KVKK

Explicit Consent Declaration within the Scope of Personal Data Protection Law

HDA GRUP ENERJİ Teknoloji San. ve Tic. Ltd. Şti. (“HDA”) and the health institutions with which HDA works in cooperation (collectively referred to as “HDA Energy”. ) “Except for the processing and transfer of your personal data detailed in the Information Form on the Processing of Personal Data to the extent necessary for the performance of the contract and the planning and management of health services financing, within the framework of the General Clarification Text and HDA Energy Regulation on the Protection and Processing of Personal Data, which is submitted to your information by HDA Energy in accordance with the relevant provisions of the Personal Data Protection Law No. 6698 (“KVKK”),

My personal data may be processed by HDA Energy as the data controller or by the data processors authorised by HDA Energy by taking the necessary security measures; within the scope of the performance of the employment contract, directly or indirectly, within the scope of the projects to be carried out within the group, within the scope of the projects to be carried out within the group, by contacting you by phone / SMS and other means in order to inform you about your appointments, to remind you and to inform you about new medical developments and new health services, and within the scope of contacting you, the existing identity information, address information, contact information and other personal data; 4. I hereby accept and declare that the identity information, address information, contact information and other personal data may be processed in accordance with the general principles stated in Article 4 of the KVKK; may be obtained, recorded, stored securely in physical or electronic media for a period of time appropriate for the purpose of processing, reorganised, disclosed and transferred in accordance with the legislation, taken over, classified, processed or the use of data may be prevented; I accept and declare that I have been informed by HDA Energy regarding the above-mentioned issues and that I have explicit consent within the framework of KVKK.

I hereby accept and declare that my personal data may be transferred by HDA Energy to HDA Energy employees, officials, public institutions and organisations, independent audit companies within the framework of legal obligations and legal limitations in order to carry out its activities, provided that it is bound by the above-mentioned purposes, and that I have my explicit consent in this regard.

In addition, I acknowledge and accept that I have been informed about my existing rights in accordance with Article 11 of the KVKK and the relevant legislation and that I have the right to submit my request to the necessary Department by filling out the form at https://www.hdaenerji.com.tr/en/, including the necessary information identifying my identity in order to use these rights and explanations regarding the right I request to use.

In addition, I accept and declare that the personal data I have shared with HDA Energy is accurate and up-to-date; I accept and declare that I will notify HDA Energy of any changes in this information. I hereby accept and declare that I have explicit consent to the processing of my personal data, including my personal data of special nature defined in the KVKK, to use and share them limited to the purpose of processing within the scope of the relevant process, to store them for the required period of time and that the necessary clarification has been made to me in this regard; I hereby accept and declare that I have read and understood this text, HDA Energy’s Personal Data Protection and Processing Procedure and this statement.

Personal Data Protection and Processing Procedure

Information Form on Obtaining and Processing Personal Data

Within the scope of Law No. 6698 on the Protection of Personal Data, I accept and declare that HDA Energy processes, stores, records and shares my personal data, personal health data and special categories of personal data with third parties.

Information Form on Obtaining and Processing Personal Data

HDA GRUP ENERJİ Teknoloji San. ve Tic. Ltd. Şti.(“HDA”) and the contracted companies and physicians with whom HDA works in cooperation (all together referred to as “HDA Energy”) in the capacity of Data Controller within the scope of the Personal Data Protection Law No. 6698 (“Law”) and the relevant legislation, your personal data may be processed in accordance with other legislation within the framework described below.

Obtaining, Processing and Processing Purposes of Personal Data

Your personal data are obtained by HDA Energy through verbal, written, visual or electronic media, call centre, website and similar channels. Your special categories of personal data and general categories of personal data may be processed by HDA in a limited and measured manner in connection with the purposes specified in this article, including but not limited to the following.

Your identity information: Your name, surname, Turkish ID number, passport number or temporary Turkish ID number, place and date of birth, marital status, gender, insurance or patient protocol number and other identification data that we can identify you.

Your Contact Details: Your address, telephone number, e-mail address and other contact data, your voice call records kept by customer representatives or patient services in accordance with call centre standards, and your personal data obtained when you contact us via e-mail, letter or other means.

Your Accounting Information: Your financial data such as your bank account number, IBAN number, credit card information, billing information.

Your personal information and data you enter on www.hdaenerji.com.tr/en/ web page or your personal data you send or enter to info@hdaenerji.com.tr e-mail address.

All kinds of personal data obtained by HDA Energy (including but not limited to personal data of special nature) may be processed for the following purposes:

Confirm your identity,

Fulfilment of risk management and quality improvement activities.

Analysing HDA service data for the purpose of improvement.

Fulfilment of legal and regulatory requirements.

Participation in campaigns and providing campaign information by Marketing, Media and Communication, Call Centre departments, designing and communicating special content, tangible and intangible benefits on web and mobile channels.

Your Personal Data obtained and processed in accordance with the relevant legislation may be transferred to HDA or HDA Energy’s physical archives and/or information systems and kept both in digital and physical environment.

Transfer of Personal Data

Your personal data, within the scope of the Law and other legislation and for the above-mentioned purposes, HDA and HDA Energy, companies that have an agreement with HDA Energy, Private insurance companies, General Directorate of Security and other law enforcement agencies, General Directorate of Population, Courts and all kinds of judicial authorities, central and other third parties, your authorized representatives, third parties from whom we receive consultancy, including lawyers, tax and financial advisors and auditors, regulatory and supervisory authorities, business partners and other third parties with whom we cooperate to develop or carry out brokerage services for the above-mentioned purposes, including official authorities.

Method and Legal Grounds for Obtaining Personal Data

Your personal data are collected and processed in all kinds of verbal, written, visual or electronic media for the above-mentioned purposes and in order to carry out all kinds of work within the scope of HDA’s field of activity within the legal framework and to fulfil HDA’s contractual and legal obligations fully and duly within this scope. The legal reason for the collection of your personal data; Law No. 6698 on the Protection of Personal Data,

Your Rights Regarding the Protection of Personal Data

In accordance with the Law and relevant legislation;

To learn whether personal data is processed or not,

Request information if personal data has been processed,

Access to and request for personal health data,

To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

To know the third parties to whom personal data are transferred domestically or abroad,

To request correction of personal data in case of incomplete or incorrect processing,

Request deletion or destruction of personal data,

In case of incomplete or incorrect processing of personal data, to request that third parties to whom personal data are transferred be notified of the transactions regarding the correction and/or deletion or destruction of personal data,

You have the right to object to the emergence of a result against the person himself/herself by analysing the processed data exclusively through automated systems.

If you exercise one or more of your aforementioned rights, the relevant information will be notified to you in writing or electronically, in a clear and understandable manner, through the contact information provided by you.

Data Security

HDA protects your personal data in full compliance with all technical and administrative security controls required by information security standards and procedures. These security measures are provided at a level appropriate to the possible risk, taking into account the technological possibilities.

Complaints and Contact

Your personal data is meticulously protected within the technical and administrative possibilities and the necessary security measures are provided at a level suitable for possible risks, taking into account the technological possibilities. You can submit your requests within the scope of the Law by filling out the “Contact Form” at https://www.hdaenerji.com.tr/en/contact

(a) Şerifali, Adil Sokagi No: 36, 34775 Ümraniye/İstanbul – Turkey with a petition bearing your wet signature and writing “Information Request within the Scope of the Law on the Protection of Personal Data”,

(b) send it through a notary public,

(c) You can send a “Word or pdf.” format file addressed to HDA to kurumsal@hdaenerji.com.tr by signing it with a secure e-signature and writing “Personal Data Protection Law Information Request” in the subject section of the e-mail.

Your requests within the scope of the law;

We kindly request you to submit your requests to us by filling out the “Application Form in accordance with the Law on the Protection of Personal Data” at https://www.hdaenerji.com.tr/en/ and using the procedures specified in the form