This Information Notice has been prepared by Data Medikal Laboratuar ve Sağlık Ürünleri San. Tic. Ltd. Şti. ("Data Medikal" or the "Company"), as data controller, to inform you about your personal data processed under Article 10 of Turkish Personal Data Protection Law No. 6698 ("PDPL").
This notice is for general information only; processes that require explicit consent — such as marketing communications or analytics cookies — are consented to separately and independently at the relevant step (e.g. the cookie banner, the membership form).
1. Data Controller
Your personal data is processed by Data Medikal Laboratuar ve Sağlık Ürünleri San. Tic. Ltd. Şti., acting as data controller, within the scope and purposes described below.
Address: Güvenlik Mah. Gazi Bulvarı No:50/A, Muratpaşa / ANTALYA
Phone: (242) 238 47 00 | Email: data@datamedikal.com.tr
2. Categories of Personal Data Processed
- Identity: full name; for invoicing purposes, the tax ID number for corporate orders or the national ID number for individual orders
- Contact: phone number, email address, delivery and billing address
- Customer Transaction: order/quote content (product, quantity, amount), order/quote number and history, shipment tracking information
- Transaction Security: your hashed account password, email verification and password reset tokens, session records
- Financial: payments are processed exclusively through iyzico's secure payment infrastructure; your card number, expiry date and security code are never stored on Data Medikal's servers
- Marketing: website usage data collected only through analytics cookies enabled with your explicit consent (see Cookie Policy)
- Opinion: product reviews and comments you submit through your membership account
3. Purposes of Processing Personal Data
- Receiving your orders and quote requests, and establishing and performing the resulting contract
- Invoicing the products/services and keeping the legally required books and records
- Shipping orders and managing the delivery process
- Creating your membership account, authentication and account security
- Responding to your requests, questions, complaints and quote inquiries, and managing customer relations
- Meeting legal obligations arising from e-invoicing, consumer protection and tax legislation
- Where you have given explicit consent, analyzing site traffic and improving user experience
- Carrying out information security processes and preventing unauthorized access
4. Method of Collection and Legal Basis
Your personal data is collected electronically through our website when you fill out an order/quote form, create a membership account, contact us via the contact form, email or phone, and — where you have consented — through cookies.
Under Article 5(2) of the PDPL, your personal data is processed where it is directly related to the establishment or performance of a contract, necessary for compliance with a legal obligation, necessary for the establishment, exercise or protection of a right, or necessary for the data controller's legitimate interest. Marketing communications and analytics cookies are carried out only on the basis of your explicit consent under Article 5(1) of the PDPL.
5. Recipients of Personal Data Transfers
- Contracted cargo/logistics companies, for the delivery of your order
- iyzico Ödeme Hizmetleri A.Ş., to process payment — your card data is processed directly on iyzico's secure infrastructure and never reaches Data Medikal
- Our accounting/e-invoice integrator, for invoicing and compliance with financial legislation
- Our server/cloud hosting provider
- Authorized public institutions and organizations (courts, enforcement offices, tax offices, the Ministry of Trade, etc.), only upon a legal request
- Where you have given explicit consent, analytics service providers such as Google Analytics (Google LLC)
6. Retention Period
Your personal data is retained for as long as required by the purposes of processing and by the retention periods set out in applicable legislation (e.g. 10 years for invoices and commercial books under Tax Procedure Law No. 213 and Turkish Commercial Code No. 6102), after which it is deleted, destroyed or anonymized.
7. Cookies
Details of the cookies used on our site, which of them require your consent, and how to change your preferences are available on our Cookie Policy page.
8. Rights of the Data Subject
Under Article 11 of the PDPL, you have the right to: learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred domestically or abroad; request correction if it is incomplete or inaccurate; request deletion or destruction within the framework set out in Article 7 of the PDPL; request notification of these operations to the third parties to whom the data was transferred; object to a result that is to your detriment arising from analysis of the data exclusively through automated systems; and claim compensation for damages arising from unlawful processing.
9. How to Apply
To exercise the rights above, you may submit your request together with identity-verifying documents by email to data@datamedikal.com.tr or in writing to Güvenlik Mah. Gazi Bulvarı No:50/A, Muratpaşa / ANTALYA. We will conclude your request free of charge within 30 days at the latest, depending on its nature; if the request requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
Last updated: 6 September 2026.