1. Identity of the Data Controller
Your personal data may be processed by the data controller Ermedsan within the scope explained below, in accordance with the Law on the Protection of Personal Data No. 6698 (“Law”).
2. Purpose of Processing Personal Data
Your collected personal data may be processed by Ermedsan in compliance with the fundamental principles stipulated by the Law, and within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law, for the following purposes:
- Planning and execution of the Company’s human resources policies and processes
- Execution of goods and service procurement processes by the Company
- Execution of financial and accounting processes by the Company
- Planning and execution of the Company’s commercial and/or business strategies
- Ensuring the legal, technical, and commercial-business security of the Company and relevant individuals with whom the Company has a business relationship
3. Parties to Whom Your Personal Data is Transferred and Purposes of Transfer
Your collected personal data may be transferred by Ermedsan to legally authorized public institutions and private entities in compliance with the fundamental principles stipulated by the Law and within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, for the following purposes:
- Planning and execution of the Company’s human resources policies and processes
- Execution of goods and service procurement processes by the Company
- Execution of financial and accounting processes by the Company
- Planning and execution of the Company’s commercial and/or business strategies
- Ensuring the legal, technical, and commercial-business security of the Company and relevant individuals with whom the Company has a business relationship
4. Method and Legal Grounds for Collecting Your Personal Data
Your personal data is collected through various channels for the purpose of carrying out the Company’s activities, based on the legal grounds of ensuring compliance with legislation and Company policies. Your collected personal data may be processed and transferred for the purposes specified in this Clarification Text, within the scope of the personal data processing conditions and purposes stated in Articles 5 and 6 of the Law.
5. Rights of the Data Subject as Enumerated in Article 11 of the Law
As a data subject, you have the following rights under Article 11 of the Law:
- To learn whether your personal data is processed or not,
- To request information if your personal data has been processed,
- To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
- To know the third parties to whom your personal data is transferred within the country or abroad,
- To request the correction of incomplete or inaccurate personal data, and to request notification of the correction to the third parties to whom your personal data has been transferred,
- To request the deletion or destruction of your personal data, although it has been processed in accordance with the provisions of the Law and other relevant laws, in the event that the reasons for processing no longer exist, and to request notification of the deletion or destruction to the third parties to whom your personal data has been transferred,
- To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
- To claim compensation for the damages arising from the unlawful processing of your personal data.
You may submit your applications regarding your above-mentioned rights to the Company via the email address info@ermedsan.com. Depending on the nature of your request, your applications will be concluded free of charge within the shortest time possible and within no later than thirty days; however, if the transaction incurs an additional cost, the Company reserves the right to charge you according to the tariff determined by the Personal Data Protection Board.