Information Text on Processing of Personal Data

Bahçeci Sağlık Hizmetleri A.Ş. (“Bahçeci”) places a high priority on protecting fundamental rights and freedoms, as well as the privacy of personal life, ensuring information security, and respecting ethical values. In this context, we process and protect the personal data of all individuals related to the Company, including those benefiting from our products and services, in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”).

Purposes of Processing and Transferring Personal Data

Your personal data may vary depending on our Company’s commercial activities. Your personal data is collected verbally, in writing, or electronically, through our Company’s offices, email, and similar means, whether automatically or manually. Additionally, when you visit our website, Bahçeci may collect personal information about you in areas where you are asked to provide information, either directly or indirectly.

Bahçeci only uses this personal data for the purposes necessary and ensures that the collected personal data is protected in accordance with the relevant legal provisions.

Your collected personal data is primarily used for carrying out necessary works for benefiting from the services provided by our Company, ensuring the legal and commercial safety of individuals in a business relationship with our Company, conducting administrative operations related to communication carried out by our Company, informing you about our services and activities, maintaining and executing patient records and medical treatment plans, organizing information and appointment arrangements, conducting private health insurance processes for financing and planning health services, processing your health and identity data sent through our websites to contact you, initiating and managing treatment processes, corporate communication, billing for the services provided, fulfilling legal obligations arising from legislation, sharing medical data and health reports related to patient history with relevant parties upon request, maintaining communication, conducting necessary processes to ensure that treatment is properly carried out, measuring your satisfaction with the services received, and improving our services accordingly, risk management, sharing services, innovations, and other news related to our centers, conducting administrative processes, managing after-sales services, ensuring the security of business processes and necessary audits, ensuring the building security of our Company centers, fulfilling contractual obligations, ensuring the continuity of our Company activities, managing occupational health and safety processes, managing processes with public institutions and organizations such as the Ministry of Health, protecting public health, preventive medicine, conducting medical diagnosis, treatment, and care services, planning and managing health services and financing; planning and managing the internal operations of our medical center, analyzing to improve health services; training and developing our employees, monitoring and preventing abuse and unauthorized transactions; conducting research, including but not limited to conducting, developing medical diagnosis, treatment, and care services, increasing patient satisfaction, research, ensuring the physical security and control of our Company centers, managing evaluation/complaint processes, legal compliance processes, audits, financial operations, etc., determining and implementing our Company’s commercial and business strategies, providing the requested service, sending communications related to changes, information, use, maintenance, marketing, and statistical services, and renewing contracts through call centers, websites, online services, and similar means, orally, in writing, by camera systems, or electronically recorded and processed.

Additionally, the personal data mentioned above may be processed within the framework of the 3359 Health Services Fundamental Law, the Decree-Law on the Organization and Duties of the Ministry of Health and Its Affiliated Organizations No. 663, the Regulation on the Processing and Protection of Personal Health Data, and regulations of the Ministry of Health, and other legal provisions, and can be transferred to physical archives and information systems belonging to Bahçeci and/or our suppliers and stored in both digital and physical environments.

Your personal data may be shared with our suppliers with whom we cooperate in providing the services of our medical center, partners (software companies providing technical support services, companies providing ultrasound device services, etc.), the Ministry of Health, affiliated subunits and family medicine centers, private insurance companies (health, retirement, life insurance, etc.), the Social Security Institution, the General Directorate of Security, and other law enforcement agencies, the General Directorate of Population, other relevant official institutions and organizations, the Turkish Pharmacists Association, courts, laboratories, medical centers, and third parties providing health services located within or outside the country, the healthcare institution to which the patient has been referred or the healthcare institution the patient has applied to, authorized representatives you have designated, institutions you are affiliated with and/or working with, lawyers, tax advisors, and auditors, including consultancy third parties we consult, regulatory and supervisory authorities, and official authorities, and systems and/or companies within the corporate group to which our medical center belongs, both inside and outside the country (you can apply in writing to our hospital for more detailed information).

Methods and Legal Reasons for Personal Data Collection

Your personal data is collected, used, recorded, stored, and processed in accordance with the law and principles of honesty, in connection with and limited to the legitimate purposes specified above, by providing clear and understandable written information to the data subjects by our Company, and if necessary, by obtaining explicit consent.

Your personal data is processed and shared with the above-mentioned persons and institutions under the legal reasons specified in Article 5/2 of the KVKK:

• It is explicitly foreseen in the laws.
• It is necessary for the protection of the life or bodily integrity of a person who is unable to express their consent due to actual impossibility or whose consent is not legally valid.
• It is necessary for the processing of personal data of the parties of a contract, provided that it is directly related to the establishment or performance of a contract.
• It is necessary for the data controller to fulfill its legal obligation.
• It has been made public by the relevant person.
• It is necessary for the establishment, exercise, or protection of a right.
• It is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Security of Personal Data

Your personal data is processed and stored in such a way as to prevent unauthorized access, loss, or damage, using encryption when necessary, in accordance with the declared purposes and scope, and is accessible only to authorized persons, with necessary other information security measures also taken. Additionally, Bahçeci uses software prescribed by the Ministry of Health for healthcare institutions, and these software are updated at regular intervals.

Retention Period of Personal Data

Your personal data will be retained for the periods specified in the relevant legal regulations or for as long as required by the processing purposes mentioned above and will subsequently be completely deleted, destroyed, or anonymized in accordance with the KVKK.

Rights of the Personal Data Owner under Article 11 of the KVKK

Under Article 11 of the KVKK, as data owners, you have the following rights:

• To learn whether your personal data is being processed,
• To request information regarding the processing of your personal data if it has been processed,
• To learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
• To know the third parties to whom your personal data has been transferred, whether domestically or abroad,
• To request the correction of your personal data if it is incomplete or incorrectly processed and to request that the transaction made be notified to third parties to whom personal data has been transferred,
• To request the deletion or destruction of your personal data if the reasons necessitating the processing have ceased to exist, even though it has been processed in accordance with the KVKK and other relevant laws, and to request that the transaction made be notified to third parties to whom personal data has been transferred,
• To object to the emergence of a result against you by exclusively analyzing your processed data through automated systems,
• To request compensation for damages in case you suffer damage due to the unlawful processing of your personal data.

You can find detailed information on how to exercise your rights regarding the personal data processed by our Company in the Personal Data Protection and Privacy Policy at www.bahceci.com.

Our Company reserves the right to make changes to the Privacy Policy without prior notice in order to keep its privacy and data protection principles up to date and in compliance with relevant legislation. If we decide to change the Privacy Policy, the revised policy will be published on our website.

Data Controller:

Bahçeci Sağlık Hizmetleri A.Ş.
Mahir İz Cad. No:31 Kat:2-3 Altunizade/Istanbul
Tel: 444 39 49
Fax: 0216 340 80 00
Istanbul Trade Registry Office/registry no: 370646
https://bahceci.com