stars
stars

Privacy Policy

MOBILE APPLICATION MEMBER
PRIVACY POLICY

In accordance with Article 10 of the Personal Data Protection Law No. 6698 (“PDPL”), we, Terappin Teknoloji Anonim Şirketi (“Terappin”, “Us”, “the Company”) would like to provide you, the members (“Member”, “You”) of our mobile application named Terappin (“Platform”), information about our processing of your personal data throughout your membership as well as the personal data of your child and/or partner, including about our identity, our purposes for processing personal data, our purposes for transferring personal data and the parties for these transfers, the legal bases of our processing, our methods of processing and your rights regarding this processing:

Your personal data is processed in compliance with the following principles laid out in Article 4 of the PDPL:

The following is an exhaustive list of the relevant personal data and personal data processing activities:

Data Category

Data Type

Data Subject

Purposes of Processing

Legal Grounds

Gathering and Processing

Retention Period

Parties and Purposes for Transfer

Identity

Name, Surname

Member

Conducting Communication Activities, Conducting Processes for the Sale of Goods and/or Services,

Conducting After-Sales Services, Conducting Advertising / Campaign / Promotion Processes

The necessity to process the personal data of contractual parties, provided that it is directly related to the establishment or execution of the contract

Through filling the sign-up form, by automated means

10 years from the date of processing

Conducting Storage and Archiving Activities

(Service Providers)

Conducting Customer Relations Management Processes

(Call Center)

Informing Authorized Persons, Institutions and Organizations

(Authorized Public Institutions and Organizations)

Identity

Date of Birth

Member

Conducting Processes for the Sale of Goods and/or Services, Conducting After-Sales Services, Conducting Advertising / Campaign / Promotion Processes

The necessity to process the personal data of contractual parties, provided that it is directly related to the establishment or execution of the contract

Through updating your profile information, by automated means

10 years from the date of entry on the page for profile information

Conducting Storage and Archiving Activities

(Service Providers)

Conducting Customer Relations Management Processes

(Call Center)

Informing Authorized Persons, Institutions and Organizations

(Authorized Public Institutions and Organizations)

Contact Information

E-Mail Address

Member

Conducting Communication Activities, Conducting Processes for the Sale of Goods and/or Services,

Conducting After-Sales Services, Conducting Advertising / Campaign / Promotion Processes

The necessity to process the personal data of contractual parties, provided that it is directly related to the establishment or execution of the contract

Through filling the sign-up form, by automated means

10 years from the date of processing

Conducting Storage and Archiving Activities

(Service Providers)

Conducting Customer Relations Management Processes

(Call Center)

Informing Authorized Persons, Institutions and Organizations

(Authorized Public Institutions and Organizations)

Contact Information

Mobile Phone Number

Member

Conducting Communication Activities, Conducting Processes for the Sale of Goods and/or Services,

Conducting After-Sales Services, Conducting Advertising / Campaign / Promotion Processes

The necessity to process the personal data of contractual parties, provided that it is directly related to the establishment or execution of the contract

Through filling the sign-up form, by automated means

10 years from the date of processing

Conducting Storage and Archiving Activities

(Service Providers)

Conducting Customer Relations Management Processes

(Call Center)

Informing Authorized Persons, Institutions and Organizations

(Authorized Public Institutions and Organizations)

Operational Security

User Account Information,
Device Information[1] 

Member

Conducting Information Security Processes

The necessity to process the personal data of contractual parties, provided that it is directly related to the establishment or execution of the contract

Through filling the sign-up form, by automated means

6 months from the date of processing[2] 

Conducting Storage and Archiving Activities

(Service Providers)

Conducting Customer Relations Management Processes

(Call Center)
Informing Authorized Persons, Institutions and Organizations

(Authorized Public Institutions and Organizations)

Health Data

Data About the State of Mental Health

Member, their child, their partner

Conducting Processes for the Sale of Goods and/or Services

Your explicit consent

With the performance of therapy sessions through the Platform or the resolution of Psychology Tests, by automated means

10 years from the date of processing, as long as the explicit consent is not withdrawn

Conducting Storage and Archiving Activities

(Service Providers)

Informing Authorized Persons, Institutions and Organizations

(Authorized Public Institutions and Organizations)

Visual and Audio Recordings

Recordings of Therapy Sessions

Member, their child, their partner

Conducting Processes for the Sale of Goods and/or Services

Provided you have given your explicit consent for the processing of your health data, the necessity to process the data for our legitimate interests without violating your fundamental rights and freedoms

With the performance of therapy sessions through the Platform, by automated means

Therapy sessions are not recorded.

Conducting Storage and Archiving Activities

(Service Providers)

Informing Authorized Persons, Institutions and Organizations

(Authorized Public Institutions and Organizations)

All data types included in this Privacy Policy are transferred to GlassHouse Bilgi Sistemleri Ticaret Anonim Şirketi, a domestically based provider of server and infrastructure services. This data transfer is due to the fact that the servers are located within the relevant company in order to meet the need to host the data types we process on a server, and does not require an active data transfer and is realized due to the nature of the hosting service.

Pursuant to Article 11 of the PDPL, you have the following rights regarding your personal data:

The Right to be Informed

The Right to Request

The Right to object

- Whether your data is processed or not,

- Whether your data is used in accordance with the purpose and purpose of processing,

- Whether your data is transferred domestically or abroad.

- For your data to be processed in accordance with the purpose for which it is intended to be transferred domestically or abroad,

- For your data to be corrected if incorrect or incomplete and for third parties to be notified about,

- For your data destroyed and for third parties to be notified if the relevant reasons for processing no longer exist; and relevant compensation for damages;

- To the occurrence of a result against you through the analysis of data processed solely through automated systems,

 

You can send us a declaration about your use of the aforementioned rights, along with documents ensuring your identification and pertaining to the subject of your request through the following channels:

 

We undertake to respond to your request as soon as possible, but not more than 30 (thirty) days, and without charge, as long as there is no cost for the transaction.