Acceptance | Dr. Can Tokgöz & Dr. İlhame Tokgöz Aesthetic and Cosmetic Clinic

CUSTOMER INFORMATION NOTICE

This information notice has been prepared by Dr. Can Tokgöz & Dr. İlhame Tokgöz, as the data controller, in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 and the Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Obligation to Inform.

Identity of the Data Controller

Pursuant to the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data may be processed by Dr. Can Tokgöz & Dr. İlhame Tokgöz, as the data controller, within the scope explained below.

Website : https://www.thesymmetric.com.tr
E-Mail : info@thesymmetric.com.tr
Address : 15 Temmuz Mahallesi Prof. Necmettin Erbakan Caddesi 56123, Nolu Sokak A Point Plaza Floor: 1 Door No: 5, 27560 Şehitkamil/Gaziantep

Purposes of Processing Your Personal Data

Your collected personal data may be processed for the purposes of ensuring data security and compliance with legislation, under the conditions specified in Articles 5 and/or 6 of the Law.

Transfer of Personal Data

Your collected personal data may be transferred, within the scope of the purposes mentioned above, to legally authorized public institutions and organizations, primarily the Revenue Administration and tax offices, and to software and infrastructure service providers supported by the company, based on the data processing conditions specified in Articles 8 and 9 of the Law.

Method and Legal Reason for Collecting Personal Data

Your personal data is collected by the company through physical and electronic methods and through the software used by the company, both automatically and manually.

The legal reasons for processing your collected personal data are listed below:

Data Category	Purpose of Processing	Legal Reason
Transaction security	Ensuring data security	f) Provided that it does not harm the fundamental rights and freedoms of the data subject, it is necessary for the legitimate interests of the data controller.
Finance	Compliance with legislation	c) Provided that it is directly related to the establishment or performance of a contract, it is necessary to process personal data of the parties to the contract, ç) It is mandatory for the data controller to fulfill its legal obligations.

Rights of the Data Subject

Data subjects have the following rights under Article 11 of the Law:

To learn whether personal data is processed or not,
To request information if personal data has been processed,
To learn the purpose of the processing of personal data and whether they are used in accordance with their purpose,
To know the third parties to whom personal data is transferred at home or abroad,
To request the correction of personal data if it is incomplete or incorrectly processed and to request notification of the transaction made in this context to third parties to whom the personal data is transferred,
To request the deletion or destruction of personal data if the reasons requiring its processing no longer exist, even though it has been processed in accordance with the provisions of the KVKK and other relevant laws, and to request the notification of the transaction made in this context to third parties to whom the personal data is transferred,
To object to a result against the person arising from the analysis of the processed data exclusively through automated systems,
To demand compensation for the damage in case of damage due to unlawful processing of personal data.
The data subject may submit their requests regarding these rights in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. To exercise your above-mentioned rights, you can submit your petition containing the necessary information identifying your identity either in person, via notary public, or by other methods determined by the Personal Data Protection Board.
The data subject's requests will be evaluated and concluded as soon as possible and ultimately within thirty (30) days at the latest, free of charge. If the evaluation and decision-making process incurs an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged.