--- title: "Personal Data and Patient Image Consent | Sağlık Ajansı" description: "Mapping how personal data enters through forms, messaging, CRM and content, and structuring notice and explicit consent around it." canonical: https://saglikajansi.com.tr/en/services/privacy-and-patient-visual-consents.html language: en last_modified: 2026-08-22 alternates: - en: https://saglikajansi.com.tr/en/services/privacy-and-patient-visual-consents.html - tr: https://saglikajansi.com.tr/hizmetler/kvkk-ve-hasta-gorsel-izinleri.html publisher: "Sağlık Ajansı — Marka Studio Dijital Reklam Tasarım Ajansı" note: "Bu dosya, kanonik HTML sayfasının makine-okunur alternatifidir. Kanonik kaynak yukarıdaki canonical URL'dir." --- *Medical-tourism agency service* # Privacy and Patient Visual Consents Patient data and image consent work maps which personal data enters through which channel and where it comes to rest, then structures notice and explicit consent for every touchpoint. Because health data is special-category data, it cannot be handled in marketing channels with ordinary form logic. In medical tourism the first contact often begins on WhatsApp and with an image. The patient sends an X-ray, a photograph of a medicine box or a picture of themselves. That is the moment institutional data responsibility effectively begins — and usually no notice has been given. > Personal data flow across forms, messaging and CRM mapped with its consent structure ## Why the data map comes first Most institutions do not know precisely which data arrives through which channel. Web form, WhatsApp, Instagram messages, the call centre, facilitator referrals and advertising-platform forms all operate independently, with records kept in different places. Mapping makes the sprawl visible: for each channel, the data collected, where it is stored, who can access it, the retention period and the deletion method are written in one table. A privacy notice updated without that table is a document that does not reflect reality. Touchpoints mapped - Website enquiry and quotation forms - WhatsApp, Instagram and other messaging channels - Call centre and telephone records - CRM, email and file-sharing environments - Advertising platforms' own lead form products - Referrals arriving through facilitators or partners ## Image consent is a separate discipline The promotion regulation restricts patient-satisfaction content and the imagery attached to it, while data protection law requires explicit consent for processing health data. Read together, marketing use of patient imagery becomes a matter requiring separate assessment on both the content and the data axis. The structure we put in place is this: the consent text is separate, narrow and purpose-bound; which image will be used on which channel and for how long is written down; a working route for withdrawing consent is defined; and how content is removed on withdrawal is agreed in advance. ## Team behaviour matters more than the document The best-drafted privacy notice is inert the moment a patient-relations team member saves an X-ray to a personal phone. So the final step is always team hand-over: which data goes into which environment, which never does, and when to refer to a physician. A short, workable behaviour guide protects more than a long policy document. We write it in the institution's own language and embed it in the daily workflow. Scope note This work is not data-protection legal advice. Final approval of texts and processes rests with the institution's legal or data protection lead. The agency does not request or process patient data. ### Data map For each channel: data collected, storage, access rights and retention in one table. ### Consent architecture Notice and explicit consent kept separate; purpose-bound, narrow and withdrawable. ### Team guide Short, workable behaviour rules embedded in daily workflow. *Working sequence* ## How we move, step by step 1. 01**Channel inventory**Every digital and telephone channel that collects data is listed. 2. 02**Flow map**The path of data from entry through processing, storage and deletion is drawn. 3. 03**Text structure**Notice, explicit consent and image consent texts are separated and simplified. 4. 04**Technical implementation**Consent flow is put in place across forms, cookies and messaging channels. 5. 05**Team hand-over**The behaviour guide is transferred to patient relations and marketing. *Official sources* ## Primary sources for Personal Data and Patient Image Consent These links are general orientation; review the current text with your legal team. *Frequently asked questions* ## What institutions ask most about this ### A patient sent us an X-ray on WhatsApp — what do we do? Health data is special-category data. It should move into an institutional, access-controlled environment, must not sit on personal devices, and the patient should be informed. Define the process with your data protection lead. ### Can we use patient images in promotion? The promotion regulation restricts patient-satisfaction content and data protection law requires explicit consent for health data. Read together, this use should not proceed without your legal function's approval. ### Does the agency see patient data? No. We do not request or process patient names, health records or imagery. The work runs at anonymous flow and process level. ### Are advertising platforms' own forms a problem? Platform forms collect data on the platform side, which raises an additional notice and transfer question. We treat them as a separate heading during mapping. ### We already have a privacy notice — is this still needed? Having the text is not enough; it must reflect the real data flow. The most common problem we see is that the channels named in the notice do not match the ones actually used. ### What remains with the institution afterwards? A data-flow table, a simplified text set, a consent flow implemented at form and channel level, and a short behaviour guide for the team. *Next step* ## Let us make your data flow visible Share the channels you use and we will build the map and consent structure together. *Related topics* ## Continue with the next relevant topic --- Kanonik sayfa / Canonical page: https://saglikajansi.com.tr/en/services/privacy-and-patient-visual-consents.html Site haritası / Site map: https://saglikajansi.com.tr/llms.txt