KVKK Disclosure Statement
General information about the Law on Personal Data
The Law on the Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette dated April 7, 2016, numbered 29677. Some parts of the KVKK came into force on the date of publication, while others came into force on October 7, 2016.
Information as Data Controller
Pursuant to the KVKK No. 6698 and in our capacity as Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties in cases permitted by law, classified, and processed by us in the ways listed in the KVKK, within the framework described on this page.
How your personal data may be processed
Pursuant to KVKK No. 6698, your personal data shared with our Company may be processed by us, entirely or partially, automatically, or non-automatically provided that it is part of any data recording system, by obtaining, recording, storing, modifying, reorganizing, in short, by subjecting it to all kinds of processing operations performed on data. Any operation performed on data within the scope of KVKK is considered "processing of personal data."
Purposes and legal grounds for processing your personal data
The personal data you share is processed for the following purposes:
-
To fulfill the requirements of the services we provide to our customers in accordance with the contract and technology, and to improve our products and services;
-
To record identity, address, and other necessary information to identify the transaction owner within the scope of the Law on Regulation of Electronic Commerce No. 6563, the Law on Consumer Protection No. 6502, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, the Regulation on Distance Contracts published in the Official Gazette No. 29188 dated 27.11.2014, and other relevant legislation;
-
To arrange all records and documents that will serve as a basis for processing in payment systems, electronic contracts, or paper media, which are mandatory in the banking and electronic payment field; to comply with information storage, reporting, and notification obligations foreseen by legislation and other authorities;
-
To provide information to prosecutor's offices, courts, and relevant public officials when requested and required by legislation, in matters related to public safety and legal disputes.
Your personal data will be processed in accordance with KVKK No. 6698 and relevant secondary regulations. Information about third parties or organizations to whom your personal data may be transferred For the purposes mentioned above, the persons/organizations to whom your personal data shared with our Company may be transferred are; primarily IdeaSoft Yazılım San. ve Tic. A.Ş., which provides our Company's e-commerce infrastructure, suppliers, cargo companies, and other individuals and organizations related to the services provided, program partner organizations with whom we cooperate and/or receive services as Data Processors to carry out our activities, domestic/international organizations, and other third parties.
Method of collecting your personal data
Your personal data is collected:
-
Through forms on our Company's website and mobile applications, including information such as name, surname, TR ID number, address, phone, business or private email address; preferences on pages accessed using a username and password, IP records of performed transactions, cookie data collected by the browser, and data containing browsing time and details, in the form of location data;
-
Verbally, in writing, or electronically through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call center channels;
-
From individuals who share their personal data for purposes such as establishing a commercial relationship with our Company, applying for a job, submitting a bid, through business cards, resumes (CVs), bid submissions, and other means, in a physical or virtual environment, face-to-face or remotely, verbally or in writing or electronically;
-
Additionally, data obtained indirectly from different channels, from (micro) websites and social media used for purposes such as websites, blogs, contests, surveys, games, campaigns, and similar purposes, e-newsletter reading or clicking actions, data provided by publicly available databases, and publicly shared profiles and data from social media platforms, can be processed and collected.
Your personal data obtained before the KVKK came into force
Your personal data, which was lawfully obtained before April 7, 2016, the effective date of the KVKK, through membership, electronic communication consent, product/service purchase, and other forms, is also processed and stored in accordance with the terms and conditions set forth in this document.
Transfer of your personal data abroad
Your personal data collected by any of the methods listed above, to be processed in Turkey or processed and stored outside Turkey, may be transferred to service intermediaries abroad (to countries accredited by the Personal Data Board and where there is adequate protection for personal data) provided that it remains within the scope of the KVKK and in accordance with the purposes of the contract.
Storage and protection of personal data
Your personal data will be stored confidentially in the databases and systems of our Company in accordance with Article 12 of the KVKK; it will not be shared with third parties under any circumstances, except for legal obligations and the regulations specified in this document. Our Company is obliged to prevent the unlawful processing of personal data, prevent unauthorized access, and take software measures such as access management and physical security measures, in accordance with Article 12 of the KVKK. If it is learned that personal data has been obtained by others through unlawful means, the situation will be immediately reported to the Personal Data Protection Board in writing and in accordance with the legal regulation.
Keeping personal data accurate and up-to-date
In accordance with Article 4 of the KVKK, our Company has the obligation to keep your personal data accurate and up-to-date. In this context, for our Company to fulfill its obligations arising from the current legislation, our Customers must share their accurate and up-to-date data or update it via the website/mobile application.
Rights of the personal data owner under KVKK No. 6698
Article 11 of the KVKK No. 6698 came into force on October 7, 2016, and in accordance with the relevant article, the Personal Data Owner's rights after this date are as follows: The Personal Data Owner, by applying to our Company (data controller), regarding themselves;
-
To learn whether personal data is processed,
-
To request information if personal data has been processed,
-
To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
-
To know the third parties to whom personal data is transferred in the country or abroad,
-
To request correction of personal data if it is incomplete or incorrectly processed,
-
To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
-
To request that these operations be notified to third parties to whom personal data has been transferred, in case of correction, deletion, or destruction of personal data,
-
To object to the occurrence of a result against the person themselves by analyzing the processed data exclusively through automated systems,
-
To request compensation for damages if personal data is processed unlawfully,
rights. Pharmabox Sağlık Ürünleri Ticaret İthalat İhracat Ltd.Şti., registered with the Antalya Chamber of Commerce under registration number 137060, MERSIS number 0729133107900001, located at Cihadiye Mahallesi Serik Caddesi. No 199 Aksu Antalya / 07112, is the Data Controller within the scope of KVKK. The Data Controller Representative to be appointed by our Company will be announced in the Data Controllers Registry and on the internet address where this document is located, when the legal infrastructure is provided. Personal Data Owners can direct their questions, opinions, or requests through any of the following communication channels:
Email: info@nuvite.com.tr
Phone: 0242 426 28 28