PROTECTION OF PERSONAL DATA AND PRIVACY POLICY

At DentaLab, we respect the personal data you share with us and attach importance to protecting fundamental rights and freedoms, especially the privacy of private life. We would like to inform you in detail about the protection of your personal data pursuant to the Law on the Protection of Personal Data No. 6698 (“KVKK”), the ways your personal data is obtained, the purposes for which it is processed, the legal reasons, and our mutual rights and obligations.

Your personal data may be obtained, recorded, stored, disclosed, transferred to third parties or abroad to the extent permitted by legislation, or otherwise processed by Elit Pharma Kozmetik ve İlaç Sanayi Tic. Ltd. Şti., in its capacity as Data Controller, in accordance with the provisions of the KVKK and within the framework explained below.

Collection of Your Personal Data

Your personal data may be collected by automatic or non-automatic means; verbally, in writing, or electronically, in order to fulfill our legal obligations arising from the relevant legislation and to carry out collection, invoice issuance, and order delivery processes.

Purposes for Which Your Personal Data Will Be Processed

Within our company, personal data will be processed for the following purposes: planning and execution of commercial activities; providing information to authorized institutions and organizations as required by legislation; provision of payment services; delivery of orders; realization of collections; issuance of invoices; resolution of consumer complaints; sending commercial electronic messages if you give explicit consent; planning and execution of necessary audit activities to ensure that activities are carried out in accordance with company procedures and relevant legislation; planning and execution of corporate sustainability activities; efforts to protect corporate reputation; management of request and complaint processes; and planning and execution of corporate governance and communication activities. Processing will be carried out in accordance with the principles of lawfulness and fairness; being relevant, limited, and proportionate to the purposes for which they are processed; and being retained for the period stipulated in the relevant legislation or required for the purpose.

Transfer of Your Personal Data

The personal data obtained from you may be shared, for the purposes above and in line with the relevant principles, with the Ministry of Trade of the Republic of Türkiye; domestic/overseas public/private institutions and organizations, companies, and our company’s consultants/solution partners with whom we receive services/support/consultancy or cooperate; group companies; other authorized institutions and organizations; suppliers or subcontractors; and persons/institutions permitted by the Turkish Commercial Code and relevant legislation. It may be shared with legally authorized public and/or private legal entities for the purpose requested within the scope of their legal authority, and with persons/institutions permitted or required by legislation, upon requests from official authorities.

In addition, pursuant to Articles 5 and 8 of the KVKK and/or within the scope of exceptions in the relevant legislation, data may be processed and shared with third parties without obtaining the data subject’s additional consent. The main situations include: being expressly stipulated in laws; being necessary to protect the life or physical integrity of the person who is unable to express consent due to actual impossibility, or of another person; being necessary for the establishment or performance of a contract between the data subject and the company; necessity to fulfill legal obligations; the data subject making their data public; necessity of data processing for the establishment, exercise, or protection of a right; and necessity of data processing for the legitimate interests of the company provided that it does not harm the fundamental rights and freedoms of the data subject.

Method and Legal Reason for Collecting Personal Data

Your personal data is obtained in any verbal, written, or electronic environment for the purposes above, so that the services provided by DentaLab can be delivered within the defined legal framework and, in this context, so that our company can fulfill its contractual and legal obligations completely and accurately. Based on this legal reason, your personal data collected may be processed and transferred for the purposes stated above within the scope of the data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

Rights of the Personal Data Owner

If you submit your requests to us as personal data owners, your request will be finalized free of charge as soon as possible and at the latest within thirty (30) days, depending on the nature of the request. If a fee is stipulated by the Personal Data Protection Board, the fee in the determined tariff may be charged. Within this scope, data subjects have the right to: learn whether personal data is processed; request information if it has been processed; learn the purpose of processing and whether it is used in accordance with this purpose; know the third parties to whom the data is transferred domestically or abroad; request correction if it is incomplete or incorrectly processed and request notification of the transaction made within this scope to third parties to whom it has been transferred; request deletion or destruction in the event that the reasons requiring processing cease to exist despite being processed in accordance with the KVKK and other relevant laws, and request that this be notified to third parties; object to the emergence of a result against them by analyzing the data exclusively through automated systems; and request compensation in the event of damage due to unlawful processing.

You may submit your request to exercise these rights to us in writing together with information verifying your identity and including your explanations regarding your rights in Article 11 of the KVKK, or in a manner in compliance with the procedure to be determined by the Board.

Deletion, Destruction, or Anonymization of Your Personal Data

Pursuant to Article 7 of the KVKK, even if personal data is processed in accordance with the relevant legislation, it shall be deleted, destroyed, or anonymized by our company ex officio or upon the request of the data subject if the reasons requiring its processing cease to exist. The procedures and principles are carried out in accordance with the KVKK and the “Regulation on the Deletion, Destruction or Anonymization of Personal Data” published in the Official Gazette dated 28.10.2017 and numbered 30224.

The necessary actions are taken within 3 (three) months following the date on which the obligation to delete, destroy, or anonymize arises. When you apply to our company and request the deletion or destruction of your personal data:

a) If all conditions for processing personal data have ceased to exist, the personal data subject to the request shall be deleted, destroyed, or anonymized, and your request shall be finalized within 30 days at the latest and you shall be informed.

b) If all processing conditions have ceased to exist and the data has been transferred to third parties, this situation shall be notified to the relevant third parties and the performance of the necessary procedures within the scope of the regulation shall be ensured.

c) If all processing conditions have not ceased to exist, your request may be rejected by explaining the reason pursuant to Article 13/3 of the KVKK, and the rejection response shall be notified to you in writing or electronically within 30 days at the latest.

www.dentalab.com.tr