Data Controller
Your personal data is processed by KGP FDA in its capacity as data controller. You can reach us at info@kgpfda.com and at +1 917 960 9666.
Personal Data Processed
- Identity and contact information: full name, company name, e-mail address, telephone number.
- Request information: product group, the service and market you are interested in, and the information you share in your message.
- Transaction security information: the IP address, browser information and time of the request recorded in the hosting service provider’s server logs when you visit the site.
- Cookie data: only if you give consent, the analytics cookies used for visit statistics (see the Cookie Policy).
Purposes of Processing
- To respond to your preliminary assessment and service requests and to prepare a quote.
- To conclude and perform the contract for the consulting service you request.
- To communicate with you and inform you of the status of your request.
- To secure the site and the form infrastructure and to prevent misuse.
- If you give consent, to measure use of the site statistically.
Method of Collection and Legal Bases
Your personal data is collected electronically: through the forms on the website, e-mail, telephone and WhatsApp when you share it with us, and by partly automated means through server logs and cookies. The data is processed on the following legal bases listed in Article 5(2) of the Law:
- Processing is directly related to the conclusion or performance of a contract (subparagraph (c)): the request, quote and service process.
- Processing is necessary for the data controller to fulfill its legal obligations (subparagraph (ç)).
- Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (subparagraph (f)): site and form security.
Analytics cookies are used only on the basis of your explicit consent; you may withdraw your consent at any time.
Transfer of Personal Data
Your personal data may be transferred, limited to the purposes above, to the following categories of recipients: the website’s hosting service provider, the e-mail infrastructure service provider, the analytics service provider if you give consent, and legally authorized public institutions and organizations. When you write to us on WhatsApp, your messages pass through the infrastructure of WhatsApp (Meta).
Some of our service providers’ servers are located outside Türkiye, in particular in the United States. Your data may therefore be transferred abroad; the transfer is made under the conditions set out in Article 9 of the Law.
Retention Period
Your personal data is retained for the period required by the purpose of processing and for the retention periods provided in the applicable legislation; when these periods end, it is deleted, destroyed or anonymized.
Your Rights under Article 11 of the Law
- To learn whether your personal data is processed and, if so, to request information about it,
- To learn the purpose of processing and whether the data is used in accordance with that purpose,
- To know the third parties to whom the data is transferred, in Türkiye or abroad,
- To request correction if the data is incomplete or inaccurately processed,
- To request deletion or destruction of the data under the conditions set out in Article 7 of the Law,
- To request that the correction, deletion or destruction be notified to the third parties to whom the data has been transferred,
- To object to a result that is to your detriment arising from the analysis of the processed data exclusively by automated systems,
- To claim compensation for damage if you suffer damage because of unlawful processing.
Applications
You may send requests concerning your rights to info@kgpfda.com, together with information sufficient for us to verify your identity. Under Article 13 of the Law, your application is concluded free of charge as soon as possible according to the nature of the request, and within thirty days at the latest. If you find our response insufficient, you may lodge a complaint with the Personal Data Protection Board under Article 14 of the Law.
Sources: Law No. 6698 on the Protection of Personal Data, Personal Data Protection Authority.