︎
As Orzaks İlaç ve Kimya Sanayi Ticaret A.Ş., ensuring the security and confidentiality of your personal data is one of our top priorities. In this context, we take all necessary measures to protect your personal data and exercise the highest level of care. The privacy notice you are reading aims to inform you about the processes involved in the processing of your personal data.
- DATA CONTROLLER
Our company processes your personal data in the capacity of “Data Controller” as defined in Article 3 of the Personal Data Protection Law No. 6698.
Orzaks Pharmaceutical and Chemical Industry and Trade Inc.
Address: Esentepe Mah. Büyükdere Cad. No:171 Metrocity Business Centre Block A, Floor 1, Şişli/Istanbul
Telephone: 0212 447 47 37 Email:info@orzax.com.tr KEP: orzaksilac@hs01.kep.tr
- PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We process the personal data we collect from you via digital forms completed online, call centre conversations and physical forms completed through our representatives – falling under the categories of identity, contact, customer transactions, transaction security, finance, marketing, and visual and audio recordings – for the purposes and on the legal grounds detailed below.
- Based on the legal ground of being expressly provided for by law (Article 5(2)(a) of Law No. 6698), we process your data in the categories of identity, contact, transaction security and customer transactions,
- Conducting Activities in Compliance with Legislation
- Monitoring and Conducting Legal Matters
- Conducting / Monitoring Business Activities
- Conducting Goods/Services Sales Processes
- Conducting Risk Management Processes
- Conducting Storage and Archiving Activities
- Provision of Information to Authorised Persons, Institutions and Organisations
- Conduct of Management Activities
for the purposes of,
- Provided that it is directly related to the conclusion or performance of a contract, and that the processing of personal data belonging to the parties to the contract is necessary (Article 5(2)(c) of Law No. 6698 on the Protection of Personal Data ( ); we process your data in the categories of identity, contact, customer transactions, transaction security and finance,
- Conducting Information Security Processes
- Conducting Activities in Compliance with Legislation
- Conducting Financial and Accounting Operations
- Monitoring and Conducting Legal Affairs
- Conducting Communication Activities
- Conducting / Auditing Business Activities
- Conducting Logistics Activities
- Execution of Post-Sales Support Services for Goods/Services
- Execution of Goods/Services Sales Processes
- Execution of Goods/Services Production and Operational Processes
- Execution of Customer Relationship Management Processes
- Conducting Activities Aimed at Customer Satisfaction
- Execution of Storage and Archiving Activities
- Execution of Contract Processes
- Ensuring the Security of Data Controller Operations
- Providing Information to Authorised Persons, Institutions and Organisations
- Conducting Management Activities
for the purposes of,
- on the grounds that it is necessary for the data controller to fulfil its legal obligations (Law No. 6698, Article 5/2-c); we process your data in the categories of identity, contact, customer transactions and finance,
- Conducting Information Security Processes
- Conducting Activities in Compliance with Legislation
- Conducting Financial and Accounting Operations
- Monitoring and Handling of Legal Matters
- Execution of Goods/Services Sales Processes
- Execution of Risk Management Processes
- Execution of Storage and Archiving Activities
- Execution of Contract Processes
- Ensuring the Security of Data Controller Operations
- Provision of Information to Authorised Persons, Institutions and Organisations
- Conducting Management Activities
for the purposes of,
- provided that it does not infringe upon the fundamental rights and freedoms of the data subject, and based on the ground that the processing of data is necessary for the legitimate interests of the data controller (Law No. 6698, Article 5/2-f); we process your data falling under the categories of identity, contact, customer transactions, transaction security, and visual and audio records,
- Conducting Activities in Compliance with Legislation
- Conducting Loyalty Processes Related to the Company / Product / Service
- Conducting Internal Audit/Investigation/Intelligence Activities
- Conducting / Auditing Business Activities
- Receiving and Evaluating Suggestions for the Improvement of Business Processes
- Conducting Business Continuity Activities
- Conducting Logistics Activities
- Conducting Post-Sales Support Services for Goods and Services
- Execution of Goods/Services Sales Processes
- Execution of Goods/Services Production and Operational Processes
- Implementation of Customer Relationship Management Processes
- Conducting Activities Aimed at Customer Satisfaction
- Implementation of Risk Management Processes
- Execution of Storage and Archiving Activities
- Execution of Strategic Planning Activities
- Tracking of Requests / Complaints
- Providing Information to Authorised Persons, Institutions and Organisations
- Conducting Management Activities
for the purposes of,
- Where consent has been granted for advertising and marketing activities and campaign notifications, based on the grounds of explicit consent (Article 5 of Law No. 6698); your data falling within the categories of identity, contact, customer transactions, transaction security, marketing, and visual and audio recordings,
- Conducting Loyalty Processes Related to the Company / Product / Service
- Conducting Communication Activities
- Conducting Activities to Ensure Business Continuity
- Conducting Customer Relationship Management Processes
- Conducting Activities Aimed at Customer Satisfaction
- Conducting Marketing Analysis Activities
- Conducting Advertising / Campaign / Promotion Processes
- Implementation of Risk Management Processes
- Implementation of Strategic Planning Activities
- Tracking of Requests / Complaints
- Conducting Marketing Processes for Products / Services
- Provision of Information to Authorised Persons, Institutions and Organisations
- Conducting Management Activities
for these purposes,
is processed by us.
- TO WHOM AND FOR WHAT PURPOSES PERSONAL DATA MAY BE TRANSFERRED
We transfer the personal data we process within the scope of our commercial activities and the provision of goods and services to Natural Persons and Private Law Legal Entities, our Group Companies, and Authorised Public Institutions and Organisations for the purposes specified below.
- We transfer your personal data falling under the categories of identity, contact, customer transactions, transaction security, finance, marketing, and visual and audio records to Natural Persons and Private Law Legal Entities, our Group Companies,
- Implementation of Information Security Processes
- Conducting Activities in Compliance with Legislation
- Conducting Financial and Accounting Operations
- Monitoring and conducting legal affairs
- Conducting Communication Activities
- Conducting / Auditing Business Activities
- Conducting Logistics Activities
- Execution of Goods/Services Procurement Processes
- Execution of Post-Sales Support Services for Goods/Services
- Execution of Goods/Services Sales Processes
- Execution of Goods/Services Production and Operational Processes
- Execution of Customer Relationship Management Processes
- Conducting Activities Aimed at Customer Satisfaction
- Execution of Storage and Archiving Activities
- Execution of Contract Processes
- Tracking of Requests / Complaints
- Execution of Supply Chain Management Processes
- Ensuring the Security of Data Controller Operations
- Providing Information to Authorised Persons, Institutions and Organisations
for the purposes of,
- we process your personal data in the categories of identity, contact, transaction security and finance; to Authorised Public Institutions and Organisations,
- Ensuring Activities Are Conducted in Compliance with Legislation
- Conducting financial and accounting operations
- Monitoring and conducting legal affairs
- Conducting communication activities
- Conducting / Auditing business operations
- Conducting Storage and Archiving Activities
- Conducting Contract Procedures
- Provision of Information to Authorised Persons, Institutions and Organisations
for the purposes of,
- we process your personal data in the categories of identity, contact, visual and audio records; publicly on our website and social media platforms,
- Conducting Loyalty Processes Related to the Company / Products / Services
- Conducting Communication Activities
- Conducting / Monitoring Business Activities
- Conducting Customer Relationship Management processes
- Conducting Activities Aimed at Customer Satisfaction
- Execution of Advertising / Campaign / Promotion Processes
- Conducting Storage and Archiving Activities
- Conducting Marketing Processes for Products / Services
- Provision of Information to Authorised Persons, Institutions and Organisations
for the purposes of,
and within the framework of the personal data processing conditions specified above.
- OUR METHODS OF COLLECTING PERSONAL DATA
Using automated, semi-automated or non-automated methods, provided they form part of a data recording system;
- We collect your personal data falling under the categories of identity, contact, customer transactions, transaction security, finance, marketing, and visual and audio records through the completion of physical forms, the completion of forms online, information and documents you provide in writing or physically, photographs taken, and information you provide verbally during call centre conversations; from you,
- We collect your personal data in the categories of identity, contact, customer transactions and transaction security via WhatsApp, live chat applications and telephone calls
The personal data we collect from you is obtained through lawful means.
- YOUR RIGHTS AS A DATA SUBJECT
You may submit your requests regarding your rights under Article 11 of Law No. 6698, which regulates ‘the rights of the data subject’, and the application of the law, in writing or via a registered electronic mail (KEP) address or the email address registered in our system, or in accordance with the other application procedures set out in the ‘Communication on the Procedures and Principles for Applications to the Data Controller’to the address kvkk@orzkaks.com. You may also obtain the application and information request form, along with the necessary explanations, from the relevant department with which you are in contact. We will process your request free of charge within the shortest possible time and no later than 30 (thirty) days, subject to the nature of the request