MLPCARE HAPP APPLICATION CLARIFICATION TEXT

This clarification text has been prepared by MLP Sağlık Hizmetleri A.Ş. (“MLPCARE”) in the capacity of data controller, in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), the Regulation on Personal Health Data, the Regulation on the Provision of Remote Healthcare Services, the Regulation on the Provision of Home Healthcare Services, the Communiqué on the Principles and Procedures to be Followed in Fulfilling the Obligation to inform, and relevant legislation.

The Happ application is a platform developed by MLPCARE to enable individuals to access information about check-up service packages and purchase them, book video consultation appointments, and access and purchase home care and remote healthcare services. It is available via both the website and the mobile application.

I - YOUR PERSONAL DATA PROCESSED, METHODS OF PROCESSING, PURPOSES OF PROCESSING, AND LEGAL GROUNDS FOR PROCESSING

1. Membership Process

The following personal data are processed during the membership process to the Happ application, based on the legal grounds of “processing of personal data of the parties to a contract being necessary, provided that it is directly related to the establishment or performance of the contract” and “necessity for compliance with the legal obligation of the data controller”:

• Name and Surname
• Turkish ID Number
• Mobile Phone Number
• Email Address
• Date of Birth
• Nationality
• Gender
• Name of Private Health Insurance Company (if any)

2. Health Services Purchase and Appointment Processes

2.1. Remote Health/Home Health/Home Care Services

Remote health services, home health/home care services appointments, and purchases can also be made by becoming a member of the Happ Platform owned by MLPCARE.

• Name - Surname
• Address
• Phone Number
• Selected Hospital Information
• Selected Service Package

The personal data you provide during these processes will be processed fully automatically for the purposes of providing services and increasing patient satisfaction, based on the legal ground of “necessity of processing for the performance of a contract to which the data subject is a party”.

1. E- Appointment Process:

To book an e-appointment via the Happ application, the user must enter their mobile phone number. A verification code sent via SMS must be entered on the screen. Upon approval, an appointment is made with the selected doctor at the selected time.

• Phone Number
• Hospital and Doctor Selection

1. Video Consultation Appointment Process:

Users can also book a video consultation appointment through the Happ application. The process is the same as the e-appointment process. During this process, the following personal data will be processed based on the legal ground of “necessity of processing for the performance of a contract to which the data subject is a party”:

• Phone Number
• Hospital and Doctor Selection

1. Check- Up Service Information Request and Purchase Process:

In order to respond to your request for information about check-up services through the Happ application and to carry out communication activities with you in this context, your personal data will be processed based on the legal ground of “necessity of processing for the performance of a contract to which the data subject is a party”:

• Name - Surname
• Phone Number
• Hospital Selection
• Check-up Package

If you add your credit card information for payment within the Happ application, your credit card information will be processed by the licensed payment service provider we work with, solely for the purpose of processing the payment and based on the legal ground of performance of the contract. Your credit card information will not be recorded or viewed by MLPCARE under any circumstances.

II. RECIPIENTS OF PERSONAL DATA, TRANSFER METHODS, AND LEGAL GROUNDS FOR TRANSFER

1. Services Received from Third Parties:

Personal data may be transferred, limited to the extent required and proportionate to the services received, and provided that all technical and administrative measures required by KVKK are taken, to our subcontractors, business partners, attorneys, consultants, auditors, and other authorized legal representatives and third parties with whom we have a contractual relationship and collaborate with in order to conduct our business activities.

1. If requested by relevant public institutions and organizations, your personal data may also be shared, limited to the scope of such requests.

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

According to Article 11 of KVKK, you have the right to:

• Learn whether personal data is being processed,
• Request information if your data has been processed,
• Learn the purpose of processing and whether it is being used in accordance with its purpose,
• Know the third parties to whom the data is transferred domestically or abroad,
• Request correction if your data is incomplete or incorrectly processed, and request notification of such corrections to third parties to whom the data has been transferred,
• Request deletion or destruction of your data if the reasons for processing no longer exist, even if it has been processed in accordance with the law, and request notification of such actions to third parties,
• Object to the emergence of a result against you due to the exclusive analysis of the processed data through automated systems,
• Request compensation for damages if you suffer damages due to unlawful processing of your personal data.

You may submit your requests to MLPCARE in accordance with the Communiqué on the Principles and Procedures for Application to the Data Controller, in writing to Flatofis Defterdar Mahallesi, Otakçılar Caddesi, Flatofis, No:78 address with documents proving your identity; via secure electronic signature or mobile signature to the email address infokvkk@mlpcare.com; or by using your email address registered in our system. You may also withdraw your explicit consent at any time without any restriction.

Our hospital reserves the right to verify your identity to prevent unlawful sharing of your personal data.