CORPORATE GENERAL INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA
As VTC Sağlık Hizmetleri Sanayi Ve Ticaret Anonim Şirketi, we have prepared this information text in order to inform you, our Visitors, Online Visitors, Customers, Potential Customers, Supplier Employees, and Supplier Authorities, regarding the processing, storage and transfer of your personal data within the framework of our activities arising from the Personal Data Protection Law No. 6698 (“KVKK”) and related legislation and legal regulations.
What are the Categories of Personal Data We Process and For What Purposes Do We Process Them?
Your personal information will be processed by VTC Health Services Industry and Trade Joint Stock Company as stipulated in Article 4.2 of the KVKK;
- Compliance with the law and rules of honesty,
- Being accurate and up-to-date when necessary,
- Processing for specified, explicit and legitimate purposes,
- Being connected, limited and proportionate to the purpose for which they are processed,
- Storage for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed,
In accordance with the principles, within the scope of our ongoing business relationships with our business partners (it is possible for a person to fall into more than one category), your personal data may be processed for the purposes specified below.
From the perspective of our employees;
- Identity information (e.g. name and surname)
- Contact information (e.g. your telephone and email address);
- Health data,
- Location (company vehicle tracking system)
- Personality,
- Your security camera recordings (audio recording at exceptional points),
- Visual and audio recordings,
- Professional experience,
- Legal transaction information,
Your personal data may be processed for the following purposes.
- Our ability to plan and implement human resources policies and processes (performance evaluations, salary planning, identification of training needs, etc.), and to carry out communication activities, storage and archive activities,
- To enable us to pay you your salaries, make insurance payments and fulfill our tax obligations related to these,
- To be able to carry out emergency management processes, information security processes, employee satisfaction and loyalty processes, and our activities in accordance with the legislation,
- Ensuring customer satisfaction and transaction security,
- To enable our relevant business units to carry out the necessary work and carry out the related business processes in order to carry out the commercial activities carried out,
- We can plan and implement commercial and/or business strategies and carry out financial and accounting affairs,
- To ensure your physical and mental safety (e.g., ensuring occupational health and safety), the safety of our company and the administrative and technical measures related to these, 8. To ensure the legal, technical and commercial security of the persons related to the companies with which we enter into any kind of business relationship,
- To verify your identity information and documents when necessary and to take the necessary actions to prevent abuse, loss and fraud,
- To preserve your information that must be kept in accordance with the relevant legislation; to copy and back up your information to prevent information loss; to control the consistency of your information and to take the necessary technical and administrative measures to ensure the security of your information,
- To fulfill our legal obligations to regulatory and supervisory institutions as required or mandated by legal regulations, and to carry out legal proceedings and legal processes.
From the perspective of our employee candidate;
- Identity information (e.g. name and surname)
- Contact information (e.g. your telephone and e-mail address);
- Visual and audio recordings,
- Personal data (Your CV, military service information)
- Physical space security information,
- Professional experience,
- Legal action
- Health data (Your chronic disease and disability status information)
Your personal data may be processed for the following purposes.
- Conducting the Selection and Placement Process of Candidate Employees / Interns / Students2. Conducting the Application Process of Employee Candidates
- Conducting Communication Activities
- Planning Human Resources Processes
- Carrying out activities in accordance with legislation
- Carrying out storage and archive activities
For our visitors;
- Your security camera recordings (audio recording at exceptional points),
Your personal data may be processed for the following purposes.
- It will be processed for the purposes of ensuring the security of physical space.
For our online visitors;
- Transaction security information of our online visitors who use our website (e.g. your IP address information),
- Marketing information (e.g., purchase history information, cookie records)
- Identity information (e.g. name and surname)
- Contact information (e.g. your phone number and email address);
The above personal data may be processed for the following purposes.
- Carrying out activities in accordance with legislation,
- Execution of information security processes,
- Follow-up of requests/complaints,
- Carrying out communication activities,
- Providing information to authorized persons, institutions and organizations,
- To provide you with access to our website via the Internet.
For our customers;
Authorities and/or employees of our natural person customers or legal entity customers;
- Identity information,
- Contact information,
- Customer transaction information (e.g. order information),
- Physical space security information,
- Visual and audio recordings,
- Legal transaction information,
- Marketing information (e.g., purchase history information);
- Health data (health data processed during the health examination and past health information) The above personal data may be processed for the following purposes.
- Carrying out activities in accordance with legislation,
- Carrying out financial and accounting affairs,
- Conducting/supervising business activities,
- Carrying out logistics activities,
- Carrying out after-sales support services for goods/services,
- Carrying out goods/service sales processes,
- Conducting marketing analysis studies,
- Conducting contract processes,
- Providing information to authorized persons, institutions and organizations,
- Ensuring physical space security,
- Resolving legal disputes,
- Carrying out storage and archive activities,
- Conducting loyalty processes to the company/product/service,
- It will be processed for the purposes of carrying out communication activities.
For our potential customers;
Authorities and/or employees of our natural person customers or legal entity customers;
- Identity information,
- Contact information,
- Customer transaction information,
- Physical space security information
- Marketing information;
The above personal data may be processed for the following purposes.
- Managing the sales processes of goods/services,
- Conducting contract processes,
- Ensuring physical space security,
From the perspective of our Supplier Employee;
Our supplier employee;
- Identity information,
- Contact information,
- Physical space security information,
The above personal data may be processed for the following purposes.
- Carrying out communication activities,
- Conducting/supervising business activities,
- Ensuring physical space security,
- Execution of supply chain management processes,
- Carrying out logistics activities,
- Carrying out activities in accordance with legislation,
- It will be processed for the purposes of carrying out occupational health/safety activities. From the perspective of our Supplier Officer;
Our natural person suppliers or legal entity supplier officials;
- Identity information,
- Contact information,
- Physical space security information,
- Customer transaction information,
- Marketing information,
- Legal process information;
The above personal data may be processed for the following purposes.
- Conducting/supervising business activities,
- Carrying out communication activities,
- Carrying out the purchasing processes of goods/services,
- Execution of supply chain management processes,
- Carrying out financial and accounting affairs,
- Conducting contract processes,
- Monitoring and execution of legal affairs,
- Ensuring the safety and security of our company’s physical space and providing administrative and technical measures related to these,
- Our ability to carry out occupational health and safety processes,
- To verify your identity information and documents when necessary,
- To take the necessary actions to prevent abuse, loss and fraud,
- To preserve your information that must be kept in accordance with the relevant legislation,
- We carry out copying and backing up of information to prevent information loss,
- To ensure that we can control the consistency of your information,
- To take the necessary technical and administrative measures to ensure the security of your information,
- It will be processed, recorded, stored, preserved and classified for the purposes of fulfilling our legal obligations required or made mandatory by regulatory and supervisory authorities, legal regulations, and carrying out legal proceedings and legal processes.
What are the methods of collecting your personal data?
Your personal data specified in the categories above;
- Order forms,
- Contracts,
- Through physical means such as visitor forms,
- Information systems and electronic devices (e.g. telecommunications infrastructure, computers and telephones),
- Our website,
- Through other documents declared by the relevant person
is collected by automatic or non-automatic means.
What is the Legal Reason for Collecting Your Personal Data?
Your personal data will be processed by VTC Sağlık Hizmetleri Sanayi Ve Ticaret Anonim Şirketi in order to achieve the purposes explained above, as specified in Article 5 of the KVKK;
- It is clearly provided for in the laws,
- If it is directly related to the establishment or execution of a contract, it is necessary to process personal data of the parties to the contract,
- It is necessary for the data controller to fulfill his legal obligation, 4. Data processing is necessary for the establishment, exercise or protection of a right,5. Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.
are processed based on legal reasons.
Do We Transfer Your Personal Data to a Third Party?
Personal information of our employees:
- Natural persons or private law legal entities (organizations from which we receive lawyer and financial advisor services)
- To our shareholders,
- To our business partners,
- To our suppliers,
- Authorized Public Institutions and Organizations
- It may be shared with law enforcement and judicial authorities upon request, within the scope of the purposes stated above and in accordance with the relevant legislation.
Personal information of the employee candidate:
- It may be shared with judicial authorities and authorized public institutions and organizations, if requested, within the scope of the purposes stated above and in accordance with the relevant legislation.
Personal data of our visitors:
- It may be shared with law enforcement and judicial authorities upon request, within the scope of the purposes stated above and in accordance with the relevant legislation.
Personal data of our online visitors:
- It may be shared with judicial authorities and authorized public institutions and organizations, if requested, within the scope of the purposes stated above and in accordance with the relevant legislation.
Personal data of our customers:
- Natural persons or private law legal entities (organizations from which we receive lawyer and financial advisor services)
- To our shareholders,
- To our business partners,
- To our suppliers,
- Authorized Public Institutions and Organizations
In addition, the personal data in question may be transferred to judicial authorities and, if requested, to official institutions and organizations in order to be used as evidence in any future legal disputes.
Personal data of our potential customers:
- It may be transferred to judicial authorities and official institutions and organizations upon request in accordance with the relevant legislation.
Personal data of our supplier employees:
- Natural persons or private law legal entities (organizations from which we receive lawyer and financial advisor services)
- To our shareholders,
- To our business partners,
- To our suppliers,
- Authorized Public Institutions and Organizations
In addition, the personal data in question may be transferred to judicial authorities and, if requested, to official institutions and organizations in order to be used as evidence in any future legal disputes.
Personal data of our supplier representative:
- Natural persons or private law legal entities (organizations from which we receive lawyer and financial advisor services)
- To our shareholders,
- To our business partners,
- To our suppliers,
- Authorized Public Institutions and Organizations
In addition, the personal data in question may be transferred to judicial authorities and, if requested, to official institutions and organizations in order to be used as evidence in any future legal disputes.
Do We Transfer Your Personal Data Abroad?
As VTC Health Services Industry and Trade Joint Stock Company, we do not transfer your personal data abroad.
How Can You Exercise Your Rights Regarding Your Personal Data?
You can submit your requests within the scope of Article 11 of the KVKK, which regulates the rights of data subjects, to us through the “Application Form to the Data Controller” prepared for your convenience in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” located at the address “https://vitrinclinic.com/tr/” belonging to Tum Yönetim Kiralama Ve İşletme Hizmetleri Anonim Şirketi.
Data Controller: VTC Health Services Industry and Trade Joint Stock Company
Address: İkitelli Osb Neighborhood, Süleyman Demirel Boulevard, Blacksmiths Industrial Site No: 4/1, Interior Door No: 2, Başakşehir / İstanbul
Mail: kvkk@vitrinclinic.com
Kep address:vtcsaglik@hs01.kep.tr
This text has been prepared within the scope of KVKK Compliance Consultancy.
© Uyumbox Consulting| Inww.uyumbox.com