{"id":43927,"date":"2025-01-06T06:53:36","date_gmt":"2025-01-06T06:53:36","guid":{"rendered":"https:\/\/mahmutkaskaloglu.com.tr\/personal-data-protection-and-processing-policy\/"},"modified":"2026-03-06T15:04:04","modified_gmt":"2026-03-06T15:04:04","slug":"personal-data-protection-and-processing-policy","status":"publish","type":"page","link":"https:\/\/mahmutkaskaloglu.com.tr\/en\/personal-data-protection-and-processing-policy\/","title":{"rendered":"Personal Data Protection and Processing Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"43927\" class=\"elementor elementor-43927 elementor-43503\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f2dfc95 e-con-full e-flex cmsmasters-block-default e-con e-parent\" data-id=\"f2dfc95\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f21f2d3 cmsmasters-block-default cmsmasters-sticky-default elementor-widget elementor-widget-heading\" data-id=\"f21f2d3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Personal Data Protection and Processing Policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-201fed5 cmsmasters-block-default cmsmasters-sticky-default elementor-widget elementor-widget-spacer\" data-id=\"201fed5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-78ea12b e-con-full e-flex cmsmasters-block-default e-con e-child\" data-id=\"78ea12b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-80c194f e-con-full e-flex cmsmasters-block-default e-con e-child\" data-id=\"80c194f\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;sticky&quot;:&quot;top&quot;,&quot;sticky_on&quot;:[&quot;widescreen&quot;,&quot;desktop&quot;],&quot;sticky_offset&quot;:0,&quot;sticky_effects_offset&quot;:0,&quot;sticky_anchor_link_offset&quot;:0}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-95215ee cmsmasters-block-default cmsmasters-sticky-default elementor-widget elementor-widget-heading\" data-id=\"95215ee\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h5 class=\"elementor-heading-title elementor-size-default\">Menu<\/h5>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-511f542 elementor-nav-menu--dropdown-none cmsmasters-block-default cmsmasters-sticky-default elementor-widget elementor-widget-nav-menu\" data-id=\"511f542\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;layout&quot;:&quot;vertical&quot;,&quot;submenu_icon&quot;:{&quot;value&quot;:&quot;&lt;svg aria-hidden=\\&quot;true\\&quot; class=\\&quot;e-font-icon-svg e-fas-caret-down\\&quot; viewBox=\\&quot;0 0 320 512\\&quot; xmlns=\\&quot;http:\\\/\\\/www.w3.org\\\/2000\\\/svg\\&quot;&gt;&lt;path d=\\&quot;M31.3 192h257.3c17.8 0 26.7 21.5 14.1 34.1L174.1 354.8c-7.8 7.8-20.5 7.8-28.3 0L17.2 226.1C4.6 213.5 13.5 192 31.3 192z\\&quot;&gt;&lt;\\\/path&gt;&lt;\\\/svg&gt;&quot;,&quot;library&quot;:&quot;fa-solid&quot;}}\" data-widget_type=\"nav-menu.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t<nav aria-label=\"Men\u00fc\" class=\"elementor-nav-menu--main elementor-nav-menu__container elementor-nav-menu--layout-vertical e--pointer-none\">\n\t\t\t\t<ul id=\"menu-1-511f542\" class=\"elementor-nav-menu sm-vertical\"><li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43992\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/personal-data-protection-and-processing-policy\/\" class=\"elementor-item\">Personal Data Protection and Processing Policy<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43993\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-website-user\/\" class=\"elementor-item\">Clarification Text &#8211; Website User<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43994\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-camera-information-relevant-person\/\" class=\"elementor-item\">Clarification Text &#8211; Camera Information &#8211; Relevant Person<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43995\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-personnel\/\" class=\"elementor-item\">Clarification Text &#8211; Personnel<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43996\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-person-receiving-product-or-service\/\" class=\"elementor-item\">Clarification Text &#8211; Person Receiving Product or Service<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43997\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-parent-guardian-representative\/\" class=\"elementor-item\">Clarification Text &#8211; Parent &#8211; Guardian &#8211; Representative<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43998\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-visitor\/\" class=\"elementor-item\">Clarification Text &#8211; Visitor<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43999\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-employee-candidate\/\" class=\"elementor-item\">Clarification Text &#8211; Employee Candidate<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-44000\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/contact-person-application-and-response-procedure\/\" class=\"elementor-item\">Contact Person Application and Response Procedure<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-44001\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/cookie-policy\/\" class=\"elementor-item\">Cookie Policy<\/a><\/li>\n<\/ul>\t\t\t<\/nav>\n\t\t\t\t\t\t<nav class=\"elementor-nav-menu--dropdown elementor-nav-menu__container\" aria-hidden=\"true\">\n\t\t\t\t<ul id=\"menu-2-511f542\" class=\"elementor-nav-menu sm-vertical\"><li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43992\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/personal-data-protection-and-processing-policy\/\" class=\"elementor-item\" tabindex=\"-1\">Personal Data Protection and Processing Policy<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43993\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-website-user\/\" class=\"elementor-item\" tabindex=\"-1\">Clarification Text &#8211; Website User<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43994\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-camera-information-relevant-person\/\" class=\"elementor-item\" tabindex=\"-1\">Clarification Text &#8211; Camera Information &#8211; Relevant Person<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43995\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-personnel\/\" class=\"elementor-item\" tabindex=\"-1\">Clarification Text &#8211; Personnel<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43996\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-person-receiving-product-or-service\/\" class=\"elementor-item\" tabindex=\"-1\">Clarification Text &#8211; Person Receiving Product or Service<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43997\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-parent-guardian-representative\/\" class=\"elementor-item\" tabindex=\"-1\">Clarification Text &#8211; Parent &#8211; Guardian &#8211; Representative<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43998\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-visitor\/\" class=\"elementor-item\" tabindex=\"-1\">Clarification Text &#8211; Visitor<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-43999\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/clarification-text-employee-candidate\/\" class=\"elementor-item\" tabindex=\"-1\">Clarification Text &#8211; Employee Candidate<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-44000\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/contact-person-application-and-response-procedure\/\" class=\"elementor-item\" tabindex=\"-1\">Contact Person Application and Response Procedure<\/a><\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-44001\"><a href=\"https:\/\/mahmutkaskaloglu.com.tr\/en\/cookie-policy\/\" class=\"elementor-item\" tabindex=\"-1\">Cookie Policy<\/a><\/li>\n<\/ul>\t\t\t<\/nav>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8f9dd3a e-con-full e-flex cmsmasters-block-default e-con e-child\" data-id=\"8f9dd3a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0ec9a52 cmsmasters-block-default cmsmasters-sticky-default elementor-widget elementor-widget-text-editor\" data-id=\"0ec9a52\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>KASHKALOGLU EYE HOSPITAL  <\/b><\/p><p><b>PERSONAL <\/b><b>DATA PROTECTION AND PROCESSING POLICY<\/b><\/p><p><b>1.INTRODUCTION<\/b><\/p><p>As a data controller, the protection of personal data of its patients, customers, employees and other real persons with whom it has a relationship is of great importance for Laser Myopia Special Treatment Center Limited Company (<b>&#8220;Ka\u015fkalo\u011flu Eye Hospital&#8221;, &#8220;Company&#8221;<\/b> or <b>&#8220;Data Controller&#8221;<\/b> ). For the processing and protection of personal data, this <b>KA\u015eKALO\u011eLU EYE HOSPITAL<\/b><b> PERSONAL DATA PROTECTION AND PROCESSING POLICY (&#8220;<\/b>Policy&#8221;) aims to process and protect the personal data of our product or service buyers, employees, employee candidates, visitors, employees of the institution we cooperate with and third parties who establish a relationship with Ka\u015fkalo\u011flu Eye Hospital in accordance with the law. In this context, necessary administrative and technical measures are taken by the company for the processing and protection of personal data in accordance with the Law No. 6698 on the Protection of Personal Data (Law) and the relevant legislation.   <\/p><ol start=\"2\"><li><b>PURPOSE AND SCOPE OF THE POLICY<\/b><\/li><\/ol><p>The main purpose of this Policy is to make explanations about the personal data processing activity carried out by Ka\u015fkalo\u011flu Eye Hospital in accordance with the law and the systems adopted for the protection of personal data, to provide transparency to the persons with whom Ka\u015fkalo\u011flu Eye Hospital is related in this context and to enlighten and inform the relevant persons in detail about the processing of personal data.<\/p><p>The scope of this Policy is related to the personal data of our patients, product or service recipients, employees, employee candidates, visitors, employees of the institutions we cooperate with and third parties processed in accordance with the Law No. 6698 on the Protection of Personal Data.<\/p><p>The definitions of the terms used in this policy are explained in the area titled <i>&#8220;Definitions&#8221;<\/i> in Annex 1.<\/p><ol start=\"3\"><li><b>ISSUES RELATED TO THE PROTECTION OF PERSONAL DATA<\/b><\/li><\/ol><p><b>3.1 Protection of Personal Data  <\/b><\/p><p>In accordance with Article 12 of the Law, our Company takes the necessary technical and administrative measures to ensure the appropriate level of security in order to prevent unlawful processing of personal data, unlawful access to data and to ensure the preservation of data, and conducts or has the necessary audits carried out within this scope. In this context, our company takes administrative and technical measures to ensure the necessary level of security in accordance with the guidelines published by the Personal Data Protection Board (&#8220;Board&#8221;) and conducts or has audits carried out.    <\/p><p><b>3.2 Protection of Special Categories of Personal Data  <\/b><\/p><p>Sensitive personal data is given special importance under the Law due to the risk of causing victimization or discrimination when processed unlawfully. Pursuant to Article 6 of the Law, &#8220;sensitive&#8221; personal data are defined as race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership to associations, foundations or trade unions, criminal convictions and security measures (&#8220;Sensitive personal data other than health and sexual life&#8221;), health, sexual life, and biometric and genetic data (&#8220;Sensitive personal data related to health and sexual life&#8221;). The technical and administrative measures taken by our Company for the protection of personal data and the adequate measures stipulated in the Board&#8217;s Decision No. 2018\/10 dated 31\/01\/2018 in terms of special categories of personal data are taken within the scope described in the Policy on the Protection of Special Categories of Personal Data and the works carried out in this direction are monitored and audited within the framework of the audits carried out within our company.     <\/p><p><b>3.3 Supervision of Measures Taken for the Protection of Personal Data and Training of Ka\u015fkalo\u011flu Eye Hospital Personnel<\/b><\/p><p>There is a Personal Data Protection Committee within Ka\u015fkalo\u011flu Eye Hospital. On behalf of the company, which is the data controller, the Committee, in accordance with its duty arising from Article 12 of the Law, personally conducts the necessary audits in order to ensure the implementation of the provisions of the Law in its own institution or organization and, if necessary, by receiving support from competent organizations. According to the results of these audits, the violations, negativities and nonconformities identified are reported to the responsible persons within the committee and necessary measures are taken in this regard. In the event that personal data is transferred to real or legal persons from whom the Company outsources services, additional agreements are made with the relevant companies to which personal data are transferred in accordance with the law, which include provisions stating that the persons to whom personal data are transferred will take the necessary security measures to protect personal data and ensure that these measures are complied with in their own organizations. In addition to these, Ka\u015fkalo\u011flu G\u00f6z Hospital makes agreements with its personnel to comply with personal data protection measures in internal disciplinary policies.     <\/p><p>Ka\u015fkalo\u011flu Eye Hospital ensures that necessary trainings are organized for its employees in order to raise awareness to prevent unlawful processing of personal data, unlawful access to data and to ensure the protection of data.<\/p><ol start=\"4\"><li><b>ISSUES RELATED TO THE PROCESSING OF PERSONAL DATA<\/b><\/li><\/ol><p>Ka\u015fkalo\u011flu Eye Hospital carries out personal data processing activities in accordance with Article 20 of the Constitution and Article 4 of the Law. Ka\u015fkalo\u011flu Eye Hospital retains personal data for the period stipulated by law or required by the purpose of personal data processing. In accordance with Article 10 of the Law, our Company informs the relevant persons whose personal data is processed in accordance with Article 10 of the Law and requests their consent in cases where consent is required and processes this personal data in accordance with their consent based on the following criteria.     <\/p><p><b>4.1. Processing in accordance with the Law and Good Faith<\/b><\/p><p>Ka\u015fkalo\u011flu Eye Hospital acts in accordance with the principles introduced by legal regulations and the rule of trust and honesty in the processing of personal data. In accordance with the principle of compliance with the rule of honesty, the company takes into account the rights of the relevant persons while trying to achieve its goals in data processing. <\/p><p><b>4.2. Ensuring that Personal Data is Accurate and Up-to-Date When Necessary<\/b><\/p><p>Keeping personal data accurate and up-to-date is necessary for Ka\u015fkalo\u011flu G\u00f6z Hospital to protect the fundamental rights and freedoms of the person concerned. The company fulfills its obligation of utmost care in ensuring that personal data is accurate and up-to-date when necessary. For this reason, all communication channels are open for keeping the information of the relevant persons whose personal data are processed by Ka\u015fkalo\u011flu Eye Hospital accurate and up-to-date and takes necessary measures in these matters.  <\/p><p><b>4.3. Processing for Specific, Explicit and Legitimate Purposes<\/b><\/p><p>Ka\u015fkalo\u011flu Eye Hospital clearly and precisely determines the purpose of processing personal data that is legitimate and lawful. Our Company processes personal data in connection with the activity it carries out and as much as necessary for the services it provides. <\/p><p><b>4.4. Being relevant, limited and proportionate to the purpose for which they are processed<\/b><\/p><p>Ka\u015fkalo\u011flu Eye Hospital processes personal data for the purposes that are relevant and necessary for the execution of its business. For this reason, the company processes personal data in a manner suitable for the realization of the specified purposes and avoids the processing of personal data that is not related to the realization of the purpose or is not needed. <\/p><p><b>4.5. Preservation for the Period Stipulated in the Relevant Legislation or Required for the Purpose for which they are Processed<\/b><\/p><p>Ka\u015fkalo\u011flu Eye Hospital retains personal data only for the period specified in the relevant legislation or for the period required for the purpose for which they are processed in accordance with company policies. In this context, the company first determines whether a period is stipulated for the storage of personal data in the relevant legislation, if a period is determined, it acts in accordance with this period, if a period is not determined, it keeps personal data for the period required for the purpose for which they are processed and specified in the retention policy of Ka\u015fkalo\u011flu Eye Hospital. Ka\u015fkalo\u011flu Eye Hospital is based on the retention periods in the personal data inventory, and at the end of the periods specified herein, personal data are deleted, destroyed or anonymized according to the nature and intended use of the data within the framework of the obligations under the Law.  <\/p><ol start=\"5\"><li><b>PROCESSING OF PERSONAL DATA<\/b><\/li><\/ol><p>The explicit consent of the data subject whose personal data is processed is only one of the legal grounds that make it possible to process personal data in accordance with the law. Apart from explicit consent, personal data may also be processed in the presence of one of the conditions specified in the law. The basis of the personal data processing activity may be only one of the following conditions, or more than one of these conditions may be the basis of the same personal data processing activity. In the event that the processed data is personal data of special nature, the conditions set out in section 5.2 of this Policy (&#8220;Processing of Personal Data of Special Nature&#8221;) shall apply.   <\/p><p><b>5.1 Terms of Processing Personal Data  <\/b><\/p><ol><li><b>a) Explicit Consent of the person concerned  <\/b><\/li><\/ol><p>One of the conditions for processing personal data is the explicit consent of the data subject. The explicit consent of the data subject must be related to a specific subject, based on information and free will. In the presence of the personal data processing conditions listed below, personal data can be processed without the explicit consent of the data subject.    <\/p><ol><li><b>b) Explicitly Stipulated in the Laws<\/b><\/li><\/ol><p>  If the personal data of the data subject is explicitly stipulated in the law, in other words, if there is a clear provision in the relevant law regarding the processing of personal data, the existence of this data processing condition may be mentioned.  <\/p><ol><li><b>c) Failure to Obtain the Explicit Consent of the Relevant Person Due to Actual Impossibility  <\/b><\/li><\/ol><p>The personal data of the person concerned may be processed if it is mandatory to process the personal data of the person who is unable to disclose his consent due to actual impossibility or whose consent cannot be recognized as valid, in order to protect the life or physical integrity of himself or another person.  <\/p><ol><li><b>d) Direct Relevance to the Establishment or Performance of the Contract<\/b><\/li><\/ol><p>  Provided that it is directly related to the establishment or performance of a contract to which the data subject is a party, this condition may be deemed to be fulfilled if the processing of personal data is necessary.  <\/p><ol><li><b>e) Fulfillment of Legal Obligation by Ka\u015fkalo\u011flu Eye Hospital<\/b><\/li><\/ol><p>Personal data of the relevant person may be processed if processing is mandatory for Ka\u015fkalo\u011flu Eye Hospital to fulfill its legal obligations.  <\/p><ol><li><b>f) Publicization of Personal Data by the Personal Data Subject<\/b><\/li><\/ol><p>  If the data subject has made his\/her personal data public, the relevant personal data may be processed limited to the purpose of publicization.  <\/p><ol><li><b>g) Data Processing is Mandatory for the Establishment or Protection of a Right  <\/b><\/li><\/ol><p>Personal data of the data subject may be processed if data processing is mandatory for the establishment, exercise or protection of a right.  <\/p><ol><li><b>h) Data Processing is Mandatory for the Legitimate Interest of Ka\u015fkalo\u011flu Eye Hospital  <\/b><\/li><\/ol><p>Provided that it does not harm the fundamental rights and freedoms of the personal data subject, the personal data of the data subject may be processed if data processing is mandatory for the legitimate interests of our Company.  <\/p><p><b>5.2 Processing of Special Categories of Personal Data  <\/b><\/p><p>Sensitive personal data are processed by our company in accordance with the principles set forth in this Policy and by taking all necessary administrative and technical measures, including the methods to be determined by the Board, and in the presence of the following conditions:  <\/p><ol><li>a) Sensitive personal data other than health and sexual life may be processed without seeking the explicit consent of the data subject if it is explicitly stipulated in the law, in other words, if there is a provision in the relevant law that allows the processing of personal data. Otherwise, the explicit consent of the data subject shall be obtained.   <\/li><li>b) Sensitive personal data relating to health and sexual life may be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, without seeking explicit consent. Otherwise, the explicit consent of the person concerned shall be obtained. <\/li><li><b>PURPOSES OF PROCESSING PERSONAL DATA<\/b><\/li><\/ol><p>Ka\u015fkalo\u011flu Eye Hospital processes personal data limited to the purposes within the personal data processing conditions specified in paragraph 2 of Article 5 and paragraph 3 of Article 6 of the KVK Law. Detailed information on this subject can be found in Annex-2 (&#8220;<i>Annex 2- Personal Data Processed by Ka\u015fkalo\u011flu Eye Hospital and Purposes<\/i>&#8220;) of this Policy. In addition, the general purposes regarding the processed personal data are also mentioned in the Data Controllers Registry.      <\/p><ol start=\"7\"><li><b>INFORMING AND ENLIGHTENING THE PERSON CONCERNED<\/b><\/li><\/ol><p>In accordance with Article 10 of the KVK Law, Ka\u015fkalo\u011flu Eye Hospital enlightens the relevant persons whose personal data is processed during the acquisition of personal data. In this context, Ka\u015fkalo\u011flu Eye Hospital enlightens the identity of the data controller, the identity of the representative, if any, the purpose for which personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data, and the rights of the relevant persons whose personal data are processed, according to the nature of the relevant person and the data processing process. In this context, preliminary disclosure information and disclosure texts that can be easily seen within the company and in common areas of use have been placed. Along with this policy, process and person-based disclosure text, cookie policy, and application form have also been published on the Ka\u015fkalo\u011flu Eye Hospital website.    <\/p><ol start=\"8\"><li><b>TRANSFER OF PERSONAL DATA<\/b><\/li><\/ol><p>Ka\u015fkalo\u011flu Eye Hospital may transfer the personal data of the relevant person to third parties by taking the necessary security measures in line with the lawful personal data processing purposes. In this context; <\/p><ul><li aria-level=\"1\">If there is a clear regulation in the laws regarding the transfer of personal data,<\/li><\/ul><ul><li aria-level=\"1\">If it is necessary to transfer personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,<\/li><li aria-level=\"1\">If personal data transfer is mandatory for the Company to fulfill its legal obligation,<\/li><li aria-level=\"1\">If personal data transfer is mandatory for the establishment, exercise or protection of a right,<\/li><li aria-level=\"1\">If personal data transfer is mandatory for the legitimate interests of Ka\u015fkalo\u011flu Eye Hospital, provided that it does not harm the fundamental rights and freedoms of the person concerned<\/li><li aria-level=\"1\">For personal data of special nature other than health and sexual life; if the conditions stipulated in the laws exist;<\/li><li aria-level=\"1\">Personal data on health and sexual life can only be shared with authorized persons and institutions within the scope of the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing;<\/li><\/ul><p>is being transferred.<\/p><ol start=\"9\"><li><b>THIRD PARTIES TO WHOM PERSONAL DATA ARE TRANSFERRED BY KA\u015eKALO\u011eLU EYE HOSPITAL AND THE PURPOSES OF TRANSFER<\/b><\/li><\/ol><p>Ka\u015fkalo\u011flu Eye Hospital may transfer the personal data and sensitive personal data of the relevant person to third parties by taking the necessary security measures in line with the personal data processing purposes in accordance with the law. In this respect, our Company acts in accordance with the regulations stipulated in Articles 8 and 9 of the Law. Detailed information on this subject can be found in Annex-3 of this Policy <i>(&#8220;Annex 3- Third Parties to whom Personal Data is Transferred by Ka\u015fkalo\u011flu Eye Hospital and the Purposes of Transfer&#8221;)<\/i>.    <\/p><ol start=\"10\"><li><b>CLASSIFICATION OF PERSONAL DATA PROCESSED WITHIN KA\u015eKALO\u011eLU EYE HOSPITAL<\/b><\/li><\/ol><p>In Ka\u015fkalo\u011flu G\u00f6z Hospital, in line with the legitimate and lawful personal data processing purposes of the company, personal data in the following categories are processed by enlightening the relevant persons, based on and limited to one or more of the personal data processing conditions specified in Article 5 and Article 6 of the Law, in compliance with the general principles specified in the Law and all obligations regulated in the Law.  <\/p><p>Ka\u015fkalo\u011flu Eye Hospital has created a personal data inventory in accordance with the Regulation on Data Controllers Registry put into effect by the Personal Data Protection Authority. This data inventory includes data categories, the source of the data, data processing purposes, data processing process, recipient groups to which the data is transferred and retention periods. In this context, Ka\u015fkalo\u011flu Eye Hospital has personal data in the following data categories.  <\/p><table><tbody><tr><td><b>PERSONAL DATA CATEGORIZATION<\/b><\/td><td><b>PERSONAL DATA CATEGORIZATION DESCRIPTION<\/b><\/td><\/tr><tr><td><b>Identity Data<\/b><\/td><td><p>A data group containing information about a person&#8217;s identity.<\/p><p><i>For example, information such as name-surname, Turkish ID number, place of birth, date of birth, gender, tax number <\/i><\/p><\/td><\/tr><tr><td><b>Contact Data<\/b><\/td><td>A group of data that can be used to reach a person.<i> For example, information such as phone number, address, e-mail address, fax number<\/i><\/td><\/tr><tr><td><b>Audiovisual Data<\/b><\/td><td>It is a data group containing visual and auditory data of a person. <i>For example, data contained in documents that clearly belong to a natural person, such as photographs and camera recordings, copies of documents containing personal data<\/i><\/td><\/tr><tr><td><b>Personal Data<\/b><\/td><td>This data category refers to data types such as payroll information, property declaration information, resume information of individuals. <i>For example, data such as SSI number, payroll information, SSI service breakdown processed for obtaining information that will constitute the personal rights of real persons who are in a working relationship with our company<\/i><\/td><\/tr><tr><td><b>Financial Data<\/b><\/td><td>It is the data group containing the financial information of the person.<i> information such as bank account number, credit card information, IBAN number<\/i><\/td><\/tr><tr><td><b>Professional Experience<\/b><\/td><td>It is a data group containing information about the person&#8217;s profession, professional experience and education.<i> For example, data on professional experience in the CV such as certificates and diplomas<\/i><\/td><\/tr><tr><td><b>Customer Transaction Data<\/b><\/td><td>This data category refers to data types such as call center records, receipts, receipts, negotiable instruments and invoice information.<\/td><\/tr><tr><td><b>Legal Process Data<\/b><\/td><td>This data category refers to data types such as information in the case file, wage garnishment, debt information.<\/td><\/tr><tr><td><b>Process Security Data<\/b><\/td><td>It is the data group containing transaction security data such as IP information, logging and cookies, username and password. <\/td> <\/tr><tr><td><b>Physical Space Security Data<\/b><\/td><td>It is a data group containing physical space security data such as camera recordings, entrance and exit records of the person. For example, personal data related to records and documents taken at the entrance to the physical space, during the stay in the physical space; <i>information such as camera recordings, audio and video recordings and records taken at the security point<\/i><\/td><\/tr><tr><td><b>Biometric Data<\/b><\/td><td>It is a data group containing biometric data such as fingerprints, palmprints, facial recognition data and genetic information. <\/td> <\/tr><tr><td><b>Association, Foundation, Trade Union Membership<\/b><\/td><td>It contains information about the organization to which the person is a member.<\/td><\/tr><tr><td><b>Risk Management <\/b><\/td><td>This category of data refers to types of data such as information processed for the management of technical, administrative risks.<\/td><\/tr><tr><td><b>Criminal Conviction Data<\/b><\/td><td>Data set on the criminal sanctions the person has received in the past <\/td> <\/tr><tr><td><b>Health Data<\/b><\/td><td>It is a group of data related to a person&#8217;s health status. <i>For example, health report, medication information, vision information, examination information<\/i><\/td><\/tr><\/tbody><\/table><ol start=\"11\"><li><b>RETENTION PERIODS OF PERSONAL DATA<\/b><\/li><\/ol><p>In cases stipulated in the relevant laws and regulations, Ka\u015fkalo\u011flu Eye Hospital stores personal data for the period specified in these regulations. If a period of time is not regulated in the legislation regarding how long personal data should be kept, personal data is kept for the period required to be kept in accordance with the practices of Ka\u015fkalo\u011flu G\u00f6z Hospital and the customs of the sector, depending on the activity carried out by Ka\u015fkalo\u011flu G\u00f6z Hospital while processing that data. <\/p><p>Pursuant to Article 138 of the Turkish Penal Code, Article 7 of the KVK Law and the &#8220;Regulation on Deletion, Destruction and Anonymization of Personal Data&#8221; put into effect by the Personal Data Protection Authority, personal data processed in accordance with the provisions of the relevant law are deleted, destroyed or anonymized in accordance with the policies of Ka\u015fkalo\u011flu Eye Hospital or upon the request of the relevant person if the reasons requiring their processing disappear. Ka\u015fkalo\u011flu Eye Hospital has established a policy in this regard according to the provisions of the regulation and acts in accordance with this policy. In addition, general information on retention periods is also specified in the Data Controllers Registry.    <\/p><ol start=\"12\"><li><b>RIGHTS OF THE PERSONS CONCERNED; EXERCISE OF THESE RIGHTS<\/b><\/li><\/ol><p>Ka\u015fkalo\u011flu Eye Hospital notifies the rights of the personal data subject in accordance with Article 10 of the KVK Law and guides the person whose personal data is processed on how to use these rights regulated in Article 11, and Ka\u015fkalo\u011flu Eye Hospital carries out the necessary channels, internal functioning, administrative and technical arrangements in accordance with Article 13 of the KVK Law in order to evaluate the rights of the relevant persons and to inform the relevant persons.   <\/p><p><b>12.1 Rights of data subjects whose personal data are processed<\/b><\/p><p>Data subjects whose personal data are processed have the following rights:<\/p><ol><li>Learn whether personal data is being processed,<\/li><li>Request information if their personal data has been processed,<\/li><li>To learn the purpose of processing personal data and whether they are used for their intended purpose,<\/li><li>To know the third parties to whom personal data are transferred domestically or abroad,<\/li><li>To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,<\/li><li>Although it has been processed in accordance with the provisions of the KVK Law and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,<\/li><li>In the event that the processed data is analyzed exclusively through automated systems and a result occurs to the detriment of the person himself\/herself, to object to this result,<\/li><li>In case of damage due to unlawful processing of personal data, to demand compensation for the damage.<\/li><\/ol><p><b>12.2. Cases where the Data Subject whose Personal Data is Processed cannot assert his\/her rights<\/b><\/p><p>Pursuant to Article 28 of the KVK Law, the persons whose personal data are processed cannot assert their rights listed in 12.1. in these matters, since the following cases are excluded from the scope of the KVK Law: <\/p><ol><li>Processing of personal data for purposes such as research, planning and statistics by anonymizing them with official statistics,<\/li><li>Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that such processing does not violate national defense, national security, public security, public order, economic security, privacy or personal rights or constitute a crime,<\/li><li>Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order or economic security,<\/li><li>Processing of personal data by judicial or enforcement authorities in relation to investigations, prosecutions, trials or executions.<\/li><\/ol><p>Pursuant to Article 28\/2 of the KVK Law; In the cases listed below, the persons whose personal data are processed cannot assert their other rights listed in 12.1. except for the right to demand compensation for the damage:<\/p><ol><li>Processing of personal data is necessary for the prevention of crime or criminal investigation,<\/li><li>Processing of personal data made public by the person whose personal data is processed,<\/li><li>Personal data processing is necessary for the execution of supervisory or regulatory duties and disciplinary investigation or prosecution by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions based on the authority granted by law,<\/li><li>Processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budgetary, tax and fiscal matters.<\/li><\/ol><p><b>12.3. Exercising the Rights of the Personal Data Subject<\/b><\/p><p>Persons whose personal data are processed will be able to submit their requests regarding their rights specified in this Policy to Ka\u015fkalo\u011flu Eye Hospital free of charge by filling out and signing the application form with the information and documents that will identify their identity and by the methods specified below or by other methods determined by the Personal Data Protection Board. Arrangements in this regard have been made <b>in Ka\u015fkalo\u011flu Eye Hospital Personal Data Application Procedure and<\/b> clarification texts.   <\/p><p>Contact person,<\/p><ul><li aria-level=\"1\">After filling in the form available at kaskaloglu.com, a wet signed copy of the form must be delivered to the address<i>&#8220;Mimar Sinan Mahallesi 1400 Sokak No: 10\/Z1 Konak \u0130zmir&#8221; <\/i>in person or in writing via registered mail or notary public or,<\/li><li aria-level=\"1\">After filling out the application form in person and signing it with a &#8220;secure electronic signature&#8221; within the scope of the Electronic Signature Law No. 5070, the form with secure electronic signature can be sent to lasermiyopiozel@hs03.kep.tr via registered e-mail, secure electronic signature, mobile signature or application to <a href=\"mailto:info@kaskaloglu.com\">info@kaskaloglu.com<\/a> by using the e-mail address previously notified to Ka\u015fkalo\u011flu Eye Hospital by the relevant person and registered in the system of Ka\u015fkalo\u011flu Eye Hospital.  <\/li><\/ul><p>In order for the above-mentioned application to be accepted as a valid application, in accordance with the Communiqu\u00e9 on Application Procedures to the Data Controller, in the application, the relevant person must state that;<\/p><ol><li>a) Name, surname and signature if the application is in writing,<\/li><li>b) Turkish Republic identification number for citizens of the Republic of Turkey, nationality, passport number or identification number, if any, for foreigners,<\/li><li>c) Residential or workplace address for notification,<\/li><\/ol><p>\u00e7) Electronic mail address, telephone and fax number for notification, if any,<\/p><ol><li>d) Subject of the request,<\/li><\/ol><p>information is mandatory. Otherwise, the application will not be considered as a valid application. For applications to be made without filling out the application form, the issues listed here must be submitted to Ka\u015fkalo\u011flu Eye Hospital in full.  <\/p><p>In order for third parties to make an application request on behalf of the persons whose personal data are processed, there must be a special power of attorney issued by the relevant person through a notary public on behalf of the person who will make the application.<\/p><p><b>Data Controller  <\/b><\/p><p>Title LASER MYOPIA SPECIAL TREATMENT CENTER LIMITED COMPANY<\/p><p>Address : MI\u0307MAR SI\u0307NAN MAHALLESI 1400 SOKAK NO: 10\/Z1 KONAK I\u0307ZMI\u0307R<\/p><p>Below, definitions and a table of the purposes of processing and transfer of personal data are presented to assist in the review of the policy.<\/p><p><b>ANNEX-1 DEFINITIONS<\/b><\/p><p><b>Explicit Consent:<\/b> Consent on a specific issue, based on information and expressed with free will.<\/p><p><b>Anonymization:<\/b> It is the modification of personal data in such a way that it loses its personal data nature and this situation cannot be reversed. Ex: Masking, aggregation, data corruption, etc. Making personal data impossible to be associated with a real person by means of techniques such as masking, aggregation, data corruption, etc.  <\/p><p><b>Application Form:<\/b> &#8220;Application Form Regarding the Applications to be made to the Data Controller by the Relevant Person (Personal Data Subject) in accordance with the Law No. 6698 on the Protection of Personal Data&#8221;, which includes the application to be made by the relevant persons whose personal data are processed to exercise their rights.<\/p><p><b>Employees, Shareholders and Authorities of the Institutions in Cooperation:<\/b> Real and legal persons, including shareholders and officials of these institutions, working in the institutions (such as business partners, suppliers, but not limited to) with which Ka\u015fkalo\u011flu Eye Hospital has all kinds of business relations.<\/p><p><b>Business Partner:<\/b> Parties with whom Ka\u015fkalo\u011flu Eye Hospital establishes business partnerships for purposes such as conducting various projects and receiving services while carrying out its commercial activities.<\/p><p><b>Processing of Personal Data:<\/b> Any operation performed on personal data such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system.<\/p><p><b>Relevant person:<\/b> The natural person whose personal data is processed. For example; employee, patient, product or service recipient, visitor, parent, guardian, representative. <\/p><p><b>Personal Data:<\/b> Any information relating to an identified or identifiable natural person (e.g. name-surname, Turkish ID Number, e-mail, address, date of birth, credit card number, etc.).    <\/p><p><b>Sensitive Personal Data: <\/b>Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data.<\/p><p><b>Supplier<\/b> Parties that provide services to Ka\u015fkalo\u011flu Eye Hospital on a contractual basis in accordance with the orders and instructions of Ka\u015fkalo\u011flu Eye Hospital while carrying out the commercial activities of Ka\u015fkalo\u011flu Eye Hospital.<\/p><p><b>Data Processor:<\/b> Natural and legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller. For example; Real and legal persons from whom Ka\u015fkalo\u011flu Eye Hospital receives services. <\/p><p><b>Data Controller<\/b>: The person who determines the purposes and means of processing personal data and manages the place where the data is kept systematically (data recording system). Within the scope of this policy, Laser Myopia Special Treatment Center Limited Company is the data controller. <\/p><p><b>Deletion of Data:<\/b> It refers to the situation where all relevant users within the company are encrypted in a way to prevent access to personal data and only the data protection officer has this password.<\/p><p><b>Destruction of Data:<\/b> It refers to the situation where personal data is completely eliminated physically or by technological methods in a way that cannot be reversed again.<\/p><p><b>ANNEX 2-PERSONAL DATA PROCESSED BY KALKALO\u011eLU EYE HOSPITAL AND THEIR PURPOSES<\/b><\/p><table><tbody><tr><td><b>Contact Person<\/b><\/td><td><b>Category of Personal Data Processed<\/b><\/td><td><b>Purposes of Processing Personal Data<\/b><\/td><\/tr><tr><td><p>Personal Data Processed<\/p><p>Person Group<\/p><\/td><td>Type of Personal Data Processed on Categorical Basis<\/td><td>The Purposes for which the Relevant Personal Data is Processed<\/td><\/tr><tr><td><b>Patient\/Product or Service Recipient<\/b><\/td><td><p>Identity<br>Contact<\/p><p>Finance Knowledge<\/p><p>Audio and Visual Recordings<\/p><\/td><td><p>Basic Law No. 3359 on Health Services, Regulation on Private Hospitals<\/p><p>in accordance with the regulations under these laws, in particular;<\/p><ul><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation,<\/li><li aria-level=\"1\">Managing Patient-Related Health Processes<\/li><li aria-level=\"1\">Execution of Finance and Accounting Affairs,<\/li><li aria-level=\"1\">Tracking Requests \/ Complaints<\/li><li aria-level=\"1\">Execution of Contract Processes,<\/li><li aria-level=\"1\">Storage and Archive Activities  <\/li><li aria-level=\"1\">Execution of Contract Processes,  <\/li><li aria-level=\"1\">Execution of Finance and Accounting Affairs,  <\/li><li aria-level=\"1\">Execution of Service After Sales Support Processes,<\/li><li aria-level=\"1\">Conducting Studies for Customer Satisfaction,<\/li><li aria-level=\"1\">Follow-up and Execution of Legal Affairs,<\/li><li aria-level=\"1\">Execution of Communication Activities,<\/li><li aria-level=\"1\">Execution\/Supervision of Business Activities,<\/li><li aria-level=\"1\">Execution of Contract Processes,<\/li><li aria-level=\"1\">Providing Information to Authorized Persons, Institutions and Organizations,  <\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Patient\/Product or Service Recipient<\/b><\/td><td>Physical Space Security <\/td> <td><ul><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation,<\/li><li aria-level=\"1\">Managing Patient Related Health Processes,<\/li><li aria-level=\"1\">Tracking Requests \/ Complaints<\/li><li aria-level=\"1\">Providing Information to Authorized Persons, Institutions and Organizations,<\/li><li aria-level=\"1\">Ensuring the Security of Data Controller Operations,  <\/li><li aria-level=\"1\">Ensuring the Security of Movable Property and Resources,  <\/li><li aria-level=\"1\">Conducting Audit \/ Ethics Activities,  <\/li><li aria-level=\"1\">Execution of Emergency Management Processes,<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Patient\/Product or Service Recipient<\/b><\/td><td>Process Security<\/td><td><ul><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation,<\/li><li aria-level=\"1\">Managing Patient-Related Health Processes<\/li><li aria-level=\"1\">Tracking Requests \/ Complaints<\/li><li aria-level=\"1\">Providing Information to Authorized Persons, Institutions and Organizations,<\/li><li aria-level=\"1\">Ensuring the Security of Data Controller Operations  <\/li><li aria-level=\"1\">Conducting Audit \/ Ethics Activities  <\/li><li aria-level=\"1\">Execution of Emergency Management Processes<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Patient\/Product or Service Recipient<\/b><\/td><td>Biometric Data<\/td><td><ul><li aria-level=\"1\">Pursuant to the Law No. 5510 on Social Security and General Health Insurance, special categories of personal data of patients are processed for the purpose of identity verification.<\/li><li aria-level=\"1\">However, it is processed for the purpose of medical diagnosis and treatment to be used in the treatment activities of patients<\/li><\/ul><\/td><\/tr><tr><td><b>Patient\/Product or Service Recipient<\/b><\/td><td><p>Association Membership Information<\/p><p>Union Membership Information<\/p><p>Foundation Membership Information<\/p><\/td><td><ul><li aria-level=\"1\">Execution\/Supervision of Business Activities,<\/li><li aria-level=\"1\">Execution of Contract Processes  <\/li><li aria-level=\"1\">Execution of Activities within the Scope of the Contracted Institution,<\/li><li aria-level=\"1\">Managing Discount and Benefit, Contract Processes,<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Patient\/Product or Service Recipient<\/b><\/td><td>Health Information<\/td><td><ul><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation,<\/li><li aria-level=\"1\">Managing Patient-Related Health Processes<\/li><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation  <\/li><li aria-level=\"1\">Execution \/ Supervision of Business Activities<\/li><li aria-level=\"1\">Execution of Contract Processes  <\/li><li aria-level=\"1\">Preventive Medicine, Medical Diagnosis, Examination, Treatment and Care Services<\/li><li aria-level=\"1\">Protection of Public Health<\/li><li aria-level=\"1\">Planning and Management of Health Services and Financing<\/li><li aria-level=\"1\">Conducting Necessary Tests and Audits and Execution of Related Processes  <\/li><li aria-level=\"1\">Procurement of Medicines and Related Materials<\/li><li aria-level=\"1\">Planning Patient Relationship Management Processes<\/li><li aria-level=\"1\">Providing Information to Authorized Public, Institutions and Organizations in accordance with the Legislation<\/li><li aria-level=\"1\">Informing about the provision of services such as appointment reminders, changes, etc. <\/li><li aria-level=\"1\">Measuring Patient Satisfaction<\/li><li aria-level=\"1\">Execution of Patient Exit Processes and Procedures<\/li><li aria-level=\"1\">Conducting Activities to Improve the Satisfaction of Patient Relatives, Companions, Visitors, etc. <\/li><li aria-level=\"1\">Patient Assessment  <\/li><\/ul><p>For these purposes, special categories of personal data belonging to patients are processed.<\/p><\/td><\/tr><tr><td><b>Patient\/Product or Service Recipient<\/b><\/td><td>Legal Action <\/td> <td><ul><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation<\/li><li aria-level=\"1\">Execution of Finance and Accounting Affairs<\/li><li aria-level=\"1\">Monitoring and Execution of Legal Affairs<\/li><li aria-level=\"1\">Execution \/ Supervision of Business Activities<\/li><li aria-level=\"1\">Execution of Business Continuity Ensuring Activities<\/li><li aria-level=\"1\">Execution of Storage and Archive Activities<\/li><li aria-level=\"1\">Execution of Contract Processes<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Potential Product or Service Recipient<\/b><\/td><td><p>Identity<br>Contact<\/p><p>Marketing Data<\/p><\/td><td><ul><li aria-level=\"1\">Conducting communication activities<\/li><li aria-level=\"1\">Execution of contract processes  <\/li><li aria-level=\"1\">Conducting marketing analysis studies  <\/li><li aria-level=\"1\">Conducting communication activities<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Employee  <\/b><\/td><td>Identity<br>Contact<br>Professional Experience<br>Finance<br>Personnel<br>Audiovisual Records<\/td><td><p>In accordance with the Labor Law, the Occupational Health and Safety Law No. 6331 and the regulations related to these laws,<\/p><ul><li aria-level=\"1\">Execution of Employee Satisfaction and Loyalty Processes,<\/li><\/ul><ul><li aria-level=\"1\">Fulfillment of Obligations Arising from Employment Contract and Legislation for Employees,<\/li><li aria-level=\"1\">Execution of Employee Benefits and Benefits Processes,<\/li><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation,<\/li><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation,<\/li><li aria-level=\"1\">Execution of Finance and Accounting Affairs,<\/li><li aria-level=\"1\">Execution of Assignment Processes,<\/li><li aria-level=\"1\">Follow-up and Execution of Legal Affairs,<\/li><li aria-level=\"1\">Execution of Internal Audit \/ Investigation \/ Intelligence Activities,<\/li><li aria-level=\"1\">Execution of Communication Activities,<\/li><li aria-level=\"1\">Execution\/Supervision of Business Activities,<\/li><li aria-level=\"1\">Execution of Contract Processes,<\/li><li aria-level=\"1\">Planning Human Resources Processes,<\/li><li aria-level=\"1\">Providing Information to Authorized Persons, Institutions and Organizations,<\/li><li aria-level=\"1\">Conducting Training Activities<\/li><\/ul><p>Personal data belonging to employees are processed for the purposes of the Company.<\/p><\/td><\/tr><tr><td><b>Employee  <\/b><\/td><td><p>Legal Action<\/p><\/td><td><ul><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation<\/li><li aria-level=\"1\">Execution of Finance and Accounting Affairs<\/li><li aria-level=\"1\">Monitoring and Execution of Legal Affairs<\/li><li aria-level=\"1\">Execution \/ Supervision of Business Activities<\/li><li aria-level=\"1\">Execution of Business Continuity Ensuring Activities<\/li><li aria-level=\"1\">Execution of Storage and Archive Activities<\/li><li aria-level=\"1\">Execution of Contract Processes<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Employee <\/b><\/td><td>Process Security<\/td><td><ul><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation,<\/li><li aria-level=\"1\">Tracking Requests \/ Complaints<\/li><li aria-level=\"1\">Providing Information to Authorized Persons, Institutions and Organizations,<\/li><li aria-level=\"1\">Ensuring the Security of Data Controller Operations  <\/li><li aria-level=\"1\">Conducting Audit \/ Ethics Activities  <\/li><li aria-level=\"1\">Execution of Emergency Management Processes,<\/li><li aria-level=\"1\">Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through These Publications, recording who uses the internet service provided and for what purpose,<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Employee <\/b><\/td><td>Physical Space Security<\/td><td><ul><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation,<\/li><li aria-level=\"1\">Managing Patient-Related Health Processes<\/li><li aria-level=\"1\">Tracking Requests \/ Complaints<\/li><li aria-level=\"1\">Providing Information to Authorized Persons, Institutions and Organizations,<\/li><li aria-level=\"1\">Ensuring the Security of Data Controller Operations  <\/li><li aria-level=\"1\">Ensuring the Security of Movable Property and Resources  <\/li><li aria-level=\"1\">Conducting Audit \/ Ethics Activities  <\/li><li aria-level=\"1\">Execution of Emergency Management Processes<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Employee<\/b><\/td><td>Criminal Record<\/td><td><ul><li aria-level=\"1\">Execution of Internal Audit Activities, Execution of Employee Satisfaction and Loyalty Processes, Execution of Appointment Processes<\/li><\/ul><p>The criminal record data of the employees are processed for the purposes of criminal record data processing.  <\/p><\/td><\/tr><tr><td><b>Employee<\/b><\/td><td>Health Information<\/td><td><ul><li aria-level=\"1\">Pursuant to Article 9 of the Regulation on the Duties, Authorities, Responsibilities and Trainings of the Workplace Physician and Other Health Personnel, the workplace physician is obliged to carry out the recruitment and periodic health examinations indicating that the employees are suitable for the work they will do. In accordance with the Occupational Health and Safety Law, the Regulation on the Duties, Authorities, Responsibilities and Trainings of the Workplace Physician and Other Health Personnel and the relevant legislation; Carrying out occupational health and safety activities, monitoring the suitability of our company employees for the task  <\/li><\/ul><p>health information of employees is processed for this purpose.<\/p><\/td><\/tr><tr><td><b>Employee Candidate<\/b><\/td><td><p>Identity<br>Contact<br>Professional Experience<\/p><p>Audio and Visual Recordings<\/p><\/td><td><ul><li aria-level=\"1\">Our company processes the identity information, contact information, professional experience information, financial information of the employee candidates in order to carry out the preparatory procedures related to employment in order to be able to evaluate the employee candidates for the appropriate position in the recruitment processes.  <\/li><\/ul><\/td><\/tr><tr><td><p><b>Supplier Official\/Employee<\/b><\/p><\/td><td><p>Identity<br>Contact<\/p><p>Finance Knowledge<\/p><p>Physical Space Security  <\/p><\/td><td><ul><li aria-level=\"1\">Execution of Finance and Accounting Affairs,<\/li><li aria-level=\"1\">Execution of Assignment Processes,<\/li><li aria-level=\"1\">Follow-up and Execution of Legal Affairs,<\/li><li aria-level=\"1\">Execution of Internal Audit \/ Investigation \/ Intelligence Activities,<\/li><li aria-level=\"1\">Execution of Communication Activities,<\/li><li aria-level=\"1\">Execution\/Supervision of Business Activities,<\/li><li aria-level=\"1\">Execution of Contract Processes,<\/li><li aria-level=\"1\">Providing Information to Authorized Persons, Institutions and Organizations,<\/li><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation,<\/li><\/ul><p>Personal data belonging to suppliers are processed for the purposes of the processing of personal data.<\/p><\/td><\/tr><tr><td><b>Parent \/ Guardian \/ Representative<\/b><\/td><td><p>Identity<\/p><p>Contact<\/p><\/td><td><ul><li aria-level=\"1\">Execution of Emergency Management Processes  <\/li><li aria-level=\"1\">Providing Information to Authorized Persons, Institutions and Organizations<\/li><li aria-level=\"1\">Execution of Activities in Compliance with the Legislation,  <\/li><li aria-level=\"1\">Execution\/Supervision of Business Activities,<\/li><li aria-level=\"1\">Execution of Communication Activities,<\/li><li aria-level=\"1\">Planning and managing the internal functioning of our hospital and daily operations,<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Parent \/ Guardian \/ Representative<\/b><\/td><td><p>Identity<\/p><p>Finance<\/p><p>Customer Transaction<\/p><\/td><td><ul><li aria-level=\"1\">Execution of activities in accordance with the legislation,  <\/li><li aria-level=\"1\">Execution\/Supervision of Business Activities,<\/li><li aria-level=\"1\">Planning and Management of Health Services and Financing,<\/li><li aria-level=\"1\">Execution of contract processes and payment transactions<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Parent \/ Guardian \/ Representative<\/b><\/td><td><p>Identity<\/p><p>Process Security<\/p><\/td><td><ul><li aria-level=\"1\">Execution of Emergency Management Processes  <\/li><li aria-level=\"1\">Providing Information to Authorized Persons, Institutions and Organizations<\/li><li aria-level=\"1\">Execution of activities in accordance with the legislation,  <\/li><li aria-level=\"1\">Execution \/ Supervision of Business Activities<\/li><li aria-level=\"1\">Execution of Communication Activities<\/li><li aria-level=\"1\">Execution of Visit and Accompaniment Procedures<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Patient Relative<\/b><\/td><td><p>Identity<\/p><p>Contact<\/p><\/td><td><ul><li aria-level=\"1\">Execution of Emergency Management Processes  <\/li><li aria-level=\"1\">Execution of Communication Activities<\/li><li aria-level=\"1\">Execution of Visit and Accompaniment Procedures<\/li><\/ul><p>purposes.<\/p><\/td><\/tr><tr><td><b>Visitor<\/b><\/td><td><p>Identity<\/p><p>Contact<br>Physical Space Security<\/p><p>Process Security<\/p><\/td><td><ul><li aria-level=\"1\">In order to monitor the entry and exit of visitors to our company and to ensure the security of our company building, in line with the legitimate interests of our company, the images of the visitors are recorded with the camera records within the company.  <\/li><\/ul><\/td><\/tr><tr><td><b>Visitor<\/b><\/td><td><p>Identity<\/p><p>Contact<\/p><p>Process Security<\/p><\/td><td><ul><li aria-level=\"1\">Pursuant to Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through These Publications, recording who and for what purpose the internet service provided is used, conducting activities on our website and confirming user information  <\/li><\/ul><p>For this purpose, IP address information of our website visitors, website login and exit information are processed.<\/p><\/td><\/tr><\/tbody><\/table><p><b>ANNEX 3- THIRD PARTIES TO WHOM PERSONAL DATA ARE TRANSFERRED BY KA\u015eKALO\u011eLU EYE HOSPITAL AND THE PURPOSES OF TRANSFER<\/b><\/p><table><tbody><tr><td><b>Third parties to whom data can be transferred<\/b><\/td><td><b>Data Transfer Purpose<\/b><\/td><\/tr><tr><td>Kaskaloglu Eye Hospital Business Partner<\/td><td>Transfers are made<br>limited to the purpose of<br>ensuring the fulfillment of the purposes of establishment of the joint venture<br>. Transfers are made to companies that carry out activities related to the Company&#8217;s business activities or provide services that facilitate business activities, limited to the purposes of ensuring cooperation and coordination, audit and development. <\/td> <\/tr><tr><td>Banks and Payment Service Providers <\/td><td>In order to provide payment services and to prevent any loss of rights, we share information with banks.<\/td><\/tr><tr><td>Insurance Companies<\/td><td>Sharing is made in order to ensure payment services and to prevent loss of rights.<\/td><\/tr><tr><td>Contracted Institutions<\/td><td>Sharing is made in order to ensure payment services and to prevent loss of rights.<\/td><\/tr><tr><td>Suppliers<\/td><td>It is transferred for the limited purpose of providing Ka\u015fkalo\u011flu Eye Hospital with the services outsourced by Ka\u015fkalo\u011flu Eye Hospital from the supplier and necessary to fulfill the commercial activities of Ka\u015fkalo\u011flu Eye Hospital.<\/td><\/tr><tr><td>Authorized Public Institutions and Organizations<\/td><td>It is transferred limited to the purpose when requested by public institutions and organizations and when they provide a legal basis.<\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Menu KASHKALOGLU EYE HOSPITAL PERSONAL DATA PROTECTION AND PROCESSING POLICY 1.INTRODUCTION As a data controller, the protection of personal data of its patients, customers, employees and other real persons with whom it has a relationship is of great importance for Laser Myopia Special Treatment Center Limited Company (&#8220;Ka\u015fkalo\u011flu Eye Hospital&#8221;, &#8220;Company&#8221; or &#8220;Data Controller&#8221; )&#8230;.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-43927","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/mahmutkaskaloglu.com.tr\/en\/wp-json\/wp\/v2\/pages\/43927","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mahmutkaskaloglu.com.tr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mahmutkaskaloglu.com.tr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mahmutkaskaloglu.com.tr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mahmutkaskaloglu.com.tr\/en\/wp-json\/wp\/v2\/comments?post=43927"}],"version-history":[{"count":1,"href":"https:\/\/mahmutkaskaloglu.com.tr\/en\/wp-json\/wp\/v2\/pages\/43927\/revisions"}],"predecessor-version":[{"id":43929,"href":"https:\/\/mahmutkaskaloglu.com.tr\/en\/wp-json\/wp\/v2\/pages\/43927\/revisions\/43929"}],"wp:attachment":[{"href":"https:\/\/mahmutkaskaloglu.com.tr\/en\/wp-json\/wp\/v2\/media?parent=43927"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}