PERSONAL DATA PROTECTION INFORMATION TEXT
TESA MEDİKAL SAĞLIK HİZMETLERİ SAN. TİC. LTD. ŞTİ. attaches utmost importance to protect the fundamental rights and freedoms of individuals, especially the privacy of private life regulated under Article 20 of the Constitution, in the protection and processing of personal data. In this context, it pays attention to the protection and processing of personal data in accordance with the law, and acts with this understanding in all planning and activities.
Our company does not only consider the protection and processing of personal data, which constitutes the basis of the right to privacy, only within the compliance with the legislation but also puts the value it attaches to human beings at the basis of its approach. Acting with this awareness, our company takes all necessary administrative and technical measures to store personal data safely and to prevent them from being processed unlawfully.
a. Data Controller
In accordance with the Personal Data Protection Law No. 6698 (“Law”), your personal data are collected and processed by TESA MEDİKAL SAĞLIK HİZMETLERİ SAN. TİC. LTD. ŞTİ. (“Company”) as data controller within the scope described below.
b. Personal Data Collection Method and Legal Reason
Your personal data are collected by fully or partially automatic or non-electronic means, through various channels such as various documents, job application forms, customer information forms, mails and e-mails submitted to our Company verbally, in written or electronically; call center; Company website; social media tools; Corporate communication accounts and devices; Company information systems and devices; security cameras; Third parties such as group companies, business partners that our company provides to or receives services from, or service/product suppliers from which it receives services;and employment companies and job search portals, and they are stored as long as necessary.
Your personal data are processed based on your express consent. Nevertheless, your personal data may be processed without seeking the explicit consent in cases where one of the following conditions, as set out in the second paragraph of Article 5 of the Law, is met; (i) it is clearly provided for by the laws, (ii) personal data is publicized by the data subject himself/herself, (iii) it is mandatory for the protection of life or physical integrity of the person himself/herself or of any other person, who is unable to explain his/her consent due to the physical disability, (iv) processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract, (v) it is mandatory for our Company to fulfill its legal liabilities, (vi) data processing is necessary for the establishment, exercise or protection of any right, (vii) processing of data is necessary for the legitimate interests of our Company, provided that this shall not violate the fundamental rights and freedoms of the data subject
c. Purposes of Processing of Personal Data
Your personal data are processed in cases where one of the conditions set out in the second paragraph of Article 5 of the Law is met, in order to fulfill the obligations and professional and legal requirements clearly stipulated in the laws; to accurately plan and execute our commercial relations, partnerships and strategies; to ensure the legal, commercial and physical security of our Company and business partners; to ensure the corporate functioning of our Company; to plan and implement our human resources policies in the best way; to ensure the functioning of our Company’s information systems and the information security and to establish necessary databases for this; to improve the services offered in our Company’s website and to eliminate any errors; to keep and follow the visitor records; and to perform the request and complaint management.
In the event that you give express consent, your personal data can be processed in order for you to inform about (promotion, advertisement, identification, announcement and information) and get the most out of products and services offered by our Company (statistics, analysis, profiling and likes reporting); to plan, improve and perform the corporate communication activities; and to analyze your financial profile.
ç. To Whom and for Which Purposes the Processed Personal Data may be Transferred
In cases where one of the conditions set out in the paragraph 2 of Article 5 of the Law is met, your personal data may be transferred to our group companies, subsidiaries, business partners, companies that we outsource to fulfill our contractual or legal liabilities (security, health, occupational safety, legal, etc.), authorized institutions and organizations provided that it is limited to the purposes specified in paragraph 1 of article (c) herein and any necessary security measures are taken within the framework of the conditions specified in Articles 8 and 9 of the Law.
In the event that you give express consent, your personal data may be transferred to our group companies, subsidiaries and business partners provided that it is limited to the purposes specified in paragraph 1 of article (c) herein.
d. Rights of the Data Subject per Article 11 of the Law
Our Company informs you of your rights in accordance with Article 10 of the Law; guides you how to use such rights, and performs the internal functioning, administrative and technical arrangements required for all these. In accordance with Article 11 of the Law, as data subject, you are entitled a) to learn whether your personal data have been processed or not, b) to request information if your personal data have been processed, c) to learn the purpose of the processing of your personal data and whether they have been used in compliance with the intended purpose, ç) to know the third person at home or abroad to whom your personal data have been transferred, d) to request rectification of your personal data in case they have been incompletely or incorrectly processed, e) to request deletion or destruction of your personal data under the conditions set forth in Article 7 of the Law, f) to request the third parties to whom your personal data have been transferred to be notified on the transactions performed as per subclauses (d) and (e) of Article 11 of the Law, g) to object to any consequence detrimental to you that may arise from the processed data being exclusively analyzed by automatic systems, and ğ) to request remedial action in case you incur any damage due to the unlawful processing of your personal data.
You can personally submit in written or send through a notary public your requests and applications regarding the implementation of the Law by filling Personal Data Protection Law Data Owner Application Form to the following address: “Başkent OSB Atatürk Bulvarı No: 19 Maliköy, Sincan / Ankara”.
Your requests and applications must include;
The subject of your request.
Any relevant information and documents must be included in the application.
Our Company will conclude the requests in the application within the shortest time depending on the nature of the request and within thirty days at the latest and free of charge. However, if the action requires an extra cost, fees may be charged according to the tariff determined by the Board.
Our Company may accept the request or refuse it with justification and shall communicate its response to the data subject in writing or by electronic means. In case the request is accepted, our Company performs the necessary action within the shortest time and inform the data subject. If the request is made due to fault of our Company, the fee received is refunded to the data subject.
In cases where the application is refused, the response is found insufficient or the application is not responded in time, the data subject is entitled to lodge a complaint with the Board within thirty days as of he or she learns about the response, or within sixty days from the date of application, in any case.
You can reach more detailed information on this subject from our Company’s “Policy for Protection and Processing of Personal Data”.