Clarification Text on the Protection of Personal Data

3- What is the legal reason for the processing of your personal data?

HospitaLine, "Which of your personal data is processed by HospitaLine?" your personal data contained in the title 5, 8 of the KVKK for the purposes set out above. and 9. it is processed based on the reasons specified in the articles and compliance with the law given below.

• Based on the legal reason that the Law on the Regulation of Electronic Commerce 6563, the Turkish Commercial Code 6102, the Turkish Criminal Code 5237 and the Law on Consumer Protection 6502 are clearly stipulated in the legislation to which our Company is subject, in particular; ensuring the security of operations on the company platform, conducting information security processes, fulfilling our obligations arising from legislation, in particular activities aimed at ensuring that activities are carried out in accordance with the legislation,

* Based on the legal reason that the processing of your personal data is necessary, provided that it is directly related to the establishment or performance of the contract; execution of activities for the establishment of contracts concluded through our platform in accordance with the relevant articles of the Law on Consumer Protection, such as distance sales contracts, execution of activities for the realization of your purchase transactions, execution and supervision of the company's business activities, monitoring of delivery processes, evaluation of your requests, complaints and suggestions related to our products and services, execution and supervision of financial and accounting processes, execution of communication activities,

* Based on the legal reason that it is mandatory for our company to fulfill its legal obligation; Fulfillment of the legal obligations specified in the decisions, guidelines and guides contained in the secondary legislation of our Company and/ or published by the competent authorities, especially the Distance Contracts Regulation and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, providing information to authorized persons, institutions and organizations, ensuring the conduct of activities in accordance with the legislation, monitoring and conducting legal affairs, conducting finance and accounting affairs,

* Based on the legal reason that data processing is mandatory for the establishment, use or protection of a right; execution of legal and litigation affairs,

* Based on the legal reason that data processing is mandatory for the legitimate interests of our company, provided that it does not harm their fundamental rights and freedoms; conducting activities aimed at developing and improving the products and services offered by our company,

* Transfer of personal data abroad based on the legal reason for having your explicit consent.

     4- Who does HospitaLine transfer your personal data to for what reasons?

Our company takes care to process your personal data in accordance with the principles of "need to know" and "need to use", ensuring the necessary data minimization and taking the necessary technical and administrative security measures. Since conducting or supervising business activities, ensuring business continuity, operating digital infrastructures necessitates continuous data flow with different stakeholders, we are obliged to transfer the personal data we process to third parties for certain purposes. In addition, it is very important that your personal data is accurate and up-to-date in order for us to fully and properly fulfill our contractual and legal obligations. For this purpose, we have to work with various business partners and service providers.

Your personal data, execution of the marketplace operation, execution of the performance processes of the services you have made an appointment and purchased, management of your requests for assistance and support for your processes, execution of activities to increase your experience and satisfaction, execution of activities to improve and improve the products and services offered by our company, provision of a better shopping experience for you and execution of activities to increase your satisfaction, ensuring business continuity, ensuring information security, to the extent necessary, in particular for the purposes of fulfilling legal obligations and limited to the purposes specified in the second article of this clarification text:

Based on the legal reasons that it is clearly stipulated in the legislation to which our company is subject and that it is mandatory for the fulfillment of its legal obligations, it is necessary for the establishment or execution of the contract;

• With the seller of the product and the service provider for the purpose of carrying out the purchase processes,

• Information about the person to whom the service / product will be performed / delivered on behalf of you and/or the service / product with the service provider / seller of the purchased product for the purpose of conducting logistics activities and tracking the performance processes of the service / product,

• For the purpose of carrying out billing processes, our business partners, the seller of the purchased product / service, our consultants and service providers, banks, financial advisors,

• With business partners and other service providers who offer call center services for the provision of goods and services sales and after-sales support services,

• With business partners and service providers offering services in the field of quality control, complaint management and risk analysis of services,

• Management of financial and accounting processes, detection and evaluation of risks, prevention of fraud with our relevant business partners, consultants and service providers, banks, financial advisors,

• With an e-invoice business partner for sending an e-invoice to the customer electronically; with cargo and courier companies for the purpose of physical contract or invoice delivery, with our business partners offering special integrator, independent audit, customs, financial consultant / accounting services,

• T of invoices and collection receipts during tax audits with tax authorities for the fulfillment of tax obligations.C. With the officials of the Ministry of Treasury and Finance,

• With our business partners and service providers who provide, operate or provide services to our IT infrastructure,

• With our business partners providing services in the field of risk management and execution of financial reporting processes,

Based on the legal reasons that data processing is mandatory for the establishment, use or protection of a right, that it is clearly stipulated in the legislation to which our company is subject, and that it is mandatory for it to fulfill its legal obligation;

• Within the scope of fulfilling legal obligations, lawyers, auditors, forensic IT specialists, cyber security consultants, tax consultants, as well as other third parties and business partners from whom we receive consulting and services,

* With authorized public institutions and organizations such as regulatory and supervisory institutions and court and enforcement directorates,

• It may be shared with other public institutions or organizations authorized to request your personal data, our domestic and/or foreign subsidiaries, suppliers, business partners, banks with which we have agreements and third parties from whom we receive products or services.