Corporate
Privacy Policy
MedicaTurn Ltd. - Privacy Policy
MedicaTurn
Ltd. is aware of the importance of patient candidate privacy and takes
necessary precautions to ensure it. All activities are conducted within the
framework of these core values. This Privacy Policy has been created to comply
with applicable data protection regulations, including the General Data
Protection Regulation (GDPR) of the European Union and other relevant legal
frameworks.
This
Privacy Policy aims to explain how we collect, use, and share your personal
data and how we use it to provide you with the best service.
Collected
Personal Data
· The personal data we may collect include:
· Identity information such as your name, surname,
signature, nationality, photo, and date of birth.
· Contact information such as your phone number,
residential address, work address, and email address.
· Financial data such as your financial information,
IBAN number, and payment details.
· Other information including your employer,
educational history, job title, and specialization.
One of the
issues we request not to be shared is sensitive personal data. Specifically, we
ask you not to provide us with sensitive personal data unless explicitly
requested. This includes, but is not limited to, data related to race or ethnic
origin, political opinions, religious or philosophical beliefs, trade union
membership, genetic data, biometric data, health-related data, or data related
to sexual life and sexual orientation. The non-provision of such data through
this site or otherwise is crucial for the protection of your privacy.
Method of
Collecting Personal Data
We may
collect your personal data directly from you or through different communication
methods (email, phone, mail, printed or electronic documents, etc.).
Use of
Personal Data
· We use your personal data for the following
purposes:
· Purchase of products and/or services.
· Planning, monitoring, and managing the continuity
of our business.
· Fulfilling contractual obligations to suppliers,
business/solution partners, and other third parties.
· Conducting financial and accounting operations.
· Managing general record-keeping.
· Complying with current legal obligations and
fulfilling the requirements of public/government authorities, including
national security or legal sanctions, among others, even beyond your country.
Our
collection and processing of personal data are based on the principles
specified in Article 6(1) of the GDPR:
· Necessary for the performance of our contract with
you.
· Compliance with legal obligations.
· Processing in pursuit of our legitimate interests,
as long as it does not affect your fundamental rights and freedoms that require
the protection of personal data.
The
processing of sensitive personal data is based on the principles specified in
Article 9(2) of the GDPR:
· Explicit consent provided by you for the processing
of your personal data.
· Processing that is directly related to personal
data made public by official authorities.
· Necessary for the establishment, exercise, or
defense of legal claims or where courts are acting in their judicial capacity.
The processing
of marketing information is based on your explicit consent, and you can opt out
of receiving such communications at any time.
Sharing of
Personal Data
· We may share your personal data in the following
cases:
· With our employees, company executives, and
representatives, as well as our business/solution partners and suppliers, for
the purposes stated under 'Use of Personal Data.'
· With government, regulatory authorities, and other
authorized organizations, in accordance with legal and regulatory requirements,
to protect or defend our rights or property.
· With our suppliers and business/solution partners
to ensure GDPR compliance, even if they are located outside the European
Economic Area (EEA), taking appropriate data protection measures and only for
the purposes specified by us.
If you are
from the European Economic Area or certain countries, you have the following
rights (some exceptions and limitations may apply):
· Access: The right to request information about how
your personal data is processed and to obtain a copy of that data.
· Rectification: The right to request the correction
of inaccurate or incomplete personal information.
· Objection: The right to object to the processing of
your personal data.
· Deletion: The right to request the deletion of your
account directly through the service.
· Automated decisions: The right to object to
automated decisions about you.
· Restriction: The right to request the restriction
of the processing of your data.
· Portability: The right to receive your personal
data and transfer it to another organization.
· Complaint: The right to lodge a complaint with a
data protection authority.
To exercise
any of the above rights, you can contact us through the Contact Form or via
email. You may need to provide proof of your identity with supporting
documents. However, in some cases, we may be required to restrict your access
to personal data to comply with legal obligations or avoid conflicts with
applicable laws.
Right to
Withdraw Consent
If you have
previously given your consent for the collection, processing, and transfer of
your personal information, you have the right to withdraw that consent. If you
wish to withdraw your consent in whole or in part, you can contact us through
the Contact Form or via email.
Once we
receive notification that you have withdrawn your consent, we will no longer
process your information for the purpose(s) you originally agreed to. However,
in some cases, we may continue to process your information if there are
compelling legitimate reasons that override your interests, rights, and
freedoms or for the establishment, exercise, or defense of legal claims.
Collection
of Personal Data from Children
We
prioritize the privacy of children and, accordingly, do not knowingly collect
personal data from anyone under the age of 16. If you believe that your child's
privacy or personal data has been submitted to us in connection with our
services, please contact us through the Contact Form or via email. We will
promptly delete such personal data from our records.
Security of
Personal Data
· We implement necessary and appropriate technical
measures and organizational measures to protect you. Measures are taken to
prevent risks such as loss, misuse, unauthorized access, disclosure,
alteration, or destruction of personal data. These measures include:
· Securing our data servers with the latest
technology antivirus programs and similar software.
· Restricting and monitoring physical access to our
facilities.
· Limiting and logging access to data servers.
· Conducting regular tests and reviews on our system
both internally and through third-party agencies.
Storage of
Personal Data
We retain
your personal data only for as long as necessary to fulfill our business
purposes. The determination of the appropriate retention period takes into
account factors such as the quantity, nature, and sensitivity of the data, the
risks of unauthorized access, the potential disclosure of information, the
purposes of data processing, and whether there are alternative means of
achieving these purposes, as well as legal requirements.
Once the
applicable retention period expires, we securely delete or destroy your
personal information in compliance with all relevant legal regulations.
Methods of
Personal Data Destruction
MedicaTurn
Ltd. may delete or destroy processed data either at its own initiative or upon
the request of the data subject, in accordance with relevant laws. The process
of deleting data includes the determination of which data to delete,
identifying the relevant individuals, determining access methods, and then
deleting the data.
1. Deletion of Personal Data;
· Personal data in paper form will be rendered
ineffective through processes such as blacking out, crossing out, painting
over, cutting, or erasing.
· Access rights of users in central office files will
be revoked.
· Personal information in databases will be deleted
with the 'Delete' command for relevant rows or columns.
· Experts will ensure secure deletion if needed.
2. Destruction of Personal Data;
The
destruction of personal data involves making the data inaccessible,
irretrievable, and unusable by anyone. MedicaTurn Ltd. may use physical
destruction methods or use a paper shredder for this purpose.
3. Anonymization of Personal Data;
Anonymization
of personal data refers to making the data impossible to link to any real
individual. MedicaTurn Ltd. may use the following methods to anonymize personal
data:
· Masking: Removing identifying information from the
dataset to anonymize it.
· Record Removal: Eliminating records containing
uniqueness from the dataset to anonymize it.
· Regional Concealing: Reducing the visibility of
identifying information by hiding it to anonymize the data.
· Global Coding: Creating a more general content from
personal data by eliminating identifying qualities. For example, specifying
regions instead of birthdates.
· Adding Noise: Introducing deviations in numerical
data to hide and anonymize the real values.
Links to
Third-Party Sites
Our website
may contain links to other websites with different privacy practices. Each of
these sites has its own Privacy Policy, and if you submit your personal
information to these sites, your information will be governed by the respective
Privacy Policy. We recommend carefully reading the Privacy Policy of the
visited website.
Changes to
Our Privacy Policy
We reserve
the right to update or modify our policy from time to time. These changes may
result from changes in how we process your personal data or updates to legal requirements.
Any future changes will be published on this page, and, where possible, you
will be notified by email. Please check periodically for updates or review
changes to our policy.
Contact Us
If you have
any questions or concerns about our privacy practices or wish to exercise any
of your rights under this Privacy Policy, please feel free to send us a message
using the Contact Form or contact us via email.