Website Clarification Text

PRİMUM İLAÇ VE SAĞLIK HİZMETLERİ A.Ş. WEBSITE CLARIFICATION TEXT

 

This Website Member and Visitor Clarification Text (Text) has been prepared to clarify and inform Users about the terms and conditions regarding the use of data obtained and/or to be obtained from Users in any way within the scope of the services offered through the Site, and the methods of data processing, for Members registered on https://primumclub.com/ (Site) operated and managed by PRİMUM İLAÇ VE SAĞLIK HİZMETLERİ A.Ş. (Company), whose data controller operates at Maslak Mah. Taşyoncası Sok. Maslak 1453 Sitesi T4B Blok No:1U/232 Sarıyer/İstanbul; and for Visitors who access the Site other than Members (together, Users).


The Company collects personal data audibly, electronically, or in writing through the Site, social media accounts, e-mail, postal mail, call center, fax, notifications from administrative and judicial authorities, and other communication channels, in accordance with the personal data processing conditions specified in the Law and for the legal reasons and purposes specified in this Text.

Within the scope of the services offered to Users through the Site, and in any way during Users' visits to the Site, cookies are used by the Company. For more detailed information on cookie usage, please review our Cookie Policy. 

 

1 - Data Subject, Data Categories and Data Types

 

Member

 

Identity Information

Name, surname, Turkish ID Number, date of birth.

 

Customer Transaction

Order information

 

Contact Information 

Username, e-mail address, phone number, residential address, country and city of residence.

 

Transaction Security

IP address, ID information, log transaction, website login/logout information, password information, transaction date and time.

 

Marketing

Site navigation information, past usage information, response information to shopping/campaigns, hobbies, shopping preferences, other cookie records collected by the third-party cookie owner through the company.

 

Location Information 

Information about the location from which platforms are accessed

 

Visitor

 

Identity Information

Gender, age group

 

Transaction Security

IP address, ID information, log transaction, website login/logout information, transaction date and time.

 

Location Information 

Information about the location from which platforms are accessed

 

Marketing

Site navigation information, past usage information, response information to shopping/campaigns, hobbies, shopping preferences, other cookie records collected by the third-party cookie owner through the company

 

2 - Legal Reasons

The personal data mentioned above may be processed for the purposes for which data subjects disclose this data to the company, as listed below; in accordance with the conditions and principles in Article 4 of the Law and reiterated in this Text; within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law. The legal reasons for each data category are explicitly stated below:

 

Member

 

Identity Information

 

Contact Information

·       Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract,

·       Data processing is mandatory for the establishment, exercise, or protection of a right

 

Customer Transaction

 

Transaction Security

 

Location

·       Explicitly stipulated in the laws,

·       Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract,

·       It is mandatory for the Company to fulfill its legal obligation,

·       Data processing is mandatory for the establishment, exercise, or protection of a right.

 

Marketing

·       Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the Company,

·       Made public by the data subject themself.

 

Visitor

 

Identity Information

 

Transaction Security

 

Location Information

 

Marketing

·       It is mandatory for the Company to fulfill its legal obligation,

·       Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the Company,

·       Made public by the data subject themself.

 

3 - Purpose of Processing Personal Data 

Within the scope of this Text, the personal data of data subjects as set forth in Article 2 are processed for the following purposes, in accordance with the general conditions specified in this Text:

 

Member

 

Identity Information

 

Contact Information

·       Carrying out information security processes

·       Carrying out auditing/ethical activities

·       Managing access authorizations

·       Following up and conducting legal affairs

·       Carrying out communication activities

·       Creating customer satisfaction surveys

·       Managing contract processes

·       Managing requests and complaints

·       Carrying out marketing processes for products/services

 

Customer Transaction

 

Transaction Security

 

Location

·       Carrying out information security processes

·       Carrying out auditing/ethical activities

·       Managing access authorizations

·       Carrying out activities in compliance with legislation

·       Following up and conducting legal affairs

·       Carrying out Logistics Activities

·       Providing information to authorized persons, institutions, and organizations

·       Carrying out communication activities

·       Managing contract processes

 

Marketing

·       Carrying out processes for company product/service loyalty

·       Carrying out activities for ensuring business continuity 

·       Carrying out customer satisfaction activities

·       Conducting marketing analysis studies

·       Managing advertising, campaign, and promotion processes

·       Carrying out marketing processes for products/services

 

Visitor

 

Identity Information

 

Transaction Security

 

Location Information

 

Marketing

·       Carrying out processes for company product/service loyalty

·       Carrying out communication activities

·       Carrying out activities for ensuring business continuity 

·       Carrying out customer satisfaction activities

·       Conducting marketing analysis studies

·       Managing advertising, campaign, and promotion processes

·       Carrying out marketing processes for products/services

 

4 - Transfer of Personal Data

The Company may transfer the personal data it obtains belonging to data subjects to its domestic servers and suppliers for the purpose of performing the services it offers through the Company's Platforms and provided that it fulfills the obligations stated in the Text. The Company may also transfer personal data belonging to data subjects to third parties for the following purposes:

 

Member 

·       Sharing identity, communication, and transaction security information with authorized public institutions and organizations for the purposes of carrying out activities in compliance with legislation, following up and conducting legal affairs, and providing information to authorized persons, institutions, and organizations; 

·       Carrying out communication activities

·       Sharing with suppliers whose services are utilized in business processes for the purpose of carrying out and auditing business activities, and conducting marketing analysis studies

·       Carrying out Logistics Activities

·       Carrying out After-Sales Support Services for Goods / Services

·       Managing advertising, campaign, and promotion processes

·       Sharing information with suppliers from whom storage services are obtained for the purpose of carrying out storage and archiving activities; 

·       Carrying out Supply Chain Management Processes

 

Visitor

·       Conducting marketing analysis studies

·       Managing advertising, campaign, and promotion processes

·       Sharing information with suppliers from whom storage services are obtained for the purpose of carrying out storage and archiving activities; 

·       Sharing site usage preferences and browsing history with suppliers for segmentation purposes.

 

5 - Rights of the Data Subject

As personal data owners, to specify your requests regarding your rights and to exercise your rights over your personal data, you can make the necessary changes, updates, and/or deletions and related requests by filling out the "Data Subject Application Form" and submitting it via the Company's e-mail address bildirim@primumpharma.com with a secure electronic signature, or via your personal e-mail address, or by written application in person or via notary to the Company's address Maslak Mah. Taşyoncası Sok. Maslak 1453 Sitesi T4B Blok No:1U/232 Sarıyer/İstanbul. If you submit your requests to us through the specified methods, the Company will finalize your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, the fee determined by the Personal Data Protection Board will be charged by the Company. In this context, personal data owners have the right to;

1.       Learn whether personal data is processed,

2.       Request information if personal data has been processed,

3.       Learn the purpose of processing personal data and whether they are used in accordance with their purpose,

4.       Know the third parties to whom personal data are transferred domestically or abroad,

5.       Request correction of personal data if they are incomplete or incorrectly processed,

6.       Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,

7.       Request that the transactions made pursuant to paragraphs (d) and (e) be notified to third parties to whom personal data are transferred,

8.       Object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,

9.       Demand compensation for damages in case of damage due to unlawful processing of personal data.

To exercise your rights as a personal data owner and the rights mentioned above, the application you make containing your explanations regarding the right you wish to exercise must be clear and understandable, the subject of your request must concern you personally or if you are acting on behalf of someone else, you must be specially authorized in this regard and document your authority, the application must contain identity and address information and documents verifying your identity must be attached to the application.

 

6 - Changes to the Text

The Company may make changes to this Text at any time. These changes take effect immediately upon the publication of the new modified text. You will be duly informed of any changes to this Text.