Personal Data Processing Notice

I. Data Controller

AK 212 Bayrampaşa Diş Sağlığı Hizmetleri Sanayi ve Ticaret Limited Şirketi acts as the data controller under the KVKK.

The Company processes your personal data, including financial information, physical premises security records, visual and audio recordings, contact details, identification information, professional experience information, customer transaction information, information about your preferences and needs, and health data, in its capacity as data controller under the KVKK, depending on the nature of the relevant data processing activity.

II. Purposes of Processing Personal Data

Depending on the nature of the relevant data processing activity, your personal data may be processed for the following purposes:

• Managing emergency response processes
• Managing the selection and placement processes for job applicants, interns and students
• Managing job applicant application processes
• Fulfilling obligations arising from employment contracts and applicable legislation in relation to employees
• Managing employee benefits and entitlements
• Planning and carrying out training activities
• Ensuring that activities are conducted in compliance with applicable legislation
• Managing finance and accounting transactions
• Ensuring the security of physical premises
• Managing assignment processes
• Managing communication activities
• Planning and managing human resources processes
• Conducting and supervising business activities
• Managing occupational health and safety activities
• Receiving and evaluating suggestions for improving business processes
• Carrying out activities to ensure business continuity
• Managing logistics activities
• Managing the procurement of goods and services
• Managing the sale of goods and services
• Managing organisations and events
• Managing risk management processes
• Managing contractual processes
• Monitoring requests and complaints
• Ensuring the security of movable assets and resources
• Managing supply chain processes
• Providing medical diagnosis, treatment and care services
• Ensuring the security of the data controller's operations
• Managing work and residence permit procedures for foreign personnel
• Providing information to authorised persons, institutions and organisations
• Managing administrative activities

III. Purposes and Recipients of Personal Data Transfers

Where the conditions prescribed by the KVKK and applicable legislation are met, and only to the extent necessary for the purpose of the transfer, your personal data may be shared with the following persons, institutions and organisations:

• Authorised public institutions and organisations for the purpose of complying with legal obligations
• Relevant suppliers and service providers for the purpose of fulfilling obligations arising from employment contracts and managing the purchase and sale of goods and services, communications, logistics, finance and accounting transactions, and legal processes
• Legal advisers, financial advisers and accounting service providers where necessary
• Relevant service providers where required for treatment or related service processes, provided that the applicable legal conditions are met

Appropriate technical and administrative measures are taken in accordance with applicable legislation when personal data is transferred.

IV. Method and Legal Basis for Collecting Personal Data

Your personal data may be collected verbally, in writing or electronically, through automated or non-automated means.

Non-automated methods may include face-to-face meetings, telephone conversations, contracts, forms, treatment documentation and processes relating to the issuing of invoices.

Electronic and automated methods may include the website, electronic communication channels, email systems and, where applicable, CCTV systems.

Your personal data is processed within the framework of the personal data processing conditions set out in Article 5 of the KVKK and, in relation to special categories of personal data, Article 6.

Depending on the nature of the data processing activity, the processing of personal data may be based on the following legal grounds:

• Where processing is expressly provided for by law
• Where processing is necessary for the Company to comply with its legal obligations
• Where processing is directly related to the establishment or performance of a contract
• Where processing is necessary for the establishment, exercise or protection of a right
• Where processing is necessary for the legitimate interests of the data controller, provided that this does not prejudice the fundamental rights and freedoms of the Data Subject
• Where other conditions for processing personal data or special categories of personal data prescribed by applicable legislation are met

V. Rights of the Data Subject Under the KVKK

Under Article 11 of the KVKK, you have the following rights in relation to your personal data:

1. To learn whether your personal data is being processed
2. To request information if your personal data has been processed
3. To learn the purpose for which your personal data is processed and whether it is being used in accordance with that purpose
4. To know the third parties to whom your personal data has been transferred in Türkiye or abroad
5. To request the correction of your personal data if it has been processed incompletely or inaccurately
6. To request the deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK
7. To request that correction, deletion or destruction operations be notified to third parties to whom your personal data has been transferred
8. To object to any outcome that is detrimental to you resulting from the analysis of your processed personal data exclusively by automated systems
9. To claim compensation for damage suffered as a result of the unlawful processing of your personal data

How Can You Exercise Your Rights?

You may submit requests concerning your rights under the KVKK to the Company in accordance with the procedures prescribed by applicable legislation using one of the following methods:

• By applying in person to the Company's registered address at Yenidoğan, Abdi İpekçi Cd. No:55, 34030 Bayrampaşa, İstanbul, Türkiye
• By sending a written application to our registered address through a notary public or by registered post with acknowledgement of receipt, in order to verify your identity and prevent information from being disclosed to unauthorised persons
• By sending an email from your registered email address to info@dis212.com, or by using any other methods that may be determined by the Personal Data Protection Board in the future

Applications will be concluded as soon as possible depending on the nature of the request and, in any event, within thirty (30) days at the latest.

Applications are generally processed free of charge. However, where processing the application incurs an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.