KVKK Information Notice

1. DATA CONTROLLER AND REPRESENTATIVE

As per KVKK, as the Company, we can process, record, store, classify, update your personal data limited to the purposes explained below, in connection with, limited and proportionate to the purposes for which they are processed, in accordance with the law and integrity rules, correctly and up-to-date and within the framework of the legal limits.

Our company reserves the right to update this "Information Text on Protection of Personal Data" in accordance with the changes that may be made in the current official legislation framework at any time.

2. PROTECTION AND PROCESSING PURPOSES OF PERSONAL DATA

The personal data is defined under the Law as any kind of data relating to an identified or identifiable real person and within this scope, all kinds of data that will be accepted will be evaluated in accordance with the relevant legislation within our Company.

GAZI HOSPITAL processes your identification information, contact information, patient information, bank account information, health information. Your personal data is processed in line with the purposes such as Visitor Records Creation and Tracking, Conducting Administrative Activities, Providing Information to Authorized Persons, Institutions, and Organizations, Conducting Talent - Career Development Activities, Tracking Requests and Complaints, Conducting Advertising, Campaign, Promotion Processes, Organization and Event Management, Conducting Activities for Customer Satisfaction, Managing Customer Relations Processes, Conducting Product / Service Production and Operation Processes, Conducting Product / Service Sales Processes, Conducting Post-Sale Support Services for Products / Services, Conducting Product / Service Procurement Processes, Conducting Business Activities / Auditing, Planning Human Resources Processes, Conducting Communication Activities, Conducting Internal Audit / Investigation / Intelligence Activities, Following Up Legal Affairs, Conducting Employee's Supplementary Rights and Benefits Processes, Fulfilling Contractual and Legal Obligations for Employees, Conducting Employee Applicant Processes, Conducting Employee Candidate / Intern / Student Selection and Placement Processes, Conducting Emergency Management Processes, Conducting Marketing Analysis Studies, Conducting Loyalty Processes to Company / Products / Services, Conducting Finance and Accounting Affairs, and Conducting Information Security Processes.

Our Company generally obtains explicit consent in writing for the processing of personal data. However, if any of the personal data processing conditions specified in Article 5/2 or Article 6/3 of the Law exist, explicit consent is not required.

3. PROCESSING OF SPECIAL CATEGORY PERSONAL DATA

Data related to individuals' race, ethnicity, political opinions, philosophical beliefs, religion, sect, or other beliefs, clothing, membership of associations, foundations, or trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data, constitute special category personal data.

The processing of special category personal data without the explicit consent of the data subject is prohibited. Our company does not process your special category personal data without obtaining explicit consent or without the data processing conditions specified in Article 6/3 of the Law.

4. TRANSFER AND PURPOSES OF PERSONAL DATA

For the purposes stated above, your personal data may be transferred to authorized institutions and organizations, business partners, shareholders, real and legal persons, affiliates, and subsidiaries. No personal data transfer that does not comply with our Company's activities will be made without the express consent of the data owner. Your personal data cannot be transferred abroad without your explicit consent and is not transferred abroad.

5. METHODS OF PERSONAL DATA COLLECTION AND LEGAL BASIS

Your personal data is collected verbally, in writing, or electronically and processed in line with the purposes mentioned above. In this context, your personal data can be processed without obtaining explicit consent, in cases specified in Article 5/2 of the Law, as well as for reasons stipulated in the legislation, fulfillment of legal obligations, or for legitimate interests as stated in Article 6/3 of the Law.

6. OUR BASIC PRINCIPLES IN PROCESSING PERSONAL DATA

• a- Compliance with the law and ethical principles: We carefully scrutinize the data sources and ensure that your personal data is obtained through lawful means.
• b- Accuracy and currency when necessary: We pay utmost attention to ensure that your personal data is accurate, complete, and processed within your explicit consent, updating it when changes occur.
• c- Processed for specific, clear, and legitimate purposes: Your personal data is processed only for the purposes mentioned above and within the framework of the law. No data processing is carried out beyond these specific purposes.
• d- Relevant, limited, and proportionate processing to the purposes: Your personal data is used only for the stated purposes and in a limited, proportionate manner.
• e- Retention for the period stipulated by the relevant legislation or necessary for the purposes they are processed: Your personal data is retained for the periods specified in the legislation.

7. RIGHTS OF THE DATA SUBJECT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA

In accordance with the Law, everyone has the right to apply to the data controller regarding their personal data and has the following rights. By contacting our Company, you have the right to:

• f- Learn whether your personal data is processed or not,
• g- Request information if your personal data has been processed,
• h- Learn the purpose of the processing and whether it is used in accordance with its purpose,
• i- Know the third parties to whom personal data is transferred domestically or abroad,
• j- Request correction of incomplete or inaccurate data,
• k- Request the deletion or destruction of personal data under the conditions specified in Article 7 of the Law,
• l- Request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,
• m- Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
• n- Request compensation if you suffer damage due to the unlawful processing of personal data.

8. HOW TO APPLY UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA

As announced above, all applications will be processed by filling out the form on the page and sending it through one of the methods specified in the application form.

Personal data rights can only be used for data belonging to the individuals themselves. Requests related to data of individuals other than the person filling out the form will not be considered.