Condiciones generales
Privacy Policy
Last Updated On 30-Dec-2023
Effective Date 30-Dec-2023
This Privacy Policy describes the policies of HEALSTETİC SAĞLIK TURİZM LİMİTED ŞİRKETİ MERKEZ MAH. ABİDE-İ HÜRRİYET CAD. NO: 148 İÇ KAPI NO:8 ŞİŞLİ/ İSTANBUL, email: info@healstetic.com, phone: +90 531 836 5979 on the collection, use and disclosure of your information that we collect when you use our website ( https://healstetic.com ). (the “Service”). By accessing or using the Service, you are consenting to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use the Service.
We may modify this Privacy Policy at any time without any prior notice to you and will post the revised Privacy Policy on the Service. The revised Policy will be effective 180 days from when the revised Policy is posted in the Service and your continued access or use of the Service after such time will constitute your acceptance of the revised Privacy Policy. We therefore recommend that you periodically review this page.
Information We Collect:
We will collect and process the following personal information about you:
Name
Email
Mobile
How We Use Your Information:
We will use the information that we collect about you for the following purposes:
Marketing/ Promotional
Customer feedback collection
Support
If we want to use your information for any other purpose, we will ask you for consent and will use your information only on receiving your consent and then, only for the purpose(s) for which grant consent unless we are required to do otherwise by law.
Retention Of Your Information:
We will retain your personal information with us for 365 Days or for as long as we need it to fulfill the purposes for which it was collected as detailed in this Privacy Policy. We may need to retain certain information for longer periods such as record-keeping / reporting in accordance with applicable law or for other legitimate reasons like enforcement of legal rights, fraud prevention, etc. Residual anonymous information and aggregate information, neither of which identifies you (directly or indirectly), may be stored indefinitely.
Your Rights:
Depending on the law that applies, you may have a right to access and rectify or erase your personal data or receive a copy of your personal data, restrict or object to the active processing of your data, ask us to share (port) your personal information to another entity, withdraw any consent you provided to us to process your data, a right to lodge a complaint with a statutory authority and such other rights as may be relevant under applicable laws. To exercise these rights, you can write to us at info@healstetic.com. We will respond to your request in accordance with applicable law.
Do note that if you do not allow us to collect or process the required personal information or withdraw the consent to process the same for the required purposes, you may not be able to access or use the services for which your information was sought.
Cookies Etc.
To learn more about how we use these and your choices in relation to these tracking technologies, please refer to our Cookie Policy.
Security:
The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse or unauthorized alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk.
Grievance / Data Protection Officer:
If you have any queries or concerns about the processing of your information that is available with us, you may email our Grievance Officer at HEALSTETİC SAĞLIK TURİZM LİMİTED ŞİRKETİ MERKEZ MAH. ABİDE-İ HÜRRİYET CAD. NO: 148 İÇ KAPI NO:8 ŞİŞLİ/ İSTANBUL, email: info@healstetic.com. We will address your concerns in accordance with applicable law.
GDPR
1. Information Text on Protection and Processing of Personal Data.
1.1Information Text on Protection and Processing of Personal Data As HEALSTETİC SAĞLIK TURİZM LİMİTED ŞİRKETİ, we, as Data Controller, provide information in accordance with Article 10 of the Law titled “Data Controller’s Obligation to Inform” regarding the Personal Data Protection Law No. 6698 (GDPR) published in the Official Gazette dated April 7, 2016 and numbered 29677 in order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data and to determine the obligations of real and legal persons who process personal data.
1.2 As HEALSTETİC SAĞLIK TURİZM LİMİTED ŞİRKETİ, it has been prepared in order to ensure that the personal data of our citizens are processed in accordance with the Constitution of the Republic of Turkey and the international conventions on Human Rights to which our country is a party and the relevant legislation, especially the Law No. 6698 on the Protection of Personal Data (GDPR), and that the relevant persons whose data are processed can effectively exercise their rights. All personal data shared with our Company may be processed in accordance with the law, in connection with our activities and service purposes and in a measured manner.
2. Definitions
2.1. GDPR: The concepts of personal data, sensitive personal data and data processing used in the clarification text are used in accordance with the definitions made in the LPPD. In the GDPR;
2.1.1. Personal Data Protection Law (“GDPR”): Law No. 6698 on the Protection of Personal Data, which entered into force after being published in the Official Gazette on April 7, 2016,
2.1.2. Personal Data: any information relating to an identified or identifiable natural person,
2.1.3.Data Processor: The natural or legal person who processes Personal Data on behalf of the Data Controller based on the authorization granted by the Data Controller,
2.1.4. Data Controller: The natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system,
2.1.5. Processing of personal data: The concept refers to all kinds of operations performed on personal data, such as obtaining, recording, storing, retaining, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that they are part of any data recording system
3. Principles of Processing of Personal Data
3.1. Personal data belonging to the data owner specified in Article 4 of the GDPR; in accordance with the law and honesty rules, accurate and, where necessary, up-to-date, for specific, clear and legitimate purposes; connected, limited and measured for the purpose for which they are processed; in accordance with the rules of retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed, the data controller will be processed by the Company within the scope of the following purposes.
4. Purposeof Processing Your Personal Data
4.1. Your personal data in accordance with Articles 4, 5 and 6 of the GDPR;
4.1.1. In accordance with the law and good fait
4.1.2. In connection with, limited and proportionate to the purposes of processing,
4.1.3. Accurate and up to date,
4.1.4. It will be processed for specific explicit and legitimate purposes and for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
4.2. Your personal data may be used by our business units to carry out the necessary work to benefit you from the products and services offered by our company; recommending the products and services offered by our company to you; planning and / or execution of market research activities for the sales and marketing of products and services; planning and / or execution of after-sales support services activities; follow-up of contract processes and / or legal requests, ensuring the legal, technical and commercial business security of the relevant persons in business relations; ensuring the execution of our company’s human resources policies, making an evaluation if you apply for a job, fulfilling our legal and legal obligations if you become our employee; Ensuring quality follow-up; follow-up of the products supplied; for the purpose of security and identification of your identity when you visit our business; contacting you if you request information from our company; execution of this contract if you purchase products; Planning, auditing and execution of information security processes; Creation and management of information technology infrastructure; Follow-up of financial and/or accounting affairs; Follow-up of legal affairs; Planning and execution of business activities; Planning and execution of corporate communication activities; For the purposes of determining and implementing the commercial and business strategies of our company, personal data specified in Articles 5 and 6 of Law No. 6698. and 6. of the Law No. 6698 for the purposes of determining and implementing our Company’s commercial and business strategies. In addition to the obligations stipulated by the Labor Law and Labor and Social Security legislation and other legislation in force, the data of our employees may be processed by our Company or real or legal persons with whom our Company cooperates or authorized by our Company within our human resources policy or for operational reasons such as increasing the level of performance and employee satisfaction and ensuring occupational safety and occupational peace.
5.Transfer of Personal Data
5.1. Your personal data may be transferred to our business partners, suppliers, shareholders, affiliates, legally authorized public institutions and private persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law No. 6698 for the purposes of carrying out the necessary work by our business units to benefit you from the products and services offered by our Company; customizing the products and services offered by our Company according to your and your company’s needs; ensuring the execution of our Company’s human resources policies; ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company; determining and implementing the commercial and business strategies of our Company. and 9. within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.
6.Method of Collection of Personal Data and Legal Basis
6.1. Personal data are collected, used, recorded, stored and processed by our company by verbal, written and/or electronic means by providing verbal, written and/or electronic information to personal data owners in a clear and understandable manner and obtaining their explicit consent when necessary, in accordance with the law and good faith, in connection with and limited to the legitimate purposes clearly stated above, within the framework of the principle of proportionality. In addition, your personal data is collected through different channels and based on different legal reasons within the framework of our company’s commercial purpose, such as contacting us, establishing a contractual relationship, visiting our business, transmitting your information to us to contact us for commercial activities, sharing information in promotional organizations; in order to improve the products and services we offer and to carry out our commercial activities. Your personal data collected for this legal reason can also be processed and transferred for the purposes specified in this Clarification Text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.
6.2. In addition, we assure that your personal data will not be processed by our company for purposes other than those specified in this disclosure document, and will not be transferred and stored to third parties in Turkey and abroad.
7.Storage and Deletion of Data
7.1. Our Company stores the personal data it processes for the periods specified in the legislation, and in the event that no additional period is specified in the legislation; personal data is stored for the period required to be processed in accordance with the practices and customs of our Company’s commercial life, depending on the services provided by our company while processing that data, and after this period, only for the periods required in practice to constitute evidence in possible legal disputes. After the expiration of the specified periods, the personal data in question are deleted, destroyed or anonymized.
8. Rights of the Data Subject
8.1. Data subjects may apply to the Company, acting as the data controller, for any data relating to him/her;
8.1.1. To learn whether his/her personal data is being processed,
8.1.2. Requesting information if personal data has been processed,
8.1.3. Learn the purpose of processing personal data and whether they are used in accordance with their purpose;
8.1.4. To be informed about third parties to whom personal data are transferred domestically or abroad,
8.1.5. To request correction of personal data in case of incomplete or incorrect processing,
8.1.6. To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of GDPR No. 6698,
8.1.7. To request notification of the transactions made pursuant to subparagraphs (d) and (e) of Article 11 of the GDPR to third parties to whom personal data are transferred,
8.1.8. To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
8.1.9. In case of damage due to unlawful processing of personal data, it has the right to demand compensation for the damage.
8.2. In order to use your rights mentioned above, you can send your written request to “healstetic.com” with the necessary information identifying your identity and your explanations regarding the right you want to use, together with the Personal Data Information retrieval and transaction request form with wet signature or to our registered e-mail address “info@healstetic.com” by using secure electronic signature, mobile signature or the e-mail address previously notified to HEALSTETİC SAĞLIK TURİZM LİMİTED ŞİRKETİ by the person concerned and registered in the system of the data controller. Applications must be made in Turkish.
8.3. Applications must include name, surname and signature if the application is in writing, Turkish Republic ID number for citizens of the Republic of Turkey, nationality, passport number/ID number for foreigners, residential or workplace address for notification, e-mail address for notification, telephone or fax number and the subject of the request.
8.4. In the application that you have as a personal data owner and that you will make in order to exercise your rights mentioned above and that includes your explanations regarding the right you request to exercise; the matter you request must be clear and understandable, the subject you request must be related to your person or if you are acting on behalf of someone else, you must be specifically authorized in this regard and document your authority, the application must contain identity and address information and documents certifying your identity must be attached to the application.
8.5. Your applications within this scope will be finalized as soon as possible and within 30 days at the latest. If the relevant person’s application is to be answered in writing, no fee is charged for up to ten pages. A transaction fee of 1 TL may be charged for each page over ten pages. If the response to the application is given in a recording medium such as CD, flash memory, the fee that may be requested by HEALSTETİC SAĞLIK TURİZM LİMİTED ŞİRKETİ cannot exceed the cost of the recording medium.