Egelab

Policy on the Protection and Processing of Personal Data

KVKK

POLICY ON THE PROTECTION AND PROCESSING OF PERSONAL DATA
PRIVACY NOTICE

Izmir Ege Laboratory Private Health Services and Supplies Industry and Trade Limited (hereinafter referred to as “ Ege Laboratory”) respects your privacy and places great importance on data security. In this context, this document has been prepared to inform and clarify matters for you in accordance with the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as “K.V.K.K.”) and other relevant legislation.

a)Information

The Law on the Protection of Personal Data No. 6698 was adopted on March 24, 2016, and entered into force upon its publication in the Official Gazette dated April 7, 2016; however, Pursuant to Article 32 of the Law on the Protection of Personal Data, titled “Entry into Force,” Articles 8, 9, 11, 13, 14, 15, 16, 17, and 18 of this Law entered into force as of October 7, 2016.

The Law on the Protection of Personal Data (K.V.K.K.) was enacted to protect individuals’ fundamental rights and freedoms—particularly the right to privacy—in the processing of personal data, and to regulate the procedures and principles that natural and legal persons processing personal data must comply with. Through this privacy notice, Ege Laboratory informs and educates website visitors, and the “Personal Data Protection and Personal Data Sharing Consent” document is made available to website visitors for their review and consideration.

Ege Laboratory hereby acknowledges, declares, and undertakes that it will not sell, rent, or otherwise make available to third parties your name, email address, business and home addresses, phone number, or any other personal data provided by website visitors through the forms on this site.

b-) Data Controller

In accordance with the law, your personal data may be processed by Ege Laboratory, as the data controller, within the scope described in this document. Ege Laboratory is responsible for establishing and managing the data recording system by determining the purposes and means of processing the personal data stored in its database. You have the right to verify that Ege Laboratory is listed as the data controller in the VERBIS registry and to review records related to the processing and protection of personal data.

c)Processing of your personal data

The processing of your personal data refers to any operation performed on your personal data—whether fully or partially automated, or by non-automated means provided it is part of a data filing system—such as the collection, recording, storage, retention, modification, reorganizing, disclosing, transferring, acquiring, making available, classifying, or restricting the use of your personal data—that is, any and all operations performed on such data.

d)Our reasons for processing your data

Your personal data is used Ege Laboratory processes your personal data to ensure that services can be provided to you by carrying out the necessary operational activities within the workplace; to conduct the necessary work with relevant business units and business partners to recommend services suitable for you; to ensure human resources management and the protection of individuals’ rights; to make decisions; implementation, and execution of decisions; ensuring the legal security of natural persons with whom we have established business relationships and the legal security arising from such relationships; and for similar purposes, including but not limited to these, in accordance with Articles 5 and 6 of the Law.

e) Your Personal Data may be processed by Ege Laboratory, in its capacity as the Data Controller, without requiring your separate explicit consent in the following cases:

1-) As expressly provided by law;

2-) It is necessary to protect the life or physical integrity of a person—or that of another—who, due to actual impossibility, is unable to express consent or whose consent is not legally valid.

3-) Provided that it is directly related to the performance of the contract, the processing of personal data belonging to the parties to the contract is necessary.

4.) It is necessary for us, as the data controller, to fulfill our legal obligations;

5.) The information has been made public by the individual concerned.

6.) Data processing is necessary for the establishment, exercise, or protection of a right

7-) Provided that it does not infringe upon the data subject’s fundamental rights and freedoms, the data may be used for the purposes specified below, based on any of the conditions under which the processing of data is necessary for the legitimate interests of the data controller.

f) Your personal data may be processed for the following purposes:

1-) Communicating with you and others as part of the work being done.

2-) To send you important information about changes to our terms of service and changes to our electronic services, as well as other administrative information.

3) To improve quality, training, and safety

4.) Resolve complaints and process requests for data access or correction.

5) To investigate and probe potential illegal activities, and to analyze and manage other risks.

6) To comply with applicable laws and regulatory obligations ; to comply with legal processes; and to respond to requests from official and government authorities.

7.) Managing our infrastructure and operations, as well as audit, finance, and accounting; billing and collections; information technology systems; data and website hosting; business continuity; and records, document, and print management—as well as other related areas—in accordance with established internal policies and procedures.

8) To identify and defend our legal rights; to protect our activities or those of our business partners, our rights, our privacy, our security, or our property, and/or your or others’ assets as listed above; and to pursue available remedies or limit our losses.

9.) Conduct market research and analysis, including satisfaction surveys.

10) To facilitate your participation in various activities and to manage these activities.

11.) To make it easier to share content on social media.

12-) To personalize your experience with our electronic services by providing you with tailored information and advertisements.

g) To whom and for what purpose the processed personal data may be transferred

The personal data we collect is used to ensure the legal compliance and visitor safety of individuals with whom Ege Laboratory has a business relationship; to enable our business units to carry out the necessary work to provide you with the services we offer; to customize and recommend the services offered based on your preferences, usage habits, and needs; to determine and implement our company’s strategies and ensure the execution of human resources policies. For these purposes, your personal data may be transferred to our visitors, patients, suppliers, legally authorized public institutions, and private individuals, in accordance with the conditions and purposes for processing personal data specified in Articles 8 and 9 of the Personal Data Protection Law (KVKK).

h-) The method and legal basis for collecting personal data

We collect your personal data through various channels and based on different legal grounds in order to carry out our operations. Your personal data collected for this legal basis may also be processed and transferred for the purposes specified in paragraphs (b) and (c) of this text, in accordance with the conditions and purposes of personal data processing set forth in Articles 5 and 6 of the Personal Data Protection Law (K.V.K.K.).

(a) The rights of the data subject as listed in Article 11 of the Personal Data Protection Law (K.V.K.K.)

As data subjects, if you submit requests regarding your rights to us using the methods set forth below in this Privacy Notice, Depending on the nature of the request, it will be processed free of charge as soon as possible and no later than thirty days. However, if the Personal Data Protection Board establishes a fee, the fee specified in the applicable schedule will be charged. In this context, data subjects may:

1) The right to know whether personal data is being processed,

2) To request information regarding the processing of personal data,

3) The right to learn the purpose of the processing of personal data and whether such data is being used in accordance with that purpose,

4) The right to know the third parties to whom personal data is transferred, whether within the country or abroad,

5) The right to request the correction of personal data if it has been processed incompletely or incorrectly, and to request that third parties to whom the personal data has been transferred be notified of the correction,

6-)The right to request the erasure or destruction of personal data when the grounds justifying its processing no longer exist, even if it has been processed in accordance with the provisions of the Personal Data Protection Law and other relevant laws, and to request that third parties to whom the personal data has been transferred be notified of such action,

7) The right to object to a decision made solely through the automated processing of personal data that results in adverse consequences for the individual,

😎 They have the right to request compensation for damages suffered as a result of the unlawful processing of personal data.

Pursuant to Article 13, Paragraph 1 of the Personal Data Protection Law, you may submit your request to exercise the rights listed above to us in writing or through other methods specified by the Personal Data Protection Board. Unless the Personal Data Protection Board specifies otherwise, you must submit your request to us in writing, as required by the Personal Data Protection Law. In this context, the channels and procedures for submitting your written requests to me under Article 11 of the Personal Data Protection Law are explained below.

To exercise your rights as stated above, please submit your request—which must include the necessary identifying information and a statement specifying which of the rights outlined in Article 11 of the Personal Data Protection Law you wish to exercise—by by filling out the form at https://www.izmiregelab.com/ and submitting a signed copy of the form Kahramanlar Neighborhood You may submit your request in person at Emre Özdestan Street, No. 22, Konak/Izmir, along with documents verifying your identity; you may also send it via a notary public or through other methods specified in the Personal Data Protection Law (KVKK); or you may fill out the relevant form egelaboratuvari@hs04.kep.tr with a secure electronic signature.