Legal
Privacy Notice
This is a translation; in case of discrepancy the Turkish version prevails.
Website Visitors and Form Users
1. Data controller
BioDPC Teşhis Sistemleri Sanayi ve Ticaret A.Ş. (the "Company"), Büyükdere Cad. Plaza 33 İş Merkezi No:33 K:3 D:8 Şişli / İstanbul, info@diacore.com.tr. The Company is the data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK"). This notice has been prepared pursuant to the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform. The Company is a Diacore Group company.
2. Scope
This notice concerns the personal data of individuals who visit the biodpc.com website and use the forms on the site.
3. Categories of personal data processed
| Data category | Data | Circumstances |
|---|---|---|
| Identity | First name, last name | Contact and service request forms |
| Contact | Email address, telephone number | Contact and service request forms |
| Professional information | Organization, job title | If provided in the form |
| Request information | Subject, message content; instrument brand, model, serial number, request type and description | Form submission |
| Transaction security | Irreversible hash of the IP address, date and time of form submission, page from which the submission was made | Form submission (prevention of abuse and spam) |
| Preference information | Your cookie preference (in your browser’s local storage) | If you use the cookie notice |
The forms do not request special categories of personal data (health, religion, ethnic origin, political opinions, criminal convictions, etc.). Please do not include such information in message fields; if included, it will be disregarded and destroyed unless necessary to respond to your request.
4. Processing purposes and legal grounds
| Purpose | Legal ground (Article 5/2 KVKK) |
|---|---|
| Receiving, evaluating and responding to your requests for information, quotations, cooperation and other matters | (c) directly related to the establishment or performance of a contract; (f) the Company’s legitimate interest |
| Recording, scheduling and fulfilling service requests; managing instrument maintenance and fault processes | (c) performance of a contract; (ç) legal obligation; (f) legitimate interest |
| Referring your request to the relevant Diacore Group company | (f) legitimate interest |
| Ensuring the security of the site and forms and preventing abuse and spam submissions | (f) legitimate interest |
| Remembering your cookie preference | (c) provision of the service you have requested; (f) legitimate interest |
| Fulfilling requests of competent authorities and obligations arising from legislation | (ç) legal obligation |
| Establishing, exercising and protecting rights in potential disputes | (e) establishment, exercise or protection of a right |
The site does not use cookies for analytics or marketing purposes. If introduced in the future, they will operate only after your explicit consent has been obtained under Article 5/1 KVKK.
5. Collection method
Your personal data is collected electronically through the forms on the site and by partially automated means (transaction security data).
6. Transfers
- Diacore Group companies: If your request falls within the activities of another group company (Diacore Diagnostik Sistemler A.Ş., PathEra Laboratuvar Çözümleri Anonim Şirketi, BioDPC Teşhis Sistemleri Sanayi ve Ticaret A.Ş.), only the data necessary to respond to your request is transferred to the relevant company (Articles 8/2 and 5/2-f). Service requests are forwarded to Diacore Group’s after-sales service team for the provision of the service.
- Service providers: To providers of the site’s hosting, database and email infrastructure, to the extent required for the service.
- Competent authorities: To legally authorized public institutions and organizations upon request and to the extent required by legislation.
Transfers abroad: The site’s hosting and database infrastructure is provided by cloud service providers located abroad. Personal data you submit through the forms is stored on these servers. This transfer is carried out on the basis of appropriate safeguards under Article 9 KVKK, through the execution with the service provider of the standard contract published by the Personal Data Protection Board and notification thereof to the Authority.
7. Retention period
Contact requests: 2 years from the date the request is answered. Service requests: 2 years from completion of the service. Transaction security data: the same period as the corresponding form record. Cookie preference: in your browser until you delete it.
At the end of the period, data is deleted, destroyed or anonymized in accordance with the Company’s personal data retention and destruction procedures. In the event of a legal dispute or a request from a competent authority, the relevant data may be retained until the process is concluded.
8. Data security
Data is transmitted over an encrypted connection (HTTPS); access to the database is limited to authorized personnel; the forms are configured to permit only the addition of records, without public read access.
9. Your rights under Article 11 KVKK
You have the right to learn whether your personal data has been processed; to request information if it has been processed; to learn the purpose of processing and whether the data is used in accordance with that purpose; to know the third parties to whom it is transferred domestically or abroad; to request correction if it is incomplete or inaccurate; to request deletion or destruction under the conditions set out in Article 7 KVKK; to request notification of these actions to third parties to whom the data has been transferred; to object to a result arising against you through analysis of the processed data exclusively by automated systems; and to request compensation if you suffer damage due to unlawful processing.
10. Application procedure
You may submit requests concerning your rights pursuant to the Communiqué on the Procedures and Principles for Applications to the Data Controller, together with information identifying you and an explanation of your request:
- in person or through a notary, by a petition bearing your handwritten signature, to Büyükdere Cad. Plaza 33 İş Merkezi No:33 K:3 D:8 Şişli / İstanbul
- to info@diacore.com.tr, signed with a secure electronic signature or mobile signature
- to info@diacore.com.tr from an email address previously notified to the Company and registered in our system
Your application will be concluded free of charge as soon as possible according to its nature and within 30 days at the latest. If the procedure entails an additional cost, a fee may be charged in accordance with the tariff determined by the Board. If your application is rejected, the response is deemed insufficient or no response is provided within the prescribed period, you may lodge a complaint with the Personal Data Protection Board under Article 14 KVKK.
11. Changes
This notice may be updated; the current version is always published on this page.
Last updated: October 2026