Protection of Personal Data

CLARIFICATION TEXT

This clarification text has been prepared by ERSA SAĞLIK TURİZMİ DANIŞMANLIK VE BİLİŞİM TEKNOLOJİLERİ LİMİTED ŞİRKETİ (“COMPANY”), located at 7-8-9-10.KIS.MH.ÇOBANÇEŞME E-5 YANYOL CD.N.8/2A FLOOR:8 BAKIRKÖY / Istanbul, in its capacity as the data controller, in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“Law”) and the Communiqué on the Principles and Procedures for Fulfilling the Obligation to Inform.

Within the scope of the communication you have provided directly/indirectly with the COMPANY via the website, by phone, or through social media, your personal data will be processed by the COMPANY, partially or fully automatically, for the purposes of carrying out service processes and determining the patient’s condition prior to the operation. This is done on the legal basis of the necessity of data processing directly related to the establishment or performance of a contract as stated in Article 5 of the Law. The data may also be transferred to legal or real persons within the country and to our cloud system abroad within the same legal framework and purposes.

Under Article 11 of the Law, which regulates the rights of data subjects, you may submit your requests regarding the processing of your personal data in writing to the COMPANY’s official address or electronically via email to [email protected] in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

☐ I have read and understood the clarification text.

☐ I have read and understood the clarification text and hereby give my explicit consent to the processing and transfer of my personal data by the COMPANY, limited to the purposes and legal reasons stated, for the maximum necessary period and, in any case, within the legal statute of limitations, and declare that I have been duly informed by the COMPANY and that I give my explicit consent under the Law according to the preferences I have indicated below.

☐ I agree
☐ I do not agree

CLARIFICATION TEXT FOR PATIENT/SERVICE RECIPIENT UNDER THE PERSONAL DATA PROTECTION LAW NO. 6698

       1. PURPOSE AND SCOPE OF THE CLARIFICATION TEXT

This clarification text has been prepared in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“KVKK” or the “Law”) and the Communiqué on the Principles and Procedures for Fulfilling the Obligation to Inform published by the Personal Data Protection Authority. It aims to inform you about the method and legal basis for the collection of your personal data, the purposes for which it will be processed, and to whom and for what purposes it may be transferred by ERSA SAĞLIK TURİZMİ DANIŞMANLIK VE BİLİŞİM TEKNOLOJİLERİ LİMİTED ŞİRKETİ (“COMPANY”) acting as the data controller.

       2. IDENTITY OF THE DATA CONTROLLER

Company Name: ERSA SAĞLIK TURİZMİ DANIŞMANLIK VE BİLİŞİM TEKNOLOJİLERİ LİMİTED ŞİRKETİ
Address: 7-8-9-10.KIS.MH.ÇOBANÇEŞME E-5 YANYOL CD.N.8/2A FLOOR:8 BAKIRKÖY / Istanbul

PROCESSED PERSONAL DATA AND PURPOSES OF DATA PROCESSING

PERSONAL DATA PROCESSED

Your personal data listed below is processed by the COMPANY based on the nature and requirements of the services to be provided:

       3. PURPOSES OF DATA PROCESSING

Your above-mentioned personal data will be processed for the following purposes due to the necessity arising from the legal relationship established between the COMPANY and the Patient/Service Recipient:

• Creation of patient records for health services

• Provision of necessary examinations, medical diagnoses, and treatments

• Provision of post-operative support services

• Management of patient relations processes

• Compliance with legal regulations

• Collection and sharing of required data with relevant public institutions such as the Ministry of Health

• Execution of accounting and financial processes for service sales

• Execution of contractual processes

• Execution of advertising, campaign, and promotional processes

• Execution of product/service sales processes

• Execution of after-sales support services

• Ensuring operational security of the Data Controller

       4. TRANSFER OF PERSONAL DATA

Your personal data may be transferred to our business partners, third-party service providers, legally authorized public authorities, and private individuals within the scope of the legal bases and purposes specified above, in accordance with Articles 8 and 9 of the Law. All data processors and third parties with whom data is shared are subject to confidentiality obligations under the Law.

       5. DATA RETENTION PERIOD

Your personal data will be processed only for the purposes stated in this Clarification Text and in compliance with the applicable data processing and statute of limitation periods set by relevant legislation. In the event of changes in these legal periods, the new periods will apply. After the expiration of the relevant periods, your personal data will be deleted, destroyed, or anonymized by the COMPANY or upon your request, in accordance with the Law and related regulations.

       6. YOUR RIGHTS AS A DATA SUBJECT

You may submit your requests regarding the processing of your personal data under Article 11 of the Law in writing to the COMPANY’s official address or electronically via email at [email protected], in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

☐ I have read and understood the clarification text.

Name – Surname:
Date:
Signature:

EXPLICIT CONSENT STATEMENT REGARDING THE PROCESSING AND TRANSFER OF PERSONAL AND SENSITIVE PERSONAL DATA

I have read and understood the full version of the CLARIFICATION TEXT FOR PATIENT/SERVICE RECIPIENT UNDER THE PERSONAL DATA PROTECTION LAW NO. 6698, and I have been informed by ERSA SAĞLIK TURİZMİ DANIŞMANLIK VE BİLİŞİM TEKNOLOJİLERİ LİMİTED ŞİRKETİ (“COMPANY”) about how my personal and sensitive data is processed and transferred under the Law, as well as my right to withdraw my explicit consent at any time.

I hereby consent to the processing of my sensitive personal health data by the COMPANY and its affiliates for the purpose of delivering the requested healthcare services and for the necessary planning and execution of these services. I also consent to the sharing of my data with third parties located in Turkey and abroad where necessary.

I accept that I have read and understood the Clarification Text prepared by the COMPANY. Under KVKK, I give my consent for the processing of my data, including sensitive data, limited to the purpose of the respective process, the sharing of data both domestically and internationally, its retention for the required duration, and its transfer abroad due to the use of cloud and internet services.

DATA SUBJECT EXPLICIT CONSENT STATEMENT:

EXPLICIT CONSENT TEXT REGARDING THE PROCESSING OF PERSONAL AND SENSITIVE DATA ON SOCIAL MEDIA ACCOUNTS AND WEBSITE

As ERSA SAĞLIK TURİZMİ DANIŞMANLIK VE BİLİŞİM TEKNOLOJİLERİ LİMİTED ŞİRKETİ (“COMPANY”), under the Personal Data Protection Law No. 6698 (“KVKK”), we will process your personal data by publishing it on the COMPANY’s social media accounts and official website. We hereby request your explicit consent for this.

DATA SUBJECT EXPLICIT CONSENT STATEMENT
I hereby give my explicit consent to the processing and publishing of my data, including sensitive personal data, by the COMPANY on its website and social media accounts under the Law. I confirm that I have received the necessary information regarding this matter and have read and understood the Clarification Text prepared by the COMPANY.