Commercial Transactions Information Notice

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA IN COMMERCIAL TRANSACTIONS

As Orzaks İlaç ve Kimya Sanayi Ticaret A.Ş., we place great importance on the security and confidentiality of your personal data. In this regard, we take all necessary measures to protect personal data and exercise the utmost care. We wish to inform the valued individuals with whom we supply and receive goods and services regarding the processing of their personal data. We also recommend that you review our Online Privacy Notice regarding the processing of your personal data online.

  1. DATA CONTROLLER

Our company processes your personal data in the capacity of “Data Controller” as defined in Article 3 of the Personal Data Protection Law No. 6698.

Orzaks Pharmaceuticals and Chemical Industry Trade Inc.

Address: Esentepe Mah. Büyükdere Cad. No:171 Metrocity Business Centre Block A, Floor 1, Şişli/Istanbul Telephone: 0212 447 47 37 Email address:info@orzax.com.tr KEP address: orzaksilac@hs01.kep.tr

  1. PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

The personal data we collect from you in the categories of identity, contact, transaction security, physical premises security, legal proceedings, customer transactions and finance, within the scope of quotation, contract, current account transactions, payment, collection, notification, business and strategy development activities;

  • Based on the legal ground of being expressly provided for by law (Law No. 6698, Article 5/2-a); your data in the categories of identity, contact, transaction security and customer transactions,
    • Conducting Activities in Compliance with Legislation
    • Conducting Financial and Accounting Operations
    • Monitoring and Conducting Legal Affairs
    • Conducting / Auditing Business Activities
    • Conducting Goods/Services Procurement Processes
    • Conducting Storage and Archiving Activities
    • Provision of Information to Authorised Persons, Institutions and Organisations
    • Conducting Management Activities

for the purposes of,

  • Provided that it is directly related to the conclusion or performance of a contract, and that the processing of personal data belonging to the parties to the contract is necessary (pursuant to Article 5(2)(c) of Law No. 6698 on the Protection of Personal Data ( ); we process your data in the categories of identity, contact, customer transactions, transaction security and finance,
    • Conducting activities in compliance with legislation
    • Conducting financial and accounting operations
    • Monitoring and conducting legal affairs
    • Conducting communication activities
    • Conducting/monitoring business operations
    • Conducting logistics activities
    • Execution of goods/services procurement processes
    • Execution of Supply Chain Management Processes
    • Conducting contract processes
    • Conducting storage and archiving activities
    • Provision of information to authorised persons, institutions and organisations

for the purposes of,

  • On the grounds that it is necessary for the data controller to fulfil its legal obligations (Law No. 6698, Article 5(2)(c)), we process your data in the categories of identification, contact, customer transactions, physical premises security and finance,
    • Conducting Activities in Compliance with the Law
    • Conducting Financial and Accounting Operations
    • Ensuring Physical Premises Security
    • Monitoring and Conducting Legal Affairs
    • Conducting / Auditing Business Activities
    • Conducting Goods and Services Procurement Processes
    • Conducting Risk Management Processes
    • Conducting Storage and Archiving Activities
    • Provision of Information to Authorised Persons, Institutions and Organisations
    • Conducting Management Activities

for the purposes of,

  • Based on the grounds of establishing, exercising or protecting a right (Law No. 6698, Article 5/2-e); your data in the categories of identity, contact, customer transactions and finance,
    • Conducting financial and accounting operations
    • Conducting/monitoring business operations
    • Monitoring and conducting legal affairs
    • Conducting contractual processes
    • The conduct of storage and archiving activities
    • Provision of information to authorised persons, institutions and organisations

for the purposes of,

  • provided that this does not infringe upon the fundamental rights and freedoms of the data subject, and based on the ground that the processing of data is necessary for the legitimate interests of the data controller (Law No. 6698, Article 5/2-f); we process your data falling under the categories of identity, contact, customer transactions, physical premises security and transaction security,
    • Conducting financial and accounting operations
    • Ensuring physical premises security
    • Conducting communication activities
    • Conducting goods/services procurement processes
    • Conducting risk management processes
    • Conducting storage and archiving activities

for these purposes,

are processed by us.

  1. METHOD OF COLLECTING PERSONAL DATA

Your personal data is obtained lawfully via electronic means through our website, via physical means through forms and various interview tools/applications, and via closed-circuit television systems, using automated, semi-automated or non-automated methods provided they form part of a data recording system. The personal data we collect directly from you and from authorised institutions is processed in accordance with the legal grounds set out in the Personal Data Protection Act No. 6698 and listed above.

  1. TO WHOM AND FOR WHAT PURPOSE ARE THE PROCESSED PERSONAL DATA TRANSFERRED

We transfer the personal data we process within the scope of our commercial activities and the purchase of goods and services to Natural Persons and Private Law Legal Entities, our Group Companies, and Authorised Public Institutions and Organisations for the purposes specified below.

  • We transfer your personal data in the categories of identity, contact, legal transactions, customer transactions, transaction security and finance to Natural Persons and Private Law Legal Entities, and Group Companies;
  • Conducting Activities in Compliance with Legislation
  • Conducting Financial and Accounting Operations
  • Monitoring and conducting legal affairs
  • Conducting communication activities
  • Conducting / Auditing Business Activities
  • Conducting Logistics Activities
  • Execution of Goods/Services Procurement Processes
  • Execution of Contract Processes
  • Execution of Supply Chain Management Processes
  • Provision of Information to Authorised Persons, Institutions and Organisations

for the purposes of,

  • we process your personal data in the categories of identity, contact, transaction security, customer transactions and finance, and share this data with Authorised Public Institutions and Organisations;
    • Ensuring Activities Are Conducted in Compliance with Legislation
    • Conducting Financial and Accounting Operations
    • Monitoring and conducting legal affairs
    • Conducting communication activities
    • Conducting / Auditing Business Activities
    • Conducting Storage and Archiving Activities
    • Provision of Information to Authorised Persons, Institutions and Organisations

for the purposes of,

and within the framework of the personal data processing conditions specified above.

  1. RIGHTS OF THE DATA SUBJECT

You may submit your requests regarding your rights under Article 11 of Law No. 6698, which regulates “the rights of the data subject”, and the application of the law, in writing or via a registered electronic mail (KEP) address, or by using the electronic mail address previously provided to our website and recorded in our system, or in accordance with the other application procedures set out in the “Communication on the Procedures and Principles for Applications to the Data Controller”. We will process your request free of charge within the shortest possible time and no later than 30 (thirty) days, subject to the nature of the request, up to a maximum of ten pages.