KVKK Disclosure Statement

AYE Exocure Tıbbi Ürünler Sanayi ve Ticaret Anonim Şirketi, acting as the data controller, places great importance on the security of your personal data. In this respect, all types of personal data that we hold are processed, stored, and transferred in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”).

With this awareness, AYE Exocure Tıbbi Ürünler Sanayi ve Ticaret Anonim Şirketi ensures that the personal data of suppliers, supplier employees, subcontractor employees and representatives, consultants engaged under contractual agreements, legal advisors, and other third parties whose personal data are processed within contractual and business relationships, are handled and protected in compliance with the KVKK. Acting in the capacity of “Data Controller,” as defined under the KVKK, we process your personal data within the limits set out in the legislation and as explained below.

This disclosure statement has been prepared pursuant to Article 10 of the KVKK (“The Data Controller’s Obligation to Inform”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to inform suppliers, supplier employees, subcontractor employees and representatives, consultants, legal advisors, and other third parties whose personal data are processed within contractual and business relationships.

Separate disclosure statements are provided on our website (www.ayeexocure.com.tr) for our employees and employee candidates. For optimal use of our online channels, cookies are placed in a manner limited to specific purposes and in compliance with privacy requirements. You may review our Cookie Policy on our website for detailed information.

The terms personal data, special categories of personal data, data processing, data subject, and data controller used in this disclosure are based on the definitions provided in the KVKK.

DEFINITIONS

Personal Data: Any information relating to an identified or identifiable natural person.
Processing of Personal Data: Any operation performed on personal data, wholly or partially by automated means, or non-automated means provided it forms part of a data recording system (e.g., collection, recording, storage, alteration, transfer, disclosure, classification, etc.).
Special Categories of Personal Data: Data concerning race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, attire, association, foundation or trade union membership, health, sexual life, criminal convictions, security measures, biometric and genetic data.
Data Subject: Natural persons whose personal data are processed (e.g., employees, candidates, suppliers, consultants).
Data Controller: The entity that determines the purposes and means of processing personal data, and manages the data recording system. In this context, AYE Exocure Medical Products Industry and Trade Inc. is the Data Controller.

DATA CONTROLLER INFORMATION

Company Name: AYE Exocure Tıbbi Ürünler Sanayi ve Ticaret Anonim Şirketi
Phone: +90 312 235 91 55
E-mail: info@ayegroup.com.tr
Address: Mutlukent Mah. 2024 Cad. No:16 İç Kapı No:1, Çankaya / Ankara, Turkey
Tax Office & Tax No: Doğanbey 3810961976
KEP Address: ayeexocure@hs01.kep.tr

PURPOSES OF PROCESSING PERSONAL DATA

Your personal data are processed in accordance with Article 4 of the KVKK, based on the principles of lawfulness and fairness, accuracy and up-to-dateness, specified and legitimate purposes, relevancy, proportionality, and storage only as long as necessary. Processing purposes include:

Managing supplier and business partner relations
Carrying out contractual obligations
Conducting member/customer satisfaction activities
Managing goods/service procurement and after-sales processes
Organizing corporate communication, events, and promotional activities
Ensuring business continuity and archiving
Managing visitor records and physical security
Meeting legal obligations towards public institutions and regulators

LEGAL BASES

Depending on the data category (e.g., identity, contact, financial, legal data), processing is based on one or more of the legal grounds specified in Article 5 of the KVKK:

Necessity for the performance of a contract (Art. 5/2-c)
Compliance with a legal obligation (Art. 5/2-ç)
Explicit provision by law (Art. 5/2-a)
Legitimate interests of the data controller, provided fundamental rights and freedoms are not harmed (Art. 5/2-f)

TRANSFER OF PERSONAL DATA

Personal data may be transferred to:

Public institutions and authorities (e.g., law enforcement, judiciary, regulatory agencies),
Consultants (e.g., lawyers, financial and tax advisors),
Business partners and service providers engaged for operational purposes,
International transfers where legally required and with adequate safeguards.

Special categories of personal data are only transferred with explicit consent, except for the legal exceptions under Article 6 of the KVKK.

METHODS OF COLLECTION

Personal data are collected through written, electronic, and digital means, such as contracts, invoices, application forms, website applications, email/KEP, official correspondence, participation forms, and communications with AYE Exocure.

RIGHTS OF DATA SUBJECTS

Pursuant to Article 11 of the KVKK, you have the right to apply to AYE Exocure Medical Products Industry and Trade Inc. to:

Learn whether your personal data are processed,
Request information if your personal data have been processed,
Learn the purpose of processing and whether it is used in line with that purpose,
Know the third parties to whom your data are transferred, domestically or abroad,
Request correction of incomplete or inaccurate data,
Request deletion or destruction of personal data within the framework of Article 7 of the KVKK,
Request notification of these corrections or deletions to third parties,
Object to unfavorable outcomes based solely on automated systems,
Request compensation in case of unlawful processing causing damage.

Applications can be submitted in person, via notary, KEP (ayeexocure@hs01.kep.tr), secure electronic signature, or through your registered email address to the Company’s address:
Mutlukent Mah. 2024 Cad. No:16 İç Kapı No:1, Çankaya / Ankara, Turkey

Requests will be concluded free of charge within 30 days, unless the process requires an additional cost, in which case fees set by the Personal Data Protection Authority may apply.