Personal Data Disclosure for Patients

Pursuant to the Law No. 6698 on the Protection of Personal Data (“KVKK”), published in the Official Gazette dated 7 April 2016 and numbered 29677, our company One Dose Sağlık Teknolojileri Anonim Şirketi (the “Company”), in its capacity as data controller, may process your personal data within the limits and for the situations specified in the KVKK. We would like to inform you about our personal data processing activities in accordance with Article 10 of the KVKK.

As data controller, the Company may process, record, store, classify and update your personal data, and disclose or transfer it to third parties where the legislation permits and only to the extent of the purpose, in connection with the purposes described below, in a limited and proportionate way, in accordance with the law and good faith, and accurately and up to date.

“Personal data” means any information relating to an identified or identifiable natural person. “Sensitive personal data” means data relating to race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data.

1. Personal data we process

• Identity: name, surname, date of birth, place of birth, marital status, Turkish ID number or passport number, and gender
• Contact: telephone number, e-mail address, mobile phone number and address
• Transaction security: logs of access to the internet over the Company network, user names, e-mail accounts, last logon dates, IP information and similar system and application account information, log records relating to the security of internal system communication, and security restrictions
• Finance: company title, social-security information, information on private insurance, pension information, tax identification number, receivable and payable balances, bank account information, financial transaction information, invoice, check and promissory-note information, IBAN and similar account and payment information
• Sensitive personal data: disability status, blood type, personal health information, information on devices and prostheses used, genetic data, information on sexual life, race, beliefs and ethnic origin
• Marketing: campaign information and evaluations obtained through direct marketing

3. How your personal data is collected

In order to carry out our activities, your personal data is collected by the Company from you, through channels such as the Company’s website, call or contact center or mobile application, verbally, in writing or electronically, for the purposes stated above.