Customer Information Text

SETUR

INTERNATIONAL HEALTH TOURIST PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

a)Data Controller

In accordance with the Law on the Protection of Personal Data No. 6698 (the “Law”), your personal data can be processed by Setur Servis Turistik Anonim Şirketi (the “Company” or “Setur”) as the data controller within de the scope described below.

For detailed information about the purposes for processing your personal data; you may access from Setur Personal Data Protection and Processing Policy which made public via its internet address https://kvkk.setur.com.tr/public/document/10/15/pdf/true.

If you benefit from our tourism products, you may have access to Setur Customer Privacy Notice on the Processing Personal Data via the address https://www.setur.com.tr/kurumsal/kvkk.

b)Purposes and Legal Bases of Processing Personal Data

The Company may collect and proves your personal data according to the terms stipulated in Articles 5 and 6 of the Law to ensure that our business units perform the duties necessary for you to utilize our Health Tourism products and services available to you for the purposes stated below (the “Purposes”):

Based on the legal basis that processing of personal data of the parties to a contract is necessary, provided that it is directly related to the execution or performance of the contract;

Informing you about the approximate service fee and the payment conditions regarding the health service fee you requested will be provided to you after obtaining information from the healthcare facility,
Depending on your request, providing information regarding travel, passports, city transportation, communication, and consular services in our country,
Depending on your request, carrying out necessary procedures regarding the arrival, accommodation, and return of the people accompanying you to our country.
Ensuring your transfer to the international health tourism healthcare facility where you will receive services, and your handover to the international health tourism unit of that facility by contacting them, and your pick up from the facility after discharge,
Providing support for arranging travel health insurance,
To create sales records and perform billing activities,
To provide after-sales support services,
To establish and execute sales contracts regarding your purchase of products and services from our Company.

Based on the legal basis that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject;

To track and manage customer requests and complaints,
To plan and execute surveys and similar customer satisfaction studies and corporate communication activities,
To manage customer relations,
To track financial transactions,
To ensure that our business units carry out the necessary work and related business processes for the performance of commercial activities,
To identify and implement the commercial and business strategies of our Company,
To follow and execute legal affairs,
To manage information security processes,
To perform audit and ethics activities,

Based on the legal basis that data processing is mandatory for the exercise or protection of a right;

To track and manage customer requests and complaints, and,
To store personal data during the general term of statue of limitations in order to constitute evidence in possible disputes that may arise in the future.

In accordance with the legal basis that it is necessary for compliance with a legal obligation to which the data controller is subject;

To update customer communication data,
To fulfill requests of official authorities and governmental bodies,
To provide information to authorized organizations pursuant to the legislation,
To comply with the obligations of data storage stipulated in the applicable laws; and
To evaluate and process your applications you have submitted to the Company within the scope of exercising your rights specified in Article 11 of the Law regarding your personal data processed by our Company and to finalize them in accordance with the legislation, and to carry out the actions necessary within this framework.

Based on the reason explicitly stipulated in the laws;

As a health tourism intermediary institution, processing your health data when necessary to fulfill the commitments specified in Annex-2 of the Regulation on International Health Tourism and Tourist Health, which include: 'researching health facilities suitable for the health service you wish to receive by transmitting your medical information and/or documents to the health facility in advance,' 'providing detailed information about health facilities that can offer the health service you wish to receive,' 'obtaining information from the health facility regarding the service fee for the health service you will receive and providing you with approximate service cost and payment conditions,' and 'keeping all documents related to their activities for the periods specified in the relevant legislation'.

c)To Whom and for What Purposes Processed Personal Data May Be Transferred

Your personal data may be transferred to:

to affiliated international healthcare facilities for making the health tourism services available to you,
to affiliated insurance company Ram Sigorta Aracılık HizmetleriŞ., for supporting the arrangement of travel health insurance,
to Koç Holding Anonim Şirketi for the purpose of performance of audit activities,
to our contracted suppliers,
to shareholders; and
to legally authorized public institutions and private persons within the scope of explicitly stipulated in the laws and fulfillment of our legal obligations

Within the framework of the personal data processing conditions and purposes referred to in Articles 8 and 9 of the Law.

d)The Method of Collecting Personal Data

Within the scope of the business relationship between you and the Company and the fulfillment of the aforementioned Purposes, your personal data is collected through physical channels such as stores, our agencies, cargo courier/postal services, printed forms and face-to-face meetings, as well as through electronic channels including our website, mobile app, telephone, call center, e-mail and instant communication and messaging apps.

e)Rights of the Data Subjects Specified in Article 11 of the Law

We would like to inform you that you are entitled to the following rights set forth under the Article 11 of the Law:

To learn whether your personal data are processed or not;
To request information if your personal data have been processed,
To learn the purpose for processing your personal data and whether they have been used accordingly,
To learn to which third domestic or foreign parties your personal data has been transferred,
To request rectification in case your personal data has been processed incompletely or inaccurately and notification of the operations made within this scope to third parties to whom your personal data has been transferred,
To demand the deletion or destruction of your personal data and the notification to the third parties whom your personal data has been transferred to in case the reasons requiring its processing have ceased, although it has been processed in accordance with the Law and the other relevant provisions of other laws,
To object to negative consequences faced due to the analysis of the processed personal data through solely automatic systems,
To demand compensation for the damages that you have suffered as a result of unlawful processing of your personal data.

You can submit your applications regarding your rights listed above to our Company by filling out the Data Subject Application Form at https://kvkk.setur.com.tr/izin-iptal. Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and within thirty days at the latest; however, if the transaction requires an additional cost, you may be charged a fee according to the tariff that to be determined by the Personal Data Protection Board.