CAMERA RECORDING SYSTEMS PRIVACY NOTICE

Personal Data Processed

Your personal data are recorded and processed through audio and/or video camera recordings from cameras located at certain points in the workplace, subject to applicable laws and your explicit consent. Further information may be added and/or changes made where required by law and/or necessary.

Methods of Obtaining Camera Recordings

We obtain your personal data in camera recordings through cameras located at certain points in the workplace, 24 hours a day, seven days a week.

Purposes of Processing Camera Recordings

We process your personal data in camera recordings for the following purposes:

• Ensuring workplace security and controlling entry to buildings and facilities;
• Increasing efficiency;
• Ensuring the legal, commercial and technical security of persons having a business relationship with the workplace;
• Proving the business relationship, applying occupational health and safety principles, fulfilling legal obligations and determining working conditions.

Processing is limited to these purposes. The monitored areas, number of security cameras and monitoring times are determined to achieve these purposes. Areas where monitoring could interfere with a person’s privacy beyond what security purposes require are not monitored.

Transfer and Protection of Camera Recordings

In accordance with the legal provisions listed above and other applicable legislation, and for the purposes explained above, we may share your personal data, subject to administrative and technical security measures, with authorized public institutions and organizations, natural persons or private-law legal entities, shareholders, business partners, suppliers, board members, private insurance companies, auditors, consultants, domestic and foreign organizations from which we obtain contractual services or with which we cooperate, and other third parties. Personal data are transferred to judicial authorities or relevant law-enforcement agencies when requested for the resolution of legal disputes or as required by applicable legislation.

The data are processed by automated means on the legal grounds set out in Article 5 of the Law: processing is necessary for the data controller to fulfill its legal obligation, and processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.

The images can be accessed only from the computers of authorized persons. All necessary technical measures are taken to protect the data.

Security and Retention Period of Camera Recordings

In accordance with Article 12 of the Law, the technical and administrative measures necessary to safeguard personal data obtained through camera monitoring are taken. Camera recordings are carefully retained for 7–10 days. When the purpose requiring processing under Article 7(1) of the Law ceases to exist and/or the limitation or retention periods for which we are legally required to process your data expire, your personal data will be deleted, destroyed or anonymized.

Rights of the Personal Data Subject

As a personal data subject, you have the right to:

• Learn whether your personal data are processed;
• Request information if your personal data have been processed;
• Learn the purpose of processing and whether the data are used in accordance with that purpose;
• Know the third parties in Türkiye or abroad to whom your personal data have been transferred;
• Request correction of incomplete or inaccurate personal data;
• Request deletion or destruction of personal data under the conditions set out in the Law;
• Request notification of changes concerning your personal data to third parties to whom the data have been transferred;
• Object to a result against you arising from the analysis of processed data exclusively by automated systems;
• Claim compensation if you suffer damage due to unlawful processing of your personal data.

These are your rights as a personal data subject.

How to Exercise Your Rights as a Data Subject

To exercise your rights, complete the Data Subject Application Form and submit it to the clinic coordinator in accordance with the instructions in the form.

Requests are resolved free of charge as soon as possible and within 30 days at the latest, depending on their nature. If processing a request entails an additional cost, a fee may be charged to the relevant party according to the tariff set by the Turkish Personal Data Protection Board.

Further information on the processing and protection of your personal data is available in the Personal Data Protection and Processing Policy of Naz Sosyal Medya Bilişim ve Sağlık Hizm. San. Tic. Ltd. Şti.

Information About the Data Controller

Information about Naz Sosyal Medya Bilişim ve Sağlık Hizm. San. Tic. Ltd. Şti. is provided below.