CLARIFICATION TEXT UNDER THE SCOPE OF
"PERSONAL DATA PROTECTION LAW NO OF 6698"


1-) Data Controller.

This clarification text is written by VARITEKS Ortopedi Sanayi A.Ş. as the data controller within the scope of Article 10 of the "Personal Data Protection Law No of 6698" and the "Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation". (in short, the “Company”).

    Ünvan   

VARİTEKS ORTOPEDİ SANAYİ A.Ş

      Adres            

Ferhat Paşa Serbest Bölge Mah. Menekşe Sokak. Variteks Blok, No:3/21, Çatalca / İstanbul,

Telefon

>+90 212 544 30 50

KEP adresi

variteksortopedi@hs01.kep.tr

Wep sayfası         

variteks.com

2-) What personal data do we process/collect?

Any information that identifies or make a person idenfiables is considered as personal data. Accordingly, the following of your special or general personal data may be processed by our Company due to your business & commercial relationship, your purchase or use of our goods or services, and any other legal relations with our Company: Your name, surname, date of birth, place of birth, TR ID. your ID number, address, telephone number, e-mail address, contact information, vehicle license plate, SGK. your number, passport number, CV, group memberships, marital status, gender, family information, health information, contracts, employment contracts, payroll, IBAN number, bank account information, credit card information, information you provided in your job application, private health insurance information, photo, your data regarding your aptitude for work, your video recordings and audio recordings taken when you visit our company's offices, production areas, parking lots, warehouses and any other sections and any other personal data that expresses your physical, economic or cultural, social or psychological identity that makes you identifiable, whether directly or indirectly.

Processing of personal data refers to all kinds of activities carried out in the process of collecting, storing, changing, editing, transferring and taking over these data, including deleting, destroying or anonymizing them.

Your health information, race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, appearance and clothing, association, foundation or union membership, sexual life, criminal conviction and security measures data and biometric (fingerprint, etc.) ) and your genetic data are "special categories of personal data". Your special personal data is processed only with your explicit consent as the data owner, except for exceptions in the law

3-) Our company's purposes of collecting and processing your personal data is for :

1-)  Managing our company's human resources processes,
2-)  Carrying out our company's communication activities,
3-)  Fulfillment of our commitments arising from the employment contract,
4-)  Carrying out payment and invoicing, finance and accounting transactions,
5-)  Carrying out workplace safety and worker health processes,
6-)  Company's locations, employees, guests, goods and services, information, physical etc. to ensure security and control,
7-) Identification of risks and taking precautions, emergency management,
8-)  Employee evaluation processes, communication with you,
9-)  Remuneration policy regarding employees, execution of career processes,
10-) Providing mandatory and developmental training to our employees,
11-) Fulfilling legal works and transactions, sharing information requested by public institutions and organizations,
12-) Carrying out the purchase of goods and services, carrying out logistics activities,
13-) Carrying out marketing activities,
14-) Detection of malicious or unauthorized transactions, performance of audit procedures,
15-) Managing our company's contract processes, fulfilling our commitments in the medical equipment production and purchase-sale contracts made by our company.
16-) Planning and management of our company's daily business operations,
17-) Analyzing and developing the products manufactured by our company,
18-) It is processed for customer satisfaction research and similar purposes.

4-) Our company's methods of collecting personal data:  

Your personal data that is not of a private nature may be accessed and processed by our company through written documents  and/or information systems such as cameras and software, for the purposes of filling out forms, sending documents, contracts made with our company, employment contracts, financial transactions, sending e-mails, SSI records, and carrying out legal or contractual transactions. It can be collected verbally, in writing or electronically by automatic or non-automatic methods. In addition, notifications from offices, branches, dealers, websites, suppliers or business partners, notifications from official institutions, social media channels, mobile applications and similar means can be collected verbally, in writing or electronically.

Your personal data may be updated and processed during the continuation of your business or service relationship with our company. In addition, when you use our web-based systems, our website, visit our website, or participate in training, seminars or organizations organized by our Company with the intention of using Company services, your personal data that does not carry a special nature may be collected and processed. Your special personal data is collected with your explicit consent as the data owner, except for exceptions in the law.

5-) The legal reason why our company collects personal data: 

Your personal data is obtained in line with the purposes stated in article (3) above, so that our Company can fully and accurately fulfill its responsibilities arising from employment contracts, purchasing contracts, supplier contracts or the law, to carry out human resources processes and to fulfill its obligations in its commercial activities. Your personal data collected for this legal reason can be processed and transferred for the purposes specified in article (3) of this text within the scope of the personal data processing conditions and purposes specified in articles 5 and 6 of the Personal Data Protection Law. 

6-) To whom and for what purpose do we transfer your processed personal data?

As our Company Policy, your personal data is kept confidential. Your personal data is transferred in a measured and limited manner for the purposes of ensuring the execution of our Company's human resources processes in accordance with your employment contract with our Company, when it is necessary for our Company to fulfill its legal or contractual legal obligations, when data processing is necessary for the establishment, exercise or protection of a right, when data processing is necessary for the legitimate interests of our Company provided that it does not harm your fundamental rights and freedoms, and for the purposes of ensuring security.

The units to which the data is transferred in a limited and moderate manner, our representatives, our human resources unit, the workplace physician and the joint occupational health and safety unit, our suppliers, our lawyers and other consultants, our business partners, the parties of our contracts on the production, purchase and sale of medical supplies such as the manufacturer, buyer and seller, transporters, our shareholders, the software programs used by our company, law enforcement forces, courts and prosecutors, legally authorized public institutions and organizations, official authorities, legally authorized private law persons, our group companies, our branches, our agencies, our representatives, the managements of our office buildings, may transfer your personal data domestically and, if necessary, abroad within the framework of the purposes and conditions of transfer specified in Articles 8 and 9 of the KVKK.

A contract is signed or an undertaking is obtained with suppliers, consultants, service providers, etc. to whom we transfer personal data in a limited and measured manner, to protect the personal data they receive from our Company, not to use it for any purpose other than the purpose of transfer, to take the necessary measures for the technical and legal protection of personal data, and to destroy it in case the purpose is terminated.

7-) Situations where personal data may be transferred without the explicit consent of the data owner:
Personal data processed by our company,

1-) It is clearly stated in the laws,
2-) If it is necessary for the protection of the life or physical integrity of a person or someone else who is unable to give his consent due to a physical impossibility or whose consent is not legally valid,
3-) It is necessary to process personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract,
4-) It is mandatory for our company to fulfill its legal obligations,
5-) Personal data has been made public by the data owner himself,
6-) Data processing is necessary for the establishment, exercise or protection of a right.
7-)Provided that it does not harm the fundamental rights and freedoms of the data owner, data may be transferred without the explicit consent of the data owner in cases where data processing is mandatory for the legitimate interests of our Company.
 

8-) Processing and transfer of special personal data.

Our company processes special personal data, provided that adequate technical, administrative and legal measures are taken,

1-) The explicit consent of the relevant data owner,
2-) It is clearly stated in the laws,
3-) If it is necessary for the protection of the life or physical integrity of a person or someone else who is unable to give his consent due to a physical impossibility or whose consent is not legally valid,
4-) It is in accordance with the personal data that the relevant data owner natural person has made public and with his/her will to make it public,
5-) It is mandatory for the establishment, use or protection of a right,
6-) It is necessary for the protection of public health, preventive medicine, medical diagnosis, treatment and care services, and the planning, management and financing of health services by the workplace doctor, persons under the obligation of confidentiality or authorized institutions and organizations,
7-) It is mandatory to fulfill legal obligations in the fields of employment, occupational health and safety, social security, social services and social assistance,
8-) It is possible for foundations, associations and other non-profit organizations or formations established for political, philosophical, religious or union purposes to be directed to their current or former members and affiliates or to people who are in regular contact with these organizations and formations, provided that it complies with the legislation and purposes to which they are subject, is limited to their fields of activity and is not disclosed to third parties.

Our company also takes adequate measures, as determined by the Personal Data Protection Board, when transferring special personal data.

9-) Your rights as a personal data owner, as listed in Article 11 of the Personal Data Protection Law (KVKK).   Personal data owners can apply to our Company in accordance with Article 13 of the KVKK, and as regulated in Article 11 of the KVKK,

1-) To learn whether or not personal data has been processed,
2-) To request information about personal data if it has been processed,
3-) To learn the purpose of processing personal data and whether or not it is used in accordance with its purpose,
4-) To know the third parties to whom personal data is transferred, either domestically or abroad,
5-) To request correction of personal data if it is processed incompletely or incorrectly and to request notification of the action taken to third parties to whom personal data is transferred,
6-) Requesting the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of the KVKK and other relevant laws, and requesting that the action taken within this scope be notified to third parties to whom personal data has been transferred,
7-) To object to the emergence of a result against the person by analyzing the processed data exclusively through automatic systems,
8-) In case of damage caused by unlawful processing of personal data, the person has the right to demand compensation for the damage.

You can access the “data owner application form”    here    regarding your rights mentioned above.

10-) Address and application procedure for applications to be made to our Company in accordance with the Personal Data Protection Law.

You can make your requests within the scope of KVKK by sending your written and signed petition to our Company's address Ferhat Paşa Serbest Bölge Mah. Menekşe Sokak. Variteks Blok, No:3/21, Çatalca / by post or by coming to our address in person, or you can send it to our KEP e-mail address written above using a secure electronic signature, mobile signature or your e-mail address previously notified to our Company and registered in our Company's system. Depending on the nature of your request, our company will finalize the request within thirty days at the latest. 
VARİTEKS ORTOPEDİ SANAYİ A.Ş.

    

 

 

 

 

 

 

x