1. Identity of the Data Controller
This notice is issued by AKAD ENDÜSTRİ MALZEMELERİ VE DIŞ TİCARET A.Ş. ("Company") to inform data subjects about personal data processed by the Company in its capacity as data controller, within the meaning of Turkey's Personal Data Protection Law no. 6698 ("KVKK").
- Trade name: AKAD ENDÜSTRİ MALZEMELERİ VE DIŞ TİCARET A.Ş.
- Address: Fulya Mh. Özbal Sk. No:9, 34394 Şişli/İstanbul/Türkiye
- Tax number: 0110054403
- MERSIS number: [MERSİS Numarası]
- Trade registry number: [Ticaret Sicil Numarası]
- KVKK contact email: info@akad.health
2. Definition of Personal Data
Under Article 3 of the KVKK, personal data means any information relating to an identified or identifiable natural person. Names, email addresses, phone numbers, and IP addresses are examples of personal data.
3. Categories of Personal Data Processed
Through the website at https://akad.health ("Site"), the Company may process personal data in the following categories:
- Transaction security data: IP address, browser information, session data (server logs)
- Contact data: name, surname, organisation, phone number, email address, and similar contact details transmitted to us via WhatsApp or email
- Customer transaction data: requests and quotation content shared in the course of commercial discussions
The Site does not currently include an online contact form, payment infrastructure, or analytics tooling. If such infrastructure is added in the future, this notice will be updated.
4. Purposes of Processing
- Operating and securing the Site's technical infrastructure
- Responding to requests and questions from visitors who contact us through the Site
- Conducting pre-contractual negotiations and performing contractual processes
- Fulfilling retention, reporting, and disclosure obligations under applicable law
- Protecting our rights and interests through lawful means
5. Legal Grounds (KVKK Article 5)
Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:
- Necessity directly related to the formation or performance of a contract (Art. 5/2-c)
- Necessity for compliance with the data controller's legal obligations (Art. 5/2-ç)
- Necessity for the establishment, exercise, or protection of a right (Art. 5/2-e)
- Necessity for the legitimate interests of the data controller (Art. 5/2-f)
- Where explicit consent is required: the data subject's explicit consent (Art. 5/1)
6. Domestic and International Transfers
The servers of the service providers we rely on for the Site's technical infrastructure are located outside Turkey. As a result, server logs and similar technical data may be transferred to the following third parties:
- Vercel Inc. (United States): site hosting infrastructure
- Google LLC (United States): Google Maps embed and Google Fonts
- WhatsApp / Meta Platforms Inc. (United States): redirect target for the WhatsApp button
Cross-border transfers are carried out within the scope of Article 9 of the KVKK. Where the data subject's explicit consent is not obtained, the safeguard mechanisms prescribed by the law are followed.
Domestically, only the data specifically requested by authorised public authorities, in connection with their lawful demands, is shared with such authorities.
7. Your Rights as a Data Subject (KVKK Article 11)
Under Article 11 of the KVKK, as a data subject you have the right to:
- Learn whether your personal data is being processed
- Request information if it is
- Learn the purpose of processing and whether the data is being used in line with that purpose
- Know the third parties to whom data has been transferred, domestically or abroad
- Request correction if data is incomplete or inaccurate
- Request erasure or destruction
- Request that any correction, erasure, or destruction be communicated to third parties to whom data was transferred
- Object to a result that is unfavourable to you arising from automated analysis
- Claim compensation if you suffer damage due to unlawful processing
8. How to Submit a Request
To exercise your rights under the KVKK, please send a written request to info@akad.health in line with the Communiqué on the Procedures and Principles of Application to the Data Controller.
Your request should include at least: name, surname, signature (if the request is in writing), Turkish ID number (or for foreign nationals, nationality and passport number), residential or business address for service of notices, email address (if applicable), phone or fax number, and the subject of the request.
Requests will be answered within 30 days, depending on the nature of the request. If the request is denied, the response is found inadequate, or no response is received in time, you have the right to file a complaint with the Personal Data Protection Authority.
9. VERBİS Registration Status
Whether a data controller is required to register with the Data Controllers' Registry Information System (VERBİS) depends on annual turnover and employee thresholds set by the Personal Data Protection Authority. The Company periodically reassesses whether it is subject to a VERBİS registration obligation. If such obligation arises, the registration will be carried out and the VERBİS registration number will be published on this page.
10. Updates to This Notice
This KVKK notice may be reviewed in light of changes to the law, updates to our internal processes, or decisions of the Authority. The last-updated date on this page is refreshed when material changes are made.
