GREENMED Tıbbi Sağlık
GDPR Privacy Notice
This notice applies to visitors and business contacts located in the European Economic Area and the United Kingdom. It explains how GREENMED Tıbbi Sağlık processes personal data under the General Data Protection Regulation (EU) 2016/679 (“GDPR”). For processing under Turkish law, please see our Data Protection Notice.
1. Controller
| Company | GREENMED Tıbbi Sağlık |
| Address | Rumeli Mahallesi, Cenap Şehabettin Sokak No: 50, İç Kapı No: 5, Kat: 1, Era Plaza, Çorlu / Tekirdağ, Türkiye |
| Telephone | +90 538 212 77 08 · +90 544 536 46 47 |
| info@greenmedsaglik.com | |
| Registered e-mail (KEP) | greenmedsaglik@hs01.kep.tr |
| MERSIS number | 0411105089900001 |
| Trade registry number | 22500 |
| Tax office | Çorlu |
| Tax number | 4111050899 |
| Website | www.greenmedsaglik.com |
We have not appointed a representative in the Union under Article 27 GDPR, as our processing of data relating to persons in the Union is occasional, does not include special categories of data on a large scale and is unlikely to result in a risk to the rights and freedoms of data subjects. If this assessment changes, a representative will be appointed and published here.
2. What we process and why
| Purpose | Data | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Responding to enquiries sent through the contact form | Name, e-mail address, telephone number, subject and message | Art. 6(1)(b) — steps prior to entering into a contract Art. 6(1)(f) — legitimate interest in answering enquiries |
| Supplying medical devices and products, order and delivery processes | Identity, contact, contractual and financial data of customer and supplier representatives | Art. 6(1)(b) — performance of a contract |
| Device traceability and regulatory notifications | Lot, serial and delivery records | Art. 6(1)(c) — legal obligation under the medical device legislation |
| Website security, logging, spam and bot protection | IP address, browser and device information, request logs | Art. 6(1)(f) — legitimate interest in keeping the service secure |
| Measuring visitor statistics | Pseudonymous usage data collected through Google Analytics 4 | Art. 6(1)(a) — consent, given through the cookie banner |
| Displaying the location map | IP address and device data shared with the provider | Art. 6(1)(a) — consent |
| Complying with accounting and tax obligations | Invoicing and payment records | Art. 6(1)(c) — legal obligation under Turkish law |
We do not request health data through this website. Should special category data within the meaning of Article 9 GDPR nevertheless reach us, it is used solely to answer the enquiry and is deleted once the enquiry is concluded.
3. Transfers to third countries
Our company is established in Türkiye, which is a third country for the purposes of Chapter V GDPR and for which the European Commission has not issued an adequacy decision. Our website is hosted in the United States of America (Leaseweb USA, Inc., Manassas, Virginia). Analytics, reCAPTCHA and map services are provided by Google Ireland Ltd., which may transfer data to the United States.
Where personal data is transferred outside the EEA we rely on:
- your explicit consent for analytics and external content (Art. 49(1)(a) GDPR), and
- standard contractual clauses adopted by the European Commission, together with the transfer mechanisms offered by our service providers, for processing that is necessary to provide the service (Art. 46(2)(c) GDPR).
You may request a copy of the safeguards in place by writing to info@greenmedsaglik.com.
4. Retention
We keep personal data only as long as necessary for the purposes described above, and for the statutory periods required by Turkish commercial, tax and medical device legislation (generally ten years for contracts and commercial books, five years for invoices). Contact form records are deleted two years after the enquiry is concluded. Cookie consent records are kept for 180 days.
5. Your rights
| Art. 15 | Right of access to your personal data |
| Art. 16 | Right to rectification of inaccurate or incomplete data |
| Art. 17 | Right to erasure (“right to be forgotten”) |
| Art. 18 | Right to restriction of processing |
| Art. 20 | Right to data portability |
| Art. 21 | Right to object to processing based on legitimate interests |
| Art. 7(3) | Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal |
To exercise any of these rights, write to info@greenmedsaglik.com. We respond without undue delay and in any event within one month of receipt, in line with Article 12(3) GDPR. Where the request is complex we may extend this period by two further months and will inform you of the reason.
6. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
7. Complaints
You have the right to lodge a complaint with the supervisory authority in your country of residence, place of work or the place of the alleged infringement. You may also complain to the Turkish Personal Data Protection Authority, or contact us first at info@greenmedsaglik.com so that we can try to resolve the matter.
8. Cookies
Our use of cookies, the full cookie inventory and how to withdraw consent are set out in the Cookie Policy. No analytics or external content cookie is set before you give consent.
Last updated: 21.10.2026