INFORMATION NOTICE ON THE PROTECTION OF YOUR PERSONAL DATA

Our company, MNT Tanı ve Tedavi Merkezleri Ticaret A.Ş. (Neolife), takes all necessary measures to protect and safeguard your personal data. Accordingly, this Information Notice has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data and the Communiqué on the Principles and Procedures to be Followed in Fulfillment of the Obligation to Inform, in order to inform you about how we collect, process, and protect your personal data (hereinafter referred to as “Data”).

Personal data refers to information that identifies or can be used to identify an individual. The processing of personal data refers to any operation performed on personal data, whether by automatic means or otherwise, as part of any data recording system, including obtaining, recording, storing, altering, sharing with third parties, or transferring such data abroad.

In order to provide services at the highest standards, your personal data may be collected verbally, in writing, visually, or electronically through our call center, website, mobile applications, physical locations, or via telephone, depending on the nature of the service.

Neolife, as the Data Controller, processes your information in accordance with the Personal Data Protection Law and other applicable legislation. Neolife also implements appropriate technical and organizational security measures to protect your data against accidental loss, misuse, unauthorized access, alteration, or damage.

---

Purpose and Legal Basis of Data Processing

Your personal data and sensitive personal data are processed and stored for the following purposes: conducting all medical diagnosis, examination, treatment, consultation, and care services; when explicitly required by law; where necessary for the establishment or performance of a contract; to fulfill legal obligations; to establish, exercise, or protect a right; and where necessary for medical diagnosis, treatment, and care services — based on your explicit consent.

Your personal and sensitive data are processed in accordance with the Law and for the following purposes:

• Protection of public health; preventive medicine; medical diagnosis, treatment, consultation, and care services.
• Sharing requested information with the Ministry of Health and other public institutions in accordance with applicable legislation.
• Verifying your identity by Neolife’s relevant departments; financing of healthcare services; reimbursement of diagnostic, consultation, and treatment expenses; planning and management of internal processes; conducting analyses to improve services; participation in campaigns and informing you of campaign details; designing web and mobile content; measuring and enhancing patient satisfaction; implementing risk management and quality improvement activities; staff training; invoicing for our services; verifying affiliation with contracted institutions; responding to inquiries and complaints regarding healthcare services; taking technical and administrative security measures for our systems and applications; and monitoring and preventing unauthorized access.
• Compliance with legal and regulatory requirements.
• Sharing requested data with private insurance companies for eligibility checks.
• Informing you about your appointment via call center or digital channels.
• Allowing educational institutions we cooperate with to carry out educational activities.
• Informing you about our products and services and sending commercial electronic messages.
• Verifying the identity of individuals receiving services through our website or mobile applications.

These purposes also cover the diversification and measurement of products and services, legal tracking, and other similar purposes.

---

Processed Data and Retention Period

The following categories of personal data may be processed for the above-mentioned purposes, particularly personal health data required for the provision of medical diagnosis, treatment, consultation, and care services:

• Identity information such as your name, surname, Turkish ID number, passport number or temporary Turkish ID number (if you are not a Turkish citizen), place and date of birth, marital status, gender, and photocopies of your ID or driver’s license.
• Contact information such as your address, phone number, and email address.
• Financial information such as your bank account and IBAN number.
• Health and sexual life data such as lab and imaging results, test results, examination data, and prescription information submitted for monitoring or collected during the provision of health services.
• Feedback and comments you provide to evaluate our services.
• Audio and visual data shared during in-person or video consultations at our medical center.
• Audio recordings of calls with our call center.
• Private health insurance and Social Security Institution (SGK) information for planning and financing healthcare services.
• Vehicle license plate information (if using our parking or valet services).
• Browsing data, IP address, browser data, medical documents, surveys, form information, and location data collected via our website and mobile application.

Neolife stores your personal and sensitive data for as long as the purpose of processing persists and retains them for a maximum of 10 years thereafter, in physical and electronic archives within Neolife and through third-party service providers.

---

Who Has Access to Your Personal Data?

Your data will be stored on Neolife-owned servers and accessed by Neolife and its affiliates. Additionally, your personal and sensitive data may be shared, as required by law or based on your explicit consent, with:

• Ministry of Health, its affiliated units, and family health centers
• Private insurance companies (health, retirement, life, etc.)
• Social Security Institution
• General Directorate of Security and other law enforcement agencies
• General Directorate of Population
• Turkish Pharmacists’ Association
• Judicial authorities
• Domestic or international laboratories, medical centers, ambulances, medical device companies, and healthcare service providers we cooperate with
• Healthcare institutions to which the patient has been referred or has applied
• Your authorized legal representatives
• Third-party consultants including lawyers, tax advisors, and auditors
• Regulatory and supervisory authorities, courts, enforcement offices, and other authorized public institutions
• Our business partners, suppliers, support service providers, archival service providers, and promotional collaborators
• Shareholders, only for the purpose of internal audit and ensuring compliance with company policies and regulations

Your personal data may be shared with third parties and transferred abroad for the purposes of delivering healthcare services and fulfilling our contractual and legal obligations.

---

Your Rights Regarding the Protection of Personal Data

In accordance with Article 11 of the Law, you have the following rights:

a) To learn whether your personal data is being processed
b) To request information regarding the processing of your personal data
c) To learn the purpose of processing and whether your personal data is used in accordance with its purpose
d) To know the third parties to whom personal data is transferred domestically or abroad
e) To request the correction of incomplete or inaccurate data
f) To request the deletion or destruction of your personal data under the conditions set forth in Article 7 of the Law
g) To request notification of the actions taken under (d) and (e) to third parties to whom personal data has been transferred
h) To object to any results arising from the automated processing of personal data
i) To request compensation for damages arising from the unlawful processing of personal data

---

How to Submit a Request

To exercise your rights mentioned above, you may complete the “Application Form of MNT Tanı ve Tedavi Merkezleri Ticaret A.Ş.” available at
https://neolife.com.tr/kisisel-verilerin-korunmasi and send it:

• By courier, with a wet-signed petition to:
  Nisbetiye Mahallesi Yücel Sokak No: 6 34340 1. Levent, Beşiktaş, Istanbul
• Via notary
• With a secure electronic or mobile signature to:
  mnttanivetedavi@hs01.kep.tr

Requests submitted by other means will not be taken into consideration.

Applications will be responded to as soon as possible and within 30 days at the latest.

If your application is rejected, found insufficient, or is not responded to within the legal time frame, you may file a complaint with the Personal Data Protection Board within 30 days of receiving a response or 60 days from the application date.