PDPA Information Text

ERETNA Medical Devices Ltd, in order to protect the fundamental rights and freedoms of individuals during the processing of their personal data, especially the privacy of private life, and to regulate the obligations and procedures and principles to be followed by real and legal persons who process personal data, within the scope of the Personal Data Protection Law No. 6698 ("PDPA"), as Data Controller, processes your data only within the purpose and scope described below.

Our company has the necessary technical and administrative infrastructure to protect all kinds of personal data with its administrative procedures, regulations regarding data transaction security carried out with the support of information technologies and the highest level of security measures.

​

Purpose of Processing Personal Data and Transfer of Processed Data

​

ERETNA Medical Devices Ltd, which takes respect for individuals among its priority values. It shows the necessary care and sensitivity in protecting the right to privacy of individuals and ensuring data security, and acts in accordance with legal requirements.

Company; regulating our commercial relations and ensuring commercial security, ensuring the legal and physical security of our customers, business partners, company employees and other third parties, ensuring the corporate functioning of our company, performing business and transactions as a result of signed contracts and protocols, carrying out corporate communication activities, creating and tracking visitor records, Within the scope of VERBIS, employees, data controllers, contact persons,  Data processing activities for the purposes of determining the preferences and needs of data controller representatives and data processors, arranging the services provided accordingly and updating them if necessary, ensuring the fulfillment of legal obligations as required or mandated by legal regulations, contacting the real / legal persons with whom we have business relations, making legal reports and the burden of proof as evidence in legal disputes that may arise in the future. realizes.

Your data processed by our responsible units in accordance with the Law on the Protection of Personal Data No. 6698 and the relevant legislation in line with the stated purposes, SSI, Labor Law No. 4857, Social Insurance and General Health Insurance Law No. 5510, Occupational Health and Safety Law No. 6331 and other legal regulations, authorized public institutions and organizations, our consultants, financial institutions for the purpose of evaluating financial risks,  In order to carry out the audit processes, independent audit firms can be transferred to local/international organizations from which we receive support in our business processes, within the framework of having a legal basis and with your consent.

However, your personal data is included in paragraph 2 of Article 5 of the Law;

(i) it is clearly stipulated in the laws, (ii) the personal data has been made public by the personal data owner himself, (iii) it is mandatory for the protection of the life or physical integrity of himself or someone else who is unable to disclose his consent due to actual impossibility, (iv) it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract, (v) to fulfill the legal obligation of our company. It can also be processed without seeking explicit consent based on one of the legal reasons, (v) data processing is mandatory for the establishment, exercise or protection of a right, (vii) data processing is mandatory for the legitimate interests of our Company, provided that it does not harm the fundamental rights and freedoms of personal data owners.

​

Method of Collecting Personal Data

​

Your personal data is processed by fully or partially automatic or non-automatic means, verbally, in writing or electronically; job application forms, information forms, corporate communication accounts, mail and e-mails, various documents transmitted to our company by our customers, suppliers and other 3rd parties, security camera recordings, company information systems; It is collected through various channels such as our customers, companies to which we supply services/products, our business partners and other 3rd parties, limited to the existence of legal reasons.

​

Measures Taken to Ensure the Security of Personal Data

​

Our company takes the necessary technical and administrative measures to ensure the appropriate level of security in order to prevent the unlawful processing of these personal data processed within the framework of the legislation, to prevent unlawful access to the data and to ensure the protection of the data, and to carry out and have the necessary audits carried out in this context.

​

The Rights The Personal Data Owner is entitled to comply with Listed in Article 11 of the Law No. 6698. 

​

If you submit your rights and requests regarding your personal data to our company within the procedures specified below, your request will be evaluated by our Company and your application will be finalized as soon as possible and within thirty days at the latest.

With your application to our company;

1. To learn whether your personal data is processed or not,

2. If your personal data has been processed, requesting information about it,

3. To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

To know the third parties to whom personal data is transferred in the country or abroad,

1. Requesting correction of your personal data in case of incomplete or incorrect processing,

2. Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the Law,

3. Requesting notification of the transactions made in line with the correction, deletion and destruction requests specified in subparagraphs (d) and (e) of the article to third parties to whom personal data has been transferred,

4. Objecting to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,

In the event that you suffer damage due to the unlawful processing of your personal data, you have the right to demand the compensation of the damage.

Applications to be made by the personal data owner  can be submitted electronically by e-mail to the registered info@eretna.eu  e-mail address, secure electronic signature or mobile signature.

In the applications made, the information identifying the identity of the person concerned and the documents related to the subject must be attached to the application. If the information and documents are not sufficient for the research, our company may request additional information and documents from the relevant person.

Personal data processed in our company; both the acceptance of the application made by the person concerned regarding the deletion and destruction of their personal data in accordance with Article 11 of the Law within the scope of the rights described above, the withdrawal of the explicit consent of the person concerned, in cases where the processing of personal data takes place only on the basis of explicit consent, the amendment or abolition of the provisions of the relevant legislation that form the basis for its processing, the disappearance of the purpose requiring its processing or storage,  In cases where the maximum period requiring the storage of personal data has passed and there is no condition that would justify storing personal data for a longer period of time, it is deleted, destroyed or anonymized.

More detailed information on the subject can be found in our Company's "Personal Data Protection and Processing Procedure".