The source text was transferred on 16 September 2026. The practices and periods stated in the text reflect the policy published by the centre.
Video Surveillance and Image Retention Policy
BB Balaban Sağlık Hizmetleri ve Ticaret Limited Şirketi
Video Surveillance and Image Retention Policy
-1- Purpose and scope of the video surveillance policy
In carrying out surveillance by security camera, BB Balaban Sağlık Hizmetleri ve Ticaret Limited Şirketi pursues aims such as protecting the interests of the company and of other persons in matters of safety and security. This surveillance is conducted in conformity with the Personal Data Protection Law (the “PDP Law” or “the Law”), the Law on Private Security Services and the relevant legislation. Accordingly, all employees and visitors are informed that camera surveillance is being carried out and are given the requisite notice. Notices are posted at the entrances to the areas under surveillance. In accordance with Article 12 of the Law, the company takes the technical and administrative measures necessary to secure the personal data obtained as a result of camera surveillance.
-2- Determination of the areas in which BB Balaban Sağlık Hizmetleri ve Ticaret Limited Şirketi carries out camera surveillance
For the purposes of ensuring security and supervising business activities, and for the other purposes set out in this Policy, personal data processing is carried out in the buildings and premises of the company for the monitoring of employees. The data subjects concerned are given the requisite notice either when the identity data of persons entering the company's buildings as employees are collected, or by means of texts posted on the company's premises or otherwise made available to employees. Data obtained for the purpose of monitoring visitor entries and exits are processed for that purpose alone, and the personal data in question are recorded in the data filing system in physical form.
For the purpose of ensuring security and for the other purposes set out in this Policy, personal data processing is carried out in the buildings and premises of the company for the monitoring of visitor entries and exits. The data subjects concerned are given the requisite notice either when the identity data of persons entering the company's buildings as visitors are collected, or by means of texts posted on the company's premises or otherwise made available to visitors. Data obtained for the purpose of monitoring visitor entries and exits are processed for that purpose alone, and the personal data in question are recorded in the data filing system in physical form.
-3- Purpose of carrying out video surveillance and retention
Twenty-four hours a day, seven days a week, for the purposes of ensuring security and of supervision, the company carries out surveillance by security camera in its buildings and premises and processes personal data for the monitoring of visitor entries and exits.
-4- Who may access the information obtained through surveillance and to whom it is transferred
Only a limited number of the company's employees have access to the recordings stored and retained in digital form. Authorised persons in the Security Unit and the IT department have access rights to the recordings. The limited number of persons with access to the recordings undertake, by means of a confidentiality undertaking, to preserve the confidentiality of the data they access.
-5- Securing the data obtained through video surveillance
Within the framework of the data security policy it has established, the company stores the camera recordings it obtains in technical units to which access is limited, and takes countermeasures against possible attacks using its information systems. These measures are as follows:
The security of personal data stored in the cloud is ensured.
Training and awareness activities on data security are held for employees at regular intervals.
Confidentiality undertakings are concluded.
The authorisations in this area of employees who change duties or leave the company are revoked.
The contracts signed contain data security provisions.
The necessary security measures are taken in respect of entry to and exit from physical environments containing personal data.
Physical environments containing personal data are secured against external risks such as fire and flood.
The security of environments containing personal data is ensured.
Personal data are minimised as far as possible.
Log records are kept in such a way that they cannot be interfered with by users.
Protocols and procedures for the security of special category personal data have been established and are applied.
Service providers acting as data processors are made aware of data security.
-6- Retention period for the data obtained through video surveillance
Image recordings obtained through camera surveillance are retained by the company for 15 days, on account of the importance of the units in which employees work. Once the 15 days have elapsed, the data are destroyed within the framework of the destruction policies.
-7- Informing those concerned about the surveillance policy
The company's video camera surveillance is notified to its staff within the framework of the privacy policy and prior information notices. In addition, notice is given at the entrances to buildings and premises that video camera surveillance is being carried out.
