INFORMATION ABOUT GDPR

About Processing of Personal Data and Commercial Electronic Communication

Clarification and Explicit Consent Texts

British Esthetic Sağlık A. Ş (“Organization”), its brand British Esthetic and its employees, doctors, subsidiaries, headquarters and branches of the organization, all other companies, beauty centers, hospitals and / or clinics and business partners within the organization or in legal contact with the Personal Data Protection Law No. 6698 (“KVKK”), Within the framework of the Regulation on Personal Health Data, the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation and the relevant legislation and in accordance with the Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages, you (“Relevant Person”) collection and processing of your personal and private data and transfer and all kinds of commercial communication made to you through electronic communication tools in order to promote and market its goods and services in line with the commercial activities of the Organization or to increase the recognition of its business commercial electronic message This clarification text (“Clarification Text”) has been prepared for the purpose of informing you and obtaining your explicit consent in these matters.

You can learn detailed information about the personal data collected, processed and transferred through the Data Controllers Registry Information System (“VERBIS”) of the Personal Data Protection Board.

About Commercial Electronic Communications

Law No. 6563 on the Regulation of Electronic Commerce (“ETDHK”)’Within the scope of Article 2 (second) of the Law; messages containing data, audio and video content that are carried out electronically using means such as telephone, call centers, fax, automatic dialing machines, smart voice recorder systems, electronic mail, short message service and sent for commercial purposes “commercial electronic message” as “electronic commerce”. Pursuant to the aforementioned provision, natural or legal persons engaged in electronic commerce activities are“service provider” commercial electronic message is defined as. Accordingly, commercial electronic messages are messages sent by service providers to the electronic communication addresses of consumers in order to promote and market their goods and services, to promote their business or to increase their recognition with content such as celebrations and wishes.

The Message Management System is a national database system that allows the Organization, which has the title of data controller, to manage commercial electronic message permissions and to view and manage the permissions given by your party, and exists within the framework of the personal data policies stipulated by the KVKK. There is also a legal requirement within the scope of the KVKK to transfer your contact and other personal information to IYS and to store it in the IYS database. Consent records regarding commercial electronic messages sent to you are kept for “three years”from the date the validity of the consent expires, and other records regarding commercial electronic messages are kept for “three years”from the date of registration.

Within the scope of the Law on the Regulation of Electronic Commerce, you are hereby informed that your contact information such as mobile / home / work phone, e-mail address is received for sending commercial electronic messages for the purposes written herein, that you can change your communication preferences at any time and without any justification, that you can stop the relevant commercial electronic communication by sending a rejection notification to info@britishestetik.com e-mail address in the electronic messages you will send (or in the system established / established by the competent authorities, if any), that your approval and rejection notifications will be delivered to the competent authorities, but that legally mandatory communications will continue in any case. In this context, you have given your consent and approval to send commercial electronic messages to you under the name, title and brand of the Organization for various promotions, advertisements, campaigns, discounts, promotions, sales and marketing purposes, especially information about all kinds of products and services, SMS/text messages, instant notifications, automatic calls, computer, telephone, fax, e-mail / mail and other electronic communication tools in order to be informed about all kinds of information.

About the Processing of Your Personal Data

.1-WHICH OF YOUR PERSONAL DATA ARE PROCESSED WITHIN THE SCOPE OF KVKK AND HOW?

When you enter the organization as a guest, your following data will be collected by our guest services staff in order for you to register to the Online Management Program (ESTESOFT)“provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract”and “it is mandatory for the data controller to fulfill its legal obligation”based on legal grounds. Detailed information about your personal data collected and processed is available in VERBIS under the heading “Data Categories”.
Your personal data collected and processed;

1. a) Identity data such as name, surname, Republic of Turkey (“T.R.”) identification number, passport number or temporary T.R. identification number for foreign citizens, place and date of birth, marital status, gender,
   b) Contact data such as address, telephone number, e-mail address,
   c) Personal data obtained during the execution of beauty and aesthetic procedures and/or medical diagnosis, treatment and care services such as examination, diagnosis, examination data and test, laboratory and imaging results, prescription information,
2. d) Photographs and video recordings taken before and after beauty and/or health procedures related to diagnosis and diagnosis, and for promotion and information when necessary,
   e) Medical data on previous health information, examinations, diagnoses and tests,
   e) Data on private health insurance and Social Security Institution data for the purpose of financing and planning of beauty and health services, where necessary,
   f) Financial data such as bank account number, credit card, debit card, etc. in order to make payments, g) Website contact form, your credentials taken on behalf of the hotel or airport transfer,
   h) Answers and comments shared in order to evaluate the services,
   ı) Closed circuit camera system images and audio recordings taken during the visit to the beauty center/clinic and/or hospital,
   i) Voice call records kept in case of contact with your Call Center, information received on behalf of the appointment record and listed in these articles,
   j) Vehicle license plate information in case parking and valet services are used, if necessary,
   k) Location information, IP address, browser information, form information, form information, e-mail information obtained during the use of the website and mobile application are defined by categories.

In order to identify your customer and/or patient record and to access the content of the clarification text at any time, an SMS/Short Message is sent to you and/or this text is presented to you in writing. If sent to you, the message contains a confirmation code in order to give your consent within the scope of KVKK and Law No. 6563 on the Regulation of Electronic Commerce (“ETK”). In the event that you return the confirmation codes to our guest services personnel who perform the registration process, your records of your explicit consent and approvals required for KVKK and ETK are created through the online workplace registration program. The explicit consents and approvals given will be valid until they are withdrawn by you.

2-FOR WHICH PURPOSES YOUR PERSONAL DATA IS PROCESSED?

Detailed information about the purposes of processing your personal data is available in VERBIS under the heading “Personal Data Processing Purposes”.

Your personal data; during the provision of the requested beauty and / or health service ‘beauty procedures’ and / or “conducting medical diagnosis, treatment and care services”It is processed on the basis of the Regulation on Health Institutions for Beauty and Aesthetic Purposes and all kinds of relevant legislation on these issues, the Private Hospitals Law No. 2219 and the Health Services Basic Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations, the Regulation on Private Hospitals, the Health Implementation Communiqué and the Patient Rights Regulation and the Turkish Code of Obligations No. 6098.
Among the purposes of processing your personal data;
a- Beauty and aesthetic services and/or medical diagnosis, treatment and care services,
b- Carrying out operations and activities such as Appointment, Call Center, Customer-Patient Registration, Customer-Patient Checkout, Payment Transactions, Customer-Consumer-Patient Rights, Customer Satisfaction, etc,
c– Sharing information requested by all public institutions and organizations in accordance with the relevant legislation,
d– Sharing requested medical information with private insurance companies within the scope of financing health and beauty services and covering the costs of examinations, diagnosis and treatment,
e–Billing for the services you receive,
f- Sharing with you on behalf of information activities, (Information and promotion, limited to campaign activities, information and promotions, information and promotions that protect and improve beauty and health are made in the form of commercial electronic messages such as SMS, e-mail, etc.). Recipients may exercise their right of refusal in the message content if they do not wish to receive the messages. The consent is valid until the right to refuse is exercised).
g- The legitimate use of photographs and video recordings taken for the purpose of carrying out information-promotional activities in order to identify before and after beauty and/or health procedures related to diagnosis and diagnosis,
h– Planning and managing the internal functioning of the organization,
ı- Monitoring and preventing fraud and unauthorized transactions,
j- Responding to all kinds of questions and complaints regarding the health services you receive, measuring, increasing and researching patient satisfaction,
k– Providing information about the services you receive, complementary services and new services
is in place.

3- HOW AND WHY IS YOUR PERSONAL DATA TRANSFERRED?

Detailed information on the transfer of your collected and processed personal data is available in VERBIS under the headings “Data Transfer Recipient Groups” and “Information to be Transferred to Foreign Countries”.
Detailed information on the transfer of your collected and processed personal data is available in VERBIS under the headings “Data Transfer Recipient Groups” and “Information to be Transferred to Foreign Countries”.
Your personal data may be transferred to; The Ministry of Health, sub-units and family medicine centers affiliated to the Ministry, Private insurance companies within the scope of financing health services, covering the costs of examination, diagnosis and treatment, Social Security Institution, General Directorate of Security and other law enforcement agencies, General Directorate of Population and Citizenship Affairs, Turkish Pharmacists Association, Judicial authorities, Laboratories, medical centers, ambulances, medical devices and health service providers that you cooperate with for medical diagnosis and treatment, To the health institution to which you have been referred or to which you have applied, To the legal representatives you have authorized, In the event of a possible legal dispute, the Organization’s lawyers, tax consultants and auditors, third parties from whom consultancy is received, regulatory and supervisory institutions and official authorities, Organization Doctors and Employees, Program Managers with Access to Estesoft Information System, Organization headquarters and branches, subsidiaries and affiliates within the framework of legal limits in terms of the continuity of the services you receive, services, complementary services, new services, etc. that you receive in accordance with the legislation. issues

4- WHAT ARE YOUR LEGAL RIGHTS AND THE LEGAL GROUNDS FOR COLLECTING PERSONAL DATA?

Within the scope of Article 11 of the KVKK regulating the rights of the data subject;

1-Learning whether their personal data is being processed or not,

2-Requesting information if personal data has been processed,

3-Learning the purpose of processing personal data and whether they are used in accordance with their purpose,

4-Knowing the third parties to whom personal data are transferred at home or abroad,

5- Requesting correction of personal data in case of incomplete or incorrect processing,

6-Request deletion or destruction of personal data,

7-Request notification of the correction, deletion or destruction of personal data to third parties to whom personal data are transferred,

8-Objection to the occurrence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,

9-Requesting the compensation of the damage in case of damage due to unlawful processing of personal data,

You can submit your applications to us via the “KVKK Access / Information Request Form” or in writing in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

Your personal data within this scope, as specified in the relevant legislation for the realization of the purposes listed above by the Organization and not limited to those listed;

A-It is clearly stipulated in the laws and the data controller fulfills its legal obligation is mandatory for it to be able to fulfill its obligations;
a-Basic Law No. 3359 on Health Services,
b-Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Organizations,
c-Regulation on Private Hospitals,
d-Emergency Health Regulations,
e-Patient Rights Regulation,
f-Regulation on Processing and Protection of Privacy of Personal Health Data,
g-Regulation on the Principles of Surveillance and Control of Communicable Diseases
B-Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
C-It is collected based on the reasons that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Personal data collected and processed by the organization are stored for the required periods, not shorter than the periods specified by the relevant laws and legislation, in order to constitute evidence in possible legal disputes, to be asserted as a right or to establish a defense.

5- How to Exercise Legal Rights Regarding Personal Data?

You can submit your requests regarding your personal data to the Organization through the following channels in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

a- info@britishestetik.com You can send it by e-mail or mail to Meşrutiyet mah.Rumeli Cad.No:4 Şişli/İstanbul postal address with the description “Application within the scope of GDPR”.

b-If you are applying on behalf of another person, with your own credentials;
–A civil registry copy or relevant document showing your relationship and authority with the person whose parent or guardian you are,
-In other cases, a copy of your specially authorized power of attorney
you are required to share in the application attachment.

In accordance with the ‘Communiqué on the Procedures and Principles of Application to the Data Controller’, the following information must be included in the application:

-Name, surname and signature if the application is in writing,
b-Turkish ID number for citizens of the Republic of Turkey, nationality, passport number or ID number, if any, for foreigners,
c- address of the place of residence or workplace based on notification,
d-Electronic mail address, telephone and fax number for notification, if any,
e-The subject of demand.