UNDER THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA KASHKALOGLU EYE HOSPITAL EMPLOYEE CANDIDATE CLARIFICATION TEXT

Purpose and Scope of the Clarification Text

As LASER MYOPIA PRIVATE TREATMENT CENTER LIMITED COMPANY (“Kaşkaloğlu Eye Hospital”), we take measures to protect your personal data within the scope of the Personal Data Protection Law No. 6698 (“KVKK” or “Law”). We process your Personal Data within the scope of KVKK and relevant legislation and in our capacity as “data controller” for the reasons and methods described below.

LASER MYOPIA SPECIAL TREATMENT CENTER LIMITED COMPANY Clarification Text on the Processing of Personal Data has been prepared in accordance with the article titled “Data Controller’s Obligation to Inform” in Article 10 of the KVKK: the identity of the data controller, the method and legal reason for collecting your personal data, the purpose for which this data will be processed, to whom and for what purpose it can be transferred, the data processing period and what your rights are listed in Article 11 of the KVKK. The explanations made for your “Personal Data” in the clarification text also cover your “Sensitive Personal Data”.

Method and Legal Reason for Collecting Your Personal Data

Your personal data may be collected verbally, in writing or electronically by automatic or non-automatic methods, through the company’s affiliated units, website, social media channels, call center, mobile applications, software used to carry out activities within the company, camera shooting and verbally, in writing or electronically. Your personal data may be processed by creating and updating as long as your relationship with the Company continues and may be kept in both digital and physical environment.

Your personal data may be processed in line with the purposes set out in the heading “Your Personal Data Processed and the Purposes of Processing” and in accordance with Article 5, paragraph 1 of Article 5 of Law No. 6698 and in accordance with the explicit consent requirement within the scope of paragraph 1 of Article 5 or specified in accordance with paragraph 2 of Article 5;

c)Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract.

1. e) Data processing is mandatory for the establishment, exercise or protection of a right,
2. f) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,

processed within the scope of personal data processing conditions.

Your Processed Personal Data

Your Personal Data is processed securely in accordance with the Law on the Protection of Personal Data in accordance with legal obligations or in order to provide a more appropriate service in company business and transactions.

In this context, the data in the table are collected as personal data;

Identity: This is the data group containing information about the identity of the person (e.g. Name, Surname, Date of Birth / Place of Birth, Turkish ID Number, Gender, SSI Registration Number, Nationality, Marital Status, Signature)

Contact: A group of data that can be used to reach the person (e.g. phone number, residential address, e-mail address)

Professional Experience: It is the data group containing information about the person’s profession (e.g. Course – Certification Information, On-the-Job Training Information, Diploma Information, Foreign Language Information, Professional Title, Education Status).

Visual and Auditory Records: It is the data group containing visual and auditory data of the person (e.g. photograph).

Transaction Security: This data category refers to data types such as IP address information, website login and exit information, password and password information. (e.g. Security Keys, Log Records)

Physical Space Security: This data category refers to data types such as entry and exit registration information, camera recordings. (Ex. Camera Image Records)

Purposes of processing your collected personal data

• Carrying out the recruitment and application processes of employee candidates who want to work within our company and placing them in business units according to the information obtained during the recruitment process,
• Execution of activities in accordance with the legislation,

• Execution of Human Resources processes and policies,

• Fulfillment of career development activities
• To be able to effectively evaluate the applications we receive in Human Resources processes in accordance with business processes,
• Carrying out supervision and/or regulation duties to be carried out by the authorized and authorized public institutions and organizations,
• Taking all necessary technical and administrative measures for systems and applications within the scope of data security,

will be processed with purposes.

To Whom and For What Purpose Your Processed Personal Data Can Be Transferred

By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with the KVKK and the relevant health legislation, in line with the above-mentioned purposes;

• To legally authorized public institutions and organizations in line with the requests of the relevant public institutions and organizations and limited to the purposes of the request,
• To our business partners in order to ensure the fulfillment of our services, the assignment and recruitment evaluation process and its continuity,

It may be transferred within the framework of the personal data processing conditions specified in Articles 8 and 9 of the KVK Law.

Data Processing Period and Storage Period

Your personal data, limited to the purposes specified in this Clarification Text; It will be stored for 6 months for the periods specified in the relevant policies and legal legislation to which our company is subject.

As a requirement of the principle of purpose limitation, your personal data is processed limited to the time required to fulfill the purposes described in this Clarification Text and in any case in accordance with the practices and customs of the Company’s practices and commercial life, and after the expiration of the periods, it is deleted, destroyed or anonymized.

Exercise of Rights by the Relevant Person:

As a data subject, you may use your rights under Article 11 of the Law regulating the rights of the data subject by submitting your requests in writing to the address “Mimar Sinan Mahallesi 1400 Sokak No: 10/Z1 Konak İzmir” according to the “Communiqué on the Procedures and Principles of Application to the Data Controller” or electronically to the e-mail address info@kaskaloglu.com provided that your e-mail is registered in the company systems or by applying to our company’s lasermiyopiozel@hs03.kep.tr kep address by registered e-mail. More comprehensive regulation on this subject, more detailed information on data groups is provided in Kaşkaloğlu Eye Hospital Personal Data Application and Response Procedure and Kaşkaloğlu Eye Hospital Personal Data Protection and Processing Policy . You can access the relevant procedure from our corporate website or in line with the request you will make to the relevant personnel.

Data Controller

Title LASER MYOPIA SPECIAL TREATMENT CENTER LIMITED COMPANY

Address : MİMAR SİNAN NEIGHBORHOOD 1400 STREET NO: 10/Z1 KONAK IZMIR