Personal Data Protection

Company Name provides the following basic information regarding the protection of personal data. www.ecchealthnow.com presents these disclosures to our customers and any third parties using our website and/or mobile apps in order to fulfill our disclosure obligations under Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”). www.ecchealthnow.com reserves the right to update this Personal Data Protection Disclosure to reflect any changes in applicable legislation.

In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), published in the Official Gazette No. 29677 on 07.04.2016, any and all information obtained or to be obtained by our company in its capacity as data controller—or provided by you—constitutes “personal data” and will be processed by our company automatically or non‐automatically (including collection, recording, storage, preservation, alteration, disclosure, transfer, or making available) in the forms stipulated by the KVKK. The Law on Regulation of Electronic Commerce No. 6563 also contains provisions on personal data protection, and the Turkish Penal Code No. 5237 provides criminal sanctions for violations. Additionally, for compliance with the Consumer Protection Law No. 6502 and the Regulation on Distance Contracts, it is necessary to collect and use data.

Purposes of Processing and Legal Grounds

Your personal data are processed by our company for the purposes and legal grounds outlined below, primarily to fulfill obligations under domestic and international regulations (e.g., Law No. 5549 on Prevention of Laundering Proceeds of Crime, Law No. 4358 on Use of Tax Identification Numbers), secondary regulations, and contracts to which our company is party (identity verification, data retention, reporting, notification, etc.); to establish and execute contracts for any products or services you request; to prepare and maintain records and documents (paper or electronic); to provide products and services; and to ensure uninterrupted continuity of these activities.

Scope of Use

Company Name may record, store, update, disclose to third parties, transfer, classify, and process personal data to the extent permitted by applicable laws. Your personal data may be used for:

• Verifying the identity of users purchasing through our website/mobile apps,
• Recording address and other necessary contact information,
• Informing customers about the terms, status, and updates of distance sales agreements under the Consumer Protection Law,
• Organizing all records and documents (electronic or paper) supporting transactions,
• Fulfilling obligations under distance sales agreements and relevant legal provisions,
• Providing information to public authorities upon request and as required by law for matters of public security,
• Enhancing the shopping experience by notifying you of products and campaigns aligned with your interests,
• Improving customer satisfaction and analyzing customer behavior on our site/apps for marketing and advertising purposes, including conducting surveys via partners,
• Providing personalized recommendations and service updates through our partners,
• Evaluating and resolving customer complaints and suggestions,
• Fulfilling our legal obligations and exercising our rights under applicable laws,

Data you provide through our website or mobile apps are processed by Company Name with your consent and in accordance with legal requirements. To offer better service and comply with legal obligations, Company Name will collect, process, share with third parties, and securely store your browsing data only within the purposes and scope defined in this Disclosure.

Company Name uses log files, tracking pixels, and/or third‐party resources to store summary information about your preferences. To deliver personalized promotions, marketing offers, and to improve site/app content based on your preferences, Company Name may track your navigation data and usage history. We may match information collected across sessions and combine it with data from third‐party sources.

Data Recipients

Your personal data may be transferred to persons or entities authorized by applicable law or contracts (including judicial and administrative authorities), our domestic/international affiliates, service/support/consultancy providers, collaboration partners, project/program/financing partners, public/private institutions, companies, and other third parties, to the extent permitted by law.

Collection Methods and Legal Grounds

Personal data shared with Company Name are under our supervision and control. Company Name, as data controller, implements the necessary organization and technical measures to protect confidentiality and integrity. We conduct periodic security tests and update our data processing policies in line with national and international technical standards.

Your personal data may be collected verbally, in writing, or electronically via all channels of our company (head office, branches, stores, online portal, call center) under the following legal grounds:

• Explicit consent,
• Legal requirement,
• Necessary for the data controller to fulfill its legal obligations,
• Necessary for the establishment or performance of a contract to which you are party,
• Necessary for the legitimate interests of the data controller, provided it does not harm your rights and freedoms,

This processing complies with the General Principles in Article 4 of the KVKK (lawfulness, good faith, accuracy, purpose limitation, data minimization, and retention limitation).

Your Rights under Article 11 of the KVKK

1. Learn whether your personal data is processed,
2. Request information if your data has been processed,
3. Learn the purpose of processing and whether it is used accordingly,
4. Learn third parties to whom your data have been transferred,
5. Request correction if your data are incomplete or inaccurate,
6. Request deletion or destruction under Article 7 of the KVKK,
7. Request notification of third parties to whom your data have been transferred,
8. Object to outcomes against you by automated systems,
9. Request compensation for damages resulting from unlawful processing,

You may exercise these rights in writing as of 07.10.2016. We reserve the right to charge a fee for processing your request, as outlined in Article 13 of the KVKK Communiqué on Application to the Data Controller.