HEVI AI SAĞLIK YAPAY ZEKA VE BİLİŞİM TEKNOLOJİLERİ ANONİM ŞİRKETİ CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA

As HEVI AI SAĞLIK YAPAY ZEKA VE BİLİŞİM TEKNOLOJİLERİ ANONİM ŞİRKETİ  (HEVI AI), we attach importance to the careful processing and preservation of your personal data within the scope of the Personal Data Protection Law No. 6698 (KVKK). With this awareness, as the data controller, we process your personal data within the framework described below.

Method of Obtaining Personal Data and Legal Reason

In order to provide you with high quality service, your personal data may be obtained verbally, in writing, visually or electronically through the Registration Center, internet, mobile applications, physical locations and similar channels depending on the nature of the service provided, and may be processed as specified in Articles 5 and 6 of the Law.

In this context, general and special categories of personal data required for distance education, execution of product sales services and hospital product installation activities and obtained for this purpose are listed below;

Name-Surname, TR Identity Number, Corporate Contact (e-mail, telephone), Personal Contact Information, Address

Comments, suggestions and complaints about our products

Browsing information, IP address, browser information obtained during the use of our website and mobile application, and medical documents, surveys, form information and location information that you transmit with your consent

Your closed circuit camera system image and sound recording taken during your visit to HEVI AI,

Your financial data such as your bank account number, IBAN number,

Purposes of Processing Personal Data

Your personal data and sensitive personal data may be processed for the following purposes

To make human resources planning and to carry out planning processes,

- To carry out planning and programming activities to develop product sales activities and to carry out business processes in this direction,

To plan and execute to increase the satisfaction of the people who benefit from our artificial intelligence software and purchase products,

Plan and manage product commercial relationships and business strategies,

Customize and promote these new products by taking into account the needs-likes-habits of the participants in product sales services,

Finding solutions to disputes with business partners and improving technical and commercial relations,

Your personal and sensitive data listed above are carefully protected in physical and electronic archives within HEVI AI and external service providers and in accordance with the provisions of the legislation

Parties with whom Personal Data may be Shared and Purposes of Sharing

Your personal data, within the framework of the above-mentioned legal regulations and other legislation provisions and for the purposes described above;

Business Partner

Supplier

Shareholders

Legally Authorized Public Institutions and Organizations

Legally Authorized Private Law Persons

HEVI AI Board Members

Rights of Data Subjects and Exercise of These Rights

In the event that you submit your requests regarding your rights specified below to us by the methods specified under the heading “Exercising the Rights of Data Subjects” below, they will be evaluated and finalized as soon as possible and in any case within 30 (thirty) days.

Rights of the personal data owner:

To learn whether your personal data is being processed or not,

Request information if your personal data has been processed,

To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

To know the third parties to whom your personal data is transferred domestically or abroad,

To request correction of your personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

Although it has been processed in accordance with the provisions of the Law and other relevant laws, to request the deletion or destruction of your personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

To object to the emergence of a result to the detriment of the person himself/herself by analyzing your processed data exclusively through automated systems,

In case of damage due to unlawful processing of your personal data, requesting the compensation of the damage

Cases where data subjects have no right to request:

Processing of personal data is necessary for the prevention of crime or criminal investigation,

Processing of personal data made public by the data subject himself/herself,

Personal data processing is necessary for the execution of supervisory or regulatory duties and disciplinary investigation or prosecution by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions based on the authority granted by law,

Processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budgetary, tax and fiscal matters.

Cases where the requests of data subjects will not be processed:

Processing of personal data by natural persons within the scope of activities related to themselves or their family members living in the same residence, provided that personal data is not disclosed to third parties and the obligations regarding data security are complied with,

Processing of personal data for purposes such as research, planning and statistics by anonymizing them with official statistics,

Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public safety, public order, economic security, privacy of private life or personal rights or does not constitute a crime,

Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order or economic security,

Processing of personal data by judicial authorities or enforcement authorities in relation to investigation, prosecution, trial or execution proceedings.

Exercise of Rights by Data Subjects:

Data subjects shall use the “Form for Applications to be made by the Personal Data Subject to the Data Controller” available at the link (https://www.HEVI.AI/aydinlatma-metni) to exercise the above-mentioned rights.

Applications are made by one of the following methods together with the documents that will identify the identity of the relevant data subject;

Filling out the form and sending the wet signed copy of the form to the address (İçerenköy Mahallesi, Acıbadem Üniversitesi Tıp Fakültesi No: 32-36B Ataşehir/İstanbul) by hand, through a notary public or by registered letter with return receipt,

Signing the form with a secure electronic signature issued within the scope of the Electronic Signature Law No. 5070 and sending it by registered e-mail to (heviaisaglik@hs02.kep.tr),

A method stipulated by the Personal Data Protection Board

In order for third parties to make an application request on behalf of personal data owners, there must be a special power of attorney issued by the data owner through a notary public on behalf of the person who will make the application.

Although data subject applications are processed free of charge as a rule, fees may be charged based on the fee tariff stipulated by the Personal Data Protection Board.

HEVI AI may request information from the relevant person in order to determine whether the applicant is a personal data owner or not, and may ask questions to the personal data owner regarding his/her application in order to clarify the matters specified in the application.

Applications to exercise the rights listed above can be made by filling out the Data Subject Application Form available at “https://www.HEVI.AI/aydinlatma-metni” and submitting it to HEVI AI.

Requests shall be finalized free of charge as soon as possible and within thirty days at the latest, depending on their nature; however, if the transaction requires an additional cost, the relevant party may be charged a fee according to the tariff to be determined by the Personal Data Protection Board.

Detailed information on the processing and protection of your personal data can be found in the HEVI AI SAĞLIK YAPAY ZEKA VE BİLİŞİM TEKNOLOJİLERİ A.Ş. Personal Data Protection and Processing Policy at (https://www.HEVI.AI/kisisel-verilerin-korunmasi).