Your Privacy Matters

Commitment to Data Protection and Confidentiality Standards (KVKK & GDPR).

1. Purpose and Scope

At MEDSTEIN, we prioritize the privacy and security of the personal data of our customers, business partners, employees, and website visitors. This policy explains how we collect, use, store, and protect your personal data in compliance with the Law on the Protection of Personal Data No. 6698 (LPPD) in Turkey and the General Data Protection Regulation (GDPR) of the European Union.

As the “Data Controller,” MEDSTEIN ensures that your data is processed lawfully, fairly, and transparently.

2. Collection of Personal Data

We may collect personal data directly from you (via website forms, emails, business cards) or automatically through our website (cookies, IP logs). The types of data we may collect include:

  • Identity Information: Name, surname.
  • Contact Information: E-mail address, phone number, company address.
  • Transaction Security: IP address, website login/logout records.
  • Customer Transaction: Request details, order history, billing information.

3. Principles of Processing

We process your personal data based on the following principles:

  • Compliance with the law and rules of integrity.
  • Accuracy and being up to date.
  • Processing for specific, explicit, and legitimate purposes.
  • Being connected, limited, and restrained with the purpose of processing.
  • Retention for the period stipulated by relevant legislation or the purpose of processing.

4. Purposes of Processing

Your personal data is processed for the following purposes:

  • Executing goods/services sales processes and after-sales support.
  • Managing customer relations and communication.
  • Conducting authorized marketing activities (only with your consent).
  • Ensuring the legal and commercial security of the company.
  • Fulfilling legal obligations (e.g., tax laws, regulatory compliance).

5. Transfer of Personal Data

MEDSTEIN treats your data with strict confidentiality. We do not sell your data to third parties. However, for the execution of our business, data may be shared with:

  • Service Providers: Logistics companies (for shipping), IT support services, and cloud storage providers.
  • Legal Authorities: When required by law or a valid court order.
  • Cross-Border Transfer: Since we operate globally, strictly necessary data may be transferred to secure servers or partners outside the country, in full compliance with LPPD and GDPR cross-border transfer regulations.

6. Data Security Measures

We take technical and administrative measures to prevent unlawful processing of and access to your personal data.

  • Technical: SSL encryption on our website, firewalls, and secure servers.
  • Administrative: Restricted access protocols for employees and confidentiality agreements with third parties.

7. Rights of the Data Subject

According to Article 11 of the LPPD and relevant articles of the GDPR, you have the right to:

  • Learn whether your personal data is being processed.
  • Request information if your personal data has been processed.
  • Learn the purpose of the processing and whether data is used properly.
  • Know the third parties to whom your personal data is transferred.
  • Request correction of incomplete or inaccurate data.
  • Request the deletion or destruction of your personal data (“Right to be Forgotten”).
  • Object to the occurrence of a result against you by analyzing the data exclusively through automated systems.

8. Contact & Application

To exercise your rights or for any questions regarding our privacy practices, you can contact us. You may submit your requests using the “LPPD Application Form” available on our website or by sending an email to our Data Protection Officer.

📧 E-mail: kvkk@medstein.com