KVKK Information Notice — Bosphorus Pharma

This Information Notice is provided by BOSPHORUS PHARMA DIŞ TİCARET LİMİTED ŞİRKETİ as data controller under Article 10 of the Personal Data Protection Law No. 6698 ("KVKK"), for persons whose personal data is processed through the bospharma.com website. A Türkçe version of this notice is also available.

1. Data controller

Company: BOSPHORUS PHARMA DIŞ TİCARET LİMİTED ŞİRKETİ
Registered address: HUZUR MAH. AZERBAYCAN CAD. SKYLAND A NO: 4 A İÇ KAPI NO: 211 SARIYER/ İSTANBUL 34485
Email: info@bospharma.com
Telephone: +90 537 795 33 48

2. Personal data processed

Identity: full name / contact person.
Contact: email address; phone or WhatsApp number.
Professional information: company name, role, job title and department, company website, country or region.
Customer transaction: the content of your message or Product Sourcing Request (product and request details, notes), documents you upload, and your acknowledgement on the Product Sourcing form together with the version of its wording.
Transaction security: the Cloudflare Turnstile verification token; a one-way (hashed) value derived from your IP address and kept in memory for up to ten minutes for rate limiting; and technical connection data (such as IP address and request details) received by our hosting provider when the website is accessed.

We ask you not to include sensitive personal data (such as health data) in your message or uploaded documents; it is not needed for any of the purposes below.

3. Purposes of processing

receiving and responding to enquiries sent through the Contact form;
receiving, evaluating and following up Product Sourcing Requests, and carrying out steps prior to establishing a possible business relationship;
ensuring the security of the website and its forms and preventing misuse and automated abuse;
fulfilling legal obligations and responding to requests of authorised public bodies;
establishing, exercising or protecting our legal rights.

4. Method of collection and legal bases

Personal data is collected electronically, partly by automated means, through the Contact form and the Product Sourcing Request form on the website, the files you upload, and the Cloudflare Turnstile service used on those forms. It is processed on the following legal bases under Article 5(2) of KVKK:

(c) processing is necessary for the establishment or performance of a contract, provided that it relates directly to it — for evaluating and following up Product Sourcing Requests;
(ç) processing is necessary for compliance with a legal obligation of the data controller — where applicable;
(e) processing is necessary for the establishment, exercise or protection of a right;
(f) processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms — for responding to Contact form enquiries and for the security of the website and its forms.

The processing described in this notice is not based on explicit consent. The acknowledgement on the Product Sourcing form confirms that you have read this notice and our Privacy Policy and accepted the Terms of Sourcing; it is not a declaration of explicit consent.

5. Transfer of personal data

Your personal data is transferred, for the purposes above and to the extent necessary, to the following service providers acting on our behalf:

Render — website hosting and operation;
Cloudflare — Turnstile bot protection;
Resend — delivery of form notifications by email;
Bluehost — domain, DNS and our business email service (info@bospharma.com).

As some of these providers operate infrastructure outside Türkiye, personal data may be transferred abroad; such transfers are carried out in accordance with Article 9 of KVKK. Personal data may also be transferred to authorised public institutions and organisations where required by law, within the scope of Article 8 of KVKK.

6. Retention

The website application does not store submissions or uploaded files. Information delivered to our mailbox is kept for as long as necessary for the purposes above and for the periods required by applicable legislation, and is then deleted, destroyed or anonymised.

7. Your rights under Article 11 of KVKK

You have the right to:

learn whether your personal data is processed;
request information about the processing if your personal data has been processed;
learn the purpose of the processing and whether the data is used in line with that purpose;
know the third parties in Türkiye or abroad to whom your personal data is transferred;
request correction of your personal data if it is incomplete or inaccurate;
request deletion or destruction of your personal data under the conditions in Article 7 of KVKK;
request that the third parties to whom your data has been transferred be notified of the actions taken under (e) and (f);
object to a result that is to your detriment arising from the analysis of your data exclusively by automated systems;
claim compensation for damage suffered as a result of unlawful processing of your personal data.

8. How to apply

You may submit requests regarding your rights in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller: in writing to our registered address shown in section 1; by email to info@bospharma.com from an email address you have previously notified to us and that is registered in our records; or by other methods set out in that Communiqué (such as registered electronic mail (KEP) or secure electronic or mobile signature). Your application should include your name, surname and signature (for written applications), your Turkish ID number (or, for foreign nationals, nationality and passport or ID number), your residential or business address, and your request.

We will respond as soon as possible depending on the nature of the request and within thirty days at the latest, free of charge; if the process involves an additional cost, a fee may be charged under the tariff set by the Personal Data Protection Board. You also have the right to lodge a complaint with the Personal Data Protection Board under Article 14 of KVKK.

For more detail on how the website handles data, see our Privacy Policy.