CLARIFICATION TEXT

• DATA CONTROLLER:

This clarification text is prepared by Güven Future Sağlık Teknolojileri A.Ş., as the data controller, within the scope of Article 10 of the Personal Data Protection Law No. 6698 and “Communique on the Procedures and Principles to be Complied with During the Fulfillment of the Clarification Obligation”.

2) PURPOSE OF PROCESSING PERSONAL DATA, CATEGORIES OF PERSONAL DATA TO BE PROCESSED, LEGAL PROCESSING REASONS and METHOD OF COLLECTING PERSONAL DATA:

The purposes, categories and legal processing grounds of your personal data are presented below comparatively.

Your personal data is processed automatically and non-automatically based on the legal grounds mentioned herewith above, by hand delivery, filling in the relevant form, receiving it via the electronic system and via e-mail.

3) TO WHOM AND FOR WHAT PURPOSES THE PROCESSED PERSONAL DATA MAY BE TRANSFERRED:

Your personal data can be transferred to authorized public institutions and organizations and to real persons with whom we have contractual relations, or to private law legal entities and group companies for the purpose of;

• Performance of the Service Provided,
• Providing Information to Authorized Persons, Institutions and Organizations,
• Follow-up and Execution of Legal Actions,
• Execution of Promotional Activities,
• Conduct of Activity and Ensuring the Continuity thereof.

4) DISPOSAL METHOD

At the end of the period stipulated in the relevant legislation or the storage period necessitated by the purpose for which they are processed, personal data is destroyed ex officio or upon the application of the relevant person, again in accordance with the provisions of the relevant legislation, with the techniques specified below.

Personal Data on Servers

The system administrator revokes access authorization of the relevant users and deletes the personal data on the servers for those data whose storage necessitating period has expired.

Personal Data in Electronic Media

In relation to the personal data in electronic environment, the data whose storage necessitating period has expired are made definitely inaccessible and non-reusable for other employees (related users) except the database administrator.

Personal Data in Physical Environment

In relation to the personal data in the hard copy format, the data whose storage necessitating period has expired are irreversibly destroyed using paper shredders.

Personal Data in Portable Media

In relation to the personal data kept in flash-based storage media, the data whose storage necessitating period has expired are encrypted by the system administrator and the access authorization is given only to the system administrator, and are stored in secure environment with encryption keys.

To delete your information, you can do the following:

Finding and deleting specific information. We provide tools that you can use to delete certain information. For example, you can use the Delete button to delete the content you have shared in your account.

Permanently deleting your account: Once your account is permanently deleted, you will not be able to reactivate your account and retrieve information, including the content you have shared.

If you request from us to delete your account or your content, your request will be forwarded to the relevant unit manager within 48 hours. It may take up to 10 days for your information to be deleted after we initiate the account deletion process or receive a content deletion request. After the information is deleted, it may take an additional 10 days for us to remove this content from backups and disaster recovery systems.

5) RIGHTS OF THE RELATED PERSON:

Within the scope of Article 11 of the Law “regulating the rights of the related person”, we wish to remind you that you are entitled to the following rights:

1. Learning whether personal data is processed or not,
2. If personal data has been processed, requesting information about it,
3. Learning the purpose of processing personal data and whether they are used in accordance with the purpose,
4. Knowing the third parties to whom personal data is transferred at home country or abroad,
5. Requesting correction of personal data in case of incomplete or incorrect processing,
6. Requesting the deletion or destruction of personal data,
7. Requesting notification of the transactions regarding the correction, deletion or destruction of personal data to the third parties to whom the personal data has been transferred,
8. Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
9. Requesting the compensation of the damage in case of loss due to unlawful processing of personal data

You can send your requests via e-mail to [email protected] by filling out and signing the Relevant Person Application Form located at the address of Üniversiteler Mahallesi İhsan Doğramacı Bulvarı İkizler Binası No:35 İç Kapı Z01 Çankaya/Ankara in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller”.

In order to provide a healthy response to your application, your request must be specific, clear and understandable, the subject you request should be related to yourself, or if you are acting on behalf of someone else, you must be specifically authorized in this regard and your authority must be documented. Furthermore, in accordance with the legislation, your application should contain name, surname, T.R. ID Number (nationality and passport number for foreigners), address information to which we can send our reply, and documents evidencing your identity.