KVKK

Data controller

Under the Personal Data Protection Law No. 6698 (“KVKK”), the data controller is Biosys Biyomedikal Mühendislik Sanayi ve Ticaret A.Ş. (“Biosys” or the “Company”), whose registered office address is provided below.

This notice has been prepared for website visitors, contact form users, prospective customers and suppliers, business partners, event participants, and other individuals who contact Biosys.

Personal data that may be processed

Processing purposes and legal bases

Your personal data may be processed to respond to requests and questions, carry out product and service processes, provide technical service and after-sales support, establish and manage business relationships, plan events and training, ensure information security, fulfill legal obligations, and protect rights in disputes.

Depending on the processing activity, the legal bases include express provision by law, the establishment or performance of a contract, fulfillment of a legal obligation, the establishment, exercise, or protection of a right, and Biosys's legitimate interests, provided these do not harm your fundamental rights. Your explicit consent is obtained where required, such as for commercial electronic communications or non-essential cookies.

Transfer of personal data

Your personal data may be transferred, only for the stated purposes and to the extent necessary, to authorized public institutions and organizations, courts and legally authorized authorities, hosting and information technology providers, technical service and logistics partners, auditors, and legal and financial advisers.

Where a transfer abroad is necessary, the current KVKK provisions on international transfers and appropriate safeguards apply.

Collection method

Data may be collected through the website and forms, email, telephone, physical documents, event registrations, processes conducted with business partners, and website technical logs, by automated or partially automated means, or by non-automated means provided they form part of a data recording system.

Retention and data security

Personal data is retained for the period required by the relevant processing purpose and applicable statutory limitation and retention periods. When this period ends, the data is deleted, destroyed, or anonymized in accordance with legislation.

Biosys implements appropriate technical and administrative measures, such as access control, record keeping, up-to-date software, supplier checks, and employee awareness, to prevent unauthorized access, loss, alteration, or disclosure.

Your rights under KVKK

Under Article 11 of KVKK, you may apply to Biosys to:

• Learn whether your personal data is being processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether your data is used in accordance with that purpose,
• Know the third parties to whom it is transferred domestically or abroad,
• Request correction of incomplete or incorrectly processed data,
• Request deletion or destruction if the statutory conditions are met,
• Request notification of correction, deletion, or destruction to third parties to whom the data has been transferred,
• Object to an outcome against you resulting from analysis by automated systems,
• Request compensation if you suffer damage due to unlawful processing

These are your rights.

Applications and contact

Your application must include your full name, signature (for written applications), Turkish identity number or identity/passport number for foreign nationals, address for notifications, email address and phone number if available, and a clear description of your request. Information and documents to verify your identity may be requested.