CUSTOMER AND PERSONNEL DISCLOSURE STATEMENT REGARDING THE POLICY ON THE PROTECTION, PROCESSING AND STORAGE OF PERSONAL DATA
a) Data Controller and Representative
Pursuant to the Law No. 6698 on the Protection of Personal Data (the "Law"), your personal data may be processed by MEDICAVET TARIM HAYVANCILIK İLAÇ VE KİMYA SAN. TİC.(the "Company"), as the data controller, within the scope explained below.
b) The Purposes for Which Personal Data Will Be Processed
Your collected personal data will be processed within the scope of the personal data processing conditions and purposes set out in Articles 5 and 6 of the Law, for the following purposes and without being limited to them: enabling the products and services offered by our company to be provided to you; enabling our company to carry out all of its commercial activities within the legal framework and in line with its internal policy and procedures; structuring all the work and transactions that need to be carried out both for the conduct of these activities and for the provision of services and products, implementing and executing the decisions taken in this scope and carrying out the necessary work and transactions; ensuring the protection of the persons with whom relationships are established within this scope, and of our company, against legal disputes arising from these relationships; recording camera footage for security purposes at the workplaces belonging to the company; designing the company's business processes; information security management; analyzing the suitability and efficiency of business processes; corporate communication activities; accounting and invoicing transactions; ensuring labor rights and wage payments; managing the relationships established with support service providers, business partners and suppliers; carrying out social responsibility projects; designing sales strategies; conducting the company's sales processes; customer relationship management; customer complaint management; managing the processes related to payment services; ensuring the accessibility of banking services; following up contract processes; developing market research activities; marketing the company's products; carrying out activities aimed at customer satisfaction; all communication activities falling within the field of business; ensuring the security of physical data; litigation and legal follow-up processes; carrying out audit activities; managing financial security processes; carrying out identity verification activities; ensuring that the existing data is up to date and accurate; providing information to authorized public and private institutions within the scope of legislation; carrying out marketing, promotional and informational communications regarding our products and services; collecting and compiling statistical information; developing our commercial activities; planning and executing the activities necessary for the products and services offered by our company to be recommended and promoted to personal data owners by customizing them according to the tastes, usage habits and needs of the personal data owners; the performance of the necessary work by our business units and the conduct of the relevant business processes in order to enable personal data owners to benefit from the products and services offered by our company; the performance of the necessary work by our relevant business units and the conduct of the related business processes in order to carry out the commercial and/or operational activities conducted by our company; carrying out the transactions of personnel insured within the scope of the Social Security Institution; ensuring internal company auditing by taking pictures, video and audio recordings; processing passport and identity card information for the purpose of arranging trips to be made within the company's field of activity; the planning and/or execution of our company's commercial and/or business strategies; ensuring the legal or technical security and business continuity of our company and of the persons in a business relationship with our company; and enabling us to fulfill our legal obligations and to exercise our rights arising from the legislation in force.
c) To Whom and for What Purpose the Processed Personal Data May Be Transferred
Your collected personal data may be transferred, for the purposes stated above, to legally authorized public/private institutions and organizations and to our business partners and suppliers located domestically or abroad, within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of the Law and limited to items (b) and (c) of this disclosure statement. Your transferred personal data may be processed domestically and abroad.
ç) The Method and Legal Basis of Collecting Personal Data
Your personal data is collected by our company in electronic and/or physical form, for the purposes stated above, through the call center, fax, short message (SMS), our websites and similar channels. The personal data collected for these purposes may also be processed and transferred for the purposes stated in items (b) and (c) of this disclosure statement, on the legal grounds set out in Articles 5 and 6 of the Law.
d) The Period for Which Your Personal Data Is Processed
Your personal data will be processed for a minimum of ten (10) years throughout the periods required by the personal data processing purposes stated in this statement. After the expiry of this period, if there is a provision of legislation or a legal ground that requires the relevant data to be processed for a longer period, your personal data will continue to be processed throughout these periods as well. At the end of the periods mentioned, your personal data will immediately be deleted, destroyed or anonymized.
e) Personal Data May Be Processed by Our Company, as the Data Controller, in the Following Cases Without Seeking Your Separate Explicit Consent;
KVKK ARTICLE 5- (2)
In the presence of one of the following conditions, it is possible to process personal data without seeking the explicit consent of the data subject:
a) It is expressly provided for by laws.
b) It is necessary for the protection of the life or physical integrity of the person himself/herself or of another person who is unable to give consent due to actual impossibility, or whose consent is not legally valid.
c) Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process the personal data of the parties to the contract.
ç) It is necessary for the data controller to fulfill its legal obligation.
d) It has been made public by the data subject himself/herself.
e) Data processing is necessary for the establishment, exercise or protection of a right.
f) Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is necessary for the legitimate interests of the data controller.
f) Security of Personal Data
We take all necessary technical and administrative security measures to protect your personal data against the risks of damage and disclosure within the scope of unauthorized access, sharing, transfer, etc.
g) The Rights of the Personal Data Owner Listed in Article 11 of the Law
As personal data owners, if you submit your requests regarding your rights to our company through the methods regulated in the Law, our company will conclude the request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the transaction also requires a cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by our company. In this scope, personal data owners have the right:
- to learn whether their personal data is being processed,
- to request information if their personal data has been processed,
- to learn the purpose of the processing of their personal data and whether it is used in accordance with its purpose,
- to know the third parties to whom their personal data is transferred domestically or abroad,
- to request the correction of their personal data if it has been processed incompletely or incorrectly, and to request that the transaction carried out in this scope be notified to the third parties to whom their personal data has been transferred,
- to request the deletion or destruction of their personal data in the event that the reasons requiring its processing cease to exist, even though it has been processed in accordance with the Law and the provisions of other relevant laws, and to request that the transactions carried out in this scope, and in the event that their personal data has been processed incompletely or incorrectly, be notified to the third parties to whom their personal data has been transferred,
- to object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
- to request the compensation of the damage in the event that they suffer damage due to the unlawful processing of their personal data.
Pursuant to paragraph 1 of Article 13 of the Law, you may submit your requests regarding the exercise of the rights stated above to our company in writing or through the other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at this stage, you must submit your application to our company in writing as required by the Law. In this context, as a data subject, you may notify us of your requests regarding your rights within the scope of the Law by applying in person, with a document verifying your identity, to our company located at Tepeören Mah. İTOSB, Eski Ankara Asfaltı, 12.Cadde No:1, 34959 Tuzla/İstanbul, or by reaching us through a notice served via a notary.
Regards,
MEDICAVET TARIM HAYVANCILIK İLAÇ VE KİMYA SAN. TİC.
Tepeören Mah. İTOSB, Eski Ankara Asfaltı, 12.Cadde No:1, 34959 Tuzla/İstanbul