ISTANBUL ONCOLOGY HOSPITAL

INFORMATION NOTICE REGARDING HOSPITAL ACTIVITIES UNDER THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA

As Istanbul Oncology Hospital, we respect and value privacy. Within the scope of the Law No. 6698 on the Protection of Personal Data ("Law No. 6698"), this information notice informs you about the processing of your personal data by Istanbul Oncology Hospital as a data controller and your rights regarding this data:

Purposes and Conditions for Processing Personal Data

Your personal data will be processed under the following conditions outlined in the Law No. 6698:

• “explicitly stipulated by the law,”
• “mandatory for the protection of life or bodily integrity of the person who is unable to express consent due to actual impossibility or whose consent is not legally valid,”
• “directly related to the establishment or performance of a contract,”
• “necessary for fulfilling Istanbul Oncology Hospital's legal obligations,”
• “made public by the data subject,”
• “necessary for establishing, exercising, or protecting a right,”
• “mandatory for legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject.”

Your health data, on the other hand, is processed for “protecting public health, conducting preventive medicine, medical diagnosis, treatment, and care services, and managing the planning and financing of healthcare services,” as a healthcare institution authorized by the Ministry of Health for the following purposes:

• Conducting emergency response processes,
• Conducting information security processes,
• Managing employee and intern recruitment and placement processes,
• Managing application processes of job candidates,
• Fulfilling obligations related to employment contracts and relevant legislation for employees and interns,
• Managing processes related to employee benefits,
• Conducting audit and ethics activities,
• Ensuring the lawful execution of Istanbul Oncology Hospital's activities,
• Managing finance and accounting processes related to the provision of private healthcare services based on the Social Security Institution Law No. 5502 and the Social Insurance and General Health Insurance Law No. 5510,
• Ensuring the security of physical spaces, including processes such as troubleshooting and related activities,
• Managing assignment processes,
• Following and managing legal processes, including those related to judicial cases in which Istanbul Oncology Hospital is not directly involved,
• Conducting communication activities,
• Ensuring the secure execution of business activities,
• Managing occupational health and safety activities,
• Managing purchasing processes for goods and services,
• Managing healthcare production and operational processes,
• Managing informational activities regarding health issues and solutions,
• Managing storage and archiving activities,
• Managing contract processes,
• Ensuring the security of the movable properties registered in Istanbul Oncology Hospital's inventory and the security of visitors' movable properties,
• Providing information to authorized persons, institutions, and organizations, including the Ministry of Health of the Republic of Turkey, which is responsible for licensing private healthcare institutions.

Persons to Whom Personal Data May Be Transferred and Transfer Purposes

Your personal data may be transferred to the following persons in accordance with Article 8 of Law No. 6698:

• The Ministry of Health of the Republic of Turkey and its relevant units as the authorized institution to ensure compliance with the laws and to prove this compliance if necessary, in accordance with the Basic Law on Healthcare Services No. 3359 and its secondary legislation,
• The Turkish Red Crescent as the regional blood center and blood donation center for obtaining blood, blood components, or products in emergency situations, in accordance with the Blood and Blood Products Law No. 5624 and its secondary legislation,
• The contracted laboratory for detailed blood tests, as a private legal entity,
• The Civil Aviation General Directorate for fulfilling the requirements under national and international legislation regarding activities conducted by Istanbul Oncology Hospital as a Civil Aviation Medical Center authorized by the Civil Aviation General Directorate,
• The Social Security Institution under the Ministry of Family, Labor, and Social Services of the Republic of Turkey, for managing finance and accounting processes related to the provision of private healthcare services based on the Social Security Institution Law No. 5502 and the Social Insurance and General Health Insurance Law No. 5510,
• The Ministry of Family, Labor, and Social Services of the Republic of Turkey and the Social Security Institution and its relevant units for fulfilling obligations related to employees under labor contracts and legislation,
• Banks, as private legal entities, for processing payments,
• Relevant units of the Ministry of Internal Affairs of the Republic of Turkey for following legal processes in accordance with the Identification Notification Law No. 1774 and its secondary legislation, and in case of legal proceedings,
• Courts, for responding to official court requests,
• Software companies, as private legal entities, for supporting healthcare production and operational processes,
• Insurance companies, as private legal entities, for managing finance and accounting processes and collecting healthcare service fees,
• Cargo companies, as private legal entities, for managing document delivery processes,
• Patient relatives and pharmacies, as real persons, for ensuring the secure delivery of healthcare services,
• The Workplace Doctor and Occupational Safety Specialist for ensuring compliance with occupational health and safety legislation.

Method of Collecting Personal Data

The personal data we collect consists of the information you or your relatives provide to us, either verbally, in writing, physically, or digitally, as well as the information, documents, and records generated by our physicians and other healthcare personnel during the examination, diagnosis, and treatment processes. Additionally, it includes the data accessible through the electronic systems of the relevant Ministries and the data maintained in the Istanbul Oncology Hospital's data recording systems during your use of our healthcare services.

Your Rights Under Law No. 6698

In accordance with Article 11 of the Law No. 6698 and secondary legislation, you can submit your requests:

• By visiting our company at “Basınköy Mah. Florya Cad. No:23/4 Bakırköy/Istanbul,”
• Through our registered electronic mail (KEP) address at bilgi@istanbulonko.com,
• By sending a written request via notary or registered mail for identity verification and to ensure that no information is provided to unauthorized persons,
• By sending an email to info@istanbulonko.com using your previously notified and registered email address or through a secure electronic signature or mobile signature.