Data controller
For the purposes of Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is Turkistan Medikal İlaç İth. İhr. Tic. Ltd. Şti. (Turkistan Pharma), located at Yaşamkent Mah. 3284. Sok. No: 2A Çankaya/Ankara, Türkiye.
- Corporate email: info@turkistanpharma.com
- Telephone: +90 552 830 23 38
- Privacy requests: kvkk@turkistanpharma.com
Personal data we may process
The data involved depends on how you interact with us. We may process the information you provide through our contact form, email, telephone or other corporate channels, together with limited technical records needed to operate and secure the website.
- Identity and contact details such as name, email address and telephone number.
- Professional and organisation information, country or destination market, enquiry subject and message content.
- Communication records and the information required to respond to or follow up an enquiry.
- Technical records such as IP address, request time, requested address, browser or device information and error/security events recorded by hosting infrastructure.
- A pseudonymous HMAC rate-limit key derived from an IP address to protect the contact form from automated abuse. The IP address itself is not added to the form email.
Purposes and legal grounds
We process personal data only where a concrete purpose and an applicable legal ground exist. Depending on the interaction, the grounds below may apply separately.
- Receiving, assessing, routing and answering corporate, supply, partnership, project or career enquiries: where processing is directly related to establishing or performing a contract under Article 5/2(c), or is necessary for our legitimate interests under Article 5/2(f), without harming fundamental rights and freedoms.
- Maintaining website, communication and information security and preventing misuse: our legitimate interests under Article 5/2(f).
- Keeping records or making disclosures required by law: fulfilment of a legal obligation under Article 5/2(ç).
- Managing disputes and establishing, exercising or protecting a right: Article 5/2(e).
How data is collected
Data is collected electronically when you submit the website form, send an email, use a published contact channel or browse the website. Limited technical records may be generated automatically by the web server and security controls during a request.
Recipients and transfers
Access is limited according to role and need. Personal data may be disclosed only to the extent required for the stated purpose and on the relevant legal ground.
- Authorised Turkistan Pharma teams responsible for the subject of the communication.
- Hosting, email, information-technology, security and support providers acting within their service scope.
- Relevant manufacturers, suppliers, professional advisers or business counterparties where this is necessary to assess or fulfil a request.
- Courts, regulators, law-enforcement bodies and other legally authorised public institutions when required.
International transfers and external channels
Where use of an infrastructure provider or performance of an international enquiry constitutes a transfer abroad, the transfer is carried out only where the conditions and appropriate safeguards in Article 9 of the KVKK are met. The website currently uses no third-party analytics, advertising pixels or embedded social-media content.
WhatsApp and other external services are opened only after you choose their link. Information you then provide is also governed by the relevant provider’s privacy terms. You may use our email or telephone channels instead.
Retention and security
Records are retained only for as long as needed for the purpose for which they were collected and for applicable statutory recordkeeping, limitation, audit or dispute periods. When those grounds cease, data is handled under the company’s deletion, destruction and anonymisation processes.
Administrative and technical measures are applied according to the nature of the processing. These include access limitation, service security, form validation and anti-abuse controls. No internet transmission or storage method can be represented as entirely risk-free.
Your rights and how to apply
Under Article 11 of the KVKK, you may ask whether your data is processed; request information; learn the purpose and whether the data is used accordingly; learn recipients in Türkiye or abroad; request correction, deletion or destruction where the legal conditions apply; request notice of those operations to recipients; object to a result produced exclusively by automated analysis; and seek compensation where unlawful processing causes damage.
Submit a request under Article 13 of the KVKK and the Communiqué on Application Procedures and Principles to the postal address above. You may also write from an email address previously notified to and registered in our systems to kvkk@turkistanpharma.com, or use another method recognised by the Communiqué. Please include enough information to identify the relevant processing and verify the applicant without sending unnecessary identity documents. Applications are answered as soon as possible and no later than thirty days, depending on their nature.
Changes to this notice
We may revise this notice when our services, data flows or legal requirements change. The effective date on this page identifies the current version. Material changes will be reflected here before or when the relevant processing begins.