Clarification Notice for the Protection of Personal Data
The Personal Data Protection Law No. 6698 ("PDPL") contains regulations on protecting, processing and destroying personal data. The PDPL has been enacted to determine the rights and obligations of individuals regarding the processing of personal data. Our company attaches great importance to ensuring the security of personal data and, in accordance with the PDPL, any information, and documents containing personal data shared with our company, being a data controller, are processed, recorded, stored, and, if necessary, updated and preserved in compliance with the regulations in the relevant law. Personal data is processed in accordance with the law and the principle of honesty and can be transferred to third parties, shared, and anonymized when necessary.
Our personal data protection and processing policy aims to protect the data obtained from our website visitors, customers, suppliers, business partners, or collaborating companies, institutions, and organizations, as well as customers and employees and includes regulations related to this. Therefore, as the data controller, we process your personal data per provisions 10 and 11 of the PDPL, in a detailed manner below, and with an explanation of your rights.
- Collection, Processing, and Purpose of Processing Personal Data
Your personal data may vary depending on the service or commercial activity provided by our company and may be collected verbally, in writing, or electronically through our company's offices, branches, website, social media channels, third parties, legal authorities, and similar means.
Categories of personal data such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing and sales information can be collected by our company.
The collected personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the PDPL, which includes the provision of products and services to you by our company, conducting the necessary work to benefit you from our products and services, the fulfillment of our company's activities, sustainability, sending emails, making statistical analyses, arranging records and documents, compliance with local and international legal regulations, reporting, informing, complying with tax and other obligations, ensuring the legal and commercial security of our company and the individuals in business relationship with our company (administrative operations related to communication conducted by our company, ensuring the physical security and control of company locations, evaluation processes for business partners/customers/suppliers (authorized or employees), legal compliance process, financial affairs, etc.), determining and implementing the commercial and business strategies of our company, carrying out human resources policies of our company, measuring and increasing customer satisfaction through our website and social media platform accounts, complaint management, receiving opinions and suggestions regarding new services and products, receiving problem-error notifications, informing you about products and services, compliance with domestic and international regulations, information transfer requested by public institutions or other authorities, storage, reporting obligation.
- To Whom and for What Purposes Personal Data Can Be Transferred
Your collected personal data; within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL, can be transferred to our business partners, shareholders, group companies, public institutions authorized by law, and private individuals, legal, financial, and tax consultants, auditors of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL. Your personal data (identity data, contact data, data related to family members, customer transaction data, financial information, personal data, security information, etc.) can be transferred for the purpose of taking the necessary security measures and achieving the above-mentioned objectives.
- Method and Legal Basis of Collecting Personal Data
Your personal data is acquired in order to provide the services offered by our company in full compliance with the legal responsibilities and in line with the objectives specified above, your personal data is collected in any oral, written, or electronic environment, including our website, our social media channels, the parties we are in a business relationship with and/or whose activities complement ours, contracted organizations, and other similar channels, within the legal framework, legal responsibilities of our company, and legal responsibilities and obligations arising from contracts.
In accordance with the PDPL Article 5 and Article 6, personal data collected for the purposes stated in Articles (1) and (2) of this clarification notice can also be processed and transferred within the framework of personal data processing conditions and purposes specified in the PDPL Article 5 and Article 6.
Your personal data is processed based on the legal reasons below:
(i) It is expressly provided for by law,
(ii) Provided that it is directly related to the conclusion or performance of a contract; it is necessary to process the personal data of the parties to the contract,
(iii) It is mandatory for the data controller to fulfill its legal obligation,
(iv) Data processing is mandatory for the establishment, exercise or protection of a right,
(v) Provided that it does not harm the fundamental rights and freedoms of the data subject, it is processed based on the legal reasons that data processing is mandatory for the legitimate interests of the data controller.
- Retention Period of Personal Data
Our company keeps personal data only for the period required for the purposes for which they were collected, or for the period as specified in the relevant legislation. In this scope, if a period is determined for the storage of personal data in the relevant legislation, the personal data is stored in accordance with this period, or, if a period is not specified, personal data is stored for the period required for the purposes for which they are processed. When the storage period expires or the reasons requiring the processing of personal data are eliminated, personal data is deleted, destroyed, or anonymized and can continue to be used by our company as anonymous data.
- Rights of the Data Subject as Specified in Article 11 of the PDPL
As the data subjects, you can submit your requests regarding your rights in accordance with the PDPL Article 11 by sending your request to our Company in writing, containing the necessary information to clarify your identity and other required information, and in line with the nature of the request, our Company will conclude your request within a maximum of thirty days free of charge. However, if the Personal Data Protection Board foresees a fee, our company will charge a fee according to the tariff determined by our company. In this context, data subjects have the following rights:
a) To learn whether personal data is processed,
b) To request information if personal data is processed,
c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
d) To know the third parties in the country or abroad to whom personal data are transferred,
e) To request correction of personal data if it is incomplete or incorrectly processed and to request the notification of the transactions made within this scope to third parties to whom personal data is transferred,
f) To request the deletion or destruction of personal data within the framework of the conditions stipulated in the relevant laws and regulations, and to request the notification of the transactions made within this scope to third parties to whom personal data are transferred,
g) To object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
h) To claim damages if the data subject is damaged due to unlawful processing of personal data.
In accordance with Article 13 of the PDPL, you can send your request including your explanations regarding the exercise of your rights to info@tigahealth.com with the necessary documents to determine your identity, or you can send it by registered mail or notary, or you can send it via registered electronic mail, secure electronic signature, mobile signature or the electronic mail address previously notified by the data controller. If the requested information and documents are not provided properly, there may be difficulties in conducting the investigations to be carried out by our company due to your request. In this case, our company declares that it reserves all its legal rights. Therefore, your application should be sent in a complete manner with all the requested information and documents.
You can find detailed information and the application form for your application at the following link.