K.V.K.K.

PATIENT INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA

Registered on behalf of Aesthetic, Plastic and Reconstructive Surgery Specialist Op. Dr. Şevket Gökhan Beyhan

As a practice, the satisfaction of our patients, in addition to their privacy and belonging to our patients

We attach great importance to ensuring that all types of personal data are processed and protected in the best way and with care.

Your personal data and personal data of a special nature, Law on the Protection of Personal Data No. 6698

(KVKK) and all other national and international related to the European Union General Data Protection Regulation (GDPR)

within the framework of legal legislation, data controller within the scope of KVKK — data controller under GDPR

performed by Dr. Şevket Gökhan Beyhan as Op. in the scope and conditions described below

is being maintained. This disclosure text, in accordance with the provisions of the specified legal legislation;

the identity of the controller, the method of processing your personal data and the legal reasons, which of these data

the purposes for which it will be processed, to whom and for what purpose it may be transferred, and finally your personal data

be transparent about the rights you have within the scope of the processing activity

Prepared to inform.

Methods of Processing of Your Personal Data, Purposes of Processing, Retention Period

Personal data within the scope of KVKK, express any information relating to a specific or identifiable natural person

is doing it. Your personal data of a special nature, especially your personal health data and general

your personal data of a nature, depending on the health services provided to you, are included in this disclosure text

in line with the stated purposes, the legislation on health services and the KVKK and personal data

in accordance with other national and international regulations on its protection;

- By coming to our office for examination and treatment, regarding the treatment to be applied to you

the health reports, assays, imaging that you provide to ensure that an assessment can be made, and

“Patient Information and Consent Form” which you will fill out with your laboratory test results and health

through any other representations you make about your data and the treatment applied; and

as part of the maintenance process,

- Via https://gokhanbeyhan.com/tr/, the corporate website of our examination

through the contact form you have provided to us,

- To the corporate email address of our practice (gokhanbeyhan@gokhanbeyhan.com)

through the electronic mails you send,

- Receives services by accepting their own privacy policies and international transfer principles

you are whatsapp, facebook, massenger, instagram, zoom, skype, google and so on

with your written, audio, visual content messages that you send to us through service providers

online audio and video that you make and request through these applications

through your searches,

- Before, after, and/or the medical procedure to be administered or administered to you

oral, written, by means of photo and video recordings that may be taken during the course, and by similar methods

and/or processed electronically, in the archives and information systems of our practice

It can be collected and stored both digitally and physically.

Your personal data processed by us within the scope of legal regulations, the purposes for which we process it and

The legal reasons for processing are described in detail below:

Processing and Purposes of Processing of Your Personal Data

Your personal data processed by us within the scope of legal regulations and our processing purposes are as follows

It is explained in detail:

! 2

Your Identity Data: Your name, surname, TC ID number, passport number, temporary TC

Your identification number, place and date of birth, marital status, gender, insurance and our practice

your specific patient record/protocol number and other identifying data with which we can identify you.

Your Contact Data: Your address, telephone number, e-mail address and other communications

your data with e-mail, website, social media accounts, whatsapp and other means

your personal data obtained when you contact us through it.

Your Financial Data: Your bank account number, IBAN number, credit card information,

your financial data, such as your billing information.

Your Insurance Information: Owner for the financing and planning of your health care

your data on your private health insurance and your Social Security Agency data.

Your Health Data: Your blood type, medical history, check-up report, examination

your data, consultation report, medical values, laboratory-test and assay results, diet

your form, surgery information, treatment method applied, disease and medication you are taking,

Medical diagnosis, treatment and care, without limitation, your health data such as measurements and drawings

any health care obtained during or as a result of the performance of their services

your data.

Visual and Auditory Recordings: The audio/visual that you send to our practice during the application phase

your photo and video recordings and photos and/or videos taken before, during and after the process

records.

Philosophical, Religious and Other

Beliefs: Included in our records due to the fact that a photocopy of the old ID was issued

your philosophy/religious beliefs knowledge.

Transfer, Airfare and

Accommodation Information: Inbound and transfer and accommodation within the scope of International Health Tourism

If you are a health tourist receiving services, your transfer information, round-trip flight ticket information, hotel accommodation

your information.

Escort, Parent/Guardian/Legal

Your Agent Information: Ensuring that communication activity can be carried out with emergency processes

in accordance with legal regulations if you are under 18 years of age with your accompanying contact details received

your information about your guardian, guardian or legal representative, whose consent must be obtained.

Your Customer Transaction Data: Your data on patient satisfaction, invoices and receipts, claims and

your complaint information.

The types of personal data counted do not cover all of your data processed in our practice, but

Other personal data of a similar type and nature to those enumerated may also be processed.

Your personal data within the scope specified and your personal data of a special nature, our practice

within the scope of the services provided by it and in accordance with the basic principles set out in Article 4 of the KVKK

figure;

- Conducting emergency processes

- Ensuring risk management,

- Confirmation of your identity,

- Protection of public health,

- conducting preventive medicine, medical diagnostics, treatment and care services,

- Planning and management of health services and its financing,

- fulfillment of legal and regulatory obligations,

- Requested with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation

sharing of information,

- Measuring, researching and increasing patient satisfaction,

- The internal functioning of our practice, as well as the planning of inspections, controls and operations and

management,

- To be able to answer all your questions and complaints about our health services,

! 3

- To be able to inform and inform you about your appointments,

- Provision of medicines,

- Planning and execution of hospital processes,

- Your use of health services for the purpose of development and improvement of health services

analysis and research related to the storage of your health data

- Transfer and accommodation service for patients arriving within the scope of international health tourism

the provision of relevant services, if provided,

- Taking the necessary technical and administrative measures to ensure data security,

- Retention of information about your health data, which must be stored in accordance with the relevant legislation,

- prevention of abuse and unauthorized transactions,

- the policies of the institutions and organizations that receive the service or are in a business and cooperation relationship and

compliance with procedures,

- Conducting medical diagnostics, treatment and care services as well as hospital emergency processes,

- Official and authorized public institutions and organizations and professional organizations of a public institution nature

carrying out supervisory and regulatory tasks to be performed by,

- Financial related to the health services we provide with the institutions with which we have agreements

the establishment of agreements,

- the ability to fulfill requests for information and documents transmitted by judicial and administrative bodies,

- Promotional content and messages via website, social media and other digital channels

to be able to share,

- Marketing processes of products and services, as well as advertising, campaigns and promotions

can be carried out

It is processed for such purposes and stored in accordance with the periods prescribed by laws and other legislation.

If there is no retention period stipulated by law and other legislation, personal data, “Op.

Dr. Şevket Gökhan Beyhan Practice Processing, Protection and Destruction of Personal Data

In accordance with the Policy”, for as long as the reason and purpose of the processing of personal data continue

stored, after the specified period and in accordance with the periodic destruction periods, erasure — destruction

— One that is considered appropriate from anonymization methods will be selected and destroyed. Legal provisions

in accordance with this, your personal data is stored for 20 years from the end of treatment; and

is being maintained.

Legal Reasons and Explicit Consent

Your personal data, in accordance with and limited to the purposes set out above;

clearly stipulated, directly related to the establishment or execution of the contract for your purchase of health care

Necessity of data processing, the legal obligation of Op. Dr. Şevket Gökhan Beyhan

mandatory for fulfillment, mandatory for the establishment, use or protection of a right

and provided that the data subject does not harm the fundamental rights and freedoms of the data subject, Op. dr. Şevket Gökhan

Obligation for Beyhan's legitimate interests without seeking your express consent for legal reasons

can be processed.

Your health data, which is personal data of special nature; protection of public health, preventive medicine, medicine

conducting diagnostic, treatment and care services, planning the financing of health services and

for management purposes and without seeking your express consent under the obligation to keep secrets

can be processed.

To be able to carry out your control after your communication data, treatment processes and

the ability to manage the appointment processes within the scope and the patient within the scope of our legitimate interests

without seeking your explicit consent for the purposes of satisfaction and demand management

will be processed.

! 4

You use them by agreeing to their privacy policies and overseas transfer policies

through service providers and social media platforms (whatsapp, instagram, facebook etc)

If you contact us, this disclosure text of your data and our privacy policy

since you agree that it will be processed within the scope of and that it will be contacted through the same channel as you,

your contact data will be processed without your explicit consent.

Your contact data, the medical services provided by our practice and the business activities carried out

if it can be used for the purpose of making publicity, announcements and information about it, but it is only clear

It will be possible with your consent.

a photograph taken before, after and/or during the medical procedure applied to you; and

your video recordings, our practice's youtube, instagram, facebook and so on social media

sharing in their accounts and on the corporate website and with medical and scientific publications and meetings

It will only be possible to use it in scientific training activities with your explicit consent.

Know that you always have the right to withdraw your explicit consent

we would like. Your statement that you have withdrawn your consent below is “The Data Subject's Exercise of the Rights of the Data Subject”

You withdraw your consent if you transmit it to us in the indicated ways through the channels specified under the title

The processing activity and use subject to consent will be terminated.

Transfer of Your Personal Data

Your personal data, data processing by our practice in accordance with KVKK and other relevant legal legislation and

fulfilment of legal obligations to maintain, at home and/or abroad

providing information to authorized persons, institutions and organizations, public working together with affiliates and suppliers

ensuring coordination with institutions and organizations, conducting hospital operations and

ensuring safety, ensuring the execution and continuity of our health services, risk management

4 of the Law of the KVK, especially for the purpose of ensuring and conducting emergency processes.

The basic principles of processing personal data in its article 8 and 9 entitled “Transfer of personal data”.

In accordance with the terms and procedures specified in its articles and both KVKK and related health

all possible techniques to ensure appropriate safety conditions in accordance with the legislation and

it will be able to be transferred to third parties and institutions by taking administrative measures.

These third parties and institutions mentioned include, in particular, the Ministry of Health and its affiliated subunits

public institutions and organizations, regulatory and supervisory official bodies, affiliated with our practice

organizations, insurance companies, domestic and foreign organizations, business and cooperation of our practice

private organizations with which it is involved or with which it receives services in the processes of medical diagnostics, operations and treatment,

hospitals, laboratories, medical centers, health institutions to which the patient is referred or referred, and

other third parties providing health care, transfer and accommodation services to be provided to you

hotels and tourism and transfer companies that will provide the relevant transfer and accommodation service within the scope of

the suppliers we receive services, support service and service providers, and the third party to be determined by them

and organizations, including insured employees, lawyers-tax consultants and financial advisors

third parties we consult, our business partners, service of the software system used in the practice

the provider and your authorized representatives and other natural and legal persons are included.

Deletion, Destruction or Anonymization of Personal Data

In accordance with Article 7 of the KVK Law No. 6698; both this Law and any other law

although processed in accordance with its provisions, the reasons requiring its processing are eliminated

in the event of termination, the personal data will be deleted, destroyed, recently-or at the request of the data subject concerned; or

It is made anonymous. Our practice records personal data only as specified in the legislation or where they are processed

keeps it for as long as is necessary and obligatory for the purpose. Expiration or processing of the legal period

personal data in the event of the disappearance of the necessary reasons, periodic periods of destruction or data

! 5

in the event of an application by the owner in this direction, the erasure, destruction or anonymization of personal data

By appropriate methods of destruction determined in accordance with the provisions of the Regulation on the Introduction (deletion

and/or destruction and/or anonymization) will be destroyed.

Your Legal Rights Under KVKK Regarding the Protection of Personal Data

In accordance with Article 11 of the KVK Law No. 6698 entitled “Rights of the Person concerned”; everyone, data

about him by contacting his responsible person;

a) Learning whether personal data has been processed,

b) to request information on this if personal data has been processed,

c) To learn the purpose of processing personal data and whether they are used in accordance with the purpose,

ç) Know the third parties to whom personal data is transferred in the country or abroad,

d) To request correction of personal data in case of incomplete or incorrect processing,

e) request the erasure or destruction of personal data within the framework of the conditions laid down in Article 7;

f) Notification of transactions under subparagraphs (d) and (e) to third parties to whom personal data is transferred

want,

g) The person himself by analyzing the processed data exclusively through automated systems

appeal against the occurrence of a result against

g) Damage in case of loss due to unlawful processing of personal data

They have the right to demand their removal.

Your Legal Rights Under GDPR Regarding the Protection of Personal Data

Your personal data processed by Op. Dr. Şevket Gökhan Beyhan Practice also in accordance with GDPR

protected, within the jurisdiction of GDPR (citizens of the European Union or European Union countries)

residents) the legal rights of data subjects are as follows:

- Right of access (GDPR 15)

Confirming whether personal data relating to the data subject has been processed and his personal data is being processed

If applicable, he/she has the right to request detailed information under GDPR m.15 and receive a copy of it.

- Right to rectification (GDPR 16)

Correction of inaccurate personal data about the data subject and incomplete personal information

has the right to demand its completion.

- Right to erasure (to be forgotten) (GDPR 17)

The data subject has the right to request the erasure of his personal data within the conditions laid down in GDPR m.17

has.

- Right to Restrict Processing Activity (GDPR 18)

- If the data subject objects to the accuracy and timeliness of his personal data, confirm the accuracy of the data

has the right to request the restriction of its use until such time as possible.

- Deletion of the data subject's personal data due to the illegal nature of the personal data processing activity

if requested, request that the use of their data be restricted until such request is fulfilled

has the right.

- Data subject, Controller Op. Dr. Şevket Gökhan Beyhan, is now personal for processing purposes

where it does not need the data, it has the right to request the restriction of the use of its data.

- If the data subject objects to the processing activity in accordance with GDPR 21/1, Op. Dr. Şevket Gökhan

To confirm whether Beyhan's legitimate grounds outweigh the legitimate reasons of the data subject

has the right to request the restriction of the use of their data up to.

- Right to Data Transfer (GDPR 20)

The data subject, in the circumstances and conditions specified in GDPR m.20, has structured the personal data that he has provided,

widely used and machine-readable format to import and to another controller

has the right to transmit. The data subject has the right to data portability, if technically feasible,

has the right to use it by requesting the transmission of personal data directly to another controller.

! 6

- Right to object (GDPR 21)

- The data subject, on the grounds relating to his particular situation, is subject to Article 6/1 (e) and (f) of the GDPR

the right to object to the processing of your personal data, including profiling within the scope of the terms

has. In case of exercise of this right, Op. Dr. Şevket Gökhan Beyhan, the data subject has the right and

such as the exercise, exercise, or protection of a right that is above their freedoms and interests, or a legal right

can no longer process the personal data of the person concerned if he cannot show a strong legitimate reason.

- If the data subject is processed for direct marketing purposes, directly

personal data about him, including profiling to the extent that it is relevant to marketing

has the right to object at any time to its processing for direct marketing purposes. Data Owner

in case of objection to processing activity for direct marketing purposes, personal data

can no longer be processed for these purposes.

The Data Owner's Exercise of the Rights of the Data Subject

Pursuant to Article 13 of the GDPR, your requests to exercise your rights as set out above,

“Protection of Personal Data” at our web address https://gokhanbeyhan.com/tr/

By filling out the Application Form within the scope of the Law;

- “Nisbetiye Mah. Nisbetiye Street. Nisbetiyeon No:8/12 Interior Door No:48, Besiktas Istanbul”

in person or in writing with notarized documents to our practice

or

- Secure to our gokhanbeyhan@gokhanbeyhan.com and sevketgokhan.beyhan@hs01.kep.tr addresses

electronically signed or mobile signed, your registered electronic mail (KEP) address or in our system

You can send it via your registered email address.

Your applications submitted to us from the date on which your request is received by us; and

according to the nature of your request, it will be concluded free of charge within 30 days at the latest,

Our answers will be notified to you in writing or electronically in accordance with Article 13 of the KVKK. However

in the event that the transaction requires a separate cost, determined by the Personal Data Protection Board

will be charged in accordance with the tariff.

Your request, information and documents submitted to us as part of your application are incomplete or incomprehensible

If found, you will be contacted to clarify your application.

Full details of our policy on the processing, protection and destruction of your personal data can be found in “Op. dr.

Şevket Gökhan Beyhan Practice Processing, Protection and Destruction of Personal Data

You can find the policy in the text”.

Ensuring the fulfillment of our obligation to disclose your personal data regarding the processing of your personal data,

Prepared in accordance with the Personal Data Protection Law No. 6698 and other relevant legal legislation provisions

We present to your information the “Disclosure Text on the Processing of Personal Data”, which we are.

Sincerely.

Data Controller

Associate Professor Şevket Gökhan Beyhan

Nisbetiye City Nisbetiye Street Nisbetiyeon No:8/12 Interior Door No:48

Besiktas Isztambul

Tel: +90 544 469 66 88

Website: https://gokhanbeyhan.com/tr/

E-mail: gokhanbeyhan@gokhanbeyhan.com

‍