KVKK

INFORMATION AND CONSENT TEXT REGARDING THE PROCESSING OF PERSONAL DATA

Your personal data is processed by Clovermed Güzellik ve Özel Sağlık Hizmetleri Ticaret Limited Şirketi (the “Company”), acting as the data controller, within the scope of the provisions of the Personal Data Protection Law No. 6698 (” KVKK “) and within the framework of this Information Notice for Membership and/or Service Processes (” Information Notice “). It has been prepared to inform you about your rights regarding the use and protection of your personal data in accordance with the relevant law.

1.Legal Basis for Collection of Personal Data by Clovermed Beauty and Private Health Services Trade Limited Company

Your personal data, including the data you share and the data obtained during the provision of the service, which are required for the health service, are collected and processed in accordance with the Constitution, Law No. 1219 on the Practice of Medicine and Branches of Medicine, Health Services Fundamental Law No. 3359, Personal Data Protection Law No. 6698 and relevant legislation.

We process your personal data as the “Data Controller” in accordance with the KVKK;

• In accordance with the law and the rules of honesty,
• Accurately and up-to-date when necessary,
• For specific, clear and legitimate purposes,
• In connection with the purpose for which they are processed, limited and proportionate,
• We would like to inform you that we will keep, record, store, preserve, reorganize personal data for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed, we may share them with institutions legally authorized to request these personal data, and we may transfer, assign, classify and process them in other cases regulated in the KVKK, to third parties at home or abroad, under the conditions specified in the KVKK.

2.Your Personal Data Processed and the Purpose of Processing

For the purposes of providing you with services, contacting you when necessary, distinguishing your records that we have created in our system from those of other visitors, carrying out transactions, issuing invoices, receiving payment from you, determining the Services you need, enabling you to benefit from campaigns, providing necessary information, resolving your problems and complaints when you contact us through our communication channels, contacting you when necessary, working towards customer satisfaction and using it as evidence in disputes that may arise between us, fulfilling our obligations arising from legislation, fulfilling our other legal obligations to authorized and authorized public institutions and organizations.

-Your Identity Information (Name Surname, TR ID number, Passport number, Date of Birth, signature)

-Your Contact Information (Address, e-mail address, telephone number)

-Your Transaction Information (Service contents, fees, payment details)

-Your bank account and credit card information

-Your security camera footage in order to ensure security against possible illegal acts and to fulfill our obligations to judicial authorities to provide information, documents and other related obligations,

-We process your health information (allergies, blood sugar, pulse, surgeries, health history, past illnesses, treatments, medications used, nutrition and sleep routines, physical characteristics such as weight, height, skin, hair, nails, habits, immune system characteristics, sports habits, addiction information, profession, chronic problems, surgical history) to assess whether you have any illnesses, allergies, or other health conditions that prevent you from receiving the Services and to determine the most appropriate Service for you. All of your data may be stored externally, either physically or virtually (cloud environment, data warehouses, etc.), in accordance with company policies.

3.Method of Collection of Personal Data

Your personal data is collected by our Company through fully or partially automatic means or non-automatic means provided that it is part of any data recording system, from physical and/or electronic environments through our company’s https://www.sarayaman.com.tr/, the information you obtain when you apply to our company, the information and documents you send to our social media accounts, audio and video remote communication applications, accounts and systems, electronic surveys conducted for the purpose of evaluating the service, printed forms through which we communicate with you, telephone, fax, mail/cargo, e-mail, SMS, request/complaint platforms, etc.

4.Parties to Which Your Personal Data May Be Transferred, Purposes and Legal Reasons for Transfer

Your personal data may be shared with the relevant institutions, organizations, or insurance companies you have notified for the purposes specified in Article 2 of this Information and Consent Text; for the supervision and financing of healthcare services; and, if legally required, with relevant public institutions and organizations for the protection of public health, preventive medicine, medical diagnosis, treatment, and care services; and for the planning and management of healthcare services and their financing. Furthermore, it may be shared with the companies that provide our website infrastructure services and with individuals and institutions within the country from which we receive data storage services, and only with your explicit consent, with individuals and institutions abroad. Visual recordings, such as photos or videos, may be shared on social media only with your explicit consent.

All sharing is done in accordance with Articles 8 and 9 of the KVKK and by ensuring data security.

5.Your Rights as a Data Subject Pursuant to KVKK

By applying to us, the “Data Controller”, in accordance with Article 11 of the KVKK;

1. To learn whether your personal data is being processed,
2. Request information regarding your personal data if it has been processed,
3. Knowing the third parties to whom your personal data is transferred, whether domestically or abroad,
4. Request correction of your personal data if it is processed incompletely or incorrectly,
5. Request the deletion, destruction or anonymization of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
6. To request that the transactions carried out in accordance with clauses (d) and (e) be notified to third parties to whom your personal data has been transferred,
7. If you suffer damage due to the unlawful processing of your personal data, you have the right to demand compensation for the damage.

6.Application Procedure

In accordance with Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your applications to us, the “Data Controller” within the scope of Article 11 of the KVKK, by filling out the application form we have prepared, in writing, through a Notary or by registered letter with return receipt, or to the address “Levent Mah. Levent Cad. No:9 Beşiktaş/İstanbul” or

• You can send your messages to the kep address “clovermed@hs01.kep.tr ” ,the e – mail address info@clovermed.com.tr , by using your registered electronic mail (KEP) address, secure electronic signature, mobile signature or the e-mail address you have previously notified us and that is registered in our system.

Your application must include your name, surname, and signature if your application is in writing; your Turkish ID number if you are a citizen of the Republic of Turkey; your nationality if you are a foreigner; your passport number or ID number if you have one; your residence or workplace address for notification; your email address for notification, if you have one; your telephone and fax numbers; and the subject of your request. All information and documents related to your request must be included in the application.

Your applications in this context will be finalized by us within 30 days at the latest.

Applications are generally processed free of charge. However, if the process requires additional costs, we would like to remind you that a fee may be charged according to the tariff determined by the Personal Data Protection Board.

If your application is rejected, remains unanswered, or our response is found inadequate, you can file a complaint with the Personal Data Protection Board within thirty days from the date you learn of our response, or within sixty days from the date of application.

I understand and consent that my personal data will be processed in relation to the health service mentioned above and explained to me in detail verbally.