KAŞKALOĞLU EYE HOSPITAL WITHIN THE SCOPE OF LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA PARENT/GUARDIAN/REPRESENTATIVE CLARIFICATION TEXT

Purpose and Scope of the Clarification Text

As LASER MYOPIA PRIVATE TREATMENT CENTER LIMITED COMPANY (“Kaşkaloğlu Eye Hospital”), we take measures to protect your personal data within the scope of the Personal Data Protection Law No. 6698 (hereinafter referred to as “KVKK” or “Law”). We process your Personal Data within the scope of KVKK and relevant legislation and in our capacity as “data controller” for the reasons and methods described below.

LASER MYOPIA SPECIAL TREATMENT CENTER LIMITED COMPANY Clarification Text on the Processing of Personal Data has been prepared in accordance with the article titled “Data Controller’s Obligation to Inform” in Article 10 of the KVKK: the identity of the data controller, the method and legal reason for collecting your personal data, the purpose for which this data will be processed, to whom and for what purpose it can be transferred, the data processing period and what your rights are listed in Article 11 of the KVKK. The explanations made for your “Personal Data” in the clarification text also cover your “Sensitive Personal Data”.

Method and Legal Reason for Collecting Your Personal Data

Your personal data may be collected verbally, in writing or electronically by automatic or non-automatic methods, through the company’s affiliated units, website, social media channels, call center, mobile applications, software used to carry out activities within the company, camera shooting and verbally, in writing or electronically. Your personal data may be processed by creating and updating as long as your relationship with the Company continues and may be kept in both digital and physical environment.

Your personal data may be processed in line with the purposes set out under the heading “Your Personal Data Processed and the Purposes of Processing” and in accordance with Article 5, paragraph 1 of Article 5 of Law No. 6698 and in accordance with the explicit consent requirement within the scope of paragraph 1 of Article 5 or specified in accordance with paragraph 2 of Article 5;

1. a) Explicitly stipulated in the law,
2. c) Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,

ç) It is mandatory for the data controller to fulfill its legal obligation,

1. d) Data processing is mandatory for the establishment, exercise and protection of a right,
2. f) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,

processed within the scope of personal data processing conditions.

Your Processed Personal Data

Your Personal Data is processed securely in accordance with the Law on the Protection of Personal Data in accordance with legal obligations or in order to provide a more appropriate service in company business and transactions.

In this context, the data in the table are collected as personal data;

Identity: It is the data group containing information about the identity of the person (e.g. Name, Surname, TR Identity Number, SSI Registration Number, etc.).

Contact: A group of data that can be used to reach the person (e.g. phone number, residential address, e-mail address)

Finance: It is the data group containing the financial information of the person (e.g. Bank Account Number, IBAN Information)

Customer Transaction: It contains the customer transaction information of the person. (e.g. Invoice Information, Invoice Number)

Physical Space Security: This data category refers to data types such as employee entry and exit registration information, camera recordings. (e.g. camera image records)

Transaction Security: This data category refers to data types such as IP address information, website login and exit information, password and password information. (e.g. Log Records, IP Addresses)

Purposes of processing your collected personal data;

• Ensuring the security of life and property, legal, commercial and occupational health and safety of real and/or legal third party institutions and organizations in the centers and units where the company’s business is carried out or affiliated to the company,
• Carrying out the appointment activities on our website and confirming the identity information of those who make transactions through our website
• Planning and managing the internal functioning of our hospital and daily operations and ensuring the supply of medication,
• Storage of camera images, ensuring discipline, security and inspections in case you are physically present in the centers and units where the company’s business is carried out or affiliated to the company,
• Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through These Publications, Regulation No. 29399 on the Development and Evaluation of Quality in Health, Regulation on Private Hospitals and secondary regulations,
• Carrying out auditing and/or regulatory duties to be carried out by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions,
• Fulfillment of information and document requests by judicial bodies and/or administrative authorities,
• Planning and Management of Health Services and Financing,
• Fulfillment of risk management and quality improvement activities,
• Carrying out the treatment of the person represented, preventive medicine, medical diagnosis, examination, treatment, care services, protection of public health,
• Fulfillment of rights and obligations such as offers, promotions, exemptions, etc. offered by contracted private insurance companies and/or other institutions within the framework of agreements,
• Taking all necessary technical and administrative measures for systems and applications within the scope of data security,
• Protection of public order and health,
• Execution and follow-up of companion procedures,

purposes.

To Whom and For What Purpose Your Processed Personal Data Can Be Transferred

By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with the KVKK and the relevant health legislation, in line with the above-mentioned purposes;

• To legally authorized public institutions and organizations in line with the requests of the relevant public institutions and organizations and limited to the purposes of the request,
• To our business partners in order to fulfill and maintain the continuity of our services,

It may be transferred within the framework of the personal data processing conditions specified in Articles 8 and 9 of the KVK Law.

Data Processing Period and Storage Period

Your personal data, limited to the purposes specified in this Clarification Text; It will be processed by complying with the data processing and statute of limitations periods in all relevant laws and other legal legislation to which our company and our company’s affiliated centers and units are subject. In case of changes in the laws regarding data processing periods, the new periods determined will be taken as basis.

As a requirement of the principle of purpose limitation, your personal data is processed limited to the time required for the fulfillment of the purposes described in this Clarification Text and in any case in accordance with the practices of the company and the customs of its commercial life, and after the expiration of the periods, it is deleted, destroyed or anonymized.

Exercise of Rights by the Relevant Person:

As a data subject, you may use your rights under Article 11 of the Law regulating the rights of the data subject by submitting your requests in writing to the address “Mimar Sinan Mahallesi 1400 Sokak No: 10/Z1 Konak İzmir” according to the “Communiqué on the Procedures and Principles of Application to the Data Controller” or electronically to the e-mail address info@kaskaloglu.com provided that your e-mail is registered in the company systems or by applying to our company’s lasermiyopiozel@hs03.kep.tr kep address by registered e-mail. More comprehensive regulation on this subject, more detailed information on data groups is provided in Kaşkaloğlu Eye Hospital Personal Data Application and Response Procedure and Kaşkaloğlu Eye Hospital Personal Data Protection and Processing Policy . You can access the relevant procedure from our corporate website or in line with the request you will make to the relevant personnel.

Data Controller

Title LASER MYOPIA SPECIAL TREATMENT CENTER LIMITED COMPANY

Address : MİMAR SİNAN MAHALLESI 1400 SOKAK NO: 10/Z1 KONAK İZMİR