INFORMATION STATEMENT REGARDING THE PROCESSING OF PERSONAL DATA DURING THE FILLING IN OF THE WEBSITE CONTACT FORM

 

This Information Notice on the Processing of Personal Data has been prepared by One Dose Sağlık Teknolojileri Anonim Şirketi (“Company” or “One Dose”) in its capacity as the “Data Controller”, in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK“) published in the Official Gazette dated 07.04.2016 and numbered 29677, the Regulation on Personal Health Data published in the Official Gazette dated 21.06.2019 and numbered 30808, the Communiqué on Principles and Procedures to be Followed in Fulfillment of the Obligation to Inform published in the Official Gazette dated 10.03.2018 and numbered 30356, and other applicable legislation. As One Dose, within the scope of the remote healthcare services we provide through our website, and pursuant to Article 10 of the KVKK, we would like to inform you regarding our personal data processing activities.

 

  1. Data Controller

As the data controller under KVKK, One Dose may process, record, store, classify, update and disclose/transfer your personal data to third parties in cases permitted by the legislation and/or limited to the purpose for which they are processed, in accordance with the law and principles of honesty, in connection with the purposes described below, in a limited and proportionate manner, accurately and up to date.

The term “Personal Data” refers to any information relating to an identified or identifiable natural person.

The term “Sensitive Personal Data” refers to data relating to race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data.

The term “Processing” refers to any operation performed on personal data, wholly or partly by automated means or by non-automated means provided that it is part of a data recording system, including but not limited to collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of use. Your personal data may be processed by authorized personnel within the Company.

 

  1. Purpose of Processing Your Personal Data

The personal data you provide by filling out the form under the “Contact Us” section available at https://www.onedose.io/contact/ on One Dose’s website (https://www.onedose.io/en/), including your name, surname, email address, phone number, and any customer transaction data included in your message, if shared, is processed in compliance with the basic principles set out in KVKK, for the purposes of conducting customer satisfaction activities and tracking requests/complaints. These data are securely stored electronically for a period appropriate to the processing purpose.

When filling out the form under the Contact Us section on One Dose’s website (https://www.onedose.io/), https://www.onedose.io/iletisim/, it is expected that your sensitive data will not be shared with our Company in this section.

  1. Transfer of Your Personal Data

Your personal data, processed for the purposes explained above, may be shared with or disclosed to the following parties and/or these parties may be granted access to your personal data, in accordance with the fundamental principles set forth in KVKK and the data processing conditions and purposes stipulated in Article 8 of the KVKK:

  • Your identity, contact, and customer transaction data may be transferred, without your explicit consent, to our contracted service providers for support, maintenance, and repair services, based on the legal ground set forth in Article 5/2(f) of KVKK: “Processing of data is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed,” in order to carry out the processes related to the provision and performance of products and services offered by the Company, respond to your inquiries and complaints regarding our healthcare services, and evaluate our services.

 

  • Your identity, contact, and customer transaction data may be shared — without requiring your explicit consent — with our contracted service providers who offer support, maintenance, and repair services for our Company’s website. This is done for the purposes of ensuring service monitoring, functionality, operational control, and supervision of the website, and is based on the legal ground set out in Article 5/2(f) of the Turkish Personal Data Protection Law (KVKK): “It is necessary for the legitimate interests of the data controller, provided that such processing does not violate the fundamental rights and freedoms of the data subject.

 

  • Your contact data may be recorded in the national Commercial Electronic Message Management System (“IYS”) established by the Ministry of Trade of the Republic of Turkey in line with your approval for receiving commercial electronic messages, and shared with the Ministry and the Union of Chambers and Commodity Exchanges of Turkey, in accordance with Article 5/2(ç) of KVKK: “Processing of data is necessary for the data controller to fulfill its legal obligation,” without requiring your explicit consent.

 

  • Your identity and contact data, along with your electronic commercial communication consents and your consents for personal data processing, sharing, and transfer, are provided through the relevant software/portal for the purpose of tracking consent and IYS integration. Therefore, without requiring your explicit consent, this data is shared with the contracted company based on the legal ground of Article 5/2(f) of the Turkish Personal Data Protection Law (KVKK): “It is necessary for the legitimate interests of the data controller, provided that such processing does not violate the fundamental rights and freedoms of the data subject.

 

can be shared

 

Furthermore, in cases where it is necessary to fulfill a legal obligation, enforce our terms and conditions or other agreements, or to protect the rights, property, or safety of One Dose, our customers, or others, we may disclose your personal data to legally authorized public institutions and organizations and authorized private legal entities, including our professional consultants under confidentiality obligations.

Our Company is committed to keeping your personal data strictly private and confidential, taking all necessary measures to prevent unauthorized access, use or disclosure, and exercising due diligence in this regard.

 

  1. Transfer of Your Personal Data Abroad

Your personal data may be transferred to third-party service providers located abroad, provided that appropriate safeguards are ensured through the standard contract regulated under Article 9 of the KVKK and the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad.

 

  1. Method and Legal Grounds for Collecting Your Personal Data

Your personal data is collected electronically by One Dose through its website, in order to conduct its activities and based on the purposes specified above. In this context, your personal data may be transferred if the conditions specified in Article 5/2(f) “Processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed” and Article 5/2(ç) “Processing is necessary for the data controller to fulfill its legal obligations” are met.

 

  1. Your Rights as a Data Subject Under Article 11 of KVKK

You can submit your requests regarding your rights in question, in writing as personal data owners, together with documents identifying your identity, with your written petition containing your explanations regarding the right you want to use. Konut Kent Mah. 3028. Cad. No:8d İç Kapı No: 27 Çankaya Ankara If you submit your request in writing to our Company’s address either in person or via registered mail with return receipt, your request will be evaluated by our Company and concluded in accordance with the provisions of the KVKK within a maximum of 30 (thirty) days. Although it is essential not to charge any fee for the requests, our Company reserves the right to charge a fee based on the fee tariff determined by the Personal Data Protection Board.

 

With the exception of the cases specified in Article 28 titled “Exemptions” of the KVKK, by applying to our Company, you have the right to: learn whether your personal data is being processed; request information about it if it has been processed; learn the purpose of processing and whether it is being used in accordance with that purpose; know the third parties to whom it has been transferred, whether domestically or abroad; request notification of actions taken by those third parties; request correction if the data is incomplete or incorrect; request deletion or destruction if the reasons for processing no longer exist; request that actions taken be communicated to the third parties to whom your personal data has been transferred; object to a decision based solely on automated processing, including profiling, which results in a negative outcome for you; and request compensation for damages if you have suffered harm due to unlawful processing under KVKK. We inform you that, as the “Data Controller” under KVKK, you have these rights.

 

Within the scope of your right to access information, you can obtain information as outlined above and access the One Dose Sağlık Teknolojileri A.Ş. Data Subject Application Form at the following web address: https://www.onedose.io/

 

One Dose Health Technologies Inc.

Main address: Konut Kent Mah. 3028. Cad. No:8d İç Kapı No: 27 Çankaya Ankara

Mersis No : 0544128049300001

 

DURING THE FILLING OF THE CONTACT FORM ON THE WEBSITE

EXPLICIT CONSENT TEXT REGARDING THE PROCESSING OF PERSONAL DATA

 

I have read the Clarification Statement regarding the processing of personal data (“Clarification Statement”). As stated in the Clarification Statement, under the Personal Data Protection Law No. 6698 (“KVKK”), personal data will be processed by One Dose Health Technologies Inc. (“Company”).

 

  • My identity and contact data will be processed by the Company for the planning and execution of activities necessary to tailor the products and services offered by the Company according to the preferences, usage habits, and needs of the relevant individuals, conducting marketing activities, running advertising/campaign/promotion processes, and, when necessary, contacting me via commercial electronic communication.

 

I explicitly give my consent.

 

 

Name Surname

Sign:

Date: