K.V.K.K. Personal Data Protection Law

IN ACCORDANCE WITH THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA ("KVKK")
ON THE PROTECTION OF PERSONAL DATA
CLARIFICATION TEXT

Within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the Procedures and Principles to be followed in the Fulfilment of the Disclosure Obligation, this clarification text is to inform you as the data subject about the identity of the data controller and its representative, if any, the purpose for which personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data, and your other rights listed in Article 11 of the Law, Prepared by APAZ MEDİKAL.

MEDİKAL TIBBİ MALZEMELERI GALLERY TİCARET VE SANAYİ ANONİM ŞİRKETİ A.Ş (Company), we process your personal data in accordance with Article 20 of the Constitution of the Republic of Turkey and Article 4 of the Law No. 6698 on the Protection of Personal Data, as explained in detail below; in accordance with the law and good faith, accurately and up-to-date when necessary, for specific, clear and legitimate purposes, for specific, clear and legitimate purposes, in connection with the purpose for which they are processed, limited, and measured, and we keep your personal data that we process for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

1) Identity of the Data Controller
In terms of personal data obtained from you, our customers, in accordance with the KVK Law No. 6698, APAZ MEDIKAL (Company) "Data Controller" and our contact details are below.
Address: Dokuz Eylül University Inciraltı Campus Mithatpaşa Cad. Depark Health, Olive Building No:56/20 Office: Z15-Z16 Balçova/İZMİR
Telephone: +90 0232 433 00 45 / 232 277 98 88
E-mail: info@apazmedikal.com

2) Purposes of Processing Personal Data
The Company, your identity, contact, location, professional experience and title, customer transaction, financial, marketing, transaction security (IP address information), visual and audio records, legal proceedings, at your own request
your personal data consisting of personal information, requests and complaints that you have decided to share and made public,

Within the scope of carrying out sales processes related to our products and services;
Sharing catalogues, technical specifications and offers,
Ensuring that the obligations under the contractual relationship are duly fulfilled,
Planning and realisation of demo processes,
Within the scope of the execution of after-sales services;
Follow-up of installation, assembly, application, training, maintenance and repair processes,
Monitoring of manufacturer security applications,
Tracking of device inventories,
Within the scope of carrying out activities for customer satisfaction;
Recording, measuring, analysing, finalising and reporting of requests, satisfaction, suggestions, objections and complaints,
Within the scope of carrying out customer relationship management processes;
Customer relationship management, execution/supervision of business activities, planning and execution of operation processes,
Within the scope of carrying out financial and accounting affairs;
Carrying out dispatch note and invoicing transactions in return for our products and services, carrying out financial and accounting affairs within the scope of the contractual relationship,
Within the scope of carrying out product, service, purchasing, import and logistics activities;
Carrying out internal/external purchasing (procurement) processes, import and logistics activities and supply chain management processes for our products and services,
Carrying out insurance transactions related to our products and services,
Within the scope of the execution of training activities processes;
Carrying out and certifying training activities for products and services,
Within the scope of carrying out activities in accordance with the legislation;
Carrying out the transactions/records/notifications arising from the legislation and fulfilling our obligations in order to carry out our activities in accordance with the legislation,
Providing information to authorised institutions and organisations due to legal obligations,
Within the scope of follow-up and execution of legal affairs;
Execution of lawsuits and execution proceedings to which our Company is a party; follow-up and execution of legal affairs,
Within the scope of conducting audit/ethics activities;
Fulfilment of audit-related activities and obligations,
Within the scope of ensuring physical space security;
Ensuring the safety and control of the workplace

for the purposes of the contract, it is clearly stipulated in the laws (Article 5/2(a) of the LPPD), it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of the contract (Article 5/2(c) of the LPPD), it is mandatory for the data controller to fulfil its legal obligation (Article 5/2 (ç) of the LPPD), it is made public by the data subject himself/herself (Article 5/2(d) of the LPPD), data processing is mandatory for the exercise or protection of a right (Article 5/2(e) of the LPPD), data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Article 5/2(f) of the LPPD)can operate on the basis of its legal grounds.

Your personal data above;

Sharing offers and catalogues with you and carrying out customer relationship management processes within the scope of carrying out sales processes regarding our products and services,
Carrying out marketing, advertising and campaign processes related to our products and services, informing about brand management and communication activities (news, bulletins, newspapers, interviews, promotions, announcements, surveys, special/important day celebrations, event invitations, letters, certificates, postcards, corporate promotion documents),
Within the scope of digital media activities, carrying out marketing communication activities through internet advertisements, our company's websites and social media platforms,
Sponsorship activities, planning, announcement, management and execution of invitations and events within the scope of organisation/event management (congress, fair, seminar, symposium, workshop, demo, scientific and educational meetings),
Execution of gift and promotion processes,
Conducting traffic measurement, statistical analyses, segmentation and profiling studies for sales, after-sales service and marketing analysis activities,
Using cookies within the scope of marketing and promotional activities, offering you special products based on your preferences and user habits,
Designing communication and sustainability activities, planning and execution of actions to increase the level of brand perception,
Planning and execution of market research activities for sales and marketing of products and services

purposes, by obtaining your explicit consent in accordance with Article 5/1 of the KVKK and can be committed on the basis of this legal reason.

3) To whom and for what purpose the processed personal data can be transferred

Your collected personal data may be transferred to the following recipient groups / third parties at home and / or abroad within the framework of the personal data transfer conditions specified in Articles 8 and 9 of the KVKK, in line with the purposes specified in the section titled "Purposes of Processing Personal Data" of this Clarification Text.

In addition, the Company may use your personal data in question;

IYS system in order to fulfil its legal obligation within the scope of the Regulation on Commercial Communication and Commercial Electronic Messages and the Law on the Regulation of Electronic Commerce,
To our group companies, shareholders, subsidiaries from or to which services are received or provided in order to carry out our commercial activities,
To our suppliers, subcontractors and service providers in order to obtain outsourced services (agency, agency, printing and digital printing centre, survey firm, bank, organisation firm, congress and fair centre, financial institution, audit, law, lawyer, insurance, security, transportation and cargo, distribution),
To our domestic and foreign suppliers, subcontractors and service providers in order to carry out business activities, to carry out marketing analysis studies, to provide storage, archiving, information technology support (server, hosting, programme, cloud computing, web support, search engine tools),
To domestic and foreign manufacturers, companies, authorised public institutions and organisations, which we represent, in order to follow up manufacturer security practices,
Judicial authorities or relevant law enforcement agencies or public institutions and organisations authorised to receive information and documents due to legal obligations in order to resolve legal disputes or upon request pursuant to the relevant legislation,
During the merger/acquisition/reorganisation process, only to the extent relevant to the process, to the relevant third parties,

can transfer and share.

4) Method and Legal Grounds for Collecting Personal Data
As the Data Controller, your personal data in question is clearly stipulated in the laws specified in Article 5/2(a) of the KVKK, it is necessary for the establishment or performance of the contract specified in Article 5/2(c) of the KVKK, it is necessary for our company to fulfil its legal obligation specified in Article 5/2(ç) of the KVKK, it has been made public by the person concerned specified in Article 5/2(d) of the KVKK, Based on the legal grounds that data processing is mandatory for the establishment, exercise or protection of a right specified in Article 5/2(e) of the KVKK and that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject in accordance with Article 5/2(f), and based on the legal reasons and 5/1. Pursuant to Article 5/1, based on your explicit consent and legal grounds,

By requesting offers, technical information and catalogues regarding our products and services,
Through our field employees working in the sales, after-sales service and marketing network operating on behalf of our company,
Through forms, minutes, questionnaires, surveys, reports, requests, notifications, training and demo activities related to business activities,
Through our company's websites, websites where we advertise, mobile applications and all online media,
Through social media accounts and search engines,
Sponsorship activities are carried out within the scope of organisation/event management (congresses, fairs, seminars, symposiums, workshops, demos, scientific and educational meetings) by planning invitations and events, creating registrations, event evaluation and request forms and taking photos, videos, etc. during the event,
Through correspondence carried out via our e-mail addresses (promotion, catalogue, request, proposal, news, bulletin, newspaper, interview, campaign, announcement, survey, special/important day celebrations, invitation, on-line registration form, event request and evaluation forms),
Through all kinds of communication tools including messages sent for our company activities (SMS, multimedia messages, whatsapp, messenger, Skype, etc.),
By means of telephone calls made through our company's switchboards/operators/company employees,
Through third parties within the scope of business activities,
Through channels where you have made your personal data public,
Through the entrance-exit records of our company and the cameras we have placed in the workplace building,
Through written documents that you transmit physically or electronically

It is collected and processed automatically or non-automatically through verbal, written, electronic, camera and mobile applications.

5) Rights of the Personal Data Owner Pursuant to Article 11 of the Law

Pursuant to Article 11 of KVKK regarding your processed personal data; to learn whether your personal data has been processed, to request information if your personal data has been processed, to learn the purpose of processing your personal data and whether they are used in accordance with their purpose, to know the third parties to whom your personal data is transferred domestically or abroad, to request correction of your personal data in case of incomplete or incorrect processing, to request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK, In case of correction, deletion or destruction of your personal data, you have the right to request notification of these transactions to third parties to whom your personal data has been transferred, to object to the occurrence of a result to the detriment of the person himself/herself by analysing your processed data exclusively through automated systems, and to demand compensation for damages in case you suffer damage due to unlawful processing of your personal data.

Your requests within the scope of Article 11 of Law No. 6698, in accordance with the application procedures stipulated in the "Communiqué on the Procedures and Principles of Application to the Data Controller", with your secure electronic signature or mobile signature defined in the Electronic Signature Law No. 5070, -@hs01.kep.tr e-mail address or our company "Dokuz Eylül University Inciraltı Campus Mithatpaşa Cad. Depark Health, Olive Building No:56/20 Office: Z15-Z16 Balçova/İZMİR " in writing in person or through a notary public, the Company will finalise your request free of charge within 30 (thirty) days at the latest depending on its nature. In the event that an additional cost arises regarding the finalisation of the requests by the Company, the fees in the tariff determined by the Personal Data Protection Board may be requested by the Company.

K.V.K.K. Personal Data Protection Law

How can we help you?