Disciplinary Policy

SPECIALIST DOCTOR TUBA CELEBI KAYHAN DERMATOLOGY CLINIC DİSİPLİN POLİTİKASI

• Introduction

• Purpose and Scope

Within the scope of Specialist Dr. Tuba Çelebi Kayhan Dermatology Clinic Disciplinary Policy; the Personal Data Protection Law No. 6698 and the regulations in other legislation, the Personal Data Protection and Processing Privacy Policy, the rules and obligations that clinic employees must comply with regarding commitments and relevant procedures, and the sanctions to be applied in case of violation of these rules are regulated.

This policy is binding for full-time, part-time and short-term employees of Specialist Dr. Tuba Çelebi Kayhan Dermatology Clinic during the entire employment period, including the trial period.

In cases where personal data is recorded, provided, obtained or not destroyed illegally by the above-mentioned parties, employees may be subject to legal proceedings as perpetrators in accordance with Articles 135-140 of the Turkish Penal Code.

• Enforcement of the Policy

This policy has come into force with the decision of Specialist Dr. Tuba Çelebi Kayhan Dermatology Clinic.  https://drtubacelebikayhan.com  it is made available to the relevant persons on the internet address.

Specialist Dr. Tuba Çelebi Kayhan Dermatology Clinic is authorized for the entry into force, amendment, execution and repeal of the policy.

• Currentness of Policy

This policy will be reviewed by Specialist Dr. Tuba Çelebi Kayhan Dermatology Clinic at appropriate intervals and the policy will be updated as necessary. Abbreviations and Definitions

Definitions of terms used in the policy are provided below.

• DUTIES AND RESPONSIBILITIES

• Spec. Dr. Tuba Celebi Kayhan Dermatology Clinic employees are responsible for the implementation and compliance with the rules set forth within the scope of current policies, procedures and instructions, especially this Disciplinary Policy, Personal Data Protection and Processing Privacy Policy, Storage and Destruction Policy, regarding the protection of personal data.
• Each unit manager is responsible for communicating the rules within the scope of this Disciplinary Policy to his/her subordinates, monitoring compliance with these rules and issuing warnings when necessary.

• APPLICATION

• Within the scope of the employee's duty of care, as stipulated in the Personal Data Protection Law No. 6698 and the Labor Law No. 4857, the employee has the obligation to personally perform the job with care and the obligation of obedience, loyalty and non-competition, and the employee is obliged to comply with the workplace policy and procedure provisions put into effect by the employer.
• If the employee violates this obligation, disciplinary action will be initiated against him/her.
• Before the clinic initiates a disciplinary procedure, a written statement is taken from the employee. After the investigation has started/completed, the authorized person informs the employee about the investigation initiated against him/her.

• CONDITIONS

• Specialist Dr. Tuba Çelebi Kayhan Dermatology Clinic is obliged to act in accordance with the relevant laws and regulations, especially the Labor Law and KVKK provisions, depending on the nature of the incident.
• In case of violation of the current policies, procedures and instructions regarding the Protection of Personal Data, especially the Privacy Policy on the Protection and Processing of Personal Data, the Disciplinary Policy, the Storage and Destruction Policy, the violating employee will be subject to penal sanctions in accordance with the provisions of the Labor Law, the Law on the Protection of Personal Data and the Turkish Penal Code No. 5237.
• For personnel who are not subject to the provisions of the Labor Law, the provisions of the contract made with the employer will be applied, and in cases where there is no contract, general law rules will be followed.
• The parties who are obliged to comply with the clinic policy are aware that the use of the above-mentioned rules can be controlled by the personnel responsible for supervision within the clinic or within the scope of supervision services received from outside the clinic, without prejudice to the user's personal rights, and they expressly accept this. When users start working within the institution, they sign an Employment Contract with the clinic and accept and undertake to comply with all matters written in the contract.
• All software is the property of the clinic and may not be copied by employees.
• All employees must comply with protocols and guidelines regarding internet security, data confidentiality and protection of personal data.
• Employees will not upload any inappropriate information about the clinic to the internet or share it via e-mail or other means of communication.
• Any line, telephone, tablet, e-mail or computer provided by the clinic is the property of the clinic and may be examined without prior notice if deemed necessary.
• The equipment in Specialist Dr. Tuba Çelebi Kayhan Dermatology Clinic is the property of the clinic and any damage to them constitutes a crime under the law. Changing the appearance of the equipment, changing the connection method of the connected parts, stealing or attempting to steal the parts are included in this scope.
• Employees are obliged not to disclose information, secrets and personal data within the clinic.
• The Clinic reserves the right to search any locker and/or vehicle provided to any employee for their use at any time. Any failure by an employee to comply with the search shall be considered a serious misuse of the Clinic's policy.
• Network breaches are considered privacy violations.
• Sharing any personal password requires disciplinary action. Anyone who shares their password is deemed to have accepted all responsibilities.

In cases where a violation is detected, a report is kept and the employment contract can be terminated in accordance with the provisions of the Labor Law, and if the violation of the rules constitutes an element of crime, the person will be held criminally responsible for the action he/she has committed.

Disciplinary penalties become effective and are implemented from the date of the decision.

• DISCIPLINARY PENALTIES AND THEIR CONSEQUENCES

Situations requiring disciplinary punishment:

• Not fulfilling duties and responsibilities, showing indifference and disorganization,
• Acting in a manner that is contrary to the Personal Data Protection Law without intention,

• Acting contrary to the methods for protecting, transferring and destroying sensitive personal data regulated in the clinic policy and procedures,
• Revealing and exporting data and information belonging to the clinic, transferring them to unauthorized persons or units, or misusing them,
• Unauthorized access to any of the Clinic's property, facilities or locations outside of its authorized use,
• Violation of rules, policies or procedures specifically designed to ensure security,
• Unauthorized use of e-mail, telephone, voicemail and computer systems,
• Failing to pay due attention to the management and supervision of employees under his/her management, thereby creating an environment conducive to behaviors contrary to clinical policies and procedures,
• Avoid reporting to managers in a timely manner any behavior or actions of an employee that could be considered a crime,
• Not taking due care of the hardware, software, machinery, materials and installations that are under his/her responsibility,
• Damaging and/or losing the machinery and equipment that has been entrusted to him/her to use or maintain, by not showing the necessary care,
• Not disclosing to anyone else any password given to you by the workplace, allowing it to be used, or using someone else's password.
• Downloading or using materials that are not required for clinical purposes,
• Unauthorized use of clinical assets and equipment,

• Using your email account for non-work related emails,
• Making an unintentional, non-harmful error in following clinic policies or procedures.
• Not complying with procedures and regulations that are clearly announced and implemented in the workplace,
• Not unintentionally applying the logging method that the clinic accepts to be applied,
• Sending an e-mail containing personal data to the wrong unit without intention,
• Not to destroy documents containing personal data unintentionally,
• Refusing to comply with reasonable instructions issued by the Personal Data Protection Officer within the framework of Law No. 6698,
• Not providing reports, information, documents, etc. requested by their managers on time or providing false information when necessary,
• Committing any crime that may affect employees or engaging in behavior that would result in a conviction or fine for the clinic,
• Causing harm and/or embarrassment to the workplace by performing incorrect and/or incomplete operations or delaying the operations required by the job due to indifference and carelessness,
• Scrambling information on machinery, hardware, physical or computer media without being authorized to do so and sharing this information with others by violating the confidentiality of the situation,
• Causing damage to the workplace by not following the instructions given in accordance with the procedure or by doing them incompletely,
• Intentionally providing false information to superiors, concealing matters that should be reported or making false statements to the disciplinary board or investigations, avoiding giving a statement without a justified reason or complicating the investigation,
• Knowingly failing to report any intentional action that harms the clinic, constitutes a crime, or is in serious violation of clinic policies and procedures,
• Not complying with the principle of confidentiality of information belonging to customers, employees and suppliers,
• Making statements about the institution to the press and/or media even though not on duty,
• Sharing any information and documents containing personal data regarding the workplace with third parties and/or institutions.
• Intentionally transferring any personal data to the outside, destroying it in violation of regulations, or not destroying data that should be destroyed,
• Misleading the workplace with false information and documents during the employment contract and not updating the data correctly,
• Not fulfilling the obligations that are mandatory in the employment contract and accepted by the employee,
• Violating the principle of confidentiality by disclosing personal data owner information to third parties without the consent of the data owner, other than in response to the legal requests of official authorities,
• Causing damage to the workplace by disclosing any password given to him/her by the workplace to anyone else, allowing it to be used, or using someone else's password with or without permission,
• Destroying, causing to be destroyed or maliciously destroying any document, information or document containing personal data, preparing false documents, transferring them to an unauthorized person or unauthorized unit,
• Intentionally accessing personal data of a unit outside of its authority,
• Harming the institution by mixing up information on machinery, hardware, physical or computer media and sharing them with others, even though not authorized to do so,

This list is not limited, and each event will be discussed separately, using the examples here.

In case of situations for which disciplinary punishment is foreseen, Specialist Dr. Tuba Çelebi Kayhan Dermatology Clinic has the right to choose one of the prescribed punishment types (written warning, reprimand, deduction for damages, dismissal).

• GENERAL PROVISIONS ON DISCIPLINARY PENALTIES

In the implementation of this procedure, the right to apply the relevant articles of the Labor Law No. 4857, the Personal Data Protection Law No. 6698, the Turkish Penal Code No. 5237 and the Turkish Code of Obligations No. 6098 is reserved.

In disciplinary offences committed collectively, in cases where the offenders cannot be identified individually, each member of the group is punished.

• RESPONSIBLE PERSONS

All personnel operating within the clinic are responsible for the operation of this process.