INTRODUCTION
1.1 Introduction
1.2. Scope
1.3 Implementation of the Policy and KVKK Legislation
1.4 Enforcement of the Policy
2. ISSUES REGARDING THE PROTECTION OF PERSONAL DATA
2.1. Ensuring the Security of Personal Data
2.2. Protection of Sensitive Personal Data
2.3. Expanding and Supervision of Awareness at Business Units on the Protection and Processing of Personal Data
3. ISSUES REGARDING PERSONAL DATA PROCESSING
3.1. Processing Personal Data in Compliance with the Principles Stipulated in the Legislation
3.2. Terms of Personal Data Processing
3.3. Sensitive Personal Data Processing
3.4. Clarification of Personal Data Owner
3.5. Processing of Data Processed by XXX Company by XXX
3.6. Transfer of Personal Data
4. CATEGORIZATION OF PERSONAL DATA PROCESSED BY OUR COMPANY AND THE PURPOSE OF PROCESSING
5. RETENTION AND DESTRUCTION OF PERSONAL DATA
6. RIGHTS OF PERSONAL DATA OWNERS AND EXERCISE OF THESE RIGHTS
6.1. RIGHTS OF THE RELATED PERSON
7. SPECIAL CASES WHERE PERSONAL DATA ARE PROCESSED
7.1. Building, Facility Entrances and Personal Data Processing Activities within the Building Facility and Website Visitors
7.2 Camera Surveillance Activities Carried Out at Company Buildings, Facility Entrances and Inside
7.3. Monitoring of Guest Entry and Exit at the Entrances of Company Buildings, Facilities and Inside
8. MEASURES RELATED TO THE SECURITY OF PERSONAL DATA
Since it is a fundamental human right, protection of personal data is among the most important priorities of ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. (“Company”). In order to secure the right of personal data protection, the Company makes maximum efforts to comply with all applicable legislation in this regard. the principles adopted in the execution of personal data processing activities carried out by our Company and the basic principles adopted in terms of compliance of our Company’s data processing activities with the regulations in the Personal Data Protection Law No. 6698 within the framework of this CompanyPersonal Data Protection and Processing Policy (“Policy”) are explained, and thus our Company provides the necessary transparency by informing the relevant persons. With full awareness of our responsibility in this context, your personal data is processed and protected within the scope of this Policy.
CompanyPersonal Data Protection and Processing Policy (“Policy”) has been drafted with the express purpose of disciplining data processing within the framework of personal data legislation and protecting the right of privacy and other fundamental rights and freedoms as stipulated in the Constitution.
While drafting the “Policy”, it has been determined as the basic principle to determine which data the business units collect and why, and why they need to transfer this data to third parties within the Company’s organizational chart, and to understand the personal data processing method of the Company. While importing the requirements of the relevant legislation into the Policy, it has been adopted as a principle within the framework of the sensitivity of the protection of personal data, to explain in a simple and understandable language which data the Company provides and why it processes this data by customizing it. In addition, it is aimed to take the necessary administrative and technical measures to protect data confidentiality within and outside the organization of the Company, and to inform and clarify the individuals whose data is processed.
All real persons whose data are processed by the “Company” fall into the scope of the “Policy”.
Customized information about the data processed within the framework of the processes and activities in the “Company” organization, the categorization of the data, the data recipient groups, the legal reason and method of data collection, the third-party groups data is transferred, the processing times of the data, and the deletion periods of the data are included within the scope of this “Policy”. However, apart from current processing activities, in case of current or future data processing by the “Company”, it is possible to execute processing and clarification activities within the scope of an external clarification text on the condition that the basic principles set forth in this policy are followed. In this case, the clarification will constitute an integral part of this “Policy” and it cannot be claimed that it is not included in this “Policy”. As a matter of fact, within the scope of Article 5 of the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation of Clarification, it is possible to execute clarification by using physical or electronic mediums such as verbal, written, audio recording or call center.
Regarding the processing and protection of personal data, the relevant legal regulations in force will be applied first. In case of a conflict between the applicable legislation and the Policy, our Company acknowledges the application of the applicable legislation. The policy regulates the rules set forth by the relevant legislation by embodying them within the scope of Company practices.
The effective date of this Policy is 01.02.2023. It is drafted by ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş.
This Policy is published on the website of ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. at www.antalyasmiledesigns.com.
Pursuant to article 12 of the Law, our Company takes the necessary measures considering the nature of the data to be protected in order to prevent possible unlawful disclosure, access, transfer, or security breaches of personal data. In this context, our Company takes administrative measures to ensure the required level of security in accordance with the guidelines published by the Personal Data Protection Board (“Board”), carries out inspections or has them made.
With the law, special importance is attached to certain personal data due to the risk of causing victimization or discrimination when processed unlawfully. These data are race, ethnicity, political thought, philosophical belief, religion, sect or other beliefs, clothing, membership to associations, foundations or unions, health, sexual life, criminal convictions, and security measures related, and biometric and genetic data.
Company acts sensitively in the protection of sensitive personal data, which is determined as “sensitive” by the Law and processed in accordance with the law. In this context, the technical and administrative measures taken by the Company for the protection of personal data are carefully implemented in terms of sensitive personal data and the necessary controls are conducted within the Company.
Note: Detailed information on the technical and administrative measures taken in the processing of personal data is given in section “8” of this policy.
Company organizes trainings at regular intervals in order to prevent the illegal processing of personal data, to prevent unlawful access to personal data, and to increase awareness on ensuring the protection of personal data.
The Company establishes the necessary systems to expand awareness of its employees on the protection of personal data and works with consultants if required. In this direction, our Company participates in the relevant trainings, seminars, and information sessions, especially those prepared by the Personal Data Protection Authority, through its employees, and renews its trainings in parallel with the updating of the relevant legislation.
In the processing of personal data, the Company acts in accordance with the principles introduced by legal regulations and the general rule of trust and integrity. In this context, personal data is processed to the extent and limited to the business activities of our Company.
The Company takes the necessary measures to ensure that personal data is accurate and up to date throughout the period of processing and establishes the necessary mechanisms to ensure the accuracy and up-to-dateness of personal data for certain periods.
The Company clearly reveals the purposes of processing personal data and processes it within the scope of purposes related to these activities in line with its business activities.
The Company collects personal data only in the quality and extent required by its business activities and processes it limited to the determined purposes.
Except for the explicit consent of the personal data owner, the basis of the personal data processing activity may be only one of the following conditions, or more than one condition may be the basis of the same personal data processing activity. In the event that the processed data is sensitive personal data, the conditions set out in section 3.3 of this Policy (“Sensitive Personal Data Processing”) shall apply.
One of the conditions for processing personal data is the explicit consent of the data subject. The explicit consent of the personal data subject must be related to a specific subject, based on information and free will.
In the presence of the following personal data processing conditions, personal data may be processed without the explicit consent of the data subject.
If the personal data of the data subject is explicitly stipulated in the law, in other words, if there is a clear provision in the relevant law regarding the processing of personal data, it will be possible to talk about the existence of this data processing condition.
The personal data of the data subject may be processed if it is mandatory to process the personal data of the person who is unable to disclose his/her consent due to actual impossibility or whose consent cannot be recognized as valid, in order to protect the life or physical integrity of himself/herself or another person.
Provided that it is directly related to the establishment or execution of a contract to which the data subject is a party, this condition may be deemed to be fulfilled if the processing of personal data is necessary.
Personal data of the data subject may be processed if processing is mandatory for our Company to fulfill its legal obligations.
In case the data owner has made his/her personal data public, the relevant personal data may be processed limited to the purpose of publicization.
If data processing is mandatory for the establishment, exercise or protection of a right, the personal data of the data subject may be processed.
Provided that it does not harm the fundamental rights and freedoms of the personal data owner, the personal data of the data owner may be processed if data processing is mandatory for the legitimate interests of our Company.
Sensitive personal data are processed by our Company in accordance with the principles set forth in this Policy and by taking all necessary administrative and technical measures, including the methods to be determined by the Board, and in the presence of the following conditions:
The Company informs personal data subjects in accordance with Article 10 of the Law and secondary legislation. In this context, the Company informs the relevant persons about the purposes for which personal data are processed by the Company as the data controller, the purposes for which they are shared with whom, the methods by which they are collected and the legal reason and the rights of the data subjects within the scope of the processing of their personal data.
Our Company may transfer the personal data and sensitive personal data of the personal data owner to third parties (third party companies, official and private authorities, third real persons) by taking the necessary security measures in line with the personal data processing purposes in accordance with the law. In this respect, our Company acts in compliance with the regulations stipulated in Article 8 of the Law. Detailed information on this subject can be found in Annex X (“Annex x- Third Parties to whom Personal Data is Transferred and Purposes of Transfer”) of this Policy.
Even without the explicit consent of the personal data owner, if one or more of the following conditions exist, personal data may be transferred to third parties by our Company by taking all necessary care and taking all necessary security measures, including the methods stipulated by the Board.
Sensitive personal data may be transferred by our Company in accordance with the principles set forth in this Policy and by taking all necessary administrative and technical measures, including the methods to be determined by the Board, and in the presence of the following conditions:
In accordance with Article 10 of the Law and secondary legislation, personal data are processed by our Company by informing the relevant persons in accordance with Article 10 of the Law and secondary legislation, in line with the personal data processing purposes of our Company, based on and limited to at least one of the personal data processing conditions specified in Articles 5 and 6 of the Law, in accordance with the general principles specified in the Law, especially the principles specified in Article 4 of the Law regarding the processing of personal data. Within the framework of the purposes and conditions specified in this Policy, the categories of personal data processed and detailed information about the categories can be found in Annex 3 (“Annex 3- Personal Data Categories”) of the Policy.
Detailed information on the purposes of processing such personal data is provided in Annex 1 of the Policy (“Annex 1- Purposes of Processing Personal Data”).
Our Company retains personal data for the period required for the purpose for which they are processed and in accordance with the minimum periods stipulated in the legal legislation to which the relevant activity is subject. In this context, our Company first determines whether a period of time is stipulated for the storage of personal data in the relevant legislation, and if a period is determined, it acts in accordance with this period. If there is no legal period, personal data are stored for the period required for the purpose for which they are processed. Personal data are destroyed at the end of the specified storage periods in accordance with the periodic destruction periods or the data owner’s application and with the specified destruction methods (deletion and/or destruction and/or anonymization).
In order to ensure security, ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. carries out personal data processing activities for the monitoring of guest entrances and exits with security cameras in ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. buildings and facilities.
ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. carries out camera surveillance activities in accordance with the Law on Private Security Services and the relevant legislation in order to ensure security in its buildings and facilities. ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. carries out security camera surveillance activities in order to ensure security in its buildings and facilities, for the purposes stipulated in the relevant legislation in force and in accordance with the personal data processing conditions listed in the Law.
In accordance with Article 10 of the Law, the personal data owner is informed by ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. by more than one method regarding the camera surveillance activity. In addition, in accordance with Article 4 of the Law, ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. processes personal data in a limited and measured manner in connection with the purpose for which they are processed.
The purpose of ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. video camera surveillance activities is limited to the purposes listed in this Policy. Accordingly, the monitoring areas, the number, and the time of surveillance of the security cameras are sufficient to achieve the security purpose and are limited to this purpose. Areas that may result in interference with the privacy of the person in a way that exceeds the security purposes (for example, toilets) are not subject to monitoring.
Only a limited number of ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. employees have access to live camera feeds and the digital records. The limited number of people who have access to the records declare that they shall protect the confidentiality of the data they access with a confidentiality undertaking.
Personal data processing activities are carried out by ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. for the purposes of ensuring security and for the purposes specified in this Policy, for the monitoring of guest entrances and exits in ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. buildings and facilities.
While the names and surnames of the persons who arrive at ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. premises as guests are obtained, the related personal data owners are clarified within this scope or through the texts posted in ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. or otherwise made available to the guests. The data obtained for the purpose of monitoring guest entry-exit are processed only for this purpose and the relevant personal data are physically recorded in the data recording system.
The Company provides all reasonable care and attention to ensure the confidentiality and security of the personal data it processes, with the awareness of its responsibility as a well-established Company. In addition to the requirements of the relevant legislation, the Company takes reasonable technical and administrative measures to ensure data confidentiality and security within the framework of Article 12 of the KVKK. With these administrative and technical security measures, it is aimed to prevent unlawful processing of personal data, to prevent unlawful access to personal data and to maintain personal data at an appropriate security level.
In the event that personal data is processed by another natural or legal person (data processor) on its behalf, the Company shall take the necessary measures to ensure that the above-mentioned measures are also taken by the relevant data processors.
In the event that personal data is unlawfully obtained by third parties, it will notify the data owners, the Board and other relevant public institutions and organizations in accordance with the provisions of the relevant legislation.
While taking measures regarding the security of personal data, the Personal Data Security Guide (Technical and Administrative Measures) published by the Board is taken into consideration.
Administrative Measures
Technical Measures
Explicit Consent | It refers to consent on a specific subject, based on information and expressed with free will. |
Company | TARIM MAH. ASPENDOS BULV. NO:80 MURATPAŞA (ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş.) |
Cookie | They are small files saved on users’ computers or mobile devices that help store preferences and other information about the web pages they visit. |
Relevant User | Persons who process personal data within the organization of the data controller or in accordance with the authorization and instruction received from the data controller, except for the person or unit responsible for the technical storage, protection, and backup of the data. |
Destruction | Deletion, destruction, or anonymization of personal data. |
Contact Person | The real person notified by the data controller during the registration to the Registry for the communication to be established with the Authority regarding the obligations of the legal entities resident in Turkey and the non-resident legal entity data controller representative within the scope of the Law and the secondary regulations to be issued based on this Law. (The contact person is not authorized to represent the Data Controller. As it can be understood from the name, it is only the person assigned to provide “contact” for the communication of the data controller, the relevant persons, and the Authority). |
The Law/KVKK | Law on the Protection of Personal Data dated March 24, 2016, and numbered 6698, published in the Official Gazette dated April 7, 2016, and numbered 29677. |
Recording Medium | Any medium containing personal data that is fully or partially automated or processed by non-automated means, provided that it is part of any data recording system. |
Personal Data | Any information relating to an identified or identifiable natural person. |
Personal Data Processing | Any operation performed on personal data such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system. |
Anonymization of Personal Data | Making personal data impossible to be associated with an identified or identifiable natural person under any circumstances, even by matching with other data. |
Erasure of Personal Data | Erasure of personal data; making personal data inaccessible and non-reusable in any way for the Relevant Users. |
Destruction of Personal Data | The process of making personal data inaccessible, irretrievable, and non-reusable by anyone in any way. |
The Board | Personal Data Protection Board. |
Sensitive Personal Data | Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of a company, foundation or trade union, health, sexual life, criminal conviction and security measures, and biometric and genetic data. |
Periodic Destruction | In the event that all of the conditions required for the processing of personal data disappear, the deletion, destruction, or anonymization process to be carried out ex officio at recurring intervals specified in the personal data retention and destruction policy. |
The Policy | Personal data protection policy set up by the Company. |
Data Processor | A natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller |
Data Recording System | A recording system where personal data is structured and processed according to certain criteria. |
Data Subject/Related Person | The natural person whose personal data is processed. |
Data Controller | The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. |
The Regulation | Regulation on Deletion, Destruction or Anonymization of Personal Data. |
Source: | Law No. 6698 on the Protection of Personal Data – Regulation on the Deletion, Destruction or Anonymization of Personal Data – Regulation on the Registry of Data Controllers – Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Disclosure Obligation – Communiqué on the Principles and Procedures of Application to the Data Controller |
PERSONAL DATA CATEGORY | DESCRIPTION OF CATEGORIZATION |
Identity Data | Personal data of natural persons regarding identity information will be evaluated under this category (name, surname, mother’s and father’s name, mother’s maiden name, date of birth, place of birth, marital status, T.R. ID no.). |
Contact Data | All kinds of personal data that can be used for communication with individuals will be evaluated under this category (address no., e-mail address, contact address, registered electronic mail address (KEP), telephone no.). |
Location Data | Location information of where individuals are located, etc. |
Personnel File Data | Within the scope of the relevant legislation, the data in the personnel file of the company employees (payroll information, disciplinary investigation, employment-exit document records, property declaration information, leave information, resume information, diploma, maternity leave, inability to work report, military service, performance evaluation reports and criminal convictions and security measures records (criminal record), health information are included. In general, the following documents are found in personnel files. 1. Criminal record 2. Family status notification form 3. Certificate of Employment / Certificate of Service 4. Report that you can work in heavy and dangerous work for very dangerous jobs 5. Photocopy of diploma 6. Petitions for maternity leave, workable/unworkable reports, breastfeeding leave, 7. If it is a disabled worker, disability report, İŞKUR application registration certificate 8. Documents showing military service status for male workers 9. İŞKUR application registration document of ex-convict, terrorism victim worker 10. Photocopy of marriage certificate 11. Worker approval letter for overtime work 12. Document showing the consent of the worker to be temporarily transferred to another workplace 13. If there is a justified termination, documents proving this situation, resignation petition or notice of termination 14. Quittance 15. Proof of residence 16. Labor contract 17. All correspondence and records kept about the worker 18. A letter stating that workers have been informed about occupational health and safety, occupational risks, necessary precautions to be taken and legal rights and responsibilities. 19. Payrolls of the worker and documents related to payment 20. Employment and termination notices 21. Unauthorized absence from work / late arrival report and warning notice 22. Blood group card 23. Severance and notice payrolls 24. Photocopy of identity card 25. Population registration sample 26. Resume 27. Health report and periodic health examination reports 28. Image 29. Health Report 30. For those who will benefit from the disability discount, a letter from the Revenue Administration stating that the discount will be applied 31. Documents related to administrative procedures (work accident report, work accident notification, etc.) that should be done in insurance incidents 32. If there are tools and equipment delivered, their embezzlement certificate 33. Petitions, forms and schedules related to unpaid leave and annual paid leave 34. Training certificates, if any 35. Work permit for foreign workers |
Data on Education, Work and Professional Life | All kinds of data related to the education and working life of individuals will be included under this category (Education – Diploma – Certificate, Transcript, Vocational Training Information) |
Legal Proceedings Data | Information in correspondence with judicial authorities, information in the case file, etc. |
Financial Data | Account, bank, invoice information of individuals |
Audio/Visual Records | Audio/visual records kept for the purpose of customer satisfaction |
Digital Media Utilization Data | All kinds of personal data obtained as a result of tracking the activities of users in the digital environment will be classified under this category. |
Sensitive Personal Data | Health, Criminal Conviction – Security Measures |
Annex 4 – Personal Data Categories
PERSONAL DATA CATEGORY | DESCRIPTION OF CATEGORIZATION |
Company Staff | Administrative staff. |
Board of Directors, Senate Members | Data on the members involved in the Company’s organs and activities |
Third Parties Involved in Company Activities | Third parties involved in company commissions, working groups and organizations |
Invitees to Company Activities | Real persons invited to the Company’s events |
Participants of Company Activities | Participants in company events |
Payment Addressee/Service Provider | Third parties to whom payments should be made for Company Activities |
Relatives of Company Employees | Relatives of Company Employees, Persons residing in the same residence and dependents |
Potential Employees | Potential employees applying to work for the company |
Supplier | Persons, organizations, or persons associated with them who provide goods or services to the Company. |
Project Partner | Persons involved in the projects carried out by the company |
Consultant | Persons, organizations, or persons associated with them who provide external consultancy services to the Company. |
Potential Product and Service Buyer, Product or Service Recipient | Individuals who receive and are likely to receive products and services from the company. |
Other | Persons, organizations, or persons related to them who have established a permanent or incidental, direct, or indirect relationship with the Company, other than the above. |
ANNEX 5 – Third Parties to whom Personal Data is Transferred by our Company and Purposes of Transfer
In accordance with Articles 8 and 9 of the KVK Law, ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. may transfer the personal data of the data owners governed by this Policy to the categories of persons listed below:
The scope of the above-mentioned persons to whom data is transferred and the purposes of data transfer are stated below.
Persons to whom data can be transferred | Definition | Purpose of the transfer |
Business partner | Defines the parties with which ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. has established business partnerships for purposes such as conducting various projects and receiving services, either personally or with XXX Companies while conducting its commercial activities. Banks, Pension and Relief Fund Foundation | Limited to ensure the fulfillment of the purposes for which the joint venture was established. |
Supplier | Defines the parties that provide services to the Company on a contractual basis in accordance with the Company’s orders and instructions while carrying out the commercial activities of ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. | Limited to the purpose of ensuring that the services outsourced from the supplier and necessary to fulfill the commercial activities of ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. are provided to ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. |
Legally Authorized Public Institutions and Organizations | Public institutions and organizations authorized to receive information and documents from ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. in accordance with the provisions of the relevant legislation | Limited to the purpose requested by the relevant public institutions and organizations within the legal authority |
Legally Authorized Private Law Persons | Private law persons authorized to receive information and documents from ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ A.Ş. in accordance with the provisions of the relevant legislation | Limited to the purpose requested by the relevant private law persons within their legal authority |
APPENDIX – 6 Data Controller Identity
APPENDIX – 6 Data Controller Identity : ÖZEL ANTALYA SMILE DESIGNS AĞIZ VE DİŞ SAĞLIĞI
POLİKLİNİĞİ A.Ş.
Address : MEYDANKAVAĞI MAHALLESİ, PERGE BULVARI,
ATMACA İŞ MERKEZİ, NO: 56/D, MURATPAŞA,
ANTALYA, TÜRKİYE.
Telephone : +90 507 416 4727