shape

Pharma Care Sağlık Hizmetleri Lojistik A.Ş.
Customer-Potential Customer Privacy Notice

As Pharma Care Sağlık Hizmetleri Lojistik A.Ş. (hereinafter referred to as “Pharmacare”), we have prepared this Clarification Text on the Processing of Personal Data (“Clarification Text”) to inform data owners about the processing, storage, and transfer of their personal data within the scope of our activities arising from the Law on the Protection of Personal Data No. 6698 (“KVKK”) and related legislation and legal regulations.

 

This Clarification Text is effective as of the date it is published by Pharmacare. Pharmacare reserves the right to amend this Clarification Text at any time when necessary. Any amendments shall become effective upon their publication on the relevant internet address.

 

Relevant Persons: Service Recipients (Customers/Potential Customers)

 

 

Data Category

Processed Personal Data

Purpose of Processing

Legal Grounds

Data Collection Methods

 

01 – Identity Data

Name, Surname, Signature, Turkish ID No./Tax Number

Execution of financial and accounting processes, logistics activities, product/service sales processes, contract processes, ensuring physical security, visitor registration and tracking, evaluation of your requests

  • Turkish Commercial Code No. 6102
  • Tax Procedure Law No. 213
  • Personal Data Protection Law No. 6698
  • Article 5/2-c: Processing necessary for the performance of a contract
  • Article 5/2-ç: Processing necessary for the data controller’s legal obligations
  • Article 5/2-e: Processing necessary for the establishment, exercise, or defense of a right

Via email, phone, contracts, and delivery notes

02 – Contact Data

Address, Email, Phone Number

Execution of financial and accounting processes, logistics activities, product/service sales processes, contract processes, tracking, evaluation of your requests, execution of communication activities

  • Turkish Commercial Code No. 6102
  • Personal Data Protection Law No. 6698
  • Article 5/2-e: Processing necessary for the establishment, exercise, or defense of a right

During the sale of goods/services and service processes via email, phone, contracts

05- Legal Transaction

Power of attorney, signature circulars, contracts

Legal compliance of activities, financial/accounting processes, contract and sales execution

  • Turkish Commercial Code No. 6102
  • Personal Data Protection Law No. 6698
  • Article 5/2-c: Processing necessary for the performance of a contract
  • Article 5/2-e: Processing necessary for the establishment, exercise, or defense of a right

During business transactions via email, physical delivery by the customer or courier, or in person

06- Customer Transaction Data

Invoices, cheque/bill of exchange details

Legal compliance of activities, financial/accounting processes, contract and sales execution

  • Turkish Commercial Code No. 6102
  • Tax Procedure Law No. 213
  • Personal Data Protection Law No. 6698
  • Article 5/2-c: Processing necessary for the performance of a contract
  • Article 5/2-e: Processing necessary for the establishment, exercise, or defense of a right

During business transactions via email, physical delivery by the customer or courier, or in person

07 – Physical Space Security

CCTV footage

Ensuring physical space security

  • Personal Data Protection Law No. 6698
  • Article 5/2-f: Processing necessary for the data controller’s legitimate interest provided it does not violate the fundamental rights and freedoms of the data subject

Automatically via camera systems during site visits

10 – Financial Data

Bank info, IBAN, credit card info

Financial/accounting processes, execution of sales

  • Turkish Commercial Code No. 6102
  • Personal Data Protection Law No. 6698
  • Article 5/2-e: Processing necessary for the establishment, exercise, or defense of a right

Via email, phone, order forms, delivery notes, or directly from customers

 

 

 

 

 

RECIPIENTS AND PURPOSE OF PERSONAL DATA TRANSFER

Your personal data collected by Pharmacare is transferred in accordance with Articles 8 and 9 of Personal Data Protection Law No. 6698

 

Data Category

Transfered Data

Purpose of Transfer

Recipients

Transfer Method

International Transfer

01 – Identity Data

Name, Surname, Signature, Turkish ID No./Tax Number

Financial/accounting, legal procedures, logistics, sales, complaint tracking, reporting to authorities

Private individuals/legal entities, suppliers, public authorities, customers

Email, post

Due to systems used (Microsoft 365, Outlook, transferred to cloud systems like Barracuda Backup) being abroad

02 – Contact Data

Address, Email, Phone Number

Financial/accounting, logistics, sales, contract executions

Private individuals/legal entities, suppliers, public authorities

Email, post

Due to systems used (Microsoft 365, Outlook, transferred to cloud systems like Barracuda Backup) being abroad

05- Legal Transaction Data

Power of attorney, signature circulars, contracts

Financial/accounting, reporting to authorized persons and institutions

Private individuals/legal entities, public authorities, shareholders

Email, post

Due to systems used (Microsoft 365, Outlook, transferred to cloud systems like Barracuda Backup) being abroad

06- Customer Transaction Data

Invoices, cheque/bill of exchange details

Financial/accounting, reporting to authorized persons and institutions

Private individuals/legal entities, public authorities

Email, post

Due to systems used (Microsoft 365, Outlook, transferred to cloud systems like Barracuda Backup) being abroad

07 – Physical Space Security

CCTV Footage

Reporting to authorities

Public authorities

CD or USB

Due to systems used (Microsoft 365, Outlook, transferred to cloud systems like Barracuda Backup) being abroad

10 – Financial Data

Bank info, IBAN, credit card info

Financial/accounting, reporting to authorities

Private individuals/legal entities, suppliers, public authorities

Email, invoice, bank receipt

Due to systems used (Microsoft 365, Outlook, transferred to cloud systems like Barracuda Backup) being abroad

 

 

YOUR RIGHTS UNDER ARTICLE 11 OF THE KVKK

As the data subject, under Article 11 of the KVKK, you have the following rights:

  • To learn whether personal data is processed,
  • To request information if your data is processed,
  • To learn the purpose of data processing and whether it is used accordingly,
  • To know third parties to whom data is transferred domestically or abroad,
  • To request correction if your data is incomplete or incorrect and that such correction is shared with third parties,
  • To request deletion or destruction of your data if the reasons requiring processing cease to exist, and to request that this be shared with third parties,
  • To object to any result against you arising from analysis by automated systems,
  • To request compensation if you incur damage due to unlawful processing of your data

You can submit your requests regarding the rights listed above by filling out the Data Owner Application Form available at www.pharmacare.com.tr and delivering the signed form together with identification documents in person to the address “Oruçreis Mah. Vadi Cad. No: 108 İstanbul Ticaret Sarayı Kat: 3 Giyimkent Sitesi, Esenler/İstanbul” , via notary, or by sending it to kvkk@originfgl.com

Pharmacare will conclude your request free of charge within 30 days at the latest, depending on the nature of the request. However, if the process incurs a cost, the fee determined by the Personal Data Protection Board may be charged.

Applications must be made in Turkish. The application must include your name, surname, signature (if hand written), Turkish ID number (for Turkish citizens), passport/ID number (for foreigners), residential or workplace address for notification, email (if available), phone/fax number, and subject of the request.

In the application to be made by the personal data subject in order to exercise the above-mentioned rights, and which includes explanations regarding the right they request to exercise, the requested matter must be clear and understandable, the subject of the request must be related to the applicant personally, or if acting on behalf of someone else, the applicant must be specifically authorized in this regard and must document such authorization; the application must include identity and address information, and documents verifying the applicant’s identity must be attached.

This notification is made in the capacity of “Data Controller” under the KVKK.

Pharma Care Sağlık Hizmetleri Lojistik A.Ş.

Address

:

Oruçreis Mah. Vadi Cad. No:108 İstanbul Ticaret Sarayı K:3 Giyimkent Sitesi Esenler/İSTANBUL

E-mail

:

kvkk@originfgl.com

Web

:

www.pharmacare.com.tr