Legal

Privacy Notice

Last Updated: September 2026

At ASSA Biotech, we attach great importance to the protection, confidentiality, and lawful processing of personal data.

This Privacy Notice has been prepared to inform visitors, customers, business partners, suppliers, and other individuals whose personal data may be processed by ASSA Biotech, in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and other applicable data protection legislation.

01

Data Controller

Within the scope of the Turkish Personal Data Protection Law No. 6698, personal data collected through our website, communications, business relationships, and related processes may be processed by ASSA Biotech in its capacity as the data controller.

ASSA Biotech determines the purposes and means of processing personal data and takes appropriate measures to protect such data in accordance with applicable legislation.

02

Personal Data We May Process

Depending on your interaction with ASSA Biotech, we may process different categories of personal data where necessary and permitted by applicable law.

Identity Information

Information such as your name, surname, title, or other identifying information that you voluntarily provide to us.

Contact Information

Information such as your email address, telephone number, company information, and other contact details.

Communication Information

Information contained in inquiries, requests, feedback, messages, forms, and other communications submitted to ASSA Biotech.

Business and Professional Information

Information relating to your company, position, professional role, business relationship, requests, projects, products, or services.

Website and Technical Information

Technical information that may be generated when you visit our website, including IP address, browser information, device information, access records, and similar technical data.

03

Purposes of Processing Personal Data

Personal data may be processed by ASSA Biotech for purposes including, but not limited to:

  • Responding to your questions, requests, and inquiries.
  • Managing communications with customers, business partners, suppliers, and other stakeholders.
  • Providing information regarding our products, services, research, technologies, and business activities.
  • Managing commercial, contractual, operational, and administrative processes.
  • Evaluating business, research, cooperation, and partnership opportunities.
  • Improving the functionality, security, performance, and user experience of our website.
  • Fulfilling our legal and regulatory obligations.
  • Establishing, exercising, or protecting legal rights and interests.
04

Methods of Collecting Personal Data

Personal data may be collected electronically or through other lawful methods depending on your relationship and interaction with ASSA Biotech.

This may include information collected through our website, contact forms, email communications, telephone conversations, business correspondence, meetings, agreements, digital systems, and other communication channels.

Certain technical information may also be collected automatically through cookies, server logs, and similar technologies when you use our website.

05

Legal Grounds for Processing

Personal data is processed in accordance with the principles and legal grounds set out under the Turkish Personal Data Protection Law No. 6698 and other applicable legislation.

Depending on the relevant processing activity, personal data may be processed where processing is expressly provided for by law, necessary for the establishment or performance of a contract, necessary for compliance with a legal obligation, necessary for the establishment, exercise, or protection of a right, or necessary for the legitimate interests of ASSA Biotech provided that such processing does not violate the fundamental rights and freedoms of the data subject.

Where required under applicable legislation, personal data will be processed on the basis of your explicit consent.

06

Transfer of Personal Data

Where necessary for the purposes described in this Privacy Notice and where permitted by applicable legislation, personal data may be shared with authorized service providers, suppliers, business partners, consultants, professional advisers, information technology service providers, and legally authorized public institutions or authorities.

Any transfer of personal data is carried out in accordance with applicable data protection legislation and subject to appropriate administrative and technical safeguards.

07

International Data Transfers

Certain digital services, technical infrastructure, hosting, communication tools, or service providers used by ASSA Biotech may involve the processing or transfer of personal data outside Türkiye.

Where an international transfer of personal data takes place, such transfer will be carried out in accordance with the requirements and safeguards stipulated under the Turkish Personal Data Protection Law No. 6698 and applicable legislation.

08

Retention of Personal Data

Personal data is retained only for the period necessary to fulfil the purposes for which it was collected and for any additional period required under applicable legal, regulatory, contractual, or operational obligations.

When the applicable retention period expires and there is no further lawful basis for retaining the data, personal data will be deleted, destroyed, or anonymized in accordance with applicable legislation.

09

Protection of Personal Data

ASSA Biotech takes appropriate technical and administrative measures to protect personal data against unauthorized access, unlawful processing, accidental loss, alteration, disclosure, destruction, or misuse.

These measures are reviewed and improved where necessary in accordance with technological developments, operational requirements, and applicable data protection obligations.

10

Your Rights Under KVKK

Pursuant to Article 11 of the Turkish Personal Data Protection Law No. 6698, data subjects may have the right to:

  • Learn whether their personal data is being processed.
  • Request information regarding the processing of their personal data.
  • Learn the purpose of processing and whether personal data is being used in accordance with that purpose.
  • Learn the third parties to whom personal data has been transferred, where applicable.
  • Request correction of personal data if it has been processed incompletely or inaccurately.
  • Request deletion or destruction of personal data where the applicable legal conditions are satisfied.
  • Request notification of correction, deletion, or destruction operations to third parties to whom the personal data has been transferred, where applicable.
  • Object to a result arising against the individual as a result of analysis of personal data exclusively through automated systems.
  • Request compensation for damages arising from the unlawful processing of personal data.
11

Cookies and Similar Technologies

Our website may use cookies and similar technologies for essential website functions, security, functionality, analytics, and performance purposes.

Further information regarding the use of cookies is provided in our Cookie Policy.

12

Updates to This Privacy Notice

ASSA Biotech may update this Privacy Notice when necessary due to changes in applicable legislation, our business activities, digital services, technologies, or personal data processing practices.

The current version of this Privacy Notice will be published on our website together with its latest revision date.

13

Contact Us

If you have any questions regarding this Privacy Notice, the processing of your personal data, or your rights under applicable data protection legislation, you may contact ASSA Biotech through our contact page.

Contact ASSA Biotech