PRIVACY & SECURITY POLICY AND LAW ON THE PROTECTION OF PERSONAL DATA LIGHTING TEXT

Podima Medikal ve Tekstil San. Trade Ltd. Sti. (hereinafter referred to as Podima) in accordance with the Clarification Obligation as the Data Controller of this “Privacy & Security Policy and the Law on Protection of Personal Data”, which is available on the website of [www.podimamedical.com] (hereinafter referred to as Podima Web Site). In order to protect your fundamental rights and freedoms, it has been prepared to bring to the attention of you, our valued visitors, on what legal grounds and with which methods we collect your personal data obtained by us, how we process your obtained data, and how we ensure your data security.

The Law on Protection of Personal Data No. 6698 (KVKK) entered into force by being published in the Official Gazette No. 29677 on 07.04.2016. KVKK aims to protect the fundamental rights and freedoms of natural persons whose personal data are processed, including the privacy of private life, which is also protected by the Constitution, and to determine the obligations of natural and legal persons who process personal data as data controllers.

Podima reserves the right to update and make changes in the Clarification Text pursuant to this Privacy & Security Policy and the Law on the Protection of Personal Data in line with the provisions of the KVKK and the applicable legislation.

1. PERSONAL DATA

According to KVKK, personal data means any information relating to an identified or identifiable natural person. This information is information such as the name, surname, date of birth, gender, identity number, e-mail address, domicile/delivery address, telephone number of a certain person, and is defined as personal data in our legal legislations, as they can make the person identifiable.

2. PROCESSING OF PERSONAL DATA AND PURPOSE OF PROCESSING

All kinds of operations performed on the data such as the processing of personal data, obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automated means. means.

Your personal data by Podima, limited to the purposes specified in the Clarification Text pursuant to this Privacy & Security Policy and Personal Data Protection Law, and in particular the Law No. 6563 on the Regulation of Electronic Commerce, the Law on the Protection of Personal Data No. 6698, the Law on the Protection of the Consumer No. 6502 and the Regulation on Distance Contracts. It is processed by us for the period specified in the laws due to our legal obligation arising from the relevant legal regulations.

Our Main Personal Data Processing Purposes;

Planning or executing activities related to visitor satisfaction,

Organization, planning or execution of event processes and activities,

Planning or execution of sales processes of products or services,

Follow-up of customer requests or complaints,

Follow-up of contract processes or legal requests,

Planning and executing the operational activities necessary to ensure that Podima activities are carried out in accordance with Podima procedures or relevant legislation, and ensuring security,

Ensuring that personal data is accurate and up-to-date,

Giving information to authorized institutions based on legislation,

When the Podima website is accessed, the “Register for our E-Newsletter” will appear on the main page of the site. and “Join Mail Group.” located at the bottom right of the website. If you, our valued visitors or members, fill in your mobile phone number or e-mail address with your free will and share it with us in order to contact us, it is accepted that you give your express consent for the processing of your phone number and also your e-mail address (personal data). . The processed personal data is processed in accordance with the law and relevant legal regulations, limited to the purposes of communicating with you, informing you about advertisements and campaigns, and for a period of time to be related to the stated purposes.

If the membership information is filled in the Podima website through the online system, and the “Membership Agreement, Privacy & Security Policy and Personal Data Protection Law I have read and I accept” box in the relevant section is ticked with free will and the membership process is completed after this process. Personal data of the person who is a member regarding the establishment and performance of the distance sales contract, consumer contract and other related contracts are processed, recorded, stored and stored by Podima.

3. GENERAL PRINCIPLES OF PROCESSING PERSONAL DATA

Podima accepts, declares and undertakes that it complies and will comply with the following basic principles when processing personal data.

Compliance with the law and the rules of honesty,

Being accurate and up-to-date when necessary,

Processing for specific, explicit and legitimate purposes,

Being connected, limited and measured with its purpose,

Storage for as long as necessary for the purpose for which it operates.

4. DATA SECURITY

Podima will establish the necessary systems and control mechanisms for the deletion, destruction or anonymization of the personal data it obtains, prevent the unlawful processing of the data, prevent unlawful access to the data, ensure the preservation of the data and take all kinds of technical and administrative measures in this direction, within its own structure and accepts, declares and undertakes that if the data is processed by another natural person or legal person, it will carry out and have the necessary inspections made and also take all kinds of technical and administrative measures.

In case the processed personal data is obtained by others unlawfully, Podima notifies the person concerned and the Personal Data Protection Board. It will notify the Data Protection Board.

5. TRANSFER OF PERSONAL DATA

• DOMESTIC DATA TRANSFER

Podima can transfer the personal data it obtains to the 3rd real or legal persons in the country only with the express consent of the person concerned.

The transfer of the personal data of the person concerned to the 3rd real or legal person without his explicit consent is available in the following cases and may be transferred to the persons authorized in accordance with the law and in connection with the purpose.

clearly stipulated in the law,

It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally valid,

It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,

It is mandatory for the data controller to fulfill its legal obligation,

The person concerned has been made public by himself,

Data processing is mandatory for the establishment, exercise or protection of a right,

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,

• TRANSFER OF DATA ABROAD

Podima can transfer the personal data it obtains to third natural or legal persons abroad only with the express consent of the person concerned.

In order to transfer personal data abroad, in the foreign country to which the personal data will be transferred, with the domestic transfer conditions stated above;

Availability of adequate protection

In the absence of sufficient protection, Podima may transfer personal data abroad without seeking the explicit consent of the data subject, provided that the data controllers in Turkey and in the relevant foreign country undertake an adequate protection in writing and that the Board has permission.

Countries with sufficient protection as explained above will be determined and announced by the Personal Data Protection Board. In case the safe countries are announced by the Board, personal data can be transferred abroad without the need for permission from the Personal Data Protection Board and without the need for the data controllers in foreign countries to undertake to protect them in writing.

6. RIGHTS OF THE RELATED PERSON

The natural persons whose personal data are processed have the right to apply to Podima as a data controller in order to implement the provisions of the KVKK and other relevant legislation, and the rights you have as a data subject in accordance with Article 11 of the KVKK are presented below for your information;

Learning whether personal data is processed or not,

If personal data has been processed, requesting information about it,

Learning the purpose of processing personal data and whether they are used in accordance with its purpose,

Knowing the third parties to whom personal data is transferred at home or abroad,

Requesting correction of personal data in case of incomplete or incorrect processing,

Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,

Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,

Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

To request the compensation of the damage in case of loss due to the unlawful processing of personal data,

7. APPLICATION TO DATA SPEAKER

The data subject whose personal data is processed accepts that he/she is under the obligation to apply to Podima as a data controller within the most appropriate time frame in connection with the exercise of the right, if he/she requests the exercise of his/her rights regarding the personal data processed or learned to be processed by Podima.

The Relevant Person accepts that they are under the obligation to submit their applications to Podima in writing via registered letter/notary public or e-mail with the subject explanation of the “Information Request on the Law on the Protection of Personal Data”.

In order to exercise the rights set forth in article 6, titled the rights of the data subject above, in accordance with Article 5/2 of the Communiqué on the Procedures and Principles of Application to Data Controller, which was published in the Official Gazette No. 30356 on 10.03.2018, in order to respond in accordance with the law and legislation. The obligatory matters to be included in the application are presented below for your information;

Name, surname and signature if the application is written,

For citizens of the Republic of Turkey, T.C. identification number, nationality for foreigners, passport number or identification number, if any,

Domicile or workplace address for notification,

If available, the e-mail address, telephone and fax number for notification,

Demand.

The petition containing the above-mentioned information and documents and explanations for the requested right, ” Şerifali mah. Mevdudi St. No:53/1Ümraniye/iSTANBUL” or via a notary public or to info@podimadikal e-mail address.

Podima accepts and undertakes that it will finalize the requests in the application as soon as possible and within thirty days at the latest, depending on the nature of the request. In case of a written response to the application, the person concerned will not be charged up to 10 (ten) pages in accordance with Article 8 of the relevant Communiqué, and a processing fee of 1 Turkish Lira will be charged for each page over 10 (ten) pages.

If the response to the application is given in a recording medium such as CD or flash memory, the fee that may be requested by the data controller will be in proportion to the cost of the recording medium.

Podima accepts the request regarding the exercise of the right directed to it by the person concerned in the capacity of data controller or has the right to reject it by explaining the reason. In this case, the data controller accepts that it is under the obligation to notify the person in writing or electronically about the response to the request. If the request in the application is accepted, the data controller accepts and undertakes that he is under the obligation to fulfill the request.

In cases where the application is rejected, the answer given is insufficient, or the application is not answered in due time (30 days); The person concerned has the right to file a complaint with the Personal Data Protection Board within thirty (30) days from the date of learning the answer of the data controller and in any case within sixty (60) days from the date of application.

If the application is caused by Podima’s fault, the fee will be returned to the relevant person.

8. COOKIE POLICY

Cookies are small text files that are stored on your device or network server via browsers by the websites you visit.

There is the use of cookies on the Podima website, and the purpose of the use of cookies is to improve the user experience of our visitors and our members who are members of our website, to develop and optimize the site, to present more appropriate, interest-based advertisements, to provide interesting and attractive services for visitors. to provide a personalized website and advertising portfolio, to ensure the legal and commercial security of our visitors, members and Podima, and thus to ensure that they benefit from the site in the most efficient way.

The Podima website works with third-party reliable and well-known advertising providers, and the cookies placed by the third party collect the navigation information of our visitors and are intended for the function of directing you by using your information in line with your interests.

Regarding the use of cookies on the Podima website, if our visitors access the website, “We use cookies to make the most of our website.” A small box with the text of the text appears and thus we inform our visitors about the use of cookies. If you close this text box of your own free will, we assume that you are aware of the use of cookies and that you accept the use of cookies. Even if you have voluntarily accepted the use of cookies in this regard, you always have the right to opt out of the use of cookies through your internet provider. However, we would like to point out that if the use of cookies is removed, you will not be able to view our website properly.

9. UPDATE PERIOD

In line with the economic and commercial decision of Podima or the policy decisions of the Personal Data Protection Board, this Privacy & Security Policy and the Law on the Protection of Personal Data will always be published with changes in the Clarification Text.

10. ENFORCEMENT

In accordance with this Privacy & Security Policy and the Law on the Protection of Personal Data, the Clarification Text comes into effect by ticking the “I ACCEPT” box by the person concerned.