Customer Information Notice

Dear Customers,

This Information Notice has been prepared by www.ecchealthnow.com, acting as the Data Controller, to inform our natural‑person customers and/or the authorized representatives and employees of our legal‑entity customers about the purposes for which your personal data are processed, the legal grounds, the methods of collection, the possible recipients, and your rights under the Law on the Protection of Personal Data No. 6698 (“KVKK”), Article 10, and the Communiqué on Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.

1. What Personal Data Do We Process?

Data Categories	Example Data Types
Identity Data	Name, surname, signature
Contact Data	Phone number, home address, e‑mail address
Legal Process Data	Information in correspondence with judicial authorities; details from legal case files
Customer Transaction Data	Invoice, promissory note, cheque details; order and request information
Physical Site Security Data	CCTV recordings
Financial Data	Bank account details
Marketing Data	Purchase history; survey and cookie records

2. For What Purposes Do We Process Your Personal Data?

To provide you with our products and services
To conduct communication activities with you
To carry out post‑sale support services
To manage customer relations and satisfaction processes
To track your requests and/or complaints
To execute risk management processes
To conduct logistics operations
To manage contract processes
For our relevant business units to perform necessary tasks for commercial activities
To plan and implement business and commercial strategies; to conduct finance and accounting operations
To ensure company security and physical site safety, including related administrative and technical measures
To perform marketing analyses of our products and services
To conduct advertising, campaign, and promotion processes
To verify identity documents when necessary; to prevent misuse, loss, and fraud
To retain information as required by law; to copy and back up data to prevent loss; to ensure data integrity and security
To fulfill regulatory and legal obligations; to carry out legal follow‑ups and processes

3. To Whom and for What Purposes Do We Transfer Your Personal Data?

For matters of public security and potential legal disputes, upon request and as required by law, to prosecutors, courts, and relevant public officials; and, when necessary, for the purposes stated above, to authorized public institutions, to our contracted law firms for monitoring legal processes, to financial advisors for preparing the company’s financial statements, to banks for executing goods/service contracts, to our group companies to manage the company and ensure compliance with group policies, to cargo companies for shipping documents and products, and to accounting support firms for accounting operations.

4. How Do We Collect Your Personal Data and What Are the Legal Grounds?

Your personal data listed above are processed, recorded, stored, preserved, and classified—and may be transferred as described—by automated or non‑automated means (e‑mail, paper, forms, telephone, etc.) in accordance with Articles 5 and 6 of Law No. 6698, under the following legal grounds:

Obtaining your explicit consent
Explicitly prescribed by law
Necessary for the data controller to fulfill its legal obligations
Necessary for the establishment or performance of a contract to which you are a party
Necessary for the legitimate interests of the data controller, provided it does not harm your fundamental rights and freedoms

This processing is carried out in compliance with the General Principles set out in Article 4 of the Law:

Lawful and in good faith
Accurate and, when necessary, up‑to‑date
For specific, explicit, and legitimate purposes
Relevant, limited, and proportionate to those purposes
Retained only as long as required by law or for the purposes for which they were collected

5. What Are Your Rights Regarding Your Personal Data and How Can You Exercise Them?

Article 20 of the Constitution recognizes everyone’s right to be informed about personal data concerning them. Article 11 of the KVKK lists the rights of data subjects. You can submit your requests regarding your KVKK rights in writing or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the e‑mail address previously provided to and registered with the data controller, in accordance with Article 5 of the Communiqué on Procedures and Principles for Applying to the Data Controller.

Data Controller:

Address:

E‑mail: