{"id":2540,"date":"2026-02-19T06:40:47","date_gmt":"2026-02-19T06:40:47","guid":{"rendered":"https:\/\/epic-bartik.212-227-6-40.plesk.page\/?page_id=2540"},"modified":"2026-02-19T07:24:17","modified_gmt":"2026-02-19T07:24:17","slug":"personal-data-retention-and-destruction-policy","status":"publish","type":"page","link":"https:\/\/epic-bartik.212-227-6-40.plesk.page\/en\/corporate\/pdpl\/personal-data-retention-and-destruction-policy\/","title":{"rendered":"Personal Data Retention and Destruction Policy"},"content":{"rendered":"\n\t<section class=\"section\" id=\"section_1526542357\">\n\t\t<div class=\"section-bg fill\" >\n\t\t\t\t\t\t\t\t\t\n\t\t\t\n\n\t\t<\/div>\n\n\t\t\n\n\t\t<div class=\"section-content relative\">\n\t\t\t\n  <div id=\"page-header-971195805\" class=\"page-header-wrapper\">\n  <div class=\"page-title dark simple-title\">\n\n    \n    <div class=\"page-title-inner container align-center text-center flex-row-col medium-flex-wrap\" >\n              <div class=\"title-wrapper is-larger flex-col\">\n          <h1 class=\"entry-title mb-0\">\n            Personal Data Retention and Destruction Policy          <\/h1>\n        <\/div>\n                    <div class=\"title-content flex-col\">\n        <div class=\"title-breadcrumbs pb-half pt-half\"><\/div>      <\/div>\n    <\/div>\n\n       <\/div>\n    <\/div>\n  \n\t\t<\/div>\n\n\t\t\n<style>\n#section_1526542357 {\n  padding-top: 10px;\n  padding-bottom: 10px;\n  background-color: #48525a;\n}\n<\/style>\n\t<\/section>\n\t\n\n\t<section class=\"section\" id=\"section_172042735\">\n\t\t<div class=\"section-bg fill\" >\n\t\t\t\t\t\t\t\t\t\n\t\t\t\n\n\t\t<\/div>\n\n\t\t\n\n\t\t<div class=\"section-content relative\">\n\t\t\t\n<div class=\"row\"  id=\"row-653909620\">\n\n\t<div id=\"col-537430254\" class=\"col small-12 large-12\"  >\n\t\t\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n<p><b>EFC HEALTH SERVICES TRADE INC. <\/b><\/p>\n<p><b>PERSONAL DATA RETENTION AND DISPOSAL POLICY<\/b><\/p>\n<p><b>ARTICLE 1- PURPOSE<\/b><\/p>\n<p><span style=\"font-weight: 400;\">This Personal Data Retention and Disposal Policy has been prepared to determine the procedures and principles regarding the processes and operations for the retention and disposal of personal data processed by <\/span><span style=\"font-weight: 400;\">EFC HEALTH SERVICES TRADE INC.<\/span><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><b>ARTICLE 2- SCOPE<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data belonging to company employees, job applicants, interns, those receiving products and services, potential customers, partners, visitors, suppliers, and other third parties are within the scope of this policy.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This policy applies to all recording media owned by the company or managed by the company where personal data are processed, and to activities related to the processing of personal data.<\/span><\/p>\n<p><b>ARTICLE 3- DEFINITIONS<\/b><\/p>\n<p><b>Recipient group<\/b> <span style=\"font-weight: 400;\">: The category of natural or legal persons to whom personal data are transferred by the data controller.<\/span><\/p>\n<p><b>Explicit consent<\/b> <span style=\"font-weight: 400;\">: Consent declared with free will, based on information, regarding a specific subject.<\/span><\/p>\n<p><b>Anonymization<\/b> <span style=\"font-weight: 400;\">: Rendering personal data such that they cannot be associated with an identified or identifiable natural person in any way, even by matching with other data.<\/span><\/p>\n<p><b>Employee<\/b> <span style=\"font-weight: 400;\">: Company personnel.<\/span><\/p>\n<p><b>Electronic environment<\/b> <span style=\"font-weight: 400;\">: Environments where personal data can be created, read, changed, and written through electronic devices.<\/span><\/p>\n<p><b>Non-electronic environment<\/b> <span style=\"font-weight: 400;\">: All written, printed, visual, etc. environments other than electronic environments.<\/span><\/p>\n<p><b>Service provider<\/b> <span style=\"font-weight: 400;\">: A natural or legal person providing services to the company within the framework of a specific contract.<\/span><\/p>\n<p><b>Relevant person<\/b> <span style=\"font-weight: 400;\">: The natural person whose personal data are processed.<\/span><\/p>\n<p><b>Relevant user<\/b> <span style=\"font-weight: 400;\">: Persons who process personal data within the data controller organization or in line with the authority and instructions received from the data controller, excluding the person or unit responsible for the technical storage, protection, and backup of the data.<\/span><\/p>\n<p><b>Disposal<\/b> <span style=\"font-weight: 400;\">: Deletion, destruction, or anonymization of personal data.<\/span><\/p>\n<p><b>Law<\/b> <span style=\"font-weight: 400;\">: Personal Data Protection Law No. 6698.<\/span><\/p>\n<p><b>Recording environment<\/b> <span style=\"font-weight: 400;\">: Any environment where personal data processed by fully or partially automated means or by non-automated means, provided that it is part of any data recording system, are located.<\/span><\/p>\n<p><b>Personal data<\/b> <span style=\"font-weight: 400;\">: Any information relating to an identified or identifiable natural person.<\/span><\/p>\n<p><b>Personal data processing inventory<\/b> <span style=\"font-weight: 400;\">: The inventory in which data controllers detail the personal data processing activities they carry out depending on their business processes by associating them with the purposes and legal basis of processing, data category, recipient group to whom they are transferred, and the data subject group, and by explaining the maximum retention period required for the purposes for which the personal data are processed, personal data intended to be transferred to foreign countries, and the measures taken regarding data security.<\/span><\/p>\n<p><b>Processing of personal data<\/b> <span style=\"font-weight: 400;\">: Any operation performed on data such as obtaining, recording, storing, keeping, changing, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data by fully or partially automated means or by non-automated means, provided that it is part of any data recording system.<\/span><\/p>\n<p><b>Board<\/b> <span style=\"font-weight: 400;\">: Personal Data Protection Board.<\/span><\/p>\n<p><b>Special categories of personal data<\/b> <span style=\"font-weight: 400;\">: Data regarding individuals\u2019 race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data.<\/span><\/p>\n<p><b>Periodic disposal<\/b> <span style=\"font-weight: 400;\">: The deletion, destruction, or anonymization process to be carried out ex officio at recurring intervals specified in the personal data retention and disposal policy in the event that all of the conditions for processing personal data specified in the Law cease to exist.<\/span><\/p>\n<p><b>Policy<\/b> <span style=\"font-weight: 400;\">: Personal Data Retention and Disposal Policy.<\/span><\/p>\n<p><b>Company<\/b> <b>: <\/b><span style=\"font-weight: 400;\">EFC HEALTH SERVICES TRADE INC.<\/span><\/p>\n<p><b>Data processor<\/b> <span style=\"font-weight: 400;\">: A natural or legal person processing personal data on behalf of the data controller based on the authority granted by the data controller.<\/span><\/p>\n<p><b>Data recording system<\/b> <span style=\"font-weight: 400;\">: The recording system where personal data are processed by structuring according to certain criteria.<\/span><\/p>\n<p><b>Data controller<\/b> <span style=\"font-weight: 400;\">: A natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.<\/span><\/p>\n<p><b>Data controllers registry information system<\/b> <span style=\"font-weight: 400;\">: The information system, accessible via the internet, created and managed by the Presidency, which data controllers will use in applications to the Registry and other related transactions.<\/span><\/p>\n<p><b>VERBIS<\/b> <span style=\"font-weight: 400;\">: Data Controllers Registry Information System.<\/span><\/p>\n<p><b>Regulation<\/b> <span style=\"font-weight: 400;\">: The Regulation on Deletion, Destruction, or Anonymization of Personal Data published in the Official Gazette dated 28 October 2017.<\/span><\/p>\n<p><b>ARTICLE 4- RESPONSIBILITIES AND DUTIES<\/b><\/p>\n<p><span style=\"font-weight: 400;\">All employees and units of the company provide full and active support to the responsible units in the lawful collection, processing, and retention of personal data. In the implementation of the administrative and technical measures taken within the scope of the Policy, in training unit employees, ensuring, increasing and monitoring employees\u2019 awareness, preventing unlawful access to personal data, and keeping personal data in accordance with the law, all employees and units support the responsible units. The distribution of the titles, units and job descriptions of those involved in personal data retention and disposal processes is shown in ANNEX TABLE: 1.<\/span><\/p>\n<p><b>ARTICLE 5- RECORDING MEDIA<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data are stored securely and lawfully by the company in the environments listed in ANNEX TABLE: 2.<\/span><\/p>\n<p><b>ARTICLE 6- LEGAL GROUNDS REQUIRING RETENTION<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Within the company, personal data processed within the scope of activities are retained for the period stipulated in the relevant legislation and within the scope of the Law and relevant legislation. In this context, the reasons requiring retention are as follows:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retention of personal data due to being directly related to the establishment and performance of contracts,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retention of personal data for the purpose of establishing, using, or protecting a right<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retention of personal data being mandatory for the legitimate interests of the company, provided that it does not harm the fundamental rights and freedoms of individuals<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retention of personal data for the purpose of fulfilling any legal obligation of the company<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data retention being explicitly prescribed in the legislation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Existence of the explicit consent of data subjects for retention activities requiring obtaining the explicit consent of data subjects<\/span><\/li>\n<\/ol>\n<p><b>ARTICLE 7- PROCESSING PURPOSES REQUIRING RETENTION<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Company may process personal data of the relevant person or third parties specified by the relevant person for various purposes, including but not limited to the following:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conducting human resources processes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensuring corporate communication<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensuring company security<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Being able to conduct statistical studies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Being able to perform business and operations as a result of signed contracts and protocols<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensuring the fulfillment of legal obligations as required or mandated by legal regulations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Establishing contact with natural\/legal persons having a business relationship with the Company<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Making legal reports<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Fulfilling the burden of proof as evidence in future legal disputes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Carrying out\/following up the Company\u2019s legal affairs<\/span><\/li>\n<\/ol>\n<p><b>ARTICLE 8- LEGAL GROUNDS REQUIRING DISPOSAL<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data are deleted or destroyed by the Company upon the request of the relevant person or ex officio in the presence of the following situations:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amendment or repeal of the relevant legislation provisions that constitute the basis for the processing of personal data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Elimination of the purpose requiring the processing or retention of personal data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In cases where the processing of personal data is carried out solely based on explicit consent, withdrawal of explicit consent by the relevant person<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Acceptance by the data controller of the application made by the relevant person regarding the deletion and destruction of their personal data within the scope of the rights of the relevant person pursuant to Article 11 of the Law<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Expiration of the maximum period requiring the retention of personal data and absence of any condition that would justify retaining personal data for a longer period<\/span><\/li>\n<\/ol>\n<p><b>ARTICLE 9- TECHNICAL MEASURES<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The technical measures taken by the Company regarding the personal data it processes are as follows:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Performs necessary internal controls within the established systems<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Carries out the processes of conducting information technology risk assessment and business impact analysis within the established systems<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensures the provision of technical infrastructure that will prevent or monitor data leakage outside the company and the establishment of relevant matrices<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensures the control of system vulnerabilities by obtaining penetration testing services regularly and when needed<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensures that the access authorizations of employees working in information technology units to personal data are kept under control<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensures that the destruction of personal data is carried out in a way that cannot be recovered and does not leave an audit trail<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Pursuant to Article 12 of the Law, all digital environments where personal data are stored are protected by encrypted and\/or cryptographic methods in a way that meets information security requirements<\/span><\/li>\n<\/ol>\n<p><b>ARTICLE 10- ADMINISTRATIVE MEASURES<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The administrative measures taken by the Company regarding the personal data it processes are as follows:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Limits internal access to stored personal data to personnel who need access due to their job description. In limiting access, whether the data are special categories of personal data and the degree of importance are also taken into consideration.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In the event that processed personal data are obtained by others through unlawful means, it notifies the relevant person and the Board as soon as possible.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">With regard to the sharing of personal data, it ensures data security by signing a framework agreement on the protection of personal data and data security with the persons to whom personal data are shared, or by provisions added to existing agreements.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Employs personnel knowledgeable and experienced about personal data processing and provides necessary trainings to its personnel within the scope of personal data protection legislation and data security.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Carries out and has carried out necessary audits to ensure the implementation of the provisions of the Law within its legal entity. It eliminates confidentiality and security vulnerabilities revealed as a result of audits.<\/span><\/li>\n<\/ol>\n<p><b>ARTICLE 11- METHODS FOR DELETING PERSONAL DATA<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data are deleted by the methods specified in ANNEX TABLE: 3.<\/span><\/p>\n<p><b>ARTICLE 12- METHODS FOR DESTROYING PERSONAL DATA<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data are destroyed by the methods specified in ANNEX TABLE: 4.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><b>ARTICLE 13- RETENTION AND DISPOSAL PERIODS<\/b><\/p>\n<p><span style=\"font-weight: 400;\">When determining the retention period of personal data by the Company; primarily, if a period is prescribed in the legal legislation regarding the retention of the relevant personal data, this period is complied with. Apart from this; the retention and disposal period table in ANNEX TABLE: 5 is taken as basis.<\/span><\/p>\n<p><b>ARTICLE 14- PERIODIC DISPOSAL PERIOD<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Company carries out the periodic disposal process every year in the months of <\/span><span style=\"font-weight: 400;\">June and December<\/span><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><b>ARTICLE 15- PUBLICATION, STORAGE AND UPDATING OF THE POLICY<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Policy is published in two different environments, as wet signed (printed paper) and electronically, and is announced to the public on the website. The printed paper copy is kept within the company. The Policy is reviewed as needed and necessary sections are updated.<\/span><\/p>\n<p><b>ARTICLE 16- EFFECTIVE DATE<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Policy is deemed to have entered into force after it is published on the company\u2019s website. In case it is decided to repeal it, the wet signed old copies of the policy are canceled (by stamping canceled or writing canceled), signed, and kept by the company for at least 5 years.<\/span><\/p>\n<p><b>ANNEX TABLE: 1 Task distribution for retention and disposal processes<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">TITLE<\/span><\/td>\n<td><span style=\"font-weight: 400;\">UNIT<\/span><\/td>\n<td><span style=\"font-weight: 400;\">DUTY<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Company Manager<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Company<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Responsible for employees\u2019 compliance with the policy.<\/span><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td><span style=\"font-weight: 400;\">\u2026.<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Responsible for the preparation, development, execution, publication in relevant environments, and updating of the Policy.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">IT Manager<\/span><\/td>\n<td><span style=\"font-weight: 400;\">IT Directorate<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Responsible for providing technical solutions needed in the implementation of the Policy.<\/span><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td><span style=\"font-weight: 400;\">All Other Units<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Responsible for the execution of the Policy in accordance with their duties.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<p><b>ANNEX TABLE: 2 Personal Data Storage Media<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Electronic Media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Non-Electronic Media<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Personal computers<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Mobile Devices<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Optical discs<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Printers, scanners, photocopy machines<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Removable and portable memories<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Servers<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Software<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Information security devices<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Papers<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Written and printed media<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Visual records<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Manual data recording systems<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<p><b>ANNEX TABLE: 3 Methods for Deleting Personal Data<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Data Recording Medium<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Deletion Method<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Servers<\/span><\/td>\n<td><span style=\"font-weight: 400;\">For personal data on servers whose retention period has expired, deletion is performed by the system administrator by removing the access authorization of relevant users.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Electronic media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal data in electronic media whose retention period has expired are rendered inaccessible and unusable for all employees (relevant users) other than the database administrator.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Physical media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">For personal data kept in physical media whose retention period has expired, they are rendered inaccessible and unusable for all employees other than the unit manager responsible for the document archive. In addition, blackening is also applied by scratching\/painting\/erasing in a way that cannot be read.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Portable media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal data stored in flash-based storage media whose retention period has expired are encrypted by the system administrator and stored in secure environments with encryption keys, with access authorization granted only to the system administrator.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<p><b>ANNEX TABLE: 4 Methods for Destroying Personal Data<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">Data Recording Medium<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Destruction Method<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Physical media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Personal data on paper whose retention period has expired are destroyed irreversibly in document destruction machines.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Optical or magnetic media<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Physical destruction is applied for personal data on optical and magnetic media whose retention period has expired, such as melting, burning, or pulverizing. In addition, magnetic media are passed through a special device and exposed to a high magnetic field, rendering the data on them unreadable.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<p><b>ANNEX TABLE: 5 Retention and Disposal Period Table<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 400;\">PROCESS<\/span><\/td>\n<td><span style=\"font-weight: 400;\">RETENTION PERIOD<\/span><\/td>\n<td><span style=\"font-weight: 400;\">DISPOSAL PERIOD<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Occupational health and safety practices<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years following the end of the employment relationship<\/span><\/td>\n<td><span style=\"font-weight: 400;\">180 days following the end of the retention period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Payroll<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years following the end of the employment relationship<\/span><\/td>\n<td><span style=\"font-weight: 400;\">180 days following the end of the retention period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Responding to personnel court\/judiciary requests<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years following the end of the employment relationship<\/span><\/td>\n<td><span style=\"font-weight: 400;\">180 days following the end of the retention period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Records regarding visitors and patients<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years from the date of arrangement and recording<\/span><\/td>\n<td><span style=\"font-weight: 400;\">180 days following the end of the retention period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Filing of training records<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years after the training is organized<\/span><\/td>\n<td><span style=\"font-weight: 400;\">180 days following the end of the retention period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Emergency preparedness<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years following the preparation<\/span><\/td>\n<td><span style=\"font-weight: 400;\">180 days following the end of the retention period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Log record tracking systems<\/span><\/td>\n<td><span style=\"font-weight: 400;\">10 years from the date of creation<\/span><\/td>\n<td><span style=\"font-weight: 400;\">180 days following the end of the retention period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Camera recordings<\/span><\/td>\n<td><span style=\"font-weight: 400;\">1 year from the date of recording<\/span><\/td>\n<td><span style=\"font-weight: 400;\">180 days following the end of the retention period<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\n<\/div>\n\t\t<\/div>\n\n\t\t\n<style>\n#section_172042735 {\n  padding-top: 30px;\n  padding-bottom: 30px;\n}\n<\/style>\n\t<\/section>\n\t\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":2496,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-blank.php","meta":{"footnotes":""},"class_list":["post-2540","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/epic-bartik.212-227-6-40.plesk.page\/en\/wp-json\/wp\/v2\/pages\/2540","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/epic-bartik.212-227-6-40.plesk.page\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/epic-bartik.212-227-6-40.plesk.page\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/epic-bartik.212-227-6-40.plesk.page\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/epic-bartik.212-227-6-40.plesk.page\/en\/wp-json\/wp\/v2\/comments?post=2540"}],"version-history":[{"count":0,"href":"https:\/\/epic-bartik.212-227-6-40.plesk.page\/en\/wp-json\/wp\/v2\/pages\/2540\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/epic-bartik.212-227-6-40.plesk.page\/en\/wp-json\/wp\/v2\/pages\/2496"}],"wp:attachment":[{"href":"https:\/\/epic-bartik.212-227-6-40.plesk.page\/en\/wp-json\/wp\/v2\/media?parent=2540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}