PRIVACY POLICY ON THE PROTECTION AND PROCESSING OF PERSONAL DATA AND LIGHTING TEXT

1. PURPOSE

Data controller (Controller) Dentaluna Oral and Dental Health Services Ltd. Sti. by

personal data of customers, employees and other real persons with whom they are in contact

conservation is of paramount importance. Protection of personal data of our company

included in its core policies. The purpose of this policy is real persons, TR

Constitution, Law on Protection of Personal Data No. 6698, European Union Parliament General

Data Protection Regulation, Personal Data Protection Board Personal Data Retention and Destruction Policy

and the methods to be followed for the protection of rights arising from other legal regulations and

arranging principles.

2. SCOPE

This policy applies to Dentaluna Oral and Dental Health Services Ltd. Sti. managed by all

It is applied in the activities carried out for the processing and protection of personal data.

This policy; of our partners, officers, employees, customers and

relates to all personal data processed by third parties.

3. OUR BASIC PRINCIPLES ON THE PROTECTION OF PERSONAL DATA

Personal Data by the company; To prevent the unlawful processing of personal data,

To prevent unlawful access to personal data and to keep personal data

The fundamentals of providing are protected by taking the criteria.

The main principles of our company regarding the protection of Personal Data are as follows;

•  The personal data of the data owner is processed within the scope of consent.
•  The data is subject to the conditions stipulated in the law on the Protection of Personal Data and the law.
• processed in an appropriate, fair and transparent manner
•  Data are collected for clear and legitimate purposes and are not used contrary to these purposes.
• not processed.
•  Limited to what is adequate, appropriate and necessary for the purpose for which they are processed.
•  It is accurate and up-to-date, taking into account the purposes for which they are processed.
• personal data will be deleted without delay or the necessary correction will be made.
• steps are taken.
•  Only as long as the personal data processing purposes require.
• maintained in such a way that it can be identified.
•  Protection against unauthorized and unlawful processing, accidental loss, destruction or destruction.
• by taking appropriate technical or regulatory measures, including
• data security is ensured.
•  Data owners are informed and clarified on necessary issues.

Within the scope of data protection, our company "personal data in accordance with the law and

honest processing”, “ensuring that personal data is accurate and up-to-date when necessary,

“processing personal data for specific, clear and legitimate purposes”, “for the purpose for which personal data is processed”

being connected, limited and measured” and “personal data is foreseen or processed in the legislation”

The principles of “preservation for the time necessary for the purpose” are complied with.

Administrative and technical measures are taken by our company regarding the security of data;

Technical measures taken by our company;

•  Personal data processed by our company are controlled by established technical systems.
•  The technical measures taken are reported within the scope of our obligation to inform and
• is kept accessible.
•  Personnel responsible for technical protection procedures are employed.
• Administrative measures taken by our company;
•  Our employees comply with the Law on the Protection of Personal Data and the law on personal data.
• trained to handle.
•  All transactions regarding the processing of personal data, as a result of the analysis of business units
• carried out in accordance with the personal data inventory and its annexes.
•  Contracts concluded with our company employees and legal relations between us and customers.
• Records regarding the processing of personal data and data security in documents related to the relationship
• are placed or an explicit consent form is obtained.

4. RIGHTS OF PERSONS, whose PERSONAL DATA IS PROCESSED BY OUR COMPANY

The natural persons whose personal data are processed by our company are as follows;

•  Learning whether personal data is processed or not.
•  If personal data has been processed, requesting information about it,
•  Learning the purpose of personal data and whether the data is used in accordance with the purpose.
• learn about
•  To learn the third parties to whom personal data is transferred, at home or abroad
•  Requesting correction of personal data if it is incomplete or incorrect,
•  Even if it is processed in accordance with the law, in case the purpose of processing disappears, the data
• to demand its destruction,
•  Elimination of damages arising from unlawful processing of personal data.
• don't ask has rights.

5. OBLIGATIONS OF OUR COMPANY ON THE PROTECTION OF PERSONAL DATA

Purposes of data processing within the scope of our company's obligation to inform the Data Owner

provides clear and understandable information about Information to be made to relevant persons

It includes at least the following elements;

•  Identity of the data controller or its representative, if any
•  Purpose, method and legal reason for data processing
•  To whom personal data can be transferred and for what purpose
•  Rights of data owner according to legislation and other regulations
• Our company also will protect the data security of data owners with all kinds of precautions.
• commits. Within the scope of legal regulations;
•  To prevent the personal data of the data owner from being processed unlawfully.
•  To prevent unlawful access to personal data.
•  Protection against misuse, unlawful disclosure, alteration of personal data.
• appropriate and necessary administrative and technical
• takes measures.

In accordance with the Regulation on the Data Controllers Registry of our Company, the Data Controllers Registry

Obligations determined in the regulation by registering to the Information System (VERBIS)

carries out. In this context, the following information will be shared with the public:

•  Data controller, if any, the name and address of the representative, if any, KEP address
•  For what purpose personal data can be processed
•  Subject of personal data and data categories of data owners
•  Recipient and recipient groups to whom Personal Data can be transferred
•  Personal data projected to be transferred to foreign countries
•  The registration date and the date the registration ends,
•  Measures taken regarding personal data security
•  The maximum period determined for the purpose for which personal data is processed.

6. PERSONAL DATA PROCESSED BY OUR COMPANY AND THE PURPOSE OF THE PROCESSING

Our company is committed to providing better quality service to customers, providing certainty in service and

In order to establish customer satisfaction, some of our customers' data

is functioning properly. These data are listed as follows:

a. Customers First and Last Names

b. Customers phone numbers

c. Customers' e-mail addresses

D. In the diagnosis and treatment process of the customers, their stories, tests and examinations and all other necessary

health data

Our company does not use any data other than these data, other than business and business data.

not working

7. DESTROYING, DELETING OR PERSONAL DATA BY OUR COMPANY ANONYMIZATION

Even if it is processed in accordance with the law, Article 138 of the Turkish Penal Code and Protection of Personal Data

Pursuant to article 7 of the Law, if the reasons that require processing are eliminated, the company

without the possibility of recycling personal data with the decision of the data owner or at the request of the data owner.

deleted, destroyed or anonymized.

The main reasons for destruction are:

•  Change or repeal of the relevant legislation on which data processing is based
•  The disappearance of the purpose that requires processing or storage
•  In cases where the data can only be processed with explicit consent, the explicit consent of the person is eliminated.
• get up
•  Regarding the deletion and destruction of personal data within the legal rights of the person
• Approval of applications by the company

Our company's requests regarding the deletion and destruction of personal data within the scope of the relevant legislation

reserves the right to refuse.

8. OTHER MATTERS

between the Personal Data Protection Law and other relevant legislation and this policy.

In disputes, primarily the Law on the Protection of Personal Data and other relevant legislation

will be applied.

This policy Dentaluna Oral and Dental Health Services Ltd. Sti. Board of Directors

was approved and entered into force.