Privacy Policy and Personal Data

This privacy policy is between CALLHEALER INTERNATIONAL HEALTH TOURISM LTD and Opsis Software Elect. Communication Service Trade Ltd. Sti. Explains how we (we) (www.callhealer.uk) collect, process, store and disclose your personal data. Personal data is a necessity for the services we provide to you on our website and platform.

We encourage you to read this privacy policy carefully before using any of our services.

We may change the Privacy Policy and Statement as necessary due to changes in applicable laws and regulations. If your rights are affected, we will contact you to obtain your consent.

We, the company Opsis software Elect. Communication services Handelsges.mbH. (www.callhealer.uk) have our registered office as below and operate the platform www.callhealer.uk. Under the Personal Data Protection Act No. 6698 and as a data controller, we are obliged to protect your personal data in accordance with the provisions of the Personal Data Protection Act. You can contact our Data Protection Officer (“KVKG”) by writing to [email protected] or by sending your questions to our registered office address or by otherwise addressing them to us as permitted under applicable law.

PATIENT / PATIENT REPRESENTATIVE:

If you use our website to obtain information about health facilities/hospitals, tourism agencies and treatments, the following information applies to you:

A. COLLECTION OF YOUR PERSONAL INFORMATION AND LEGAL PERMISSIONS

We collect your personal data when you register on our website or use one of our services. When you sign up for our services, we ask you to provide basic personal information, including your email address. You can also provide additional information about yourself, such as B. Your name, surname, gender, phone number. We store this information so that you can use our services. Our services are making an appointment at health institutions/hospitals and tourism agencies or buying a treatment package, meeting doctors/experts online, sending a message to doctors/experts. You can manage your account through our platform for easy access to your information.

When you register on our platform, you are entering into a legal contract with us. This Agreement is based on Article 5.2 of the Personal Data Processing Act and constitutes a legal basis for the processing of your personal data. This data may also be processed in accordance with other guidelines specified in Article 5.2 of the Personal Data Protection Act. These policies are terms that set out how we, as a data controller, have to treat your data in order to comply with our legal obligations and to track your data in accordance with our legitimate interests for which the data processing is mandatory. With regard to data processing activities requiring consent, such data processing activities will only be carried out with your express consent within the framework of Article 5.1 of the Data Protection Act.

B. PURCHASING A TREATMENT PACKAGE FROM THE TREATMENT PROVIDER OR A TRAVEL AGENCY

If you purchase a treatment package to be treated in a treatment direction through our website and benefit from services such as hotels, plane tickets and transfers from the tourism agency, we will receive information from you in electronic form through the platform used, such as:

• name and surname(s),

• phone number,

• email-address,

• date and time of treatment,

• Type of treatment,

• Identification Number

• Any additional information you share or upload during the appointment.

We only store this data on our platform so that you can view your information, manage your treatment and appointment and transmit this data to healthcare institutions. Healthcare institutions and tourism agencies become data controllers upon receipt of your personal data. They process your personal data for their purposes. Such transactions are subject to the privacy policy of the healthcare facility and tourism agencies and disclosure text. We will ask for your consent before sharing your data with healthcare institutions and tourism agencies. It is not possible for us to provide you with these services without your express consent. The processing of your health-related personal data is based on your consent and carried out in accordance with Article 6.2 of the Data Protection Law.

C. VIDEO CALL OR MESSAGING A DOCTOR OR EXPERT

While using our platform or mobile application, you can make video calls or text messages with doctors/experts. Since your conversations or messaging are end-to-end encrypted, we cannot access the information you share with the doctor/expert during the chat. Before making the interview, your consent is requested by us and your personal data is provided in Articles 5.1, 5.2 and 6.2 of the Personal Data Protection Law. processed in accordance with its provisions.

D. FOR MARKETING PURPOSES

When you choose to receive marketing and commercial communications, we may process your email, phone number, first and last name for this purpose. You can opt out of receiving these messages at any time. The legal basis for the processing of your personal data for this purpose is in accordance with Article 5.1 of the Personal Data Protection Law.

E. FOR OTHER PURPOSES

When you use our services, we may obtain information about your device, IP address, time zone and language, or the browser you use. We also learn how long you have used our services and when you last used them.

The purpose of processing this data is

·       to inform about new features and functions related to our Services;

·        to evaluate your claims and complaints or to protect you against any third party claims.

·       to manage and plan our activities to provide you with a better experience.

We process this information in accordance with Article 5.2 of the Personal Data Protection Law and in cases where it is necessary for the establishment and performance of our contract with you, the establishment or exercise of a right, the fulfillment of our legal rights and obligations and based on our legitimate interests.

We can obtain information about your health status if you purchase an appointment or treatment package from health institutions and tourism agencies, and if you start a conversation with the specialist. We can also act as data processors on behalf of health institutions or experts who have authorized us about your personal data related to health.

If you make an appointment on behalf of someone else (such as scheduling an appointment for a family member), we may obtain that person's personal data. We process this personal data for the same purposes as we process your personal data.

If you are providing personal data on behalf of another person, it is your responsibility to inform that person and obtain their consent if necessary.

We allow health institutions and tourism agencies to upload and store your personal data. It is used by health institutions and Tourism Agencies to manage their work schedule.

For all these reasons, we act as data processors and process the personal data of their patients in accordance with their instructions.

We only process your personal data in accordance with the instructions of health institutions and Tourism Agencies, we do not process the relevant personal data for our own purposes. This also applies to the information regarding Health Institutions and Tourism Agencies sent to you via our platform, messages, e-mails or similar communication means or campaigns. It is they, not us, who decide whether to send you messages, e-mails or similar campaigns. We do not accept any responsibility for such communications or for the processing of your personal data by physicians or clinics.

HEALTH INSTITUTION / HOSPITAL AND TOURISM AGENCY

A. OBTAINING YOUR PERSONAL DATA AND LEGAL PERMISSIONS

We obtain your personal data from you when you become a member or use our services. We ask you to provide data about your professional activities and other information that will help us keep our users informed about you and will be posted on your profile on our platform.

We record your name and surname, Business address, E-mail, Specialization, Registry number, Photograph, Contract and any other information you provide to us during the registration process.

When you become a member of our services, you are making a legally binding contract with us. Our obligation to fulfill and comply with our obligations under the contract in question is in accordance with Article 5.2 of the Personal Data Processing Law. As stated in the article, it constitutes a valid legal basis for the processing of your personal data. In addition, as the data controller, we also process your personal data as a requirement of our legal obligations. For example, issuing invoices and keeping our financial records up to date. This is in accordance with Article 5.2 of the Personal Data Processing Law. constitutes a legal condition suitable for the processing of your personal data in accordance with the article. We also collect your personal data from the clinics you work with or within the scope of contracting to obtain Services from us. These clinics may transfer your personal data to us in accordance with their own responsibilities, and we process your personal data for the performance of the contract we have concluded with Health Institutions and Tourism Agencies. It is very important for us to process your personal data, but you can always contact the Health Institutions and Tourism Agencies that have transferred your personal data to us and object to the data processing or withdraw your consent for the use of your personal information.

B. FOR MARKETING PURPOSES

When you choose to receive marketing and commercial communications, we may process your email, phone number, first and last name for this purpose. You can opt out of receiving these messages at any time. The legal basis for the processing of your personal data for this purpose is in accordance with Article 5.1 of the Personal Data Protection Law.

C. OTHER PURPOSE

When you use our services, we may obtain information about your device, IP address, time zone and language, or the browser you use. We also learn how long you have used our services and when you last used them.

The purpose of processing this data is;

• To inform about new features and functions related to our Services;

• To evaluate your claims and complaints or to protect you against any third party claims.

• To manage and plan our activities to provide you with a better experience

We process this information in accordance with Article 5.2 of the Personal Data Protection Law and in cases where it is necessary for the establishment and performance of our contract with you, the establishment or exercise of a right, the fulfillment of our legal rights and obligations and based on our legitimate interests.

IS PERSONAL DATA SHARED WITH THIRD PARTIES?

Only for the purpose of providing better service to you, CALLHEALER INTERNATIONAL HEALTH TOURISM LTD. and OPSİS SOFTWARE LTD. We may disclose your personal data to other companies that are part of the company.

If you have given consent for your personal data to be shared with Health Institutions and Tourism Agencies we will, subject to your explicit consent, share the data you choose to share with Health Institutions and Tourism Agencies.

We may also share your personal data with third-party providers for the sole purpose of providing our Services to you. These third parties act as data processors and have concluded a data protection agreement with us.

For example, we may share your personal data with the following categories of data processors:

            cloud computing and server maintenance providers,

•          communication tools,

•          customer support tools,

•          external consultants and auditors,

•          payment service providers, banks, credit reference and fraud prevention agencies and insurance companies,

We may disclose your personal data when required by applicable law to contact judicial or regulatory authorities and to protect our rights and property. We may also share your personal information with these business entities if we are planning to merge with, invest in, or be acquired by a business, or if we enter into a corporate restructuring.

We will not transfer your personal information to another third party unless you give us your consent.

Some of our service providers (data processors) are located outside the European Economic Area, so we may transfer your personal data to third party countries. We always ensure that these transfers

meet the requirements of applicable data protection law, including the GDPR and the Personal Data Protection Act.

Since some group of companies within Poliklinik Sepeti Ltd. and some of our service providers (data processors) are outside of Turkey, we need to transfer your personal data outside of Turkey in order to provide services over www.callhealer.uk. In accordance with the relevant provisions of the Personal Data Protection Law, we will obtain your consent before transferring your personal data. In accordance with the Personal Data Protection Law, we request your consent for such cross-border data transfer. If you do not give your consent, we will not be able to provide our Services to you. The transfer of your personal data in accordance with your consent is in accordance with Articles 5, 6 and 9 of the Law on the Protection of Personal Data.

How long do we process your personal data?

We will retain personal data only for as long as necessary for the above-mentioned purposes or to comply with legal obligations to which we are subject. The length of time we keep information about you will vary depending on the type of information and the purposes for which we use it. Generally, in order to comply with our legal obligations we retain our records for up to 6 years after you terminate your relationship with us. Below you can find out in more detail for what purpose and for how long we store your data.

PURPOSE:

1. Providing our services to you:

We will process it as long as you have a user account or an active service contract. If you delete your user account or your service contract is terminated, we will process your personal data for 6 years following such deletion or termination.

2. Patient data:

We will process it for as long as you have a user account. If you delete your user account, we will process your personal data for 6 years following this deletion.

3. Technical and statistical information

We will process it for as long as you have a user account. If you delete your user account, we will process your personal data for 6 years following this deletion.

4. Marketing

We will process your personal data until you withdraw your consent for marketing purposes or object to the processing of your personal data.

5. Patient data: Talking to the specialist

We will process the personal data you provide to us during the conversation for 2 years.

6. Complaints

We will process your personal data for 6 years following your complaint.

YOUR RIGHTS

Within the provisions of the relevant laws for the protection of your Personal Data provides You have the right to

1. learn whether your data is processed or not,

2. be informed about the processing of your data,

3. be informed about the purposes of processing your data and whether your data is processed

    appropriately,

4. be informed about the third parties to whom your personal data is transferred at home and abroad,

5. request the deletion of your data (in accordance with the limitations set forth in the Personal Data

    Protection Law) or the correction or verification of your personal data,

6. request any deletion, correction or verification request regarding your data be notified to the third

    parties with whom your personal data is shared,

7. object to any decision made solely as a result of automatic processing

8. request compensation if you suffer damage due to unlawful processing of your data.

You can contact us about your rights. (Below is our contact information.) We will try to answer your requests within 30 days in accordance with the Law on Protection of Personal Data.

We aim to ensure that the information we store is always correct. To help us keep your information up to date, you will need to let us know if any of your personal information has changed. At your request, we will take reasonable steps to ensure that the data is accurate and correct any inaccurate personal data promptly, and in any case within one month of your request.

LINKS TO OTHER SITES

Our website or application may offer links to other sites via social media buttons. We are not solely responsible for the content, security or privacy practices used by other websites despite our high standards of privacy, and these links do not constitute an endorsement of that website. When you link to another website from our website or application, you are subject to the terms and conditions of this website, including but not limited to the internet privacy policy and practices. Please check these policies before submitting any data to these websites.

PROTECTION OF INFORMATION

We provide appropriate technical, physical, electronic and administrative measures to protect your personal data against unauthorized access. We follow generally accepted high standards to protect personal information sent to us, both during transmission and after we receive it. While we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website, platform or our staff; therefore, any transmission is at your own risk. Once we have your information, we will use strict procedures and security measures to try to prevent unauthorized access.

CONTACT

If you have any questions about your personal data contact us at:

https://www.callhealer.uk

[email protected]

or by regular mail to:

Reşatbey neighborhood, 62005. Street, Bilge Apartment 5-19 Seyhan, Adana, Turkey

Callhealer International Health Tourısm Ltd 71-75 Shelton Street Covent Garden London Unıted Kıngdom WC2H 9JQ