KVKK

Privacy Policy

Our personal data protection and privacy policy

Data Processing Principles

As Ekip Ecza Deposu, we process personal data in compliance with law and principles of honesty, accurately and up-to-date when necessary, for specific-explicit-legitimate purposes, connected to the purpose-limited-proportionate, and limited to the period prescribed in the relevant legislation / required by the processing purpose.

Data whose retention period has expired or whose processing purpose has ceased is destroyed by deletion, destruction, or anonymization methods.

Security Measures

We take appropriate technical and administrative measures to ensure the security of personal data; we apply access authorization, record/traceability, and secure storage principles.

Personal data may be transferred abroad within the scope of IT infrastructure and/or software services; transfer processes are conducted with necessary technical and contractual security measures.

Patient and/or physician information that may arise in exceptional cases requiring disclosure to the company, especially in drug procurement, may be considered within the scope of special categories of personal data. Additional measures such as access restriction, encryption, logging, and secure transfer are applied for such data.

What Data Do We Process?

Within the scope of conducting our activities; the following data groups may be processed to the extent required by our business relationship:

Identity and contact information (name-surname, phone, e-mail, etc.)

Order/transaction records (order, shipment, delivery, return processes, etc.)

Finance and accounting records (invoice, current account, payment records, etc.)

Request/complaint and communication records

Employee and candidate information (within the scope of personnel and HR processes)

Physical space security data (when necessary within the scope of facility security)

In exceptional cases requiring disclosure to the company in drug procurement, patient and/or physician information may be processed only to the extent required by the process.

Why Do We Process Your Data?

Personal data may be processed within the framework of the principle of proportionality in order to conduct our activities and fulfill our legal obligations. Main purposes:

Execution of order, shipment, delivery, and return processes

Finance/accounting processes and regulatory compliance

Request/complaint management and communication processes

Execution of business continuity and information security processes

Ensuring necessary controls within the scope of facility security

Data Subject Application

You can apply to us to exercise your rights regarding your personal data under KVKK. Applications are concluded within 30 days at the latest.

In case of rejection of the application, finding the response insufficient, or not receiving a response in time, you have the right to file a complaint with the Personal Data Protection Board within the periods prescribed in the legislation.

Application channels:

Written application: Serhat Mahallesi 1148 Sokak, No: 1-C3 Yenimahalle / Ankara

Registered Electronic Mail (KEP): [KEP]

E-mail: kvkk@ekipecza.com

Cookie Policy

Cookies may be used on the Ekip Ecza Deposu website to ensure the functioning of the site and improve user experience. You can manage, delete, or block cookies from your browser settings. If third-party cookies are used, the policies of the relevant providers apply.

Disclosure Texts

Pharmacies / Pharmacist Representatives Disclosure Text

Data Controller: Ekip Ecza Deposu

Address: Serhat Mahallesi 1148 Sokak, No: 1-C3 Yenimahalle / Ankara

Phone: 0312 473 73 13

E-mail: info@ekipecza.com

KEP: [KEP]

Processed data categories (examples): identity and contact information; order/delivery/operation records; finance and accounting records; request/complaint and communication records; transaction security records (e.g. log records).

Processing purposes: execution of order receipt, preparation, shipment and delivery processes; finance/accounting processes; regulatory compliance; business continuity and information security.

Transfer (recipient groups): logistics/cargo/courier; accounting/finance consultants and banks; IT/ERP service providers; authorized public institutions (as required by legislation).

Transfer abroad: personal data may be transferred abroad within the scope of IT infrastructure and/or software services; transfer processes are conducted with necessary technical and contractual security measures.

Storage: data is retained for the period prescribed by relevant legislation or required by the processing purpose; upon expiry, it is deleted/destroyed/anonymized.

Rights and application: you may apply through the channels on the "Data Subject Application" page to exercise your rights under KVKK.

Visitor Disclosure Text

Purpose: facility security, keeping visitor records, occupational health and safety, and evidence management in possible legal disputes.

Data: identity/contact, visit entry-exit records, camera records when necessary.

Access to camera records is limited to duly authorized personnel only.

Collection: form/record and security procedures during the visit.

Storage: for the period prescribed by legislation/purpose; data is deleted/destroyed/anonymized when the purpose ceases.

Employees & Candidates Disclosure Text

Purpose: human resources processes, personnel-payroll, fringe benefits, occupational health and safety, internal audit, and business continuity.

Storage: for the period prescribed by relevant legislation or required by the processing purpose; deletion-destruction-anonymization is applied upon expiry.