WEBSITE ILLUMINATION TEXT

This illumination text is prepared to inform you about which of your personal data is processed, for what purpose, how, and why, with whom it is shared, and how long it is storedby the data controller. The information is provided under Article 10 of the Personal Data Protection Law No. 6698.

As https://www.egepolhospitals.com/https://www.egepolhastanesi.com/), we present to thepublic and relevant persons the illumination text we prepared under Article 10 of the PersonalData Protection Law No. 6698 (“Law”), which includes information on personal data processing activities for all data categories and person groups.

ARTICLE 1: DATA CONTROLLER

Your personal data may be processed by Nasmed Private Health Services Trade Inc. (PrivateEgepol Hospitals Group) as the data controller, within the scope explained below.

The term data controller refers to the natural or legal person who determines the purposes andmeans of processing personal data, and who is responsible for establishing and managing thedata recording system.

You can contact the data controller through the following channels:

Email: info@egepolhospitals.com

ARTICLE 2: PROCESSED PERSONAL DATA AND PURPOSE OF PROCESSING PERSONAL DATA

The personal data categories of website visitors processed by us are listed below, and eachdata category is processed for the purposes stated next to them:

1. **Identity / Conducting Communication Activities**

2. **Communication / Conducting Communication Activities**

3. **Transaction Security / Providing Information to Authorized Persons, Institutions, andOrganizations**

ARTICLE 3: PARTIES TO WHICH PERSONAL DATA MAY BE TRANSFERRED AND PURPOSE OF TRANSFER

The personal data subject to this illumination text may be transferred for the purpose of fulfilling legal obligations to the following parties and places:

1. **Identity / Authorized public institutions and organizations**

2. **Communication / Authorized public institutions and organizations**

3. **Transaction Security / Authorized public institutions and organizations**

ARTICLE 4: METHODS AND LEGAL REASONS FOR COLLECTING PERSONAL DATA

The identity and contact information of the visitors are obtained only if the visitor commentson an existing article on the website and manually enters this information into the commentform.

Another piece of information obtained is the visitors‘ IP address, which is automaticallycollected by the server.

The identity and contact information obtained from the visitors consists of the visitor’s name and email address, and personal data is processed by obtaining the visitor’s explicit consentduring the completion of the comment form for the purpose of making a comment.

The recording of the visitor’s IP address is processed under Article 5/2-f of the Personal Data Protection Law No. 6698.

ARTICLE 5: STORAGE PERIOD OF PERSONAL DATA

The storage periods of personal data written in this illumination text are listed belowaccording to data categories, and personal data is destroyed at the end of the period.

1. **Identity / 10 years from the acquisition of identity information**

2. **Communication / 10 years from the acquisition of communication information**

3. **Transaction Security / 10 years from the processing of personal data**

ARTICLE 6: RIGHTS OF THE DATA SUBJECT

The natural person whose personal data is processed is defined as the data subject and has thefollowing rights by applying to the workplace:

1. To learn whether personal data is processed or not

2. To request information if personal data has been processed

3. To learn the purpose of processing personal data and whether they are used in accordancewith their purpose

4. To know the third parties to whom personal data is transferred domestically or abroad

5. To request the correction of personal data if it is incomplete or incorrectly processed

6. To request the deletion or destruction of personal data

7. To request the notification of the transactions made according to subparagraphs (e) and (f) to third parties to whom personal data has been transferred

8. To object to the occurrence of a result against the person himself/herself by analyzing theprocessed data exclusively through automated systems

9. To request compensation for the damage if personal data is damaged due to unlawfulprocessing

Best regards,

NASMED PRIVATE HEALTH SERVICES TRADE INC.  

(PRIVATE EGEPOL HOSPITALS GROUP)

Important reminder: According to subparagraph (f) of the first clause of Article 5 of theCommuniqué on the Procedures and Principles for Fulfilling the Obligation to Inform, “Ifpersonal data processing activity is carried out based on the condition of explicit consent, theobligation to inform and obtaining explicit consent must be fulfilled separately.”

In this context; the illumination text you have read does not mean that your explicit consenthas been obtained. The personal data we process based on explicit consent are only yourname and email/phone information, and the only place these are processed is theCONTACT/COMMENT section.

If you want to contact us by writing a comment under any article, it is confirmed by theinformation located just above the comment approval box that we can only process youridentity and contact information if you give explicit consent.

Therefore; if you do not want to give explicit consent, please do not contact us by writing a comment.

This situation should not be considered as conditioning the service on explicit consent. Because browsing and accessing information on our website is not subject to any conditions, you can reach our company directly and contact us through the contact addresses specified on this page.

info@egepolhospitals.com

https://www.egepolhospitals.com/

As NASMED PRIVATE HEALTH SERVICES TRADE INC. (PRIVATE EGEPOL HOSPITALS GROUP), our main goal is not to process your personal data unless there is a legal obligation, and we would like you to know how sensitive we are about the processing of personal data.