COMMUNICATION PROCESSES – INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

1. Data Controller

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), your personal data is processed by PROIMTECH HEALTH PRODUCTS INC. (“Proimtech” or the “Company”) as the data controller within the scope detailed below.

1. Methods and Legal Grounds for Collecting Personal Data

Our Company processes your personal data obtained through our websites, online communication forms, SMS, telephone, email, postal mail, fax, and other communication channels, either audibly, electronically, or in written form, for the purposes of evaluating and resolving your requests, complaints, and/or suggestions, and for other purposes listed below, in accordance with the data processing conditions stipulated in the Law.

Your personal data, limited to identity, contact, customer transaction (only if you are our customer), transaction security, and request/complaint/suggestion categories, is processed under the following legal grounds: necessity for establishing or performing a contract with you, compliance with our legal obligations, necessity for the establishment, exercise, or defense of legal rights, and necessity for the legitimate interests of the Company provided that your rights and freedoms are not adversely affected.

III. Purposes of Processing Personal Data

Your personal data may be processed for the purposes you disclosed them to us, including but not limited to the following:

• Conducting communication activities, managing and auditing business activities, receiving and evaluating suggestions for improving business processes, ensuring business continuity, managing product/service sales processes, managing post-sales support services, managing customer relationship processes, conducting customer satisfaction activities, conducting retention and archiving activities, managing contract processes, tracking requests/complaints, ensuring the security of data controller operations, providing information to authorized persons, institutions, and organizations, conducting audit/ethics activities, ensuring compliance with regulations, tracking and managing legal proceedings, conducting internal audits/investigations/intelligence activities;
• Collecting, evaluating, and resolving requests, complaints, and suggestions, conducting communications with request/complaint/suggestion owners, improving customer satisfaction and experiences, managing customer relations and satisfaction processes, managing and auditing quality standards including product/service/process improvement, and managing information security.

1. Transfer of Personal Data

Our Company ensures that your personal data is processed with due diligence according to the principles of “need to know” and “need to use,” with appropriate data minimization and necessary technical and administrative security measures. In order to conduct and audit business activities, ensure business continuity, and operate digital infrastructures, we may need to transfer personal data to third parties for specific purposes.

Your personal data may be shared, limited to the purposes stated above and to the extent necessary for the execution of these purposes, with: (i) our domestic and/or international suppliers (e.g., legal consultants, agencies) primarily for product and/or service procurement; (ii) our domestic shareholders primarily for receiving and evaluating suggestions for business process improvement; (iii) domestic authorized public institutions and organizations for the fulfillment of our legal obligations and legal proceedings; and may be processed domestically or internationally.

1. Rights of the Data Subject

As the data subject, you may exercise your rights under Article 11 of the Law (including learning whether personal data is being processed, requesting information about the processing, learning the purpose of processing and whether it is being used appropriately, knowing the third parties to whom data is transferred, requesting correction of incomplete or inaccurate data, requesting deletion or destruction of personal data, requesting notification of corrections or deletions to third parties, objecting to results arising from automated decision-making processes, and requesting compensation for damages) by contacting us via [email protected] or by submitting your request through the communication form available at www.bilimplant.com.