By the Law on the Protection of Personal Data No. 6698 (GDPR) and the Regulation on the Processing of Personal Health Data and Ensuring Privacy (Regulation), within the scope of Medicana Health Group, including Medicana Hospital Management Inc., Samsun Medicana Private Health Services Inc., and Medicana Construction, Printing, Textile, Tourism, Food, Education, and Health Services Industry and Trade Inc.

"Data Controllers," mentioned above with the mentioned titles, will record, store, and update your personal data as described below. In cases permitted and/or required by legislation or agreements, personal data may be disclosed to third parties (Social Security Institution, relatives of the applicant, and/or public and/or private legal entities for which the applicant is an employee/insured, other public and/or private legal entities, third parties from whom our companies receive services or collaborate with to carry out activities subject to the purposes specified in the legislation to which our companies are subject), transferred, classified, and processed in the ways specified in the Law on the Protection of Personal Data (GDPR) and the Regulation.

The purpose and legal basis for the processing of personal data are as follows:

• To retain necessary information related to your job applications (resume, educational information, etc.),
• To reassess your job applications,
• To provide feedback to you regarding your job applications.

Through physical or electronic applications made for job purposes, your information may be collected verbally, in writing, or electronic format.

By applying to the "Data Controller," you have the right to:

• Learn whether your personal data is processed and, if so, request information about it,
• Learn the purpose of the processing and whether it is used for its intended purpose,
• Know the third parties to whom your data is transferred within the country or abroad, and request correction if it is incomplete or incorrect,
• Request the deletion or destruction of your data by the conditions set out in Article 7 of the Law on the Protection of Personal Data (GDPR),
• Request notification to third parties to whom the data has been transferred about the processes mentioned above,
• Object to the emergence of a result against you due to the exclusive analysis by automatic systems,
• Request the compensation of damages in case of harm due to the unlawful processing of data.