Personal Data Protection Law
Pursuant to Law No. 6698 on the Protection of Personal Data ("the Law"), your personal data may be processed by swanhotel.com.tr, in its capacity as data controller, within the scope described below during your use of the website. Purposes and Legal Grounds for Processing Personal Data Your collected personal data will be processed for the purposes listed below and within the personal data processing conditions specified in the relevant field: On the legal ground that it is necessary to process the personal data of the parties to a contract, provided that this is directly related to the establishment or performance of a contract
- Creating your membership on the website
- Providing you, at your request, with services offered through the website such as appointment scheduling, at-home testing, and facilitating communication with laboratories
- Updating customer contact information,
- Tracking service records and carrying out necessary financial transactions
- Providing the technical support and customer services required while you use the application. On the legal ground that it is explicitly provided for by law and is mandatory for the data controller to fulfil its legal obligation
- Fulfilling requests from official institutions,
- Providing information to authorized bodies as required by legislation
- Ensuring compliance with retention obligations stipulated by legislation
- Responding to data subject applications in accordance with legislation and carrying out the necessary procedures. On the legal ground that data processing is mandatory for the legitimate interests of the data controller, provided this does not harm the fundamental rights and freedoms of the data subject
- Managing customer relations
- Tracking financial transactions
- Carrying out the work required by our business units, and executing the related business processes, so that data subjects can benefit from the products and services offered by our Company, including sales and marketing activities for our products and services
- Carrying out the work required by our relevant business units and the associated business processes in order to conduct the commercial activities carried out by our Company
- Ensuring the legal, technical and commercial-business security of our Company and of the data subjects with whom our Company has a business relationship
- Determining and implementing our Company's commercial and business strategies
- Tracking and managing legal affairs
- Carrying out information security processes
- Carrying out audit and ethics activities
- Planning and executing customer satisfaction and corporate communication activities
- Carrying out prize draws, campaigns, contests, promotions or advertising activities
- Retaining personal data for the general statute-of-limitations period in order to serve as evidence in possible future disputes. On the legal ground that data processing is mandatory for the establishment, exercise or protection of a right
- Receiving, evaluating and resolving your requests and complaints
- Retaining personal data for the general statute-of-limitations period in order to serve as evidence in possible future disputes. And, where your explicit consent exists
- Storing and processing your data by our Company, limited to the duration of your use of the application and for the purpose of providing you with the services we offer, and transmitting it to third-party healthcare institutions from which you receive service
- Processing for the purpose of carrying out the marketing processes of our Company's products and services, including profiling and analysis activities, and recommending and promoting the products and services offered by our Company to data subjects, customized according to their preferences, usage habits and needs
- Sending commercial electronic messages such as advertisements and promotions to your contact information by our Company, in line with your preferences. To Whom and for What Purposes the Processed Personal Data May Be Transferred In order to fulfil the Purposes listed above, your collected personal data may be transferred to our business partners — laboratories, healthcare service organizations and healthcare professionals — through whom we facilitate services via the Application and from whom you have chosen to receive service, to our suppliers who provide us with technical, legal and financial process services, and, within the scope of legally explicit provisions and the fulfilment of our legal obligations, to legally authorized public institutions and legally authorized private persons, within the framework of the personal data processing conditions and purposes set out in Article 8 of the Law. Method of Collecting Personal Data and Its Legal Basis Your personal data is collected electronically through the Application, from our business partners — laboratories, healthcare service organizations and healthcare professionals — through whom we facilitate services via the Application and from whom you have chosen to receive service, from online application and membership forms, from images, files and other information you upload to the Application, and through the call center, SMS and e-mail channels, in order to fulfil the Purposes listed above. Your personal data is collected and processed by our Company for the purposes and on the legal grounds set out below, based on the personal data processing conditions specified in Articles 5 and 6 of the Law. Rights of the Data Subject Listed in Article 11 of the Law As a data subject, pursuant to Article 11 of the Law, we inform you that you have the following rights:
- To request information about your personal data if it has been processed
- To learn the purpose of processing your personal data and whether it has been used in accordance with that purpose
- To know the third parties, domestic or foreign, to whom your personal data has been transferred
- To request correction of your personal data if it has been processed incompletely or incorrectly, and to request that this correction be notified to the third parties to whom your personal data has been transferred
- To request the deletion or destruction of your personal data if the reasons requiring its processing no longer exist, even though it was processed in accordance with the Law and other relevant legal provisions, and to request that this action be notified to the third parties to whom your personal data has been transferred
- To object to the emergence of a result to your detriment through the analysis of your processed data exclusively via automated systems
- To request compensation for damages in the event of loss due to the unlawful processing of your personal data. If you submit your requests regarding the rights listed above to us at info@swanhotel.com.tr from the e-mail address registered in our systems, our Company will resolve your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee will be charged by our Company according to the tariff set by the Personal Data Protection Board.