Protection of Personal Data

Purpose and Scope

This KVK Policy explains the collection, use, sharing, storage and protection of personal data by CONFIDENTAL Ozel Ozel VE D ODEN SAĞIHMETLERİ TURİZM TİCARET LİMİTED ŞİRKETİ and the rights of data owners regarding these. This KVK Policy;

Employees,

Employee candidates,

Company shareholders,

Company officials,

Visitors,

Employees of the cooperating institutions,

Those who access all kinds of applications and services offered by the Company and Third parties

It is applied for personal data within the scope of the law. Personal and health data collected by obtaining the express consent of the data owners or within the scope of other legal compliance conditions listed in the Law are processed for the proper delivery of health services, increasing the quality of the services provided and for other purposes. CONFIDENTAL PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ processes personal data in accordance with data processing conditions and general principles and fulfills the obligation of disclosure

Processing of Personal Data

Compliance with the law and honesty

Being accurate and up-to-date

Processing for specific, explicit and legitimate purposes

Be relevant, limited and restrained for the purpose for which they are processed

Preservation for as long as required by the relevant legislation or for the purpose for which they are processed:

Terms of Processing Personal Data

CONFIDENTAL PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ processes personal data with express consent or in cases listed in accordance with other data processing conditions:

Explicitly stipulated by law.

The person who is unable to express his/her consent due to actual impossibility or whose consent is not given legal validity is compulsory for the protection of himself or someone else's life or bodily integrity.

Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract

It is mandatory for the data controller to fulfill its legal obligation.

The person concerned has been made public by himself.

Compulsory data processing for the establishment, exercise or protection of a right.

Compulsory data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

According to the Law, data regarding the race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, membership to associations, foundations or trade unions, health, sexual life, criminal convictions and security measures and biometric and genetic data are special personal data.

In the processing of personal data of special nature, the data processing conditions listed in Article 6 of the Law and the provisions of the Regulation on the Processing of Personal Health Data and Ensuring the Privacy, which entered into force after being published in the Official Gazette dated 20 October 2016 in terms of health data, are complied with. In this context, special categories of personal data are processed in the following cases:

Explicit consent of the data owner

The processing of special categories of personal data other than health and sexual life is stipulated in the law.

Processing of data on health and sexual life by persons under confidentiality obligation for the purpose of protecting public health, performing preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing.

Purposes of Processing Personal Data

CONFIDENTAL PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ; processes the personal data of employee candidates, employees, customers, parents/guardians, visitors and other persons based on the legal reasons set forth in Articles 5 and 6 of the Law.

Employee Candidate Data: Processes the personal data or personal data shared by the employee candidates while applying for a job, for the purposes of evaluating the suitability of the candidate for the position, conducting the interview processes and re-evaluating the candidates whose processes are negative for future positions.

Employee Data: Personal data of employees, Labor Law m. Preparing and keeping the personal file of the employer born under 75; It is processed for the purposes of establishing the rights arising from the employment contract and fulfilling the debts.

Customer/User Data: The main purpose of processing customer data is related to the proper provision of health services, which is the field of activity of CONFIDENTAL Ozel ORAL AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ.

Visitor Data: CONFIDENTAL PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ's personal data can be recorded through security cameras in order to ensure the physical security of the Company. (There is no active camera recording in the workplace.)

In the event that the data processing activity carried out for the aforementioned purposes does not meet any of the other data processing conditions stipulated under the Law, express consent is obtained from the data owner by CONFIDENTAL ÖZEL AĞUZ VE DİŞAĞI HİZMETLERİ TURİZM TİCARET LİMİTED ŞİRKETİ regarding the related data processing process.

Collection of Personal Data

CONFIDENTAL OZEL ORAL VE DDEN SAĞAĞI HİZMETLERİ TURİZM TİCARET LİMİTED ŞİRKETİ collects personal and health data in digital media, telephone and in writing, in accordance with the personal data processing conditions specified in the Law and in line with the legal reasons specified in this KVK Policy.

In the event that the personal and health data of another person are shared by the customers of CONFIDENTAL ÖZEL OĞLU OĞLERİ HİZMETLERİ TURİZM TİCARET LİMİTED ŞİRKETİ, the personal data of the data owner are shared with the consent of CONFIDENTAL ÖZEL OĞLU AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ and its responsibility is informed when necessary. belongs to the relevant customer.

Transfer of Personal Data

The purpose of CONFIDENTAL PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ to share personal and health data is to provide better service and comply with legal obligations. CONFIDENTAL PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ adopts the principle of complying with the law in data sharing activities. Data is shared with third parties to whom personal data is transferred, only to the extent required by the service. These parties are compelled to take measures regarding data security.

In addition to the technical measures to ensure data security, the personal data subject to domestic and international transfer mentioned above; It is also legally protected.

CONFIDENTAL PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ, the personal data it processes; Public institutions and organizations that are legally authorized to request such information in order to fulfill its obligations before the law (in cases where the Company has a legal or administrative obligation to notify or provide information, such as the fight against crime, the threat of state and public security, etc.) will be able to share with.

Storage and Disposal of Personal Data

In accordance with the law, personal and health data are kept accurate and up-to-date, and are retained for the period required by the relevant legislation or for the purpose for which they are processed. This period is determined separately for each personal data category, and after this period, the relevant personal data is deleted, destroyed or anonymized at the end of the periodic destruction periods determined in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

CONFIDENTAL ÖZEL Ozel VE DDEN SAĞI HİZMETLERİ TURİZM TİCARET LİMİTED ŞİRKETİ records all transactions regarding the deletion, destruction and anonymization of personal data, and keeps these records for at least three years, excluding other legal obligations.

p>

When the data owner requests the deletion or destruction of his personal data by applying;

By CONFIDENTAL PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ;

In the event that all conditions regarding the processing of personal data disappear; SECRET PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TİCARET LİMİTED ŞİRKETİ deletes, destroys or anonymizes the personal data subject to the request. It concludes the data owner's request within thirty days at the latest and notifies the data owner.

In the event that all the conditions regarding the processing of personal data disappear and the personal data subject to the request is transferred to third parties, it notifies the relevant third party and ensures that the necessary actions are taken before the third parties.

In the event that all the conditions regarding the processing of personal data have not disappeared, they may reject this request by explaining the reason in accordance with the third paragraph of Article 13 of the Law and notify the data owner in writing or electronically within thirty days at the latest. .

Technical and Administrative Measures

We have taken all appropriate security measures to ensure that personal data is only processed for the purposes specified in this Personal Data Protection Policy and to minimize risks such as malicious use, unauthorized access, sharing, destruction or alteration of personal data.

Within the scope of technical and administrative measures taken to ensure data security;

If all the conditions for processing personal data have been removed, it deletes, destroys or anonymizes the personal data subject to the request. It finalizes the request of the data owner within thirty days at the latest and informs the data owner.

If all of the personal data processing conditions have been removed and the personal data subject to the request has been transferred to third parties, it notifies the relevant third party; It ensures that the necessary actions are taken before the third party.

If all of the personal data processing conditions have not disappeared, it may reject this request by explaining the reason in accordance with the third paragraph of Article 13 of the Law, and notify the data owner in writing or electronically within thirty days at the latest.

Technical and Administrative Measures ;

We have taken all appropriate security measures to ensure that personal data is processed only for the purposes specified in this KVK Policy and to reduce risks such as malicious use, unauthorized access to personal data, sharing, destruction or alteration.

Within the scope of technical and administrative measures taken to ensure data security;

It organizes regular trainings and awareness activities on the protection of personal data for its employees.

The physician creates policies based on the personal data processing inventory and establishes the necessary processes for the implementation of the policies.

Takes other administrative measures regarding the protection of personal data.

Measures regarding safety are periodically renewed and improved.

CONFIDENTAL ÖZEL AĞ VE DESİGN HİZMETLERİ TURİZM TİCARET LİMİTED ŞİRKETİ, despite taking the necessary information security measures, should immediately notify the data owners and the Personal Data Protection Board and take the necessary measures, in case personal data is damaged or in the hands of unauthorized third parties. gets.

Rights of Data Owners;

Within the scope of KVKK; The rights of the Data Owner over his personal data are as follows:

Learning whether personal data is processed,

If personal data has been processed, request information about this,

Learning the purpose of processing personal data and whether they are used in accordance with its purpose,

Knowing the third parties whose personal data are transferred in the country or abroad,

Requesting correction of personal data in case of incomplete or incorrect processing,

To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,

Requesting the notification of this deletion, destruction or correction to third parties to whom personal data has been transferred,

Objecting to the emergence of a result against the data owner by analyzing the processed data exclusively through automated systems,

Demanding the removal of the damage in case of loss due to unlawful processing of personal data.

In the event that CONFIDENTAL PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TRADE LIMITED COMPANY submits the requests of the data owners regarding the above-mentioned rights in accordance with the application procedures stipulated in the Communiqué on Application Procedures and Principles to the Data Controller, this request shall be submitted as soon as possible and at the latest within 30 days, depending on its nature. (thirty) days will be concluded free of charge. However, if the transaction requires an additional cost, it will be able to receive the fee in the tariff determined by the Personal Data Protection Board.

Changes to KVK Policy

CONFIDENTAL PRIVATE ORAL AND DENTAL HEALTH SERVICES TURİZM TRADE LIMITED COMPANY can always make changes in this KVK Policy. These changes take effect on the day the new modified KVK Policy is published. Data owners will be informed about the changes in this KVK Policy.

CONTACT

You can send your questions and requests regarding the Protection and
Processing of Personal Data Policy at
Web: www.confidentalturkey.com
Web: www.confidentalturkey.com
Mail: [email protected]
Mail: [email protected]