Personal Data Protection And Disclosure Document

We would like to inform you about how we use the data we receive on the website with the form filled and in other means. Certain data needs to be received for providing services by THERAPPY platform which owns Therappy mobile app and https://therappy.app website and belongs to Flextech London Ltd. This document is created to explain why this sensitive data needs to be collected, how it is used and whom it needs to be shared for what reason.

Responsibility of the Data

Company with the information below is responsible for the data given to THERAPPY:

Users who subscribe to the THERAPPY application or benefit from the THERAPPY platform services without being a member are deemed to have read and accepted the terms of this PERSONAL DATA PROTECTION and Disclosure Document.

Data Processing Purposes

Personal data of customers are processed within the framework of the personal data processing conditions and purposes specified below and in Articles 5 and 6 of the Law. Your personal data are processed in accordance with the law and honesty rules and for specific, clear and legitimate purposes, kept accurate and up-to-date as necessary, used in connection with the purpose for which they are processed, limited and measured, and stored for the duration of the legally determined retention period. Personal Data is being used for:

• Information provided by users while becoming a member, performing the membership process and performing the service,
• Contacting the user when needed,
• Improving the service offered to users, introducing new services,
• Ensuring that your payments are made quickly and securely when necessary,
• Planning, executing and managing management and communication activities and strategies correctly,
• To inform our members about changes, opportunities and updates,
• It can be processed for purposes such as eliminating errors on the website and increasing service quality. It can be processed anonymously for these purposes.

Personal Data We Process

FLEXTECH LONDON LTD. Within the scope of the Personal Data Protection Law No.6698 and in accordance with all other relevant legislation, stores all kinds of information that makes your identity, specific or identifiable, including your personal data of special nature, as a data controller.

Some of the processed personal data is provided by the user directly during or after membership, and some personal data are obtained automatically.

Data shared by the user himself are Name, Surname and Email, Phone Number

Data obtained by automated means not provided by the user himself or produced by us: Cookies, IP address, Location data, intra website movements and page navigation information.

Cookie Collection

When the site is visited, some information and files called cookies (cookies) can be stored and used later in order to facilitate the User’s utility of the website.

The type of information stored as a result of the acceptance of a cookie by the user is specific to the PC and includes data such as the IP address, the date and time of the PC’s visit to the website, which parts of the website were visited and whether the web pages to be successfully presented to the user. This information is anonymous. It does not belong to the person, it belongs to the computer.

Cookie data is used to have more information about the use of the website and to see if the website is working at an optimum level.

Your personal data can be collected through cookies on the digital platform. The collected data can be processed, transferred and stored in accordance with the law. If the website is used, this privacy policy will be deemed to have been accepted.

This information can be deleted or blocked by changing the settings of the computer. If this information is deleted or blocked, some features of the website may not be available.

Transfer of Personal Data

Personal data can be transferred to third parties in the country or abroad if one of the purposes specified in this Privacy Policy and Disclosure Document requires the transfer to third parties and if one of the conditions specified in Articles 5 and 6 of the Law exists.

The situations where users’ personal data will be transferred to third parties are as follows:

• Information and document requests from courts, administrations or authorized public institutions directed to https://therappy.app in accordance with the legislation,
• It is necessary to transfer data to https://therappy.app to the real or legal persons that receive services or cooperate with in order to carry out their commercial activities,
• Changing the owner of the website requires the transfer of user data,
• It is necessary to transfer user data to real or legal third parties in order to establish partnership relations with these persons,
• In case the website changes hands, the new data controller will be the natural or legal person who took over the website.

Transfer of Data to Abroad

THERAPPY is using Cloud computing service from 3rd parties to provide services within the scope of the website and your data is kept in the cloud. For this reason, we state that your personal data, subject to this disclosure document, may be transferred abroad in accordance with the provision of the GDPR due to the cloud environment being located abroad.

Personal Data Retention Period

The personal data obtained are stored for the periods required by the personal data processing purposes and these periods do not exceed. Apart from this, personal data stored in order to fulfill legal obligations are retained for the periods specified in the laws. In addition, personal data can be stored for the period required by THERAPPY’s interests, provided that it does not damage the fundamental rights and freedoms of the users.

In the event that situations requiring the storage of personal data are eliminated, the personal data will be deleted, destroyed or anonymized by THERAPPY in accordance with the procedures and principles specified in the law and the relevant legislations.

Keeping Accurate Records

It is aimed that the information of the users is as accurate as possible. Users can ask for revising the information transmitted to THERAPPY such information may change or amendments they have made themselves. In this case, THERAPPY should be contacted by [email protected].

By Which Methods and Based on Which Legal Reasons Your Personal Data is Collected?

Your data is collected through the forms you fill out in the application, e-mail, and the information you submit in similar social media.

In accordance with the nature of the data, the legal reasons based on the collection of your data collected with the purposes and methods specified in this information; Explicit consent is processed in accordance with one of the reasons that are explicitly stipulated in the laws, data processing is mandatory for the commencement of the contract, it is mandatory to fulfill our legal obligations, and data processing is mandatory for the legitimate interests of the data controller.

Security and Protection of Your Personal Data

Your personal data is under THERAPPY protection. According to the law;

• Personal data are not processed illegally,
• Personal data are not accessed illegally,

In order to preserve the personal data, it takes the necessary technical and administrative measures to ensure the appropriate level of security and applies policies for this purpose, and all personal data is secured over the internet with an SSL (Secure Socket Layer) certificate. These existing measures will continue to be updated as appropriate when new security technologies emerge.

Although all necessary data security measures are taken, in the event that personal data is damaged  as a result of attacks on the website and/or the system or is acquired by third parties, THERAPPY will not have any legal responsibility and also if links to other applications and/or websites are provided on the website. THERAPPY does not bear any legal responsibility for the privacy policies and contents of the said applications and/or websites.

What Are the Rights You Have over Your Personal Data?

Within the scope of the Privacy Policy, the data controller is Flextech London Ltd. As a personal data owner, every user can contact https://therappy.app to use the rights granted by the law, to get information about our publication and our privacy policy.

Pursuant to GDPR, everybody can apply to the data controller and get information about themselves on below:

• Learning whether personal data is processed.
• If personal data has been processed, to request information regarding this.
• Learning the purpose of processing personal data and whether they are used appropriately for their purpose.
• To know the third parties to whom personal data are transferred domestically or abroad.
• To request correction of personal data in case of incomplete or incorrect processing.
• To request deletion or destruction in case the reasons requiring the processing of personal data disappear.
• Request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data have been transferred.
• To object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems.
• In case of damage due to unlawful processing of personal data, it has the right to demand the compensation of the damage.

In your request, the right/request you want to use with your identity information should be clearly stated and necessary explanations should be made by adding all the information and documents subject to your request. If the application is in writing, the signature should not be forgotten.

Requests with the required qualifications will be finalized within 30 (thirty) days depending on the nature of the request and the result will be notified to you in writing or electronically in accordance with the feedback procedure you have chosen in your request.

Changes in Privacy Policy and Disclosure Document

THERAPPY may make changes to the provisions of this Privacy Policy and Disclosure Document. The updated Privacy Policy takes effect on the date it is published on the website. If you continue to use THERAPPY services and/or applications after Privacy Policy is changed, it is assumed that you accept the changes.

Authorized Court

This Agreement shall be governed by the law exclusively to the Republic of Turkey.

Istanbul (Central) Courts and Enforcement Offices are authorized in case of any dispute arising from or arising from this Privacy Policy and Disclosure Document.

User Statement

I have read, understood, and been informed adequately and in detail of this Personal Data Protection and Disclosure Document regarding the processing and transfer of my personal data. I accept that I have express consent with my free will to process my personal data within the scope of “Disclosure Document” and to share it with business partners, domestic and foreign third parties specified in this scope.