INTRODUCTION

PRIVACY POLICY

As Mydora Estetik ve Medikal Turizm Tic. Ltd. Şti. A.Ş. (“Mydora Health Care”), we value your
privacy and the security of your data. Therefore, this Privacy Policy has been prepared to inform you about
what data we collect, the purposes of data collection and your rights regarding your data. The Privacy Policy
applies to www.mydorahealthcare.com (“our website”). If you do not accept this Privacy Policy, you should
not continue to use our website.

II. COLLECTED DATA

Through our website, during the application for information, requests and complaints regarding the services
we provide, or during the use of the website, you submit your Identity (name, surname, username), Contact
(e-mail address, phone number), Transaction Security Information (IP Address, Online Identifiers) and
Customer Transaction (subject, complaint, request information) information to Mydora Health Care.

You submit your Identity and Contact information to Mydora Health Care by filling out a form on our
website so that our customer support team can contact you regarding our services.

From the moment you start using our website, we collect information on your transaction security IP address,
web pages you visit, internet login and logout information, browser information, access status, your preferred
language, operating system name and version, and your time and date information of these activities; to
improve the visitor experience, to prevent and investigate fraudulent or unauthorized activities and/or to
support our marketing activities.

III. HOW DO WE USE THE DATA WE COLLECT?

We use the data you provide directly to us for the purposes of establishing and maintaining your application
process, making use of the features on our website and providing information on the provision of services.
These uses are carried out based on the provisions explicitly stated in the law, the establishment and
performance of a contract, the necessity for us to comply with our legal obligations, the necessity of data
processing for our legitimate interests.

Your IP address is collected and stored in order to fulfill our legal obligation arising from the Law No. 5651
on the Regulation of Internet Broadcasts and Prevention of Crimes Committed Through Such Broadcasts.

IV. FOR HOW LONG DO WE STORE YOUR DATA?

Your Personal Data will be processed and stored for a limited period of time in accordance with Mydora
Health Care’s Storage and Destruction Policy. In the event the legal grounds requiring data processing no
longer apply, your data will be deleted, destroyed or anonymized ex officio or upon your request. In this
context, you can review our Personal Data Storage and Destruction Policy prepared by our company.

V. SHARING YOUR DATA WITH THIRD PARTIES

Your data is not sold to third parties for any commercial reason or in exchange for money. In this context, we
do not share your data with third parties, except for requests from Authorized Public Institutions and
Organizations, in order to fulfill our legal obligations.

VI. COOKIES

Cookies are small data storage files that are saved on your accessed computer, mobile phones, tablets or other
mobile devices by websites.

This file stores information about your navigation on the Website. Thus, the devices you access will remember
this data when you use the Website again. Therefore, cookies are necessary and important for you to use the
Website effectively and more easily.

For more detailed information about cookies, you can review our Cookie Clarification Text.

VII. LINKS TO OTHER WEBSITES

The content on our website may contain links to third party websites for your convenience. Mydora Health
Care Privacy Policy does not apply to the privacy practices and terms of use of these websites. We
recommend that you read the privacy policies of the website you are visiting before sharing your data when
connecting to third party websites.

VIII. INFORMATION REGARDING CHILDREN

The use of our website is offered to persons aged 18 or over. If you are not 18 years old, you should not use
our website. If we detect that personal data belonging to persons under the age of 18 are being processed, such
personal data will be deleted immediately.

IX. YOUR RIGHTS REGARDING YOUR PERSONAL DATA

You can exercise your rights described below by sending an e-mail to info@mydorahealthcare.com

• To learn whether his/her personal data are processed or not,
• To demand for information as to if his/her personal data have been processed,
• To learn the purpose of the processing of his/her personal data and whether these personal data
  are used in compliance with the purpose,
• To know the third parties to whom his personal data are transferred in country or abroad,
• To request the rectification of the incomplete or inaccurate data, if any,
• To request the erasure or destruction of his/her personal data under the conditions referred to in
  Article 7,
• To request reporting of the operations carried out pursuant to sub-paragraphs (d) and (e) to third
  parties to whom his/her personal data have been transferred,
• To object to the occurrence of a result against the person himself/herself by analyzing the data
  processed solely through automated systems,
• To claim compensation for the damage arising from the unlawful processing of his/her personal data.

X. UPDATES AND CHANGES

We are constantly trying to improve our Websites and Services, so updates and changes are made occasionally
to this Privacy Policy. Changes in this direction can also be followed on our website.

XI. CONTACT US

You can contact us via info@mydorahealthcare.com about your questions and comments regarding the
Privacy Policy.