This Privacy Notice has been prepared under Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, in order to inform those who visit the ddlmedikal.com website or contact us through it.
1. Data Controller
Your personal data is processed by [UNVAN] (“DDL Medikal” or the “Company”) as the data controller. Address: Seyrantepe, Yılmaz Sk. No:11, 34418 Kağıthane / İstanbul. Email: [email protected]. KEP (registered electronic mail) address: [KEP].
2. Personal Data Processed
The following data is processed through the contact / quotation form and the careers form on the website:
- Identity and contact details: full name, company name, telephone number, email address.
- Request details: form topic, message content and any other information you choose to share in your message.
- Transaction security details: the date and time the form was submitted, the page it was submitted from, the record of your confirmation that you have read the notice; and, to prevent misuse, your IP address and browser information.
- Visit and usage details: only if you accept analytics cookies in your cookie preferences, statistical data such as page views, device and approximate location collected through Google Analytics 4 (see the Cookie Policy for details).
We do not ask you to share personal data such as a CV, identity document, photograph or health information through the careers form. Such data should not be sent through the form; our team will let you know about the application process after you submit it.
3. Purposes of Processing Personal Data
- Receiving and assessing the requests, questions or partnership proposals you send through the form, and replying to you,
- Routing contract manufacturing, product and distribution enquiries to the relevant department and following them up,
- Responding to applications and information requests sent through the careers form,
- Ensuring the security of the website and preventing misuse and automated submissions,
- With your cookie consent, analysing website usage statistically and improving the website,
- Fulfilling our legal obligations and protecting our rights in the event of any dispute.
4. Legal Grounds for Processing
| Purpose | Legal ground under KVKK Art. 5/2 |
|---|---|
| Receiving, assessing and replying to your request | Processing is directly related to the establishment or performance of a contract (Art. 5/2-c); legitimate interests of the data controller, provided that they do not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f) |
| Replying to information requests sent through the careers form | Taking steps at the data subject’s request prior to entering into a contract (Art. 5/2-c); legitimate interests (Art. 5/2-f) |
| Website security and prevention of misuse | Legitimate interests (Art. 5/2-f) |
| Fulfilling legal obligations; establishing, exercising and protecting rights | Legal obligation (Art. 5/2-ç); establishment, exercise or protection of a right (Art. 5/2-e) |
| Producing statistics with analytics cookies | Explicit consent (Art. 5/1). If you do not consent, analytics cookies are not run. |
5. Method of Collecting Personal Data
Your personal data is collected electronically, by automated or partly automated means, when you fill in and submit the forms on the website and, depending on your cookie preference, through your browser.
6. Recipients of Personal Data and Transfers Abroad
For the purposes above and in accordance with Articles 8 and 9 of KVKK, your personal data may be shared with the following service providers:
| Recipient / service | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Website and database server (hosting) | European Union (Germany / Finland) |
| Cloudflare, Inc. | Content delivery network (CDN), domain and security services | Global infrastructure; headquartered in the USA |
| Google Ireland Ltd. / Google LLC (Google Analytics 4) | Website usage statistics; only with your cookie consent | Ireland / USA |
| Our own email server | Delivery and storage of form notifications and correspondence | Server operated by the Company |
Within the scope of hosting, CDN and analytics services, your data may be transferred to servers abroad. Transfers abroad are made in accordance with the conditions set out in Article 9 of KVKK (adequacy decision, appropriate safeguards or explicit consent). For analytics cookies, the basis for the transfer is the explicit consent you give in the cookie banner. Your personal data is not sold to third parties or shared for marketing purposes, other than as stated above; where legally required, it may be shared with authorised public institutions and organisations.
7. Retention Periods
| Data | Retention period |
|---|---|
| Contact / quotation form and careers form records | Up to 2 years from the conclusion of the request |
| Transaction security records (IP address, date and time) | Up to 1 year |
| Data relating to analytics cookies | Up to 14 months in Google Analytics 4; see the Cookie Policy for cookie lifetimes |
| Relevant data in the event of a legal dispute, inspection or statutory obligation | For the limitation and retention periods under the relevant legislation |
When the period ends, your personal data is deleted, destroyed or anonymised.
8. Your Rights as a Data Subject (KVKK Art. 11)
Under Article 11 of KVKK, you may exercise the following rights by applying to the data controller:
- To learn whether your personal data is processed,
- To request information if it has been processed,
- To learn the purpose of processing and whether it is used in accordance with that purpose,
- To know the third parties to whom it is transferred, in Türkiye or abroad,
- To request correction if it is incomplete or inaccurate,
- To request deletion or destruction within the framework of the conditions set out in KVKK, and to request that this be notified to the third parties to whom the data has been transferred,
- To object to a result that is to your detriment arising from the analysis of the processed data exclusively by automated systems,
- To claim compensation for damage if you suffer damage due to unlawful processing.
9. How to Apply
You can send your requests regarding the rights above, together with information that identifies you, in writing to Seyrantepe, Yılmaz Sk. No:11, 34418 Kağıthane / İstanbul by hand or by post, send them to [KEP] with a secure electronic signature, or write from your registered email address to [email protected]. Your applications are concluded free of charge within thirty days at the latest, depending on the nature of the request; if the process requires a separate cost, the fee in the tariff set by the Personal Data Protection Board may be charged.
If you find the response to your application insufficient or no response is given in time, you retain the right to lodge a complaint with the Personal Data Protection Board within thirty days of learning of the response and in any case within sixty days of the date of your application.
10. Changes
This notice may be updated according to changes in legislation or in our data processing activities. The current version is published on this page.