Although the explicit consent of the personal data owner is required for the transfer of personal data, personal data can be transferred to third parties by taking all necessary security measures, including the methods prescribed by the Board, based on one or more of the following conditions.
clearly stipulated in the law,
It is directly related to and necessary for the establishment or performance of a contract,
It is mandatory for Urartu Göz to fulfill its legal obligation,
Limited for the purpose of making the personal data public, provided that the personal data has been made public by the data owner,
It is mandatory for the establishment, use or protection of the rights of Urartu Göz or the data owner or third parties,
It is mandatory for the legitimate interests of Urartu Göz, provided that it does not harm the fundamental rights and freedoms of the data owner,
It is compulsory for the person or someone else, who is unable to express his consent due to actual impossibility, or whose consent is not legally valid, to protect his or her life or physical integrity.
Personal data related to any of the above-mentioned situations can be transferred to foreign countries that are determined to have adequate protection and declared as "Foreign Country with Sufficient Protection" by the Board. Personal data may be transferred to persons in the status of "Foreign Country with Data Controller Undertaking Sufficient Protection", who do not have sufficient protection, who undertake in writing to provide adequate protection in Turkey and abroad, and where the Board's permission is granted, in accordance with the conditions stipulated in the legislation.
ii. Transfer of Private Personal Data
Special categories of personal data may be transferred in accordance with the principles set forth in the Policy, by taking all necessary administrative and technical measures, including the methods to be determined by the Board, under the following conditions:
Special categories of personal data other than health and sexual life, without seeking the explicit consent of the data owner if there is an explicit provision in the law regarding the processing of personal data, otherwise, if the explicit consent of the data owner is obtained.
Private personal data related to health and sexual life, for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, without seeking the explicit consent of persons or authorized institutions and organizations under the obligation to keep secrets, otherwise in case the explicit consent of the data owner is obtained.
Personal data can be transferred to those in the status of "Foreign Country with Sufficient Protection" in case of any of the above conditions, and in case of lack of sufficient protection, to those in the status of "Foreign Country with Data Controller Undertaking Sufficient Protection" in accordance with the data transfer conditions regulated in the legislation.
4. PERSONAL DATA INVENTORY PARAMETERS
In Urartu Eye management, human resources, financial affairs (accounting-finance), information processing, patient processing business processes, data categories and personal data of personal data owners consisting of employee candidates, employees, shareholders/partners, potential service buyers, interns, supplier representatives, service recipients, parents/guardians/representatives, visitors are processed depending on personal data processing purposes. The details of the data subject groups and the processing purposes according to the data categories are reported in the field of Urartu Göz “https://verbis.kvkk.gov.tr/Query/Details?q=pT3Yj5J4y4q6%2FyQL6tMd0g%3D%3D&isNeviChange=duu6TOm7jzzm1f64Dfp.
Personal data processing purposes are processed in accordance with the general principles set forth in the Law, in particular the principles set forth in article 4 of the Law on the processing of personal data, based on and limited to at least one of the personal data processing conditions specified in Articles 5 and 6 of the Law, according to personal data categories, in accordance with Article 10 of the Law and other legislation.
Personal data Policy “3.5. It can be shared with real persons or private law legal entities, shareholders, business partners, affiliates and subsidiaries, suppliers, authorized public institutions and organizations, private insurance companies, auditors, consultants, domestic organizations with which we receive contracted services, cooperate with, and domestic organizations, with the principles set forth in the section "Transfer of Personal Data". There is no transfer of personal information with foreign countries.
5. MEASURES RELATED TO THE PROTECTION OF PERSONAL DATA
Urartu Göz takes the necessary technical and administrative measures to protect the personal data it processes in accordance with the procedures and principles determined in the Law, carries out the necessary inspections in this context, and carries out awareness-raising and training activities.
Urartu Göz does not comply with this situation in case the processed personal data is seized by third parties by unlawful means, despite the technical and administrative measures.
