UNDER THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA

KASHKALOGLU EYE HOSPITAL

INTERNET SITE USER DISCLOSURE TEXT

Purpose and Scope of the Clarification Text

As LASER MYOPIA PRIVATE TREATMENT CENTER LIMITED COMPANY (“Kaşkaloğlu Eye Hospital”), we take measures to protect your personal data within the scope of the Personal Data Protection Law No. 6698 (hereinafter referred to as “KVKK” or “Law”). We process your Personal Data within the scope of KVKK and relevant legislation and in our capacity as “data controller” for the reasons and methods described below.

LASER MYOPIA SPECIAL TREATMENT CENTER LIMITED COMPANY Clarification Text on the Processing of Personal Data has been prepared in accordance with the article titled “Data Controller’s Obligation to Inform” in Article 10 of the KVKK: the identity of the data controller, the method and legal reason for collecting your personal data, the purpose for which this data will be processed, to whom and for what purpose it can be transferred, the data processing period and what your rights are listed in Article 11 of the KVKK. The explanations made for your “Personal Data” in the clarification text also cover your “Sensitive Personal Data”.

Method and Legal Reason for Collecting Your Personal Data

Your personal data may be collected verbally, in writing or electronically by automatic or non-automatic methods, through the company’s affiliated units, website, social media channels, call center, mobile applications, software used to carry out activities within the company, camera shooting and verbally, in writing or electronically. Your personal data may be processed by creating and updating as long as your relationship with the Company continues and may be kept in both digital and physical environment.

Your personal data shall be processed in line with the purposes set out under the heading “Your Processed Personal Data and Purposes of Processing” and in accordance with Article 1 of Article 5 of Law No. 6698. the explicit consent requirement under paragraph 2 of Article 5 or as specified under paragraph 2 of Article 5;

1. a) Explicitly stipulated in the law,

ç) It is mandatory for the data controller to fulfill its legal obligation,

1. e) Data processing is mandatory for the establishment, exercise or protection of a right,
2. f) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,

processed within the scope of personal data processing conditions.

Your Processed Personal Data

Your Personal Data is processed securely in accordance with the Law on the Protection of Personal Data in accordance with legal obligations or in order to provide a more appropriate service in company business and transactions.

In this context, the data in the table are collected as personal data;

Identity: It is the data group containing information about the identity of the person (e.g. Name, Surname).

Contact: A group of data that can be used to reach the person (e.g. Phone Number, E-Mail Address, Address)

Transaction Security: This category of data refers to data types such as IP address information, website login and exit information, password and password information. (e.g. Log Records, IP Addresses, Cookies)

Purposes of processing your processed personal data;

• To be able to carry out the necessary work by our relevant business units so that real and / or legal third parties, institutions and organizations (employees, visitors, patients, suppliers, business partners, etc.) who have a relationship with the Company can benefit from the products and services of our Company and / or the Centers and units affiliated to our Company,
• Carrying out the appointment activities on our website and confirming the identity information of those who make transactions through our website,
• If an appointment is made, we can inform our patients about the appointment, provide information and remind them of the appointment,
• Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through These Publications, Regulation No. 29399 on the Improvement and Evaluation of Quality in Health, Regulation on Private Hospitals, and fulfillment of legal and regulatory requirements arising / may arise from all relevant laws and secondary regulations and taking necessary measures within this scope,
• Carrying out auditing and/or regulatory duties to be carried out by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions,
• Fulfillment of information and document requests by judicial bodies and/or administrative authorities,
• To carry out listing, reporting, verification analysis studies on the usage patterns of the products and services offered in our company and all centers and units affiliated to the company, to produce statistical and scientific information in this regard, to improve our products and services accordingly, to increase satisfaction with our products and services and to make customizations regarding the user in this context,
• To be able to conduct market research, promotion and necessary information regarding our products and services, to evaluate complaints and suggestions and to contact you directly through the communication channels shared with the Company,
• Fulfillment of risk management and quality improvement activities,
• Taking all necessary technical and administrative measures for systems and applications within the scope of data security,

purposes.

To Whom and For What Purpose Your Processed Personal Data Can Be Transferred

By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with the KVKK and the relevant health legislation, in line with the above-mentioned purposes;

• To legally authorized public institutions and organizations in line with the requests of the relevant public institutions and organizations and limited to the purposes of the request,
• To our business partners in order to fulfill and maintain the continuity of our services,

• Organizations from which we contractually receive and/or provide services to carry out our activities and with which we cooperate

It may be transferred within the framework of the personal data processing conditions specified in Articles 8 and 9 of the KVK Law.

Data Processing Period and Storage Period

Your personal data, limited to the purposes specified in this Clarification Text; It will be processed by complying with the data processing and statute of limitations periods in all relevant laws and other legal legislation to which our company and our company’s affiliated centers and units are subject. In case of changes in the laws regarding data processing periods, the new periods determined will be taken as basis.

As a requirement of the principle of purpose limitation, your personal data is processed limited to the time required for the fulfillment of the purposes described in this Clarification Text and in any case in accordance with the practices of the company and the customs of its commercial life, and after the expiration of the periods, it is deleted, destroyed or anonymized.

Exercise of Rights by the Relevant Person:

As a data subject, you may use your rights under Article 11 of the Law regulating the rights of the data subject by submitting your requests in writing to the address “Mimar Sinan Mahallesi 1400 Sokak No: 10/Z1 Konak İzmir” according to the “Communiqué on the Procedures and Principles of Application to the Data Controller” or electronically to the e-mail address info@kaskaloglu.com provided that your e-mail is registered in the company systems or by applying to our company’s lasermiyopiozel@hs03.kep.tr kep address by registered e-mail. More comprehensive regulation on this subject, more detailed information on data groups is provided in Kaşkaloğlu Eye Hospital Personal Data Application and Response Procedure and Kaşkaloğlu Eye Hospital Personal Data Protection and Processing Policy . You can access the relevant procedure from our corporate website or in line with the request you will make to the relevant personnel.

Data Controller

Title LASER MYOPIA SPECIAL TREATMENT CENTER LIMITED COMPANY

Address: MİMAR SİNAN NEIGHBORHOOD 1400 STREET NO: 10/Z1 KONAK IZMIR