used
12. CHANGES TO THE POLICY
This Privacy Policy may be updated when necessary. Changes will be announced on our website and, if necessary, you will be informed directly. The date of the last update can be found at the bottom of this document.
13. CONTACT
For all your questions, requests and complaints regarding your personal data:
Email: [email protected]
Phone: +90 (545) 977 60 58
Address: Fulya Mahallesi Yeşilçimen Sokak No: 19/1 Şişli/Istanbul
14. CONSENT
By receiving services from our center, you are deemed to have read, understood and accepted this Privacy Policy. You can withdraw your consent at any time, but please note that this may affect the continuation of the therapy process.
Last Update Date: January 2024
Prepared by: PsikoTerap-İST Education and Counseling Center