MLPCARE HAPP APPLICATION CLARIFICATION TEXT

This clarification text has been prepared by MLP Sağlık Hizmetleri A.Ş. (MLPCARE) as the data controller in accordance with the Law on the Protection of Personal Data No. 6698 (KVKK), the Regulation on Personal Health Data, the Regulation on the Provision of Remote Health Services, the Regulation on the Provision of Home Health Services, the Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Obligation of Clarification, and the relevant legislation.

The Happ application is a platform prepared by MLPCARE to enable individuals to obtain information about and purchase check-up service packages, to book video consultation appointments, to obtain information about and purchase home care and remote health services. It provides services both via website and mobile application.

I - YOUR PROCESSED PERSONAL DATA, PROCESSING METHODS, PURPOSES OF PROCESSING, AND LEGAL BASES

1. Membership Process

Within the scope of the Happ application membership process, the following personal data are processed based on the legal grounds of “being necessary for the establishment or performance of a contract” and “being necessary for the data controller to fulfill its legal obligations”:

• Full Name
• Turkish ID Number
• Mobile Phone
• E-mail Address
• Date of Birth
• Nationality
• Gender information
• Name of the private health insurance company (if any)

2. Purchasing Health Services and Appointment Processes

2.1. Remote Health / Home Health / Home Care Services

Remote health services, home health/home care service appointments and purchases can also be made by becoming a member of the Happ Platform owned by MLPCARE.

• Full Name
• Address
• Phone Number
• Selected hospital information
• Selected service package

The personal data you provide to us in these processes will be processed for the purposes of carrying out service delivery processes and improving patient satisfaction, based on the legal ground of “being necessary for the establishment or performance of a contract”, through fully automated means.

2.2. E-Appointment Process

To make an e-appointment via the Happ application, a GSM number is first entered. The code sent via SMS is entered on the screen, and upon confirmation, an appointment is made with the selected doctor at the chosen time.

• Phone Number
• Hospital and doctor selection

2.3. Video Consultation Appointment Process

Individuals can also book video consultation appointments via Happ. The appointment process is the same as e-appointment. In this process, the following personal data are processed based on the legal ground of “being necessary for the establishment or performance of a contract”:

• Phone Number
• Hospital and doctor selection

2.4. Check-Up Information Request and Purchase Process

In order to meet your request for information about check-up services via the Happ application, your personal data will be processed for the purpose of contacting you regarding this request, based on the legal ground of “being necessary for the establishment or performance of a contract”:

• Full Name
• Phone Number
• Hospital selection
• Check-up package

If you add your credit card to make a payment within the Happ application, your credit card information will be processed by the licensed payment service provider we receive services from, for the purpose of receiving the payment, based on the legal ground of performance of contract. Your credit card information will not be recorded or seen by MLPCARE under any circumstances.

II. PARTIES TO WHOM PERSONAL DATA IS TRANSFERRED, METHODS OF TRANSFER, AND LEGAL BASES

1. Third Parties Providing Services

Our subcontractors, business partners, lawyers we work with, consultants, auditors, including those from whom we receive consultancy, our authorized legal representatives and third parties, domestic organizations and other third parties and their legal representatives, with whom we contractually receive services, cooperate, will be transferred only in connection with, limited to, and proportionate to the received service, and only for the duration of the service, provided that undertakings are obtained that they will take all technical and administrative measures required by the KVKK.

2. Public Institutions and Organizations

In case of request by the relevant public institutions and organizations, your personal data will be shared only in connection with and limited to such requests.

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

Your rights under Article 11 of the KVKK are:

• To learn whether personal data is processed,
• If personal data has been processed, to request information regarding this,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• If personal data are incomplete or incorrectly processed, to request their correction and to request that the transaction made in this context be notified to the third parties to whom personal data are transferred,
• Although it has been processed in accordance with the provisions of the KVKK and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring processing are eliminated, and to request that the transaction carried out in this context be notified to the third parties to whom personal data are transferred,
• To object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
• To demand the compensation of the damage in case of suffering damage due to the unlawful processing of personal data.

You may submit your applications in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller to MLPCARE together with information and documents proving your identity, either in writing to Flatofis Defterdar Mahallesi, Otakçılar Caddesi, Flatofis, No:78, or by secure electronic signature, mobile signature, or by using the e-mail address previously registered in the system to infokvkk@mlpcare.com. In addition, you may withdraw your explicit consent at any time without any limitation.

Our hospital reserves the right to verify your identity in order to prevent unlawful sharing of your personal data.