Website Personal Data Processing Information Notice
Arvatera İlaç San. ve Tic. A.Ş., we attach great importance to the processing and preservation of your personal data in compliance with the Law on the Protection of Personal Data No. 6698 (“Law”). We would like to inform you about our purpose and method of collecting, processing, and transferring our customers’ personal data, as well as your rights arising from the Law.
1. Identity of the Data Controller
The operator of the website https://arvatera.com.tr// (“Website”), located at Reşitpaşa Mah. Eski Büyükdere Cad. Windowist No:26 Interior Door No: 9, 34485 Maslak / Sarıyer / Istanbul, is Arvatera İlaç San. ve Tic. A.Ş. (Trade Registry Office: Gebze, Registration Number: 20188) (“Arvatera”), which acts as the Data Controller.
2. Processed Personal Data
The personal data processed by Arvatera through the Website are those obtained when you access the Website and in line with your cookie preferences (or personal data you share through the forms filled out on the Website).
Through the contact form and the suggestions and complaints form available on the Website, the following personal data are processed: Name, Surname, phone number, e-mail address, country information, and any personal data you include in the message content you share with us.
During the form-filling process, cookies used on the site may also result in the processing of information such as the IP address at the time the form is filled, device information, and internet browser information, which may identify or make you identifiable. Please refer to our Cookie Policy regarding the processing of such data.
3. Purposes and Legal Grounds for Processing Personal Data
The personal data specified in the “Processed Personal Data” section by Arvatera are processed in compliance with the personal data processing principles set forth in Article 4 of the PDP Law, based on one or more of the personal data processing conditions listed in Article 5 of the PDP Law. Within this scope, your personal data may be processed on the following legal grounds:
- On the legal ground of the existence of legitimate interest, provided that it does not harm your fundamental rights and freedoms, for the purpose of ensuring the seamless operation and security of the Website,
- On the legal ground of establishing or performing a contract, for the purpose of fulfilling requests you have conveyed to us through the Website and enabling communication,
- On the legal ground of necessity for the establishment, exercise, or protection of a right, for purposes such as resolving legal disputes and lawsuits, fulfilling legal demands, obtaining legal advice, making or defending legal claims, and meeting the burden of proof in a potential dispute,
- On the legal ground of your explicit consent, for purposes of communication, advertising, and marketing activities, including informing you about new products and campaigns, as well as contacting you for any commercial or non-commercial purposes, in the event that you have given your consent under the Law on the Regulation of Electronic Commerce by registering for an e-newsletter and providing your contact details such as e-mail address and mobile phone number,
- On the legal ground of your explicit consent, for the purposes of managing the data held by Arvatera, determining and implementing commercial and business strategies, distributing e-mails, conducting research and analysis, and managing brand and product promotions as well as certain services and features.
It can be processed. Your personal data may be processed for as long as necessary in line with the above purposes, are kept accurate and up-to-date, used in connection with, limited to, and proportionate to the purposes for which they are processed, and are stored for a reasonable retention period determined in compliance with the law.
4. To Whom and For What Purpose the Processed Personal Data May Be Transferred
In line with the purposes stated above, Arvatera may, in certain cases, transfer your processed personal data to third parties in order to fulfill the above-mentioned purposes, on the legal grounds of performance of a contract, compliance with a legal obligation, overriding legitimate interest, or your explicit consent, in accordance with the legislation, particularly Article 8 of the PDP Law.
Within this scope, for example, if you give consent for the sending of commercial electronic messages in accordance with the Law on the Regulation of Electronic Commerce, your data may be shared with service providers, and transferred to the Commercial Electronic Message Management System (“İYS”) in order to fulfill our legal obligations under the Regulation on Commercial Communication and Commercial Electronic Messages.
To ensure the legal and commercial security of Arvatera and the individuals in a business relationship with Arvatera; to comply with administrative requests, court decisions, or the law; to prevent unlawful use of our services or violations of the Terms of Use and other rules applicable on the website; to defend ourselves against third-party claims/demands; and to support the prevention or investigation of fraud (e.g., forgery, theft), your personal data may be transferred to supervisory authorities, courts, law firms, or legally authorized public institutions, or other third parties, on the legal ground of necessity for the establishment, exercise, or protection of a right, and to the extent necessary to exercise, assert, or defend legal rights. At the same time, in the event of a potential share transfer, merger, or investment, your personal data may be transferred to new shareholders on the legal ground of legitimate interest, provided that the performance of the contract is ensured and your fundamental rights and freedoms are not harmed.
The hosting services of our website are provided by companies located in _____. However, if you allow the use of third-party cookies located abroad on the website, your personal data may be transferred abroad in accordance with Article 9 of the PDP Law and based on appropriate safeguards, due to these service providers obtaining server services from abroad.
Access to your personal data processed by Arvatera will be granted only to those persons and organizations that need such access in order to fulfill the purposes specified above. Your personal data are not used for any purposes outside of these activities and are not sold for commercial purposes, except where you have provided explicit consent.
5. Method and Legal Grounds for Collecting Your Personal Data
Your personal data are collected for the purposes of conducting our commercial activities, providing you with access to the website, delivering products and services, and improving our processes, by directly sharing your personal data through the arvatera.com.tr/ website, registering to our SMS/e-mail lists, or through the documents you fill out via forms and fields during your communication with customer services, based on the legal grounds specified under Section 3. Purposes and Legal Grounds for Processing Personal Data, by automated and non-automated means.
6. Legal Rights Regarding Your Processed Personal Data
Pursuant to the PDP Law, you may submit your requests and questions regarding your rights by including your identity, telephone, and address information that will help us identify you and contact you, in writing and signed, and send them via registered mail to the company headquarters address specified in Article 1 in accordance with the Communiqué on the Principles and Procedures for Application to the Data Controller. You may also personally deliver your application or submit it to us through the contact address kvkk@arvatera.com.tr available on our Website.
If the process requires an additional cost, the fee determined in the tariff set by the Personal Data Protection Board will be charged by us. The rights of real persons whose personal data is processed pursuant to Article 11 of the LPPD, are as follows: i. Learning whether personal data is being processed, ii. Requesting information whether their data have been processed, iii. Learning the purpose of processing personal data and whether they are used in accordance with their purpose, iv. Knowing the third parties in the country or abroad to whom personal data have been transferred; v. Requesting correction in case personal data are processed incompletely or inaccurately and requesting notification of the transactions made to third parties to whom personal data have been transferred, vi. Although it has been processed in accordance with the provisions of the LPPD and other relevant laws, requesting the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and requesting that the transaction carried out within this scope be notified to third parties to whom personal data is transferred, vii. Objecting to the emergence of a result to the detriment of the person by analyzing the processed data exclusively through automated systems, viii. Requesting compensation in case of damages due to unlawful processing of personal data.