INFORMATION NOTICE

As the data controller, within the scope of the Personal Data Protection Law (KVKK), we hereby inform you that your personal data, which you have requested or shared with us, may be recorded, stored, preserved, reorganized, shared with authorized institutions legally entitled to request such personal data, and transferred domestically to third parties under the conditions stipulated by KVKK. Your data may also be classified and processed by other methods and procedures listed in the KVKK. In the event the conditions specified in the KVKK and the Data Destruction Policy are met, your personal data may be destroyed, deleted, or anonymized.


PERSONAL DATA PROCESSED

Personal data related to third parties provided to us by those third parties may also be processed.

  • Identity Data: Name, surname

  • Contact Data: Phone number, email address

  • Customer Transaction Data: Records related to the use of products and services, customer requests, and similar information

  • Transaction Security Data: Website login/logout information (usernames, passwords, etc.), IP address data, data obtained through cookies we use


PURPOSE OF PROCESSING YOUR PERSONAL DATA

Your personal data are processed in compliance with Articles 5 and 6 of the Personal Data Protection Law. Your data may be processed proportionally for purposes such as providing and improving the products or services offered to you, enabling rights and benefits related to these products and services, sustaining and developing internal company activities, and managing business relations with you, among others listed below:

  • Conducting, auditing, and improving business processes

  • Communication activities

  • Customer relationship management

  • After-sales services

  • Management of relationships with third parties


METHOD AND LEGAL BASIS OF COLLECTION OF YOUR PERSONAL DATA

Your personal data may be processed as necessary within the scope of the Company’s management, administration, and financial operations for the purposes stated below, based on the legal grounds under Article 5/2 of KVKK: explicitly provided by laws (5/2a), directly related to the establishment or execution of a contract (5/2c), made public by the data subject (5/2d), processing necessary for the establishment, use, or protection of a right (5/2e), or necessary for the legitimate interests of the data controller (5/2f), or upon your explicit consent when required.

Your personal data are collected either through electronic means provided by you or through various channels such as the company’s website and email.


SHARING OF YOUR PERSONAL DATA WITH THIRD PARTIES

Your personal data may be shared by the Company for the purposes stated above with company employees and officers, group companies (the company and/or business partners, shareholders), legally authorized public institutions and organizations, independent audit firms within the scope of legal obligations and limitations, business partners and service providers working with or hired by the Company for the provision of services and activities.


YOUR RIGHTS ACCORDING TO ARTICLE 11 OF KVKK

According to Article 11 of KVKK, you have the right to personally apply to the Company and, upon proving your identity, to:

  • Learn whether the Company processes your personal data and request information if so

  • Learn the purpose of processing and whether it is used in accordance with this purpose

  • Learn whether your personal data are transferred domestically or abroad, and to whom

  • Request correction of incorrect or incomplete personal data and inform the recipients of such corrections

  • Request the deletion, destruction, or anonymization of your personal data under the conditions set out in Article 7 of KVKK, and request notification of third parties to whom the data have been transferred

  • Object to any automated processing and profiling if the result is against your interests

  • Request compensation for damages arising from unlawful processing of your personal data

Applications must be submitted in writing or via registered electronic mail (KEP), secure electronic signature, mobile signature, or the electronic mail address registered in the data controller’s system by the data subject, or through software/applications developed for this purpose. Applications must include:
a) Name, surname, and signature if written
b) For Turkish citizens, TR ID number; for foreigners, nationality, passport number, or ID number
c) Address for notification or workplace address
ç) Email, phone, and fax numbers if available
d) Subject of the request

If the response to the application is to be given in writing, up to ten pages will be free of charge. A fee of 1 Turkish Lira per page may be charged for pages exceeding ten. If the response is delivered on media such as CD or flash drive, the fee may not exceed the cost of the media.

The data controller may request additional information to verify the identity of the applicant and clarify the application.


This Information Notice may be revised by our Company when necessary. In such cases, you will be duly informed.


Data Controller:
Medimall Medikal Sağlık Ürünleri Tekstil İth.İhr.Tic.Ltd.Şti.
MERSIS No: 061 413 358 640 0001
Address: İstiklal Mh. Suoğlu Cd. No:38/A Tekkeköy-SAMSUN
KEP Address: medimall.medikal@hs03.kep.tr