Privacy Policy

Candidate Client Information Disclosure Statement

Subject of the Disclosure Statement

This disclosure statement pertains to the identification of the data controller, the purpose and reasons for processing certain personal data of the concerned individual, possible data transfer conditions, and the rights and responsibilities arising from the personal data processing activities of the concerned individual.

Data Controller

The data controller is the natural or legal person who determines the purposes and means of processing personal data, and who is responsible for establishing and managing the data recording system. Within the scope of the personal data processing activity subject to this disclosure statement, the data controller is ESTE MEDİCAL GROUP SAĞLIK TURİZM VE DANIŞMANLIK HİZMETLERİ ANONİM ŞİRKETİ (Tax No: 8590937402), which provides services under the Este Medical Group Polyclinic brand, and Melike Çınkır, who is individually authorized to represent and bind the company.

‍Joint contact information for the data controller company and the company representative:

‍Address: Nispetiye street, Dilhayat street 12, Etiler, Istanbul / TURKEY

Phone: +90 212 706 06 17

Email: info@estemedicalgroup.com

Website: www.estemedicalgroup.com

Concerned Individual

The concerned individual referred to in this disclosure statement and who is the subject of this document is the prospective client whose personal information such as identity, contact, and location details, along with communication and service preferences, is processed. The personal data of the prospective client are not limited to those listed in the previous sentence and may be expanded to the extent permitted by the personal data protection legislation. The prospective client is a natural person who contacts our company to obtain general information about our activities, such as hair and beard transplantation or other aesthetic treatments, or who requests to be contacted by our company.

Purpose of Data Processing

The data controller processes personal data to manage call center processes, establish contact with individuals who are likely to receive services, maintain effective communication, conduct statistical studies to improve service quality and diversity through advertising and marketing activities, perform internal reporting to ensure operational efficiency, and fulfill the burden of proof in potential legal disputes. The purpose of data processing is determined by the data controller, provided it is legitimate and proportional, and may vary.

Collection of Personal Data

Personal data are collected through the data controller's website or email address, information and request forms on social media platforms, direct calls made by the concerned individual to the call center, or physical visits to the data controller company's business address.

Legal Basis for Data Processing Activities

The reason for processing the concerned individual's identity, contact, and location details, as well as communication and service preferences, is the necessity to establish a contract between the concerned individual and the data controller service provider, ensuring the legitimate interests of the data controller without harming the fundamental rights and freedoms of the concerned individual. Personal data may also be processed based on the explicit stipulation in the laws, the necessity to protect the life or physical integrity of the concerned individual or another person in cases where consent cannot be obtained due to actual impossibility, the necessity for the processing of personal data belonging to the parties to a contract, provided that it is directly related to the performance of the contract, the necessity for the data controller to fulfill its legal obligation, the publicization of the personal data by the concerned individual, and the necessity for the establishment, use, or protection of a right.

Data Transfer

Personal data of the concerned individual in the status of a prospective client are not transferred to any third party or institution by the data controller. The legal obligations of the data controller towards official institutions and organizations, such as judicial authorities, remain reserved.

Rights of the Concerned Individual

The concerned individual has the right to:

Learn whether their personal data are processed and request information regarding the processed personal data,

Learn the purpose of processing their personal data and whether they are used in accordance with the processing purpose,

Learn whether their personal data are transferred to third parties within the country or abroad, and if so, the identity of the third parties to whom their personal data are transferred,

Request the correction of incomplete or inaccurate personal data and request the notification of the correction to third parties to whom personal data have been transferred,

Request the deletion or destruction of personal data processed by the data controller and request the notification of this to third parties to whom personal data have been transferred,

Object to the analysis of their processed data exclusively through automated systems, resulting in a consequence against the individual,

Request compensation for damages in case of unlawful processing of personal data.

The concerned individual can submit their requests through the address, email, or website provided in Article 2 of this disclosure statement. The data controller responds to the request as soon as possible and within a maximum of 30 days from the receipt of the request. If the concerned individual does not specify a particular preference, the response can be provided through any known communication channel of the concerned individual. If fulfilling the request incurs a cost for the data controller, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.

Responsibility of the Concerned Individual

The concerned individual bears the consequences and damages if they cannot benefit from the services provided by the data controller due to incomplete or incorrect data sharing. The concerned individual is responsible for compensating the damages incurred by the data controller or third parties if they disclose personal data of another person as if it were their own. The concerned individual is liable for any legal and criminal consequences if they violate the confidentiality of personal data belonging to third parties during their service relationship with the data controller.

Other Matters

For detailed information on the processes of collecting, storing, processing, transferring, protecting, and destroying personal data and ensuring compliance with personal data protection legislation, you can visit our website to review our Personal Data Security Policy or contact us through the channels provided in Article 2.