Privacy Policy

PRIVACY POLICY We, as Wupdoc B.V ("Wupdoc" "Us"), value your privacy and commit to protecting the personal data we collect when you use our website at https://www.wupdoc.com.

Wupdoc aims to assist communication between Users and Clinics and/or Providers, adhering to this Privacy Policy.

By accessing the pages of our website, you accept our Privacy Policy. The services offered on Wupdoc are always subject to an agreement, and you should refrain from using the website if you do not accept this Policy.

Wupdoc provides special protection for users' privacy and security, preventing it from falling into third parties' hands.

We guarantee that your personal data processed due to the services offered by Wupdoc will be handled transparently and openly, in line with Data Protection Laws and the EU General Data Protection Regulation (GDPR).

Data Controller: Data Controller: Wupdoc V.B Address: Sloterweg 303 1171 VC Badhoevedorp, Amsterdam, Netherlands

Your Personal Data Processed by Wupdoc: Personal data refers to any information related to an identified or identifiable natural person. We'd like to clarify that your Personal Data: • is processed in accordance with the law and rules of integrity, for specific, clear, and legitimate purposes, • is kept accurate and up-to-date, • is used in connection with the purpose of processing, limitedly and measuredly, • is retained for the legally determined storage period.

Some personal data mentioned below is processed based on the legal reason of "being publicly disclosed by the related person." There won't be any obligation for the Data Controller to enlighten regarding personal data processed this way. However, as the Data Controller, we have adopted the principles of "transparency" and "openness," and chose to include even the disclosed data in this explanatory text.

The following personal data is collected, used, and stored: Identity Information: Full Name: • The visitor's full name is processed automatically through the membership form. We process the full name to identify the person filling out the Membership Form and set up a profile for them on the Platform, based on the legal reason of requiring the data to establish and fulfill a contract. • The full name data of a member who wants to connect with a Clinic and/or Provider on the Platform is processed to facilitate the establishment of a remote service contract. • The full name data is made public on the Platform for the related person to be visible and is shared with authorized institutions to be used as legal evidence in case of disputes.

Contact Information: E-Mail Address: • The visitor's e-mail address is processed automatically through the membership form. The e-mail address is processed to enable platform membership, to define an account for the related person, to send a password reminder link if forgotten, and to send reminder/informative e-mails about requests/notifications. • The e-mail address data of the related person is processed based on their clear consent to inform them about campaigns, to conduct marketing activities, to offer special discounts and coupons, and to conduct satisfaction communications. • The e-mail address data of a member is processed for the purpose of establishing a remote service contract between the member and Clinic and/or Provider on the Platform. • The e-mail address data will be shared with the related party to establish a remote service contract and for the management of electronic commercial message permissions and complaint processes.

Mobile Phone Number • The visitor's Mobile Phone Number data is processed automatically through the completion of the membership form. We process the Phone Number data for the purposes of carrying out the related person's membership transactions, contacting them for the fulfillment of obligations arising from the remote service contract to be concluded with the Clinic and/or Provider through the Platform, sending a short message containing a verification code regarding the membership request, and communicating with the related person in cases where the email channel is insufficient to reach them. The processing is based on legal reasons, such as the necessity of processing the related data for establishing and performing a contract with the related person and the necessity of processing the related data within the scope of communicating with the related person for our legitimate interest. • Additionally, the Mobile Phone Number data of the related person is processed based on their informed explicit consent, for the purposes of making campaign information related to the services provided within the Wupdoc Platform, conducting marketing studies, and carrying out satisfaction communications. • In cases where the related person has consented to send commercial electronic messages, the Mobile Phone Number data is processed based on their informed explicit consent, for the purpose of managing commercial electronic message permissions and complaint processes during the sending of commercial electronic messages, and fulfilling our obligations arising from the legislation.

Address • The Member’s Address data (address header, country, province, district, postal code, explicit address) is processed based on the legal reason of the necessity of processing the related data for the fulfillment of the remote service contract between the related person and the Clinic and/or Provider by the Clinic and/or Provider.

Processing Security Information: User Password • Visitor User Password information is processed automatically through the completion of the membership form. The User Password data, which we process for the purpose of allowing the related person to access the Platform with a password they will determine themselves, is processed based on the legal reason of the necessity of processing the User Password data for establishing and performing a user contract within the scope of accessing the profile located on the Platform by the related person. The mentioned data is not subject to any transfer.

IP Address • Visitors' IP Address information is processed automatically through cookies on the website. The IP Address data, which we process for the purpose of identifying the device with which visitors access the website, is processed based on the legal reason that it is mandatory for us to fulfill our legal obligations to process the IP Address data, which is within the scope of the traffic information definition, in accordance with the EU General Data Protection Regulation (GDPR). The said data may be shared with the judicial authorities if requested by them, and with the authorities and institutions authorized by the legislation, if requested, to fulfill our obligations arising from the legislation.

Visual and Auditory Records: Photo • The Member's Photo data is processed automatically by uploading the photo through the membership settings on the Platform. The Photo data is processed based on the legal reasons of the necessity of processing the related data for our legitimate interest in order to meet the request of the related person to personalize their profile and the related data being made public by the related person. The mentioned data is made public on the Platform to be visible to the related person. Except for making public, this data is not subject to any transfer.

Other: Comment and Review Content • The data of Comment and Review Content containing personal data, which the Member shares during sharing their experiences and evaluations related to the services of the Clinic and/or Provider they connect to through the Platform, is processed automatically by filling in the related fields on the Platform. The Comment and Review Content data is processed based on the legal reason of the related data being made public by the person themselves, for the purpose of fulfilling the related person's requests at these stages. The said data; is made public on the Platform so that the related person's comments, requests, evaluations, and questions can be visible on the Platform. Except for making public, this data is not subject to any transfer. Message Content • The Message Content data, which contains personal data and is used by the Member to communicate with the Clinic and/or Provider regarding the services of the Clinic and/or Provider they connect to through the Platform, is processed automatically by using the messaging panel on the Platform. The Message Content data is processed based on the legal reason that processing the related data is necessary for our legitimate interest within the scope of the related person communicating with the Clinic and/or Provider. • Additionally, this data is processed based on the legal reason that processing the related data is necessary for protecting rights, for the purpose of being used as legal evidence in the event of any dispute arising from the messaging between the related parties. The mentioned data will be shared with the competent authorities for the purpose of being used as legal evidence in the event of a dispute.

Gender • The Gender data of the Visitor Who Wants to Become a Member is processed automatically through the completion of the membership form. The Gender data, which we process for the purpose of providing service to the related person in accordance with their gender, is processed based on legal reasons, such as the necessity of processing the related data for our legitimate interest. The mentioned data is not subject to any transfer. Cookie Records • The Cookie Records information of the Visitors is processed automatically through the cookies located in Wupdoc. The Cookie Records data, which we process for the purpose of analyzing the duration and activities of the Visitors in Wupdoc and enhancing the user experience, is processed based on the legal reason that it is mandatory for our legitimate interest to process the Cookie Records data, which will not violate your private life privacy to the extent to analyze the website efficiency and Visitor satisfaction, in accordance with the EU General Data Protection Regulation (GDPR). The mentioned data may be shared with the related cookie provider suppliers, depending on the type of cookie used, for the purpose of analyzing the cookie.

*All data types mentioned in this Privacy Policy are shared with the provider company from which the Platform server and infrastructure service are received. This data transfer arises from the need to host the processed data types on a server, as the servers are located within the related company, and it does not require active data transfer and occurs due.

The purposes of Wupdoc's data collection can be summarized as follows:

• Engage in activities to improve and maintain our services and security,
• Create and manage your user profiles,
• Provide the services and information you request in the most reliable manner,
• Meet the reason for providing information to us,
• Personalize our services, the content of our website, and communications according to your preferences,
• Protect you from crimes that may be processed through electronic commerce,
• Display ads based on the User’s interests for the marketing of our services,
• Respond to the correspondence we receive from you, communicate with you as needed or upon request, and provide you with information about Wupdoc and its Services,
• Inform you about Healthcare Providers and/or Services, send emails to Users who create and display content that we think will interest you and is tailored to your preferences,
• Fulfill our legal obligations under applicable law, regulation, court order, or other legal process, such as preventing, detecting, and investigating security breaches and potentially illegal or prohibited activities,
• Protect the rights, intellectual property, or interests of you, Wupdoc, or third parties,
• Respond to and resolve claims that any submission or other content infringes the rights of third parties. Non-Personal Data We may generate aggregate and/or de-identified data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified, or anonymized data for purposes such as analyzing, creating, and improving the Services, and enhancing our business, and share it with third parties for our lawful business purposes. Data Retention Period We store personal data related to you as needed to accomplish our lawful business purposes. Data categories' retention periods are prescribed under the Data Protection Laws and EU General Data Protection Regulation. We will retain your personal data for longer when permitted or required by applicable laws or regulations to comply with our legal obligations, resolve disputes, and ensure the continuity of our services. Also, in some cases, we can anonymize your personal data and retain it indefinitely in a form that does not personally identify you, for the purpose of conducting statistical research. Payment Processors Our payment processing partner (Stripe, Inc. (“Stripe”)) collects your voluntarily provided payment card information necessary to process your payment, and we expressly note that Stripe’s Terms of Service and Privacy Policy will govern the use and storage of your data related to the payment card. Changes in the Privacy Policy Wupdoc reserves the right to make changes to this Privacy Policy at any time. These changes become effective on the day the modified new Privacy Policy is published. Users will be informed of changes to this Privacy Policy by Wupdoc. Your Rights Under this Privacy Policy, Data Protection Laws, and EU General Data Protection Regulation (GDPR), your rights are as follows: Regarding your personal data;
• Learn whether it is processed,
• The purpose of processing,
• Transfers to domestic or foreign parties,
• Request its correction if it is incorrect or incomplete, restriction, and notification to third parties,
• Request its deletion if the related reasons no longer exist, and notification to third parties,
• Request compensation for any damages you have suffered,
• Object to adverse outcomes arising from analyses performed by automated systems. You can always convey your declaration regarding the exercise of the above-stated rights through the channels below, with documents identifying your identity and the subject of the request:
• By sending it securely with an electronic signature or without a signature via email to support@wupdoc.com,
• By hand delivery to Sloterweg 303 1171 VC Badhoevedorp, Amsterdam, The Netherlands, or via notary or registered mail with return receipt. We commit to responding to your request as soon as possible and within no more than 30 (thirty) days, and without charging a fee, as long as the procedure is cost-free. If you believe that the processing of your personal data is not based on a valid reason or violates Data Protection, you have the right to complain to a data protection authority in the country where the alleged infringement occurs. However, if you contact us via email before sending your complaint to the supervisory authority, we would like to note that we will do our utmost effort to resolve the issue.