K.v.k.k

MAYSEN WEBSITE DISCLOSURE TEXT

ŞAH GRUP MEDİKAL İTHALAT İNŞAAT TURİZM SANAYİ VE TİC. LTD. ŞTİ. PERSONAL DATA PROTECTION LAW NO. 6698 DISCLOSURE TEXT

As ŞAH GRUP MEDİKAL İTHALAT İNŞAAT TURİZM SANAYİ VE TİC. LTD. ŞTİ. (hereinafter referred to as «Şah Grup»), we respect and value the privacy of individuals. Therefore, we would like to inform you about your rights regarding the use and protection of your personal data under Law No. 6698 on the Protection of Personal Data (hereinafter referred to as «KVKK»).

a) Data Controller
We, ŞAH GRUP MEDİKAL İTHALAT İNŞAAT TURİZM SANAYİ VE TİC. LTD. ŞTİ., act as the data controller of your personal data under Law No. 6698 on the Protection of Personal Data and relevant legislation, and we are processing your personal data in accordance with the provisions of this law.

b) Processed Personal Data
In accordance with KVKK and relevant legislation, the categories and descriptions of personal data that will be processed under the purposes and legal reasons specified in this Disclosure Text, pursuant to Law No. 6698 on the Protection of Personal Data, are as follows:

• Identity Information: Name-surname, Turkish ID number, place of birth, date of birth, gender, marital status, passport number
• Contact Information: Address, phone number, email address
• Health Information: Health insurance details, laboratory and imaging results, health reports, blood type, medical history, medications used, chronic illness information, and other health and sexual life-related data
• Financial Information: Bank account information, credit card details, billing information
• Transaction Information: Responses and comments shared to evaluate our services, voice recordings made during calls to our customer service center, surveys and form information provided with customer consent, details of products and services purchased
• Physical Security Information: Security camera recordings when visiting our company
• Transaction Security Information: Browsing data collected during use of our websites, IP address, browser information, device information

c) Purposes of Personal Data Processing
Your personal data will be processed for the following purposes:

• Execution of processes related to providing and performing products and services offered by Şah Grup
• Execution of medical diagnosis, treatment, and care services, planning and managing health services and financing activities, and performing intermediary functions
• Fulfillment of administrative and commercial activities arising from the Turkish Commercial Code No. 6102 and other relevant legal regulations
• Archiving and storing data related to the provided health and financial services in compliance with the applicable legislation
• Planning patient and customer relationship management processes
• Sharing requested information with the Ministry of Health and other public institutions and organizations
• Recording in online software systems used by Şah Grup to implement its sales and marketing policies
• Carrying out necessary activities by our business units to provide you with the products and services offered by Şah Grup
• Ensuring increased customer satisfaction
• Collecting and evaluating any complaints or suggestions regarding Şah Grup’s products and services
• Ensuring the legal security of customers and visitors
• Ensuring the security of common areas within Şah Grup
• Managing and executing legal affairs
• Fulfillment of legal and regulatory requirements
• Responding to official institution requests
• Conducting information security activities
• Performing audit and ethical activities
• Providing information regarding participation in current or potential future campaigns

Your personal data will be processed in accordance with the legal grounds set out in KVKK Article 5 (2), specifically:

• a) Clearly foreseen by laws,»
• b) Necessary for the performance of a contract, or directly related to the establishment or performance of a contract,»
• c) Necessary for fulfilling the legal obligations of the data controller,»
• d) Necessary for the establishment, exercise, or protection of a right,»
• e) Necessary for the legitimate interests of the data controller, provided that the processing does not harm the fundamental rights and freedoms of the data subject.»

d) Transfer of Processed Personal Data to Third Parties and Purposes of Transfer

Your personal data may be transferred to third parties without your explicit consent in accordance with Article 8(2)(a) of KVKK, for the following purposes:

• To fulfill legal obligations under relevant regulations, and to share with relevant public institutions and organizations when required or requested.
• To share with contracted sworn financial advisors and independent auditing firms, within the scope of confidentiality obligations, as necessary for the fulfillment of accounting processes.
• To share with our lawyers, within the scope of confidentiality obligations, as necessary for the follow-up of legal processes.
• To share with third parties, representatives, and consulting firms or partnerships involved in the provision and performance of services to customers, to the extent necessary for the performance of these services.

e) Method and Legal Grounds of Personal Data Collection

Your personal data is collected using automatic or non-automatic methods through verbal, written, or electronic means, based on the legal grounds specified in Articles 5(2) and 6(2) of KVKK, for the purposes mentioned in section (c) of this text:

• By filling out forms, sending emails, making phone calls, visiting the website, or contacting through social media platforms by the data subject.
• By sharing business cards, or transmitting data through partner institutions or organizations.
• Through security camera recordings at the entrance/exit points and common areas of Şah Grup company premises.

f) Your Rights Under Article 11 of KVKK

Under Article 11 of KVKK, as the data subject, you have the following rights regarding your personal data. You can exercise these rights by completing all the required information in the Data Subject Application Form and submitting your request in accordance with Article 11 and Article 13(1) of KVKK, as well as the Regulation on Procedures and Principles for Applications to the Data Controller:

• By physically visiting our office at Kızıltoprak Mah. Aspendos Blv. No: 15 B İç Kapı No: 303, Muratpaşa/ANTALYA,
• By using our registered electronic mail (KEP) address,
• By sending a written request through a notary or registered return receipt mail to verify your identity and prevent giving information to the wrong person,
• By using a secure electronic signature, mobile signature, or (if applicable) the email address previously notified to us and registered in our systems, and sending it to kvkk@sahgrup.com.tr, or by using any other methods specified by the Authority in the future.

g) Retention Period of Personal Data

Şah Grup will delete, destroy, anonymize, or irreversibly anonymize personal data when the purpose of processing is no longer valid or upon the expiration of the mandatory retention periods specified in laws and other relevant legislation.

h) Changes and Updates

This disclosure text has been prepared in accordance with Law No. 6698 on the Protection of Personal Data and other relevant legislation. In case of any changes in the relevant legislation or updates to Şah Grup’s personal data processing purposes and policies, necessary modifications will be made to this text. The most up-to-date version of the Disclosure Text can be accessed at https://www.maysen.com.tr/ru/k-v-k-k/