Quality policy

Amerikan Estetik ve Sağlık Hizmetleri Ticaret Limited Şirketi (Private American Surgical Medical Center) Clarification Text

This “Clarification Text” has been prepared for relatives of prospective employees, relatives of employees, shareholders, suppliers, suppliers" employees/officials, potential product or service buyers, individuals purchasing products or services, visitors whose personal data we process. We, Amerikan Estetik ve Sağlık Hizmetleri Ticaret Limited Şirketi (hereinafter referred to as “Medical Center”), want to inform you about processing of your personal data and your relevant rights under the Law on Protection of Personal Data numbered 6698 (hereinafter referred to as “LPPD").

I- Data Controller

The Medical Center runs its operations at the website www.amerikanestetik.com.tr and at the address 19 Mayıs Mahallesi 19 Mayıs Caddesi No:8/B Fulya/Şişli ISTANBUL; and we process your personal data consisting of finance, physical space security, visual and audio records, legal transaction, communication, transaction security, identity, professional experience, customer transaction, personal and health data as a data controller within the scope of the LPPD.

II-Purposes of Processing Personal Data

Your personal data will be processed for purposes of execution of emergency management processes, execution of information security processes, fulfillment of obligations arising out of the employment contracts and the legislation for employees, execution of fringe benefits and interests processes for employees, conducting training activities, execution of access authorities, carrying out activities in accordance with the legislation, execution of financial and accounting affairs, assuring physical environment security, execution of appointment processes, follow- up and execution of legal affairs, carrying out communication activities, execution and control of business activities, execution of occupational health and safety operations, receipt and evaluation of suggestions on improvement of business processes, execution of business continuity activities, execution of goods and service procurement processes, service sales processes, goods/service production

and operation processes, carrying out customer relationship management processes, carrying out activities for customer satisfaction, organization and event management, execution of appointment activities, execution of risk management processes, execution of storage and archiving activities, execution of contract processes, execution of strategic planning activities, follow-up of claims / complaints, execution of supply chain management processes, securing movable goods and resources, securing operations of the data controller, informing authorized persons, institutions and organizations, carrying out management activities and creating and monitoring of visitor records.

III- Persons To Whom and Purposes For Which

Personal Data Can Be Transmitted Your personal data maybe shared with authorized public institutions and organizations in order to fulfill legal obligations, for employees, with our suppliers, consisting of a lawyer and accounting office, for the purposes of fulfilling the obligations arising from employment contracts and legislation for employees, purchasing/selling goods, conducting communication, finance and accounting works, and following up legal affairs, and with the relevant health institution/laboratory/blood center for the purpose of carrying out medical diagnosis, treatment and care services.

IV- Method and Legal Basis of Collecting Personal Data

Your personal data is acquired verbally, in writing or electronically, by automatic or non-automatic methods, based on legal reasons such as express consent, fulfillment of legal obligations, stipulation in laws, signing of contracts, execution of treatment and care services and legitimate interests of the institution as data controller, as specified in Articles 5 and 6 of the LPPD. In this context, your personal data is processed through non-automatic methods such as phone calls, face-to-face communication, filling out forms, signing contracts, issuing invoices and through automatic methods such as the camera recording system in the common areas and e-mail transmission.

V- Your rights as per article 11 of LPPD:

You may send your requests associated your rights listed under the heading "rights of the related person" within scope of article 11 of the LPPD with by filling in all the

information specified in the application in accordance with Article 11 and paragraph 1, Article 13 of the LPPD and as per the Communiqué on the Procedures and Principles of Application to the Data Controlle, a-) by personally visiting our Medical Center at 19 Mayıs Mahallesi 19 Mayıs Caddesi No:8/B Fulya/Şişli ISTANBUL b-) by an application in writing to our central address via a notary public or by registered letter with return receipt in order to be able to identify you and not to give information to the wrong individuals, c-) using the e-mail address reported to our Medical Center and registered in our systems, by sending an e-mail to the address “[email protected]” or by other methods to be determined by the Board in the future. Your requests indicated in your application will be concluded free of charge in no later than thirty days depending on the nature of requests. However, if the transaction requires a separate cost, the fee in the tariff determined in the Communiqué on the Procedures and Principles of Application to the Data Controller may be charged by the Personal Data Protection Board.