Pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”), as Terappin Teknoloji Anonim Şirketi (“Terappin”, “We”, “Company”), we would like to inform you, the members (“Member”, “You”) of our website www.terappin.com or our mobile application that can be downloaded under the same name from Google Play Store or App Store (collectively, the “Platform”), as well as your child or partner, if you provide such information, regarding our identity, the purposes for processing your personal data, the recipients and purposes of transfer, our legal grounds, processing methods, and your rights concerning the personal data we process within the scope of your membership:
- Data Controller: Terappin Teknoloji Anonim Şirketi, registered under number 250270-5 and headquartered at Atakent Mah. Mithatpaşa Cad. Çağla Plaza Blok No:116 İç Kapı No:18 Ümraniye/İstanbul.
Your personal data are:
- processed in compliance with the law and the principles of good faith and for specific, explicit, and legitimate purposes,
- kept accurate and up to date when necessary,
- used in connection with, limited to, and proportionate to the purposes for which they are processed, and
- retained for the period determined in accordance with legal requirements.
Which of your personal data are processed and for what purposes?
| Data Category | Data Type | Purpose of Processing | Legal Basis for Processing | Collection Method | Retention Period | Transfer Purposes and Groups |
|---|---|---|---|---|---|---|
| Identity | Name and Surname | Conducting Communication Activities, Execution of Goods/Services Sales Processes, Execution of After-Sales Support Services | Processing your personal data is necessary for the establishment or performance of the contract | Through the completion of the Membership Form (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Execution of Customer Relationship Management Processes (Call Center), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Identity | Identification Number | Execution of Goods/Services Sales Processes, Conducting Activities in Compliance with Legislation | Processing is mandatory for fulfilling our legal obligations | Through the Use of Platform Features (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Identity | Date of Birth | Execution of Goods/Services Sales Processes, Conducting Activities in Compliance with Legislation | Processing your personal data is necessary for the establishment or performance of the contract | Through Updating Profile Information (Automatic) | 10 Years from the Date the Information is Entered in the Profile Section | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Identity | Gender | Execution of Goods/Services Sales Processes, Conducting Activities in Compliance with Legislation | Processing is necessary for the legitimate interests of the data controller provided that it does not harm the fundamental rights and freedoms of the data subject | By marking in the system settings (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Identity | Nationality | Execution of Goods/Services Sales Processes, Conducting Activities in Compliance with Legislation | Processing is necessary for the legitimate interests of the data controller provided that it does not harm the fundamental rights and freedoms of the data subject | Through the Use of Platform Features (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Contact | Conducting Communication Activities, Execution of Goods/Services Sales Processes, Execution of After-Sales Support Services | Processing your personal data is necessary for the establishment or performance of the contract | Through the Completion of the Membership Form (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Execution of Customer Relationship Management Processes (Call Center), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) | |
| Contact | Mobile Phone | Conducting Communication Activities, Execution of Goods/Services Sales Processes, Execution of After-Sales Support Services | Processing your personal data is necessary for the establishment or performance of the contract | Through the Completion of the Membership Form (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Execution of Customer Relationship Management Processes (Call Center), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Finance | Credit or Bank Card Information | Conducting Activities in Compliance with Legislation, Execution of Finance and Accounting Transactions, Execution of Goods/Services Sales Processes | Processing your personal data is necessary for the establishment or performance of the contract | By marking in the system settings (Automatic) | Not stored within Terappin systems. | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Transaction Security | User Account Information | Execution of Information Security Processes | Processing your personal data is necessary for the establishment or performance of the contract | Through the completion of the membership form (automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Execution of Customer Relationship Management Processes (Call Center), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Transaction Security | Access Logs | Execution of Information Security Processes, Conducting Activities in Compliance with Legislation, Execution/Audit of Business Activities, Providing Information to Authorized Persons, Institutions, and Organizations | Processing is mandatory for fulfilling our legal obligations under Law No. 5651 | Through Access to the Platform (Automatic) | 2 years from the date of record | Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Health Data | Information Regarding Mental Health Status | Execution of Goods/Services Sales Processes | Processing is necessary for the execution of medical diagnosis, treatment, and care services by persons or authorized institutions under a confidentiality obligation, and for planning and management of healthcare services | Through the use of Platform features* (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Health Data | E-Prescription, E-Report | Execution of Goods/Services Sales Processes | Processing is necessary for the execution of medical diagnosis, treatment, and care services by persons or authorized institutions under a confidentiality obligation, and for planning and management of healthcare services | Through the use of Platform features (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Health Data | Records Regarding Provided Health Services | Execution of Goods/Services Sales Processes, Conducting Activities in Compliance with Legislation | Processing is necessary for the execution of medical diagnosis, treatment, and care services by persons or authorized institutions under a confidentiality obligation, and for planning and management of healthcare services | Through the use of Platform features (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Health Data | Therapy Sessions | Execution of Goods/Services Sales Processes | Processing is necessary for the execution of medical diagnosis, treatment, and care services by persons or authorized institutions under a confidentiality obligation, and for planning and management of healthcare services | Through the Conduct of Therapy Sessions via the Platform (Automatic) | Therapy sessions are not recorded. | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Visual and Audio Records | Photograph | Planning Human Resources Processes, Execution/Audit of Business Activities | Publicly disclosed by the data subject | Upon your addition in the system settings (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Other | Social Security Institution (SGK) Information | Execution of Goods/Services Sales Processes, Conducting Activities in Compliance with Legislation | Processing your personal data is necessary for the establishment or performance of the contract | Through the use of Platform features (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
| Other | Information Regarding Child/Partner | Execution of Goods/Services Sales Processes, Conducting Activities in Compliance with Legislation | Processing your personal data is necessary for the establishment or performance of the contract | Through the Completion of the Membership Form (Automatic) | Throughout the Legal Relationship and 10 Years Following Its Termination | Execution of Storage and Archiving Activities (Suppliers), Providing Information to Authorized Persons, Institutions, and Organizations (Public Authorities) |
All types of data specified in this Clarification Text are shared with domestic service providers from whom server and infrastructure services are obtained. This data sharing arises from the need to host the processed data on servers within the company’s infrastructure and does not involve an active data transfer, occurring naturally as part of the hosting service.
*During your use of the Platform, the information you directly share with consultants who have the status of Healthcare Professionals will be processed on the legal basis that such processing is necessary for the execution of medical diagnosis, treatment, and care services, as well as for the planning and management of healthcare services, by persons under a confidentiality obligation.
Your rights under Article 11 of the KVKK can be summarized as follows:
| Right to Obtain Information | Right to Request | Right to Object |
|---|---|---|
| Regarding your personal data: | ||
| - whether it is being processed, | - that it is processed in accordance with its purpose, | - to the results arising against you due to analysis conducted exclusively through automated systems, |
| - whether it is processed and used appropriately for its purpose, | - that it be corrected if incorrect or incomplete and that third parties be informed accordingly, | |
| - its transfer domestically or abroad, | - that it be deleted or destroyed once the reasons requiring its processing no longer exist and that third parties be informed accordingly, | |
| - that you be compensated for damages suffered. | ||
You may submit your requests regarding the exercise of the above-mentioned rights, together with documents identifying your identity and your request details, through the following channels:
- By sending a secure electronically signed or unsigned email to [email protected],
- By sending a securely electronically signed message from your Registered Electronic Mail (KEP) account to [email protected],
- By personally delivering, or sending via notary public or registered mail with return receipt, to Atakent Mah. Mithatpaşa Cad. Çağla Plaza Blok No:116 İç Kapı No:18 Ümraniye/İstanbul.
We undertake to respond to your request as soon as possible and within no more than 30 (thirty) days, without charging any fee provided that the process does not incur any cost.