Website Privacy Notice
1. Identity of the Data Controller
Pursuant to the Law on the Protection of Personal Data No. 6698 (“KVKK”), your personal data are processed by Medoffice Health Industry Inc. (“Medoffice” or the “Company”) acting as data controller within the scope described below.
- Title: Medoffice Health Industry Inc.
- MERSIS No: 0613089571800019
- Address: Yazıbaşı Mah. Kuşçu Cad. No:9/1 Torbalı / İZMİR – Türkiye
- E-mail: [email protected]
2. Personal Data Processed
When you visit our website and use the available contact channels, the following data may be processed:
- Identity Data: First name, last name.
- Contact Data: E-mail address, phone number.
- Customer Transaction Data: Message content, requests, questions or complaints submitted via contact forms.
- Transaction Security Data: IP address, device/browser information, access logs, cookie data.
- Special Category Data: Health data only if you voluntarily share them in free-text fields.
3. Purposes of Processing
Your data are processed for the purposes listed below in line with Articles 5 and 6 of KVKK:
- Managing communication with you.
- Following up and resolving requests, questions and complaints about our products/services.
- Conducting marketing, advertising, campaign and promotional activities (where explicit consent is given).
- Planning and executing customer relationship management processes.
- Maintaining information security and protecting IT infrastructure.
- Managing finance and accounting operations.
- Ensuring compliance with legal obligations and informing competent authorities when required.
- Providing tailored information about products/services in line with voluntarily shared health data.
4. Collection Methods and Legal Grounds
Your data are collected through our website, e-mail, phone and forms such as “Request a Quote”, “Contact Us”, “Contact Form” or “Newsletter Subscription” by automated or non-automated means.
They are processed on the legal grounds set out in KVKK as follows:
- Explicit consent for marketing communications (KVKK art.5/1).
- Necessity for the establishment or performance of a contract when you request product information or a commercial relationship (KVKK art.5/2-c).
- Legitimate interests for responding to general requests and complaints (KVKK art.5/2-f).
- Compliance with legal obligations for transaction security data such as IP logs (KVKK art.5/2-ç and Law No.5651).
- Necessity for the establishment, exercise or protection of a right (KVKK art.5/2-e).
- Explicit consent for any voluntarily shared health data (KVKK art.6).
5. Notice on Special Category Data
Free-text fields are not designed for sharing sensitive personal data defined in Article 6 of KVKK. Please refrain from entering such information.
If you nevertheless choose to share these data voluntarily, it will be deemed that you consent to their processing solely to respond to your request; they will be used only for that purpose and securely destroyed once the communication ends.
6. Transfer of Personal Data
As a rule, your data are not shared with third parties. However, they may be shared with competent public authorities to fulfil legal obligations and with service providers (IT infrastructure, hosting, etc.) acting as data processors under confidentiality agreements and appropriate safeguards.
7. Rights of the Data Subject (Article 11 of KVKK)
You may contact us to exercise the following rights:
- Learn whether your personal data are processed.
- Request information about the processing.
- Learn the purpose of processing and whether data are used accordingly.
- Know the third parties to whom data are transferred domestically or abroad.
- Request correction if your data are incomplete or inaccurate.
- Request deletion or destruction under KVKK and applicable legislation.
- Object to results arising to your detriment from exclusively automated processing.
- Demand compensation if you suffer damage due to unlawful processing.
You can submit your requests through the “Data Subject Application Form” available on our website or via the other methods listed in the Communiqué on the Procedures and Principles of Application to the Data Controller. Your applications will be answered as soon as possible and within 30 days at the latest.