In its capacity as the Data Controller,ÖZEL BATI ÜROLOJİ SAĞLIK HİZMETLERİ TİC. LTD. ŞTİ./Egemed Didim Medical Center will processthe personal data we collect from you in the manners specified below,as appropriate, within the scope of our commercial relationships or our business relationship with you; within the scope of the purpose requiring such processing and in a manner that is relevant, limited, and proportionate to that purpose, while ensuring the accuracy and up-to-date status of the personal data you have provided to us, and that such data will be recorded, stored, retained, and reorganized, shared with institutions authorized by law to request this personal data, and transferred, assigned, classified, or otherwise processed in the other ways specified in the Personal Data Protection Law (KVKK), in accordance with the conditions set forth therein, to third parties both domestically and internationally.
- YOUR PERSONAL DATA THAT IS PROCESSED
We may process personal data provided to us by our employees regarding themselves. The personal data that may be subject to processing is as follows:
1-Identification(first and last name, mother’s and father’s names, mother’s maiden name, date of birth, place of birth, marital status, ID card serial number, Turkish ID number, etc.)
2-ContactInformation (such as address, email address, mailing address, registered email address (KEP), phone number, etc.)
3-Personnel Records(such as payroll information, disciplinary investigations, records of hiring and termination, asset disclosure information, resume information, and performance evaluation reports)
4-Legal Proceedings(such as information contained in correspondence with judicial authorities and information in court files)
5-Customer Transactions(such as call center records, invoices, promissory notes, check information, information on teller receipts, order information, and request information)
6-Physical Premises Security(such as entry and exit logs for employees and visitors, and camera recordings)
7-Transaction Security(such as IP address information, website login and logout information, and password information)
8-Risk Management(such as information processed for the management of commercial, technical, and administrative risks)
9-Finance(such as balance sheet information, financial performance data, credit and risk information, and asset information)
10-Professional Experience(such as degree information, courses taken, on-the-job training, certificates, and transcript information)
11-Marketing(purchase history information, surveys, cookie records, information obtained through marketing campaigns)
12-Visual and Audio Recordings(such as visual and audio recordings)
13-Association Membership(such as information about association membership)
14-Foundation Membership(such as foundation membership information)
15-Union Membership(such as union membership information)
16-Health Information(such as information regarding disabilities, blood type, personal health information, and information on medical devices and prosthetics used)
17-Criminal Convictions and Security Measures(such as information regarding criminal convictions and information regarding security measures)
18-Biometric Data(such as palm data, fingerprint data, retinal scan data, and facial recognition data)
19-Other Information (Military service deferment, vehicle license plate, copy of driver's license, employee internet access logs)
- METHOD AND LEGAL BASIS FOR THE COLLECTION OF YOUR PERSONAL DATA
To fulfill our legal obligations as an employer, in order to fulfill the employment contract between us, for reasons stipulated by law, and in accordance with the Company’s legitimate interests, we collect your personal data—which we have requested directly from you, previously requested through our Company during your job application, or which you chose to share with us during your application—as contained in your resume or other documents related to your application, by means of you providing such information to us in physical or electronic form.
In accordance with the Company’s legal obligation and legitimate interest in ensuring the safety of the workplace, employees, and visitors, we record footage using cameras installed in our workplace building. You can view our Workplace Video Recording Policy www.egemed.com.tr/anasayfa/ .
We collect your health data in physical form to fulfill our legal obligations and as required by law, and we collect your personal data from building management—either in physical or electronic form—to ensure workplace safety.
We collect personal data that we learn through legal documents and notices sent to us in order to fulfill our legal obligations.
- PURPOSES OF PROCESSING YOUR PERSONAL DATA
The Company may process your personal data for the purposes and on the legal grounds specified below.
- Carrying out the procedures necessary for the performance of the employment contract, in particular:
Approving employee leave requests, viewing remaining leave balances, and managing leave schedules
Processing employees' termination procedures,
Ensuring that payroll processing is carried out,
Paying employees their salaries,
- In order to comply with the requirements set forth in the Labor Code, the Occupational Health and Safety Code, the Social Security Code, and related legislation, as well as other laws and regulations, specifically:
Creating an employee personnel file,
Submitting SGK reports, İŞKUR reports, and police station reports, as well as providing information on incentives and legal obligations,
Ensuring that mandatory individual retirement insurance accounts are opened,
Payment of wage garnishments for employees in enforcement cases,
Submitting the required legal reports for workplace accidents,
The implementation of occupational health and safety procedures,
To comply with other data retention, reporting, and disclosure obligations prescribed by legislation, relevant regulatory agencies, and other authorities,
Enforcement of court decisions,
In order to ensure security within the company, in particular:
Ensuring workplace safety,
Ensuring that employees can enter and exit the building where the company’s headquarters is located,
For the purposes of managing the company, conducting business, and implementing company policies, in particular:
Tracking and reporting on the sales and work performance of company employees,
Reimbursement of expenses to employees,
Creating an employee page by entering employee data, updating existing data,
Ensuring communication with employees
Confirming that an employee who has been assigned or permitted to use a vehicle is qualified to drive and has not lost their driver’s license for any reason,
Providing employees with vehicles and arranging parking spaces,
Arranging for business card printing,
Ensuring that documents and packages received via mail, freight, and courier are delivered to the appropriate employee,
Monitoring the use of company vehicles to ensure employee safety and the smooth operation of business,
Arranging transportation and travel,
Creating an employee's work email account,
Conducting research projects related to employees,
Ensuring that employees' arrival and departure times are monitored,
To enable our company to send out informational messages, campaign announcements, and promotional offers, we need to manage bulk email communications,
The documentation of records collected from employees during the job application and interview process,
Establishing communication through any means intended for celebration, reminders, information, etc.,
Planning training sessions, reporting on training sessions, preparing training certificates, tracking employees who participated in completed training sessions, and monitoring employees’ development processes as a result of the training they have received,
Ensuring quality control,
Establishing communication with the relevant individuals in emergency situations,
Providing support to company employees,
Your personal data will be retained for the maximum period specified in the relevant legislation or necessary for the purpose for which it is processed, and in any case, for the statutory limitation periods (10 years after the termination of the employment contract—or until the conclusion of any ongoing legal proceedings, if applicable).
- SHARING YOUR PERSONAL DATA WITH THIRD PARTIES WITHIN THE COUNTRY
For the purpose of ensuring your security and enabling our Company to fulfill its legal obligations, your personal data is processed in accordance with the Labor Law, the Occupational Health and Safety Law, the Social Insurance and General Health Insurance Act, the Law on the Regulation of Publications Made on the Internet and the Fight Against Crimes Committed Through Such Publications, the Turkish Commercial Code, the Personal Data Protection Act No. 6698, the Identity Reporting Act, and to the extent permitted and required by other applicable laws and regulations, to relevant institutions or organizations; may be shared with public legal entities such as the Ministry of Health, the Ministry of National Education, the Personal Data Protection Authority, the Ministry of Finance, the Ministry of Customs and Trade, the Ministry of Labor and Social Security, the Turkish Employment Agency (İş-Kur), and the Information and Communication Technologies Authority.
In addition, to carry out the tasks and processes necessary for the performance of the employment contract;
- We can process payroll transactions and update the relevant data within the program.
In order to comply with the requirements set forth in the Labor Code, the Occupational Health and Safety Law, the Social Security Law, and related legislation, as well as other laws and regulations;
- We may share this information with the consulting firms and private employment agencies we work with—solely for the purpose of obtaining advice on identifying and calculating the incentives we are eligible for.
- We may share your health information with our occupational physician so that they can provide treatment and conduct health checkups.
- We can provide payroll information to the company's auditors so they can carry out their audit activities.
To ensure security within the company;
- For workplace safety purposes, we can forward access logs to the workplace building management/security team.
In order to fulfill our legal obligations;
- In order for us to exercise our legal rights, we may share information with the relevant judicial authorities—limited to the scope of the request—as part of our obligation to comply with legal requests, such as court orders or requests for evidence, provided that such sharing is in accordance with the law and due process.
For the purposes of managing the company, conducting business, and implementing company policies;
- We may transfer your personal data to companies we collaborate with in order to ensure our internal operations.
- To ensure the company maintains its data storage capacity, we can transfer data to archiving companies so it can be stored for the required retention periods.
- The necessary personal data may be transferred to the company we work with for purposes such as transportation, vehicle procurement, business card printing, and parking registration.
- SHARING YOUR PERSONAL DATA WITH THIRD PARTIES ABROAD
If you give your consent, your personal data may be shared with third parties abroad to facilitate communication during your international travel and educational programs, to organize your travel, and to enable the sending of bulk emails.
If you have international health insurance, this information can be shared with the relevant insurance company.
- YOUR RIGHTS
- To find out whether the Company has processed personal data about you, and if so, to request information regarding such processing,
- To learn the purpose of the processing of your personal data and whether it is being used in accordance with that purpose,
- The right to learn whether personal data has been transferred within the country or abroad, and to whom it has been transferred,
- To request that the Company correct any inaccurate or incomplete personal data about you and notify the recipients to whom your data has been or may have been transferred,
- To request the erasure (deletion, destruction, or anonymization) of your personal data,
- If you suffer damage as a result of the unlawful processing of your personal data, you have the right to request compensation for such damage and to exercise other rights provided by law.
The requests included in your application will be processed free of charge within 30 (thirty) days at the latest, depending on the nature of the request. However, if the process entails additional costs for the Company, a fee may be charged in accordance with the schedule set forth in the Communiqué on the Procedures and Principles for Applications to the Data Controller issued by the Personal Data Protection Board.
For matters related to the processing of your personal data, you may submit your request to our Company or via the Company’s website www.egemed.com.tr/anasayfa/ , in writing, or via a certified email (KEP) address, a secure electronic signature, or a mobile signature. Depending on the nature of your request and the method of submission, the Company may request additional verification to determine whether the request is indeed from you and to ensure the protection of your rights.
DATA CONTROLLER
ÖZEL BATI UROLOGY HEALTH SERVICES LTD.
Egemed Didim Medical Center
Contact: CumhuriyetNeighborhood, 19 Mayıs Street, No. 63
Didim, Aydın
444 10 81