GDPR Notice

As Regecorp (the “Company”), acting in our capacity as data controller, we shall use your personal data in accordance with the relevant legislation, taking the necessary security measures to ensure that your personal data are processed lawfully and to protect your privacy. Our purpose, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and in line with your satisfaction, is to inform you in the most transparent manner regarding the ways in which your personal data are collected, the purposes of processing, the parties with whom they are shared, the legal grounds and your rights.

Data controller: Regecorp
Address: Karacaoğlan Mah. 6167 Sok. A Blok No: 30/D Bornova, İzmir/Türkiye
E-mail: info@regecorp.com

The Turkish Personal Data Protection Law No. 6698 (KVKK) (the “Law”) was adopted on 24 March 2016 and published in the Official Gazette dated 7 April 2016 and numbered 29677. The Law was enacted for the purpose of protecting the fundamental rights and freedoms of individuals, in particular the privacy of private life, in the processing of personal data, and of regulating the obligations of the natural and legal persons who process personal data together with the procedures and principles with which they shall comply.

This Notice covers our customers and potential customers (including physicians, clinics and other healthcare professionals), our business partners and suppliers, our website visitors, our training and event participants and other third parties who share their personal data with our Company.

Conducting our relationships with business partners and suppliers: We process the information of our business partners and suppliers set out in their signature circulars, such as full name, e-mail address, telephone number, address, Turkish Republic identity number, date of birth and place of birth, for the purposes of establishing contracts and verifying the authority of the persons empowered to sign contracts, relying on the legal grounds that such processing is directly related to the establishment or performance of a contract and that it is necessary to process the personal data of the parties to the contract.

Sales and marketing: Provided that the necessary consents are obtained within the framework of the Law on the Regulation of Electronic Commerce, your full name, e-mail address, telephone number, address and survey response data may be processed on the basis of your explicit consent for purposes such as carrying out traffic measurement, statistical analyses, analysis of our customer portfolio and segmentation studies for advertising, campaign, sales and marketing activities, measuring and improving customer satisfaction, obtaining your opinions and suggestions regarding new products and services, and offering you tailored information, campaigns and benefits; and, in respect of mandatory cookies, on the basis that such processing is necessary for the fulfilment of our legal obligation.

In order to process this data, cookies and similar technologies that collect and store information when you visit our website may be used. You may control and determine your cookie preferences by adjusting the relevant settings; for further information, you may refer to our Cookie Policy.

Request and complaint management: Your full name, e-mail address, telephone number and address details, together with the content of the messages you send through our communication channels, may be processed for the purposes of receiving and resolving your questions and requests, addressing you correctly, providing information and advisory support, giving you information and responses in respect of your complaints and requests and using them as evidence in any disputes that may arise, relying on the legal ground that data processing is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms.

Customer relationship management: Your full name, e-mail address and telephone number data may be processed for the purposes of providing our products and services to you, receiving your orders, carrying out your payment transactions, preparing records and documents, ensuring the shipment of products through logistics collaborations and making comparative product or service offers, relying on the grounds that such processing is directly related to the establishment or performance of a contract and that it is necessary to process the personal data of the parties to the contract.

Training and event management: Your full name, title, institution, e-mail address and telephone number data may be processed for the purposes of planning training courses, congresses and scientific events for healthcare professionals, conducting invitation and participation processes and issuing certificates of attendance, relying on the legal grounds of the establishment or performance of a contract and legitimate interest.

Ensuring security: Your image data may be collected by devices with image recording capability in our office and warehouse areas for the purposes of ensuring security at our Company, preventing accidents that may occur and events constituting torts or offences and, where they cannot be prevented, informing the relevant law enforcement authorities, relying on the legal ground that data processing is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms.

Your personal data may be collected verbally, in writing or by electronic means through forms on our website, our sales and marketing team, forms completed during customer visits, digital marketing channels, contracts, applications, offers, cookies used during website visits, e-mail and telephone correspondence and camera recordings.

Your personal data may be transferred, limited to the fulfilment of the purposes listed above, to the manufacturing companies whose products we represent, to logistics and courier companies, to our information technology and hosting service providers, to our legal and financial advisers, to banks and, upon request, to authorised public institutions and organisations, in accordance with the conditions set out in Articles 8 and 9 of the Law.

As personal data subjects, if you submit your requests regarding your rights by the methods set out below, the Company shall conclude the request as soon as possible and within thirty days at the latest, depending on the nature of the request. In this context, personal data subjects have the right to:

• learn whether their personal data are being processed,
• request information if their personal data have been processed,
• learn the purpose of processing of their personal data and whether they are used in accordance with that purpose,
• know the third parties to whom their personal data are transferred domestically or abroad,
• request the rectification of their personal data in the event that they have been processed incompletely or inaccurately, and request that the transaction carried out in this respect be notified to the third parties to whom the personal data have been transferred,
• request the erasure or destruction of their personal data in the event that the reasons requiring their processing no longer exist, even though they have been processed in accordance with the provisions of the Law and other relevant laws, and request that the transaction carried out in this respect be notified to the third parties to whom the personal data have been transferred,
• object to the occurrence of a result to their detriment by means of the analysis of the processed data exclusively through automated systems,
• request the compensation of the damage in the event that they suffer damage due to the unlawful processing of their personal data.

Pursuant to Article 13(1) of the Law and the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your requests regarding the rights set out above in Turkish and in writing, or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature or the electronic mail address that you have previously notified to our Company and that is registered in our system.

In applications, information shall be provided only about the applicant, and it is not possible to obtain information about other family members and third parties. The Company reserves the right to verify your identity before responding. Your application must contain:

• your name, surname and, if the application is in writing, your signature,
• for citizens of the Republic of Türkiye, your Turkish Republic identity number, or, if you are a foreign national, your nationality, passport number or identity number, if any,
• your residential or workplace address for the purposes of notification,
• your electronic mail address, telephone and fax number for the purposes of notification, if any,
• the subject of your request,

the inclusion of which is mandatory, and, if any, information and documents relating to the matter should also be attached to the application. You may submit your written applications, attaching the required documents, to the address Karacaoğlan Mah. 6167 Sok. A Blok No: 30/D Bornova, İzmir/Türkiye; and your applications in electronic form to info@regecorp.com. In responses given to applications, the fee tariff determined by the Turkish Personal Data Protection Board may be applied.

Depending on the nature of your request, information and documents that will enable identity verification must be provided to us completely and accurately; otherwise, disruptions may occur in carrying out the investigations to be conducted in respect of your request in a full and proper manner. In such a case, the Company reserves its legal rights.