Privacy Notice (KVKK)

Protecting the privacy of visitors (hereinafter referred to as the “Data Subject”) to www.vefailac.com.tr (hereinafter referred to as the “Website”), operated by Vefa İlaç Sanayi ve Ticaret Anonim Şirketi (“Vefa İlaç”), is one of Vefa İlaç’s leading principles. This Privacy Policy (hereinafter referred to as the “Policy”) provides information, pursuant to the Turkish Personal Data Protection Law No. 6698 and its secondary legislation (hereinafter referred to as the “Law”), about personal data processed by us as the data controller and/or through a data processor.

Vefa İlaç exercises a high level of care in processing and protecting personal data in compliance with the Law and attaches great importance to your privacy. During your visit to the Website, certain personal data may be processed by Vefa İlaç, as the data controller responsible for determining the purposes and means of processing personal data and for establishing and managing the data recording system, within the scope explained below. We therefore wish to inform you about the scope of this personal data processing activity.

1. PURPOSES OF PROCESSING YOUR PERSONAL DATA

Personal data obtained as a result of your visit to the Website may be processed by Vefa İlaç for the purposes listed below, in accordance with Articles 5 and 6 of the Law:

Managing emergency processes; managing information security processes; managing employee candidate, intern and student selection and placement processes; conducting audit and ethics activities; managing clinical study processes; ensuring that activities are conducted in compliance with legislation; managing finance and accounting affairs; following up and conducting legal affairs; managing communication activities; planning human resources processes; conducting and supervising business activities; managing procurement processes for goods and services; managing after-sales support services; managing sales processes for goods and services; conducting customer-satisfaction activities; conducting marketing analysis studies; managing contractual processes; ensuring the security of movable assets and resources; managing advertising, promotion and marketing processes for products and services; providing information to authorized persons, institutions and organizations; and creating and monitoring visitor records.

2. RECIPIENTS OF YOUR PERSONAL DATA AND PURPOSES OF TRANSFER

Personal data obtained as a result of your visit to the Website may, in line with the purposes for which it is processed, be transferred to our business partners, affiliates, suppliers, third-party service providers, consultants, legally authorized public institutions and private persons within the personal data processing conditions and purposes set out in Articles 8 and 9 of the Law and for the purposes stated in this Policy and the Cookie Policy.

3. METHOD AND LEGAL BASIS FOR COLLECTING YOUR PERSONAL DATA

Any information that identifies you or makes you identifiable is personal data. Within the scope of your visit to the Website, your personal data is collected where you have given explicit consent or on the basis of the personal data processing conditions set out in Articles 5 and 6 of the Law. In accordance with the processing conditions under the Law, information may also be collected through cookies, which are technical communication files, as a result of your visit to the Website. Detailed information about cookies is available in the Cookie Policy on the Website.

4. RIGHTS OF DATA SUBJECTS

You may submit requests within the scope of Article 11 of the Law, which governs the rights of the data subject, by any of the following methods in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

4.1. You may deliver a wet-signed copy of the Data Subject Application Form available on the Website to Beylikdüzü OSB Mahallesi, 2. Cadde No: 3/2, Beylikdüzü/İstanbul, Türkiye.

4.2. You may send your request to our registered electronic mail address, vefailac@hs03.kep.tr, with the subject line “Request for Information under the Personal Data Protection Law.”

4.3. You may send your request to kvkk@vefailac.com.tr with the subject line “Request for Information under the Personal Data Protection Law.”

As a rule, no fee is charged for requests. However, if fulfilling a request entails an additional cost for Vefa İlaç, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.

Vefa İlaç may request additional verification to confirm the accuracy of your identity information in applications. Personal information requested in this context is processed and used solely for identity verification and for fulfilling legal obligations under the Law.

For written applications, the application date is the date on which your application is served on us as the data controller. For applications submitted by other methods, the application date is the date on which your application reaches us as the data controller.

Please attach any information and documents relating to your request to your application.

5. MEASURES TAKEN TO ENSURE THE SECURITY OF DATA SUBJECTS’ PERSONAL DATA

In line with the importance our company attaches to the protection of personal data and data security, and in accordance with Article 12 of the Law, it takes all necessary technical and administrative measures to:

5.1. Prevent unlawful processing of personal data;

5.2. Prevent unlawful access to personal data; and

5.3. Ensure the retention of personal data and provide an appropriate level of security for this purpose.

Vefa İlaç reserves the right to amend this Privacy Policy at any time. Data subjects may always access the current version of the Privacy Policy at www.vefailac.com.tr. The Data Subject Application Form available on the Website may be used for data subject requests.