ANTALYA MAYSEN TURİZM SEYAHAT ACENTASI TURSAB BELGE NO: 17737

CLARIFICATION TEXT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA NO. 6698 BY ŞAH GRUP MEDİKAL İTHALAT İNŞAAT TURİZM SANAYİ VE TİC. LTD. ŞTİ.

As ŞAH GRUP MEDİKAL İTHALAT İNŞAAT TURİZM SANAYİ VE TİC. LTD. ŞTİ. (hereinafter referred to as "Şah Grup"), we respect and value the privacy of personal life. Therefore, we would like to inform you about your rights regarding the use and protection of your personal data under the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as "KVKK").

a) Data Controller

We, as ŞAH GRUP MEDİKAL İTHALAT İNŞAAT TURİZM SANAYİ VE TİC. LTD. ŞTİ. (hereinafter referred to as "Şah Grup"), inform you that we process your personal data as a data controller within the scope of the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as "KVKK") and other relevant legislation.

b) Processed Personal Data

In accordance with KVKK and other relevant legislation, the categories and descriptions of personal data to be processed within the scope of the purposes and legal reasons stated in this Clarification Text are as follows:

  • Identity Information: Name-surname, T.R. Identity number, place of birth, date of birth, gender, marital status, passport number
  • Contact Information: Address, phone number, e-mail address
  • Health Information: Health insurance information, laboratory and imaging results, health reports, blood type, information on illness and treatment history, medication information, chronic disease information, and other similar data related to health and sexual life
  • Financial Information: Bank account information, credit card information, billing information
  • Customer Transaction Information: Responses and comments shared to evaluate our services, voice recordings of calls if our call center is contacted, surveys sent with customer consent, form information, purchased product and service information
  • Physical Space Security Information: Security camera recordings if our company is visited
  • Transaction Security Information: Navigation information, IP address, browser information, device information obtained during the use of our websites

c) Purpose of Processing Personal Data

Your personal data is processed by Şah Grup for the purposes of carrying out the processes related to the provision and performance of products and services, conducting medical diagnosis, treatment, and care services, planning and managing health services and their financing, fulfilling administrative and commercial activities arising from the Turkish Commercial Code No. 6102 and other legal regulations, archiving/storing data related to the provided health and financial services in accordance with the legislation, planning patient and customer relationship processes, sharing requested information with the Ministry of Health and other public institutions and organizations, recording in online software systems used by Şah Grup to carry out its sales and marketing policies, carrying out necessary work by our business units to enable you to benefit from the products and services offered by Şah Grup, ensuring the increase of customer satisfaction, collecting and evaluating complaints and suggestions regarding Şah Grup products and services, ensuring the legal security of customers and visitors, ensuring the security of Şah Grup's common areas, following up and conducting legal affairs, fulfilling legal and regulatory requirements, fulfilling official institution requests, carrying out information security activities, conducting audit and ethical activities, providing information for participation in existing campaigns or potential campaigns, within the legal grounds of "a) Being explicitly stipulated in the laws", "c) Being necessary to process personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract", "ç) Being mandatory for the data controller to fulfill its legal obligation", "e) Data processing being mandatory for the establishment, exercise, or protection of a right", f) Data processing being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject" as stated in Article 5 (2) of the KVKK.

d) To Whom and for What Purpose the Processed Personal Data Can Be Transferred

Your personal data will be transferred for the purposes stated below without seeking the explicit consent of the data subject, in accordance with Articles 8 (2) (a) of the KVKK:

  • It may be shared with relevant public institutions and organizations if required or upon request, in order to fulfill legal obligations under the relevant legislation.
  • It will be shared as necessary with our contracted certified public accountant and independent audit firm within the framework of the confidentiality obligation for the purpose of carrying out accounting processes.
  • It will be shared as necessary with our lawyers within the framework of the confidentiality obligation for the purpose of following up legal processes.
  • It will be shared as necessary with third parties, representatives, and, but not limited to, consultancy firms and partnerships from which services are received, to the extent that it is mandatory for the performance of services offered to customers and within the scope of carrying out the services.

e) Method and Legal Basis for Collecting Personal Data

Your personal data is obtained verbally, in writing, or electronically through automatic or non-automatic methods based on the legal reasons stated in Articles 5 (2) and 6 (2) of the KVKK to fulfill the purposes stated in paragraph (c) of this text:

  • Filling out a form, sending an e-mail, contacting via phone call, visiting the website, and contacting through social media platforms by the data subject.
  • Sharing business cards, transmission through solution partner institutions or organizations by the data subject.
  • Obtained through security camera recordings at the entrance-exit and common areas of the Şah Grup company building.

f) Your Rights Under Article 11 of the KVKK

As a data subject, you have rights under Article 11 of the KVKK. You can submit your requests regarding these rights by filling out all the information specified in the Data Subject Application Form in accordance with Article 11 and Article 13, paragraph 1 of the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller, by:

  • Coming in person to our Company at the address “Kızıltoprak Mah. Aspendos Blv. No: 15 B İç Kapı No: 303 Muratpaşa/ANTALYA”,
  • Via our registered electronic mail (KEP) address,
  • In writing through a notary or by registered letter with return receipt to identify you and not to give information to the wrong people,
  • By sending an e-mail to kvkk@sahgrup.com.tr using a secure electronic signature, mobile signature, or (if any) the e-mail address previously notified by you to our Company and registered in our systems, or by other methods to be determined by the Board in the future.

g) Retention Period of Personal Data

Şah Grup deletes, destroys, annihilates, or anonymizes personal data when the purpose of processing the personal data ceases to exist and upon the expiration of the mandatory retention periods determined under the Laws and other relevant legislation.

h) Changes and Updates

This clarification text has been prepared within the scope of the Law on the Protection of Personal Data No. 6698 and other relevant legislation. Necessary changes may be made to this clarification text in line with changes that may occur in the relevant legal legislation and/or the personal data processing purposes and policies of Şah Grup. The most up-to-date version of the Clarification Text can be accessed at https://www.maysen.com.tr/kvkk.