Privacy Policy

We attach great importance to the protection of information. Your personal data is collected and processed in accordance with applicable data protection rules, in particular with the General Data Protection Regulation (GDPR) adopted in the European Union.

1. The responsible person

The person responsible for the collection, processing and use of your personal data within the meaning of Paragraph 4 of Article 7 of the General Data Protection Regulation is:

REHABTÜRK SAĞLIK VE TİCARET ANONİM ŞİRKETİ

Address:

Kaptanpaşa Mah. Piyalepaşa Bulvan No:73 Ortadoğu Plaza K:10 Şişli / İstanbul , Türkiye

Should there be any objections to the collection, processing or use of your data in accordance with this Privacy Policy in general or in relation to its individual provisions, you may submit your objections to the person responsible.

You can save and print this Privacy Policy at any time.

2. The general objectives of data processing

We use personal data to administer the site and to the extent necessary to fulfill the contract.

3. What data do we use and why

3.1 Hosting

The hosting service that we use provides the following services: infrastructure and platform services, memory space, storage and database services, and security and maintenance services that we use to manage the site.

Based on our legitimate interest in efficient and secure provision of our website to users in accordance with Article 6 Paragraph 1f   GDPR   together with Article   28   CDPR, we or our hosting provider process inventory data, contact details, content data and contract data and website usage data, metadata, and contact data of customers, stakeholders, and visitors on this website.

3.2 Data Access

When you use this website, we collect information about you. We automatically collect information about your behavior as a user and about your interaction with us, as well as log information about your computer or mobile device. We collect, store and use data about each visit to our site (so-called server log files). Access data includes:

• The name and URL of the requested file
• Search for date and time
• The amount of data transferred
• Successful recovery message (HTTP response code)
• Browser type and browser version
• OS
• URL Referrer (i.e. the page from which the user came to the website)
• Websites accessed by the user’s system through our site
• The user’s Internet service provider
• The IP address and provider of the request

We use log data without identifying you as an individual and without creating any profile for statistical evaluations to manage, secure and improve our site, as well as for anonymous recording of the number of visitors to our site (traffic), the degree and nature of use of our site and our services, as well as for the preparation of financial reports to measure the number of referrals made by cooperation partners. Based on this information, we can deliver personalized content taking into account the user’s location, analyze traffic, eliminate errors and improve the quality of our services.

This also includes our legitimate interest under Article 6, paragraph 1f, of the CDPR.

We reserve the right to analyze log data retrospectively if, on the basis of concrete evidence, there is a reasonable suspicion of illegal use of the Website. If it is necessary for security purposes or to provide services or make payments for a service, for example, if you use one of our commercial offerings, we store IP addresses in log files for a limited period of time. Once the order or payment process is complete, we will delete the IP address if it is no longer required for security purposes. Also, we store IP addresses in cases where we have a specific suspicion of illegal actions in connection with the use of our site. In addition, as part of your account, we keep the date of your last visit (eg, when you registered, logged in, cross-referenced, etc.).

3.3 Information files (cookies)

To improve our site, we use so-called cookies. Session cookies are small text files that are sent from the appropriate servers and temporarily stored on your hard drive when you visit a website. These files contain a so-called session identifier, with which different requests from your browser can be associated into a common session. This will allow you to recognize your computer when you re-enter our website. Once you close your browser, these cookies will be deleted. For example, with their help, you can use the shopping cart function when visiting several pages.

We also use a small amount of persistent cookies (also small text files stored on your device) that remain on your device and allow us to recognize your browser during your next visit. These cookies will be stored on your hard drive and will be deleted after a specified time. Their lifespan is from 1 month to 10 years. With the help of cookies, we can make our offer to you in a more convenient, efficient and secure way, for example, to show you a page with information tailored to your interests.

Our legitimate interest in using cookies pursuant to Article 6 Paragraph 1f of the CDPR is to make our Website more accessible, efficient and secure.

Cookies store the following data and information:

• Username information
• Language settings
• Entered search words
• Information on the number of visits to our website and the use of individual functions of our website

When a cookie is activated, it is assigned an identification number without any linking of your personal data to it. Your name, surname, IP address or similar data, which could be used to establish a connection between you and cookies, is not included in a cookie. With the help of cookie technology, we obtain only pseudonym data, for example, which pages of our store you have visited, which products you were interested in, etc.

You can configure your browser in such a way that it is notified in advance about the upcoming placement of cookies on your device and decides in each case whether to exclude the reception of cookies in certain cases or at all, or to completely prevent the maintenance of cookies. Such actions may result in limited functionality of the Website.

3.4 Data required to fulfill our contractual obligations

We process personal data that we need to fulfill our contractual obligations, such as name, surname, address, email, ordered products and payment requirements. The collection of this data is necessary for the conclusion of the contract.

This data will be deleted after the expiry of the warranty and legal storage periods. Any data associated with a user’s account (see below) will be retained in any event for the duration of that account’s existence.

The legal basis for processing this data is Article 6 Paragraph 1b of the CDPR, since such data is necessary for us to be able to fulfill our contractual obligations to you.

3.5 User Account

You can create a user account on our website. If you have such a wish, we will need your personal data, which will be requested upon registration. After that, you will only be asked for the email or username and password of your choice to log in.

When registering a new user, we collect basic data (for example, name, surname, address), contact details (for example, email), payment details (bank), as well as access data (username and password).

In order to ensure proper registration and prevent unauthorized registration of third parties, after registration, you will receive an activation link to your email, with which you can activate your account. We will start storing the data transmitted by you in our system only after you have completed your registration.

Upon your instructions, your account may be deleted at any time at no cost, other than the cost of data transmission in accordance with the Basic Tariffs. To this end, the only thing you need to do is send a text message to the mail requirements specified in Paragraph 1 (for example, by e-mail, fax or letter). We will then delete your personal data that we have stored, unless we need to save it to process orders or in connection with storage legislation requirements.

The legal basis for processing this data is your consent in accordance with Article 6, paragraph 1, of the CDPR.

3.6 Communication by e-mail

When you contact us (for example, through a contact form or e-mail), we use your data to process the request, as well as in case you have additional questions.

If the data processing is carried out either to make pre-contractual arrangements at your request or to fulfill a contract, if you are already our customer, the legal basis for such data processing is Article 6 Paragraph 1b of the CDPR.

We only process additional personal data if you agree to this (CDPR Art. 6 § 1a), or if we have a legitimate interest in processing your data (CDPR Art 6 § 1f). For example, the legitimate interest is to respond to your emails.

4. Google Analytics

We use Google Analytics, an online analytics service provided by Google Inc. Google Analytics uses so-called cookies, which are text files that are stored on your computer and allow an analysis of your use of our website. A cookie generates information about the use of this website by visitors, and its pages are usually transferred to a Google server in the USA and stored there.

This also includes our legitimate interest under Paragraph 1 and Article 6 of the CDPR.

Google is bound by and has been adopted by the EU-US Privacy Shield. Thus, Google is obliged to comply with the standards and provisions of the European Data Protection Regulation. For more information, please visit the company’s website:   https://www.privacyshield.gov/participant  ? id=a2zt000000001L5AAI&status=Active  .

On this site, we have activated the  IP anonymization function  (  anonymizeIp  ). As a result, your IP address will be shortened by Google even within members of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and already downgraded there. Google will use this information on our behalf to evaluate your use of the Website, to compile reports on the operation of the Website and to provide us with other services related to the operation of the Website and Internet usage.

The IP address transmitted from your browser to the Google Analytics system will not be merged with other Google data. You can prevent the saving of cookies by using the appropriate software settings of your browser. However, please note that if you do this, you may not be able to use all of this site’s options at full size.

In addition, you can prevent the data generated by the cookie and associated with your use of the website (including your IP address) from being transmitted to Google and the processing of this data by Google by downloading the following link and installing the browser plug-in: https://tools   . google.com/dlpage/gaoptout?hl=de  .

As an alternative to the browser plug-in or in-browser settings on mobile devices, you can redirect the following link to set the “Opt-Out-cookie” function, which will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in This browser and only on this domain.) After deleting cookies in your browser, you must click on this link again: [Deactivate Google Analytics]

5. Duration of data storage

Unless otherwise specified, we store personal data only for as long as it is necessary to achieve our purposes.

In some cases, for example, in the field of taxation or commercial law, legislation provides for a longer storage of personal data. In these cases, the data will be kept by us only for these legal purposes, but will not be processed in any other way and will be deleted after the expiry of the legal storage period.

6. Your rights as a subject of personal data processing

In accordance with current legislation, you have different rights in relation to your personal information. If you wish to assert these rights, please send your request with exact identification of your identity by e-mail or by post to the address specified in Section 1.

Below is a list of your rights.

6.1 Right to Confirmation and Reference Information

You have the right to receive clear reference information regarding the processing of your personal data.

special:

You have the right to receive confirmation from us about whether your personal data is being processed at any time. If this is the case, you have the right to ask us for free information about your stored personal data together with a copy of such data. In addition, you are entitled to the following information:

1. data processing objectives;
2. Categories of personal data processed;
3. Recipients or categories of recipients to whom Personal Data has already been or will be disclosed, in particular to recipients in third countries or in international organisations;
4. if applicable, the planned period of storage of personal data or the criteria for determining this period if this is not possible;
5. the right to rectify or delete your personal data, restrict processing by the person responsible or the right to object to such processing;
6. the right to appeal to the supervisory authority;
7. If no personal information was obtained from you, all available information about the source of the data;
8. whether automated decision-making, including profiling, is applied in accordance with paragraphs 1 and 4 of   Article 22   of the CDPR, and, at least in these cases, informational data about the respective reasoning scheme, as well as the results and desired results of such processing for you.

If personal data is transferred to a third country or to an international organization, you have the right to receive information about relevant safeguards under Article 46 of the CDPR in relation to data transfer.

6.2 Right to rectification

You have the right to ask us to correct and, if necessary, supplement your personal data.

special:

You have the right to demand immediate correction of incorrect personal data relating to you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including through an additional request.

6.3 Right to data deletion

In some cases, we are required to delete your personal information.

special:

Under Article 17, paragraph 1, of the CDPR, you are entitled to request that we erase your personal data immediately, while we are required to erase your personal data immediately if there is one of the following reasons:

1. Personal data is no longer needed for the purposes for which it was collected or otherwise processed.
2. You withdraw your consent, on the basis of which the processing was carried out pursuant to     CDPR   Article 6 paragraph 1a or CDPR Article 9 paragraph 2a   , and there is no other legal basis for the processing.
3. In accordance with   Article 21 , paragraph 1   of the CDPR, you object to processing, and there are no justifiable reasons that have priority to processing, or you object to processing in accordance with Article   21 , paragraph 2   of the CDPR.
4. Personal data has been processed illegally.
5. Deletion of personal data is required to comply with a legal obligation under European Union law or under national law to which we link.
6. Personal data was collected to provide services to information companies in accordance with   Article 8 , paragraph 1  , CDPR.

If we make personal data publicly available and are obliged to erase it in accordance with Article 17, paragraph 1 of the CDPR, we will take appropriate measures, including those related to technical arrangement, taking into account available technologies and implementation costs, to inform the persons responsible for the processing of personal data that you have requested the deletion of all links to This personal information or copy, or copy this personal information.

6.4 Right to limited processing

In some cases, you may request to limit the processing of your personal information.

special:

You have the right to request limited processing from us if one of the following conditions is met:

1. You dispute the accuracy of your personal information for a period of time that allows us to verify the accuracy of your personal information,
2. the processing is unlawful, you have objected to the deletion of the personal data, and instead have requested that the use of the personal data be restricted;
3. We no longer need your personal data for the purposes of the processing, but you need the data for the submission, enforcement or protection of your legal claims or
4. You have protested processing under Section   21 , Paragraph 1   of the CDPR for a period of time until it is determined that our company’s legal grounds outweigh yours.

6.5 Right to Data Portability

You have the right to receive, transmit or allow us to transmit any personal data relating to you in a machine-readable form.

special:

You have the right to receive personal information submitted to us in a structured, standard, machine-readable format, and you have the right to freely transfer such information to another responsible person provided:

1. The processing takes place on the basis of consent pursuant to Article 6 , paragraph 1a   , CDPR or Article 9  , paragraph 2a     of the CDPR, or on the basis of a contract pursuant to   Article 6 , paragraph 1b   of the CDPR, and
2. Processing is done using automated procedures.

By exercising your right to data portability in accordance with paragraph 1, you have the right to transfer personal data by us directly to another responsible person, to the extent technically feasible.

6.6 Right to protest

You have the right to object to lawful processing of your personal data by us, if it depends on your specific situation and if our interests in the processing are not overriding.

special:

You have the right to object to the processing of your personal data in accordance with paragraph 1e or paragraph 1f of   Article 6   of the CDPR at any time on grounds arising from your specific situation. This also applies to profiling based on these provisions. We stop processing personal information if we cannot demonstrate a compelling legal basis for the processing that overrides your interests, rights and freedoms, or that the processing is designed for the purposes of bringing, implementing, or protecting legal action.

If personal data is processed by us for the purpose of direct advertising, you have the right to object to the processing of your personal data for the purpose of such advertising at any time. This also applies to profiling, since it is associated with such direct advertising.

You have the right to object to the processing of your personal data for the purposes of scientific or historical research or for statistical purposes carried out in accordance with Article   89, paragraph 1  , CDPR on grounds relating to your specific situation, unless such processing is required for the performance of tasks related to public interests.

6.7 Automated decision making, including profiling

You have the right not to be subjected to decisions that are based solely on automated processing, including profiling, that would have a legal effect on you or cause you similarly significant harm.

No automated decision will be made based on the personal data collected.

6.8 Right to withdraw consent to data processing

You have the right to withdraw your consent to the processing of personal data at any time.

6.9 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular, in the participating country, at your place of residence, at your place of work or at the place of the alleged infringement, if you believe that the processing of your personal data is unlawful.

7. Data security

We make every effort to ensure the security of your data under applicable data protection legislation and our technical capabilities.

Your personal data will be sent in encrypted form. This applies to your orders, as well as to your customer login. We use an SSL (Secure Socket Layer) encryption system, but please note that data transmission over the Internet (for example, when communicating via e-mail) can be vulnerable in terms of security. It is impossible to provide complete data protection from third parties.

To protect your data, we support technical and organizational security measures in accordance with Article 32 of the CDPR, always adapting to the latest technology.

We also do not guarantee that our offer will remain available at certain times: interference, interruptions or malfunctions cannot be excluded. The servers we use are backed up regularly.

8. Disclosure of data to third parties, lack of data transfer to foreign countries that are not part of the European Union

We only use your personal data within our company.

In cases where third parties are involved in the execution of contracts (for example, logistics service providers), they will receive personal data only to the extent necessary to provide the relevant service.

In the event that some parts of the data processing are transferred to the contractors (“order processing”), we oblige the contractors to use personal data only in accordance with the requirements of the data protection legislation and to protect the rights of the data subject.

Except for the case referred to in paragraph 4, the transfer of data to agencies or persons outside the European Union is impossible and unplanned.