Personal Data Protection Law (GDPR) Information Notice

AYAL HEALTH WEBSITE PERSONAL DATA PROTECTION LAW INFORMATION NOTICE

AYAL HEALTH (hereinafter referred to as the “Company”), in its capacity as Data Controller, may process your personal data within the framework of the Personal Data Protection Law No. 6698 (“Law”), the General Data Protection Regulation (“GDPR”), and relevant legislation as explained below.

Detailed information regarding the protection, processing, storage, and disposal of your personal data can be found under the “Personal Data Protection and Privacy” section on our website.

A. COLLECTION, PROCESSING AND PURPOSES OF PERSONAL DATA

1. COLLECTION OF PERSONAL DATA

The Company may use cookies to improve its services and adapt content to individual needs and interests. Disabling cookies in the browser does not prevent the use of the website but may cause some technical issues. Cookies are also used to collect general statistical information regarding website usage. Detailed cookie policy is available on our website.

Personal data may also be collected through digital platforms such as software and applications used on computers or smart devices, and social media accounts operated by authorized representatives of the Company.

2. PROCESSING OF PERSONAL DATA

The Company may process your personal data, including sensitive data such as health information, for the purposes specified below:

• Identity Information: Name, surname, ID number, passport number, date and place of birth, gender and other identification data;
• Contact Information: Address, phone number, email address and communication records;
• Financial Information: Bank account, IBAN, payment and billing details;
• Security Information: Entry-exit records, camera recordings, and related data;
• Legal Data: Information obtained through legal processes or official authorities;
• Marketing Data: Preferences, feedback, survey responses and cookie data;
• Sensitive Data: Health data and other sensitive personal information required for service delivery.

3. PURPOSES OF PROCESSING

Your personal data may be processed for providing services, planning treatment processes through contracted healthcare providers, organizing travel arrangements, improving services, ensuring security, and fulfilling legal obligations.

4. STORAGE OF PERSONAL DATA

Your personal data is stored securely in electronic and/or physical environments and protected against unauthorized access. Data is retained only for the necessary period and deleted, destroyed, or anonymized when no longer required.

B. TRANSFER OF PERSONAL DATA

Your personal data may be transferred domestically or internationally in accordance with legal regulations and data protection principles, limited to what is necessary for the provision of services.

C. DELETION AND ANONYMIZATION

Personal data is deleted, destroyed, or anonymized when processing purposes no longer apply, in compliance with legal requirements.

D. RIGHTS OF DATA SUBJECTS

You have the right to learn whether your data is processed, request correction or deletion, and object to processing in accordance with applicable laws. Requests can be submitted via our contact channels.

E. DATA SECURITY

The Company takes necessary technical and administrative measures to ensure the security of your personal data.