nobetportal.com is the data controller within the framework of the law.

1. Data Controller

nobetportal.com is the data controller.

2. Personal Data We Collect

During Platform usage, the following personal data is collected:

2.1. Identity and Contact Information

Name and surname
Email address
Password

2.2. Work and Preference Information

Preferred working days
Days not preferred for work
Leave dates and times
Information about colleagues to work with
Seniority type and level
Work intensity preferences (consecutive shifts)

2.3. Organizational Information

Service names for shift assignments
Required personnel count per service
Services with day shift work
Privileged persons and seniority information

2.4. Information for Application Functionality

Data necessary for you to use the application and create your shift lists.

2.5. Technical Data

IP address
Device information
Browser type and version
Mobile application usage logs
Platform usage statistics

3. Purposes of Personal Data Processing

Collected personal data is processed only for the following purposes:

Creating shift and work lists
Delivering created lists to relevant persons
Reflecting user preferences and requests in the system
Ensuring technical and operational functionality of the Platform
Providing user support services
Fulfilling legal obligations
Improving and developing service quality

4. Storage and Security of Personal Data

4.1. Retention Period

Your personal data will be retained:

As long as necessary to provide the service
As long as our legal retention obligations continue
Up to 1 year after account deletion for backup purposes.

4.2. Security Measures

To protect your personal data:

Encryption technologies
Secure server infrastructure
Access controls and authorization systems are implemented.

IMPORTANT NOTE: No system is 100% secure. We cannot completely eliminate risks of data damage or unauthorized access due to potential security breaches, data leaks, or technical failures. By using the Platform, you acknowledge and accept these risks.

5. Sharing of Personal Data

5.1. Sharing with Third Parties

Your personal data will NEVER be shared with:

Advertising companies
Data analysis firms
Marketing agencies
Social media platforms
Any commercial third parties

5.2. Limited Sharing Exceptions

Your personal data may ONLY be shared in the following limited cases:

a) Technical Service Providers: Technical service providers who have signed a confidentiality agreement with us (server services, email services, notification services, etc.) may only receive data necessary for service provision.
b) Legal Obligations: When required to fulfill our legal obligations under court orders, legal regulations, or written requests from official authorities.
c) In-Platform Sharing: With other users in the same work group (only information necessary for shift lists and work schedules).

5.3. Commitment

Except for the exceptions mentioned above, your personal data will:

Not be sold
Not be rented
Not be used for commercial purposes
Not be shared with third parties

6. User Rights

Under PDPL, you have the following rights:

To know if your personal data is being processed
To request information about such processing if it is processed
To learn the purpose of processing and whether it is used for its purpose
To know third parties to whom data is transferred domestically or abroad
To request correction if incomplete or incorrectly processed
To request deletion or destruction under the conditions specified in PDPL
To request notification of correction, deletion, or destruction to third parties to whom data is transferred
To object to a result against you due to exclusive automated processing analysis
To claim compensation for damage caused by unlawful processing

To exercise these rights, please contact us at hosgeldiniz@nobetportal.com.

7. Privacy of Children

Our Platform is not intended for users under 18 years of age. We do not knowingly collect personal data from individuals under 18.

8. International Data Transfers

Your personal data is generally stored within Turkey's borders. However, due to technical infrastructure needs, your data may also be stored on servers outside the country. In such cases, necessary security measures are taken in accordance with PDPL provisions.

9. Changes to This Privacy Policy

Changes to this Privacy Policy will be published through the Platform. For significant changes, users will be notified via email or notification.

10. Contact Us

For questions about our privacy policy or your personal data, please contact us:

Email: hosgeldiniz@nobetportal.com

LAST UPDATED DATE: October 23, 2025

EFFECTIVE DATE: The date you start using the Platform

By accepting this Privacy Policy, you consent to the processing of your personal data as described above.