Healtius

KVKK Information Notice for Service Providers

Healtius Teknoloji Anonim Şirketi ("Company") places great importance on processing your personal data in accordance with the law and principles of honesty, in a secure and transparent manner. This Disclosure Text has been prepared to explain how and for what purposes your personal data is processed and how you can manage your preferences in this regard.

Pursuant to the Personal Data Protection Law No. 6698 ("Law"), you can find below detailed explanations by the data controller Company regarding the purposes of processing your personal data, to whom it may be transferred, and your rights concerning your personal data.

1. Primary Personal Data Processed by the Company and Processing Purposes

Below are the categories of data processed and example data provided to clarify each category:

  • Identity Data: Your name, surname, date and place of birth, gender, marital status, nationality, etc.
  • Contact Data: Your email address, postal address, mobile phone number, etc.
  • Financial Data: Your payment details, other financial information, etc.
  • Educational Information: The schools you attended, spoken languages, diploma number, etc.
  • Professional Experience: Treatment and research areas, specialty, experience details (workplaces), etc.
  • Transaction Security Information: Your password, login frequency/times, update date, last message date, IP, Device ID, device info, etc.
  • Visual and Audio Data: Photographs, voice recordings of the individual, etc.
  • Other: Files and messages shared via the messaging section of the application, complaints and feedback data.

The above personal and sensitive personal data are processed by the Company in accordance with the general principles set forth in Article 4 of the Law and under the conditions specified in Articles 5 and 6, for the following purposes:

  • Execution of the service provider agreement you accepted as a member,
  • Management of request/complaint tracking processes,
  • Execution of storage and archiving activities,
  • Execution of product/service sales processes,
  • Execution of after-sales support services,
  • Management of communication activities,
  • Execution of finance and accounting operations,
  • Conducting analyses related to the services provided and improving the application,
  • Sharing data received through the Healtius platform and other channels with the relevant users,
  • Execution and auditing of business operations,
  • Following legal procedures and exercising our right of defense when necessary,
  • Ensuring your personal data security.

2. Purposes of Data Transfer and Parties to Which Personal Data May Be Transferred

The processed personal data may be transferred domestically in accordance with Article 8 of the Law for the purposes mentioned above to the relevant users with whom the service provider has a contract, authorized public institutions and organizations, and third parties appointed as data processors who have committed to taking necessary security measures.

  • Cloud storage systems for conducting application and storage activities,
  • Digital wallet applications to ensure international-standard secure payment processes,
  • Third-party applications using end-to-end encryption for video communication activities.

Transfers abroad are made under the conditions outlined in Article 9 of the Law.

3. Methods and Legal Grounds for Collecting Personal Data

Your personal data mentioned above is collected automatically through your logins to the Healtius platform, comments, participation in surveys, and any data entry/file submissions made via the application. It is also collected non-automatically through verbal requests, documents submitted in printed or signed form, or emails sent to the Company.

Collected personal data is processed under the legal grounds specified in Article 5 of the Law:

  • Obtaining explicit consent,
  • It is necessary for the performance or establishment of a contract,
  • It is required to fulfill the legal obligations of the data controller,
  • It has been made public by the data subject,
  • Provided it does not harm the fundamental rights and freedoms of the data subject, it is necessary for the legitimate interests of the data controller.

Sensitive personal data as defined in Article 6 of the Law is processed only based on explicit consent. If the service provider deletes their account, the Company will assume that consent has been withdrawn and will destroy the data in accordance with the law and guidelines issued by the Authority.

4. Rights of Data Subjects and How to Exercise Them

As a data subject, you have the following rights under Article 11 of the Law:

  • To learn whether personal data is processed,
  • If processed, to request information about such processing,
  • To learn the purpose of processing and whether it is used in line with the purpose,
  • To know the third parties to whom data is transferred domestically or abroad,
  • If the data is incomplete or inaccurate, to request correction and notification to third parties,
  • To request deletion or destruction of personal data if the legal grounds no longer apply and request notification to third parties,
  • To object to any result against you arising from automated analysis of your data,
  • To request compensation for damages due to unlawful processing of personal data.

You may exercise these rights by submitting your request in writing to the Company or by filling out the Data Subject Application Form available at www.healtius.com. Your request will be processed free of charge within 30 (thirty) days depending on its nature. However, if the process requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.

5. Identity of the Data Controller

The data controller is Healtius Teknoloji Anonim Şirketi, located at Üniversiteler Mah. 1596 Cad. 6. AR-GE C Blok Bina No:6C Office No:11 06800 Ankara/Türkiye. You may send your applications to our email address info@healtius.com, our registered email address (KEP), or via post to our company address.

For more information on the processing and storage of your personal data, you can review our Personal Data Protection and Processing Policy and Personal Data Retention and Destruction Policy available on the KVKK section of our website at www.healtius.com.