KVKK Privacy Notice

1. Data Controller

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by Bella Akademi Sağlık Hizmetleri Ltd. Şti. ("the Company") as the data controller, within the scope described below. Our address is Cumhuriyet Mahallesi Bayındır-1 Sokak No: 14/C, Çankaya / Ankara.

2. Personal Data We Process and How We Collect It

When you fill in a quote or contact form, we process your full name, company name, workplace insurance registration number, phone number, email address, employee count range, city and district, the services you are interested in and your message. When you apply through the careers page, we process your full name, phone number, email address, the position you apply for, your message and your CV file. Please do not include special category information such as health, criminal record or association membership in your CV.

During health screening and health surveillance services, employee identity data and special category health data such as test results, examination findings and the fitness-for-work assessment are processed only by medical staff bound by professional secrecy. Test results are not shared with the employer. The employer receives only the fitness-for-work opinion.

Your personal data is collected through the forms on our website, email, phone and WhatsApp correspondence, and the examinations and tests carried out on site and at our centre, partly by automated means or by non-automated means as part of a data filing system.

3. Purposes and Legal Grounds of Processing

Your quote and contact form data is processed to respond to your request, prepare the quote and conduct pre-contractual discussions, based on Article 5/2(c) of the KVKK (necessary for the conclusion of a contract) and Article 5/2(f) (legitimate interest).

Your job application data is processed to evaluate candidates and run the recruitment process, based on Article 5/2(c) of the KVKK (necessary for the conclusion of an employment contract) and Article 5/2(f).

Health data is processed to fulfil the health surveillance obligations under the Occupational Health and Safety Law No. 6331 and the related regulations, based on Article 6/3(e) of the KVKK (necessary for preventive medicine and medical diagnosis by persons bound by professional secrecy) and Article 6/3(f) (mandatory for fulfilling legal obligations in the field of occupational health and safety).

4. Transfer of Data

For laboratory tests, your samples are transferred to contracted authorized medical laboratories for testing and reporting. The fitness-for-work assessment is provided to the employer under Article 15 of Law No. 6331. Where legally required, data is transferred to authorized public institutions such as the Ministry of Labour and Social Security, the Social Security Institution and the Ministry of Health.

The IT providers we use for website hosting, delivering form submissions to us by email and bot protection access your data only to the extent the service requires and solely as technical intermediaries. Their servers may be located abroad. These transfers are carried out in line with the conditions set out in Article 9 of the KVKK. Health data is never transferred for advertising or marketing purposes.

5. Retention Periods

Quote, contact and job application data is kept for at most 2 years after the request or evaluation is closed.

Health surveillance records are kept for at least 15 years from the date the employee leaves, as required by Article 7 of the Occupational Health and Safety Services Regulation, and for 40 years in work involving exposure to carcinogens, mutagens or asbestos under the relevant regulations. At the end of these periods, data is securely destroyed in line with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.

6. Your Rights (KVKK Article 11)

You have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing and whether the data is used in line with that purpose, to know the third parties to whom your data is transferred in Turkey or abroad, to request correction of incomplete or inaccurate data, to request deletion or destruction of your data under the conditions in Article 7 of the KVKK, to request that correction and deletion actions be notified to the third parties the data was transferred to, to object to results produced against you solely by automated systems, and to claim compensation for damage caused by unlawful processing.

You can submit your requests, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, by email to info@bellaakademi.com or in writing to our company address. Your request must include your full name, identity number, notification address and the subject of the request. Requests are answered free of charge as soon as possible and within 30 days at the latest under Article 13 of the KVKK. If your request is rejected or not answered in time, you can lodge a complaint with the Personal Data Protection Board under Article 14 of the KVKK.

7. Data Security

Your data is protected with encrypted communication (TLS), access authorization, barcoded anonymized sample tracking and regular audits. Only authorized medical staff can access health data, and only the human resources officer can access CV files. The additional safeguards set by the Personal Data Protection Board are applied when processing special category data.

8. Cookies and Advertising Measurement

Our website uses the Google Ads conversion measurement tag. Unless you give consent in the cookie banner, the tag sets no tracking cookies on your device and does not identify you. In that case only anonymous signals about page views and events such as form submissions, phone and WhatsApp clicks are sent to Google. These signals are processed to measure advertising performance statistically, based on the legitimate interest ground under Article 5/2(f) of the KVKK.

If you choose Accept in the cookie banner, Google Ads advertising cookies are set and your ad click is matched with the action you take afterwards. This processing is based on your explicit consent. You can withdraw your consent at any time by clearing the site data in your browser, after which the banner appears again and you can choose Reject.

Measurement signals are processed by Google LLC on servers located abroad. This transfer is carried out in line with the conditions in Article 9 of the KVKK. Please refer to the Google Privacy Policy for Google's data processing terms.