Data controller
The data controller under Turkish Personal Data Protection Law No. 6698 (KVKK) is Turkistan Medikal İlaç İth. İhr. Tic. Ltd. Şti., Yaşamkent Mah. 3284. Sok. No: 2A Çankaya/Ankara, Türkiye.
Data collected through the form
We collect the fields you complete and the technical information needed to validate and protect the submission.
- Full name, email address, country or destination market, enquiry type and message are required.
- Organisation or company and telephone number are optional.
- The time at which the form is opened is used by an anti-automation control.
- For rate limiting, a pseudonymous HMAC key derived from the IP address is checked against attempts in a 15-minute window. The IP address itself is not placed in the form email. Hosting access logs are a separate technical record.
- Cloudflare Turnstile processes the IP address and technical browser or device signals needed to distinguish legitimate submissions from automated traffic. Form entries and message content are not sent to Turnstile.
Purposes and legal grounds
Form data is used to receive the request, understand its context, route it to the responsible area, communicate with you, prepare a response and maintain the security of the channel.
- Enquiry handling: Article 5/2(c) of the KVKK where directly related to establishing or performing a contract, or Article 5/2(f) where necessary for our legitimate interest in managing corporate communications without harming fundamental rights and freedoms.
- Form and information security: Article 5/2(f), our legitimate interest in preventing automated abuse and protecting the service.
- Legal recordkeeping or mandatory disclosures: Article 5/2(ç), fulfilment of a legal obligation.
- Potential disputes: Article 5/2(e), establishment, exercise or protection of a right.
Collection and recipients
Data is collected electronically when you complete and submit the form. It may be accessed by authorised teams responsible for the enquiry and by hosting, email, information-technology, security or support providers within their service scope. Cloudflare provides the Turnstile anti-automation control and receives only the technical verification data required for that service, not the content entered in the form. Data may also be disclosed to a relevant supplier, manufacturer, professional adviser, business counterparty or legally authorised institution when necessary for the request or required by law.
International transfers
If an infrastructure or security service, including Cloudflare Turnstile, or an international enquiry requires a transfer abroad, it is carried out only where the conditions and appropriate safeguards in Article 9 of the KVKK are met. The form includes no advertising, marketing, analytics or social-media tracker.
Retention and deletion
The submission and related correspondence are retained for the time needed to assess and conclude the request and for applicable statutory recordkeeping, limitation, audit or dispute periods. When the purposes and legal grounds cease, records are included in the company’s deletion, destruction or anonymisation process.
Use the appropriate route
Do not submit special-category health data through this general form. Suspected adverse reactions must be reported to pv@turkistanpharma.com. Product identity, packaging, appearance, function or condition concerns must be reported to productcomplaints@turkistanpharma.com. Do not use the website for an emergency or to request medical advice.
Your KVKK rights
You may exercise the rights listed in Article 11 of the KVKK. Submit an application under Article 13 and the Communiqué on Application Procedures and Principles to our postal address, or write from an email address previously notified to and registered in our systems to kvkk@turkistanpharma.com. Applications are answered as soon as possible and no later than thirty days, depending on their nature.
This notice fulfils a transparency obligation; it is not a consent request. Submitting the form does not enrol you in marketing communications.