MINISTRY OF HEALTH, TURKEY HEALTH PASS APPLICATION PRIVACY POLICY

This Privacy Policy has been prepared for the users of the Health Pass Application by the Ministry of Health, Türkiye, (Ministry), which is the data controller within the scope of the KVK Law, pursuant to Article 10 of the Personal Data Protection Law No. 6698 (“KVK Law”) titled “Informing Obligation of the Data Controller”. It has been prepared to inform users about personal data. The central address of the Ministry, which has the title of data controller in accordance with the KVK Law, is “Bilkent Yerleşkesi, Üniversiteler Mah. Dumlupınar Bulvarı 6001. Cad. No:9 Çankaya/Ankara 06800”.

Identity of Data Controller

In terms of your personal data processed in this application, the data controller is the Ministry of Health, Türkiye.

Purposes of Processing Personal Data

In this application, your personal data listed below are processed for the following purposes.

  • Identity data: Your Identity Number, name, surname, and date of birth are processed for the purpose of carrying out identity verification processes, executing health care processes, executing risk management and emergency processes, executing/supervising travel activities, coping with the new type of coronavirus epidemic (COVID-19) effectively that descibed as a pandemic (global pandemic) by the World Health Organization (WHO) and preventing the spread of the virus and minimizing the risk of transmission.
  • Contact data: Your mobile phone number is processed for the purpose of conducting communication activities, conducting/supervising travel activities, coping with the new type of coronavirus epidemic (COVID-19) effectively that is descibed as a pandemic (global pandemic) by the World Health Organization (WHO) and preventing the spread of the virus and minimizing the risk of transmission.
  • Health data: Your health information is processed for the purpose of carrying out health service processes, conducting risk management and emergency processes, executing/supervising travel activities, coping with the new type of coronavirus epidemic (COVID-19) effectively that is descibed as a pandemic (global pandemic) by the World Health Organization (WHO) and preventing the spread of the virus and minimizing the risk of transmission.
  • Transaction security data: Your immunity and vaccination certificate QR Code, TAN code information is processed for the purpose of carrying out information security processes, coping with the new type of coronavirus epidemic (COVID-19) effectively that is descibed as a pandemic (global pandemic) by the World Health Organization (WHO) and preventing the spread of the virus and minimizing the risk of transmission.
  • Camera data: Your photo and video information obtained by using your device's camera for processing the certificate adding and verification function with QR is is processed for the purpose of coping with the new type of coronavirus epidemic (COVID-19) effectively that is descibed as a pandemic (global pandemic) by the World Health Organization (WHO) and preventing the spread of the virus and minimizing the risk of transmission.

Your personal data in the Health Pass Application will never be recorded in the system memory. The data stated above as identity, contact, health, transaction security, and visual and audio recording can be used to be exempt from measures such as PCR testing and quarantine by declaring a certification, which includes health information, while the transition between member states of the EU and by declaring that the person complies with the rules. Also, abovementioned data will be used for sharing vaccination data, immunity and other health information with country authorities and airline companies during international travels with the purpose of coping with the new type of coronavirus epidemic (COVID-19) effectively that is descibed as a pandemic (global pandemic) by the World Health Organization (WHO) and preventing the spread of the virus and minimizing the risk of transmission.Besides, individuals will be able to share their information with the airlines they used and executives located where they travel.

Transfer of Personal Data

Your personal data in the Health Pass Application is never recorded in the background and is not shared with third parties, without prejudice to the exemptions in the first paragraph of Article 28 of the KVK Law.

Method and Legal Reason for Personal Data Collection

Your personal data is obtained by fully automatic means (via this application) if the Digital Health Certification is processed into the Health Pass Application. The legal basis for the processing of your personal data is as follows. Pursuant to subparagraph (a) of the second paragraph of Article 5 of the KVK Law, "it is clearly stipulated in the laws" and in accordance with the subparagraph (ç), it is "obligatory for the data controller to fulfill its legal obligation" and in accordance with the third paragraph of the article 6; for the purpose of public health protection, preventive medicine; medical diagnosis; execution of treatment and care services; planning and management of health services and financing, it is processed by persons or authorized persons or authorized institutions and organizations under the obligation of confidentiality, based on legal grounds.

Rights of Relevant Persons and Application to Data Controller

Users of the Health Pass Application can use their rights set out in Article 11 of the KVK Law by applying to the Ministry within the framework of the provisions of Article 13 of the KVK Law and the Communiqué on the Procedures and Principles of Application to the Data Controller.

Written applications to be made pursuant to Article 13 of the KVK Law shall be sent to the address "T.C. Sağlık Bakanlığı, Üniversiteler Mahallesi, 6001. Cadde, No:9, Çankaya, Ankara"; Applications to be made via Registered Electronic Mail (KEP) should be sent to "sb@hs01.kep.tr".