This privacy policy has been prepared by Güven Hastanesi A.Ş. (“Güven”) within the scope of the Law No. 6698 on the Protection of Personal Data(“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Obligation to Inform.

Method of Collection of Personal Data
Within the scope of the activities carried out by Güven, your personal data is collected electronically by automatic or non-automatic means through the following channels in accordance with Article 5 of the KVKK;

• Electronic Communication Channels
• Newsletter subscription

Your Personal Data Being Processed

Purposes of Processing Personal Data	Personal Data Category	Legal Grounds for Processing Personal Data
Performing User Registrations via the Website/Application	- Identity - Contact - Transaction Security	Establishment, Use or Protection of a Right
Making Appointment Records via Website Application	- Identity - Customer Transaction – Communication	Establishment, Use or Protection of a Right
Carrying out the Patient's Medical Diagnosis and Treatment Processes	- Identity - Customer Transaction – Communication	Establishment or Performance of a Contract
	- Health Information	Obtaining Explicit Consent
Conducting Finance and Accounting Affairs	- Identity - Customer Transaction	Establishment or Performance of a Contract
Ensuring the Security of Data Controller Operations	– Transaction Security - IP and log records	Establishment or Performance of a Contract
Tracking of Requests / Complaints	- Identity - Communication – Customer	Transaction Establishment, Exercise or Protection of a Right
Realization of Package Sales via Website Application	- Identity - Customer Transaction	Establishment or Performance of a Contract

Purposes of Processing Your Personal Data
Your personal data is processed by Güven or, with your consent, through an intermediary firm, for the purpose of creating appointment records, conducting customer relationship management processes, carrying out customer satisfaction initiatives, providing information about special campaigns, advantages, product and service promotions, and other customer satisfaction practices, informing you about professional activities, tracking your questions and requests, and making necessary guidance.
In exceptional circumstances defined in KVKK Article 5/2, Güven may also process your personal data (in cases explicitly foreseen by laws, directly related to the establishment or performance of a contract, fulfillment of a legal obligation, publicly disclosed by the data subject, necessary for the establishment, exercise, or protection of a right, or mandatory for the legitimate interests of Güven).

Sharing and Transfer of Your Personal Data with Third Parties
Your personal data may be transferred to third parties both domestically and internationally, limited to the purposes mentioned in this Information Text, including the utilization of activities conducted by Güven (such as storage, archiving, information technologies, etc.). We receive support from third parties in fields such as servers, hosting, programs, cloud computing, website content managers, email providers, MBYS software managers, e-commerce platforms, insurance and support service providers, business partners, service providers, and other relevant parties where the transfer is deemed necessary for the specified purposes, in accordance with KVKK Article 8 and 9.

Retention of Personal Data
Your personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with applicable legal, regulatory, administrative, contractual and technical obligations.

Unless a longer retention period is required or permitted by applicable legislation, Güven applies the following general retention periods:

Data / Processing Category	Retention Period
User registration records, account information and application access records	10 years after the end of the user relationship
Appointment records, service request records and customer transaction records	10 years after completion of the relevant transaction or service
Medical diagnosis, treatment and health service records	20 years, or longer if required under applicable healthcare legislation
Health-related personal data processed through the website/application	20 years, or for the legally required medical record retention period
Finance, accounting, invoicing and payment-related records	10 years in accordance with tax, accounting and commercial legislation
Contractual transaction records and package sales records	10 years after the end of the contractual relationship
Request, complaint and communication records	10 years after the request or complaint is resolved
IP addresses, system logs and transaction security records	2 years, unless a longer period is required for security, audit, dispute or legal compliance purposes
Newsletter, marketing and promotional communication records	Until consent is withdrawn, or for a maximum of 3 years after the last interaction
Explicit consent records and consent withdrawal records	10 years after the end of the relevant processing activity
Website cookies and similar tracking data	In accordance with the cookie type and Cookie Policy, generally between session duration and 2 years

At the end of the applicable retention period, or when the purpose of processing no longer exists, personal data is deleted, destroyed or anonymized in accordance with KVKK and applicable secondary legislation.

Where personal data is required for the establishment, exercise or protection of a legal right, Güven may retain the relevant data for the applicable statutory limitation period, even if the original processing purpose has ended.

Rights and Communication
We would like to remind you that you have the following rights within the framework of KVKK:

1. Learn whether your personal data is being processed and request information about it;
2. Learn the purpose of processing personal data and whether they are used for their intended purpose;
3. Know the third parties to whom your personal data is transferred domestically or internationally;
4. Request the correction of your personal data if they are incomplete or incorrectly processed, request the deletion or destruction of your personal data within the framework of the conditions prescribed by KVKK, and request the notification of these actions to third parties to whom your personal data has been transferred;
5. Object to the emergence of a result against you through the exclusive analysis of processed data by automatic systems;
6. Request the remedy of any damages you may incur due to the unlawful processing of your personal data.

You can prepare your requests/questions within the scope of Article 11 of the KVKK, regulating the rights of the relevant person, in accordance with the conditions determined by the Personal Data Protection Board and send them in writing to the address, Remzi Oğuz Arık Mah. Paris Cad. No:58 Çankaya / Ankara, or in writing to guven@guven.com.tr (the email address you have previously notified and is recorded in our records)

To provide a healthy response to your application, your request must be specific, clear, and understandable. It should be related to you or, if acting on behalf of someone else, you should be specially authorized in this regard, and your authorization should be documented. Additionally, in accordance with the legislation, your application must include your name, surname, TCKN (or passport number for foreigners), address information to which we can send our response, and identity documents to verify your identity

Best regards,
Güven Hospital Inc.