1. Data Controller
The data controller is Vethia Inc. (hereinafter "Vethia" or the "Company"), reachable at:
- Address: Kocatepe Mah. Olcay Sok. No: 7, 34045 Bayrampaşa / Istanbul, Türkiye
- E-mail: info@vethia.com.tr
- Phone: +90 532 287 04 87
2. Personal Data We Process
The vethia.com.tr website does not collect personal data through any on-page form. All contact calls on the site are mailto: and tel: links that open your own mail or phone application. When you then contact Vethia voluntarily, the following data categories may be processed:
- Identity data: first and last name (to the extent you disclose it in your e-mail signature or phone call).
- Contact data: e-mail address, phone number, clinic/institution name where applicable.
- Message content: the text you include in your e-mail or the information shared during a phone call.
- Technical data (automatic): IP address, user-agent string, referrer URL, access timestamp, language preference and cookie-consent state.
Vethia does not collect or store special-category personal data (health, racial or ethnic origin, sexual life, etc. — KVKK Art. 6 / GDPR Art. 9) through this website. Animal-health data processed within our diagnostic services is outside the scope of this Privacy Policy and is governed by a separate service agreement.
3. Processing Purposes
The personal data above is processed for the following purposes:
- Responding to your contact requests and providing information about our services.
- Measuring and improving the quality of the services we provide.
- Ensuring the security of the website infrastructure and detecting abuse.
- Improving content quality through aggregated, anonymised statistical analysis.
- Fulfilling recording and reporting obligations required by law.
4. Legal Basis
- Contact data: KVKK Art. 5(2)(f) / GDPR Art. 6(1)(f) — legitimate interest of the controller in responding to communications directed to it.
- Server access logs: KVKK Art. 5(2)(ç) / GDPR Art. 6(1)(c) — compliance with a legal obligation (retention of access records under Law No. 5651).
- Essential cookies: KVKK Art. 5(2)(f) / GDPR Art. 6(1)(f) — technically required to make the site usable.
- Marketing / analytics cookies (not currently active): if ever deployed, explicit consent under KVKK Art. 5(1) / GDPR Art. 6(1)(a) is obtained first.
5. Data Transfers
Your personal data is transferred to third parties only in the following cases and to the extent required by the purposes above:
- Domestic transfer: to corporate partners based in Türkiye providing hosting, e-mail service, firewall and CDN infrastructure, in their capacity as data processors and under written data-processing agreements.
- Cross-border transfer: during e-mail exchanges, the recipient's mail server may be located outside Türkiye. Such transfers rely on the adequacy list under KVKK Art. 9 or on written undertakings between the parties. The website's hosting provider, at the date of publication of this policy, operates in Türkiye.
- Response to legal requests: in response to lawful requests from competent public authorities, only to the extent the request requires.
Your personal data is never sold, rented, or shared with third parties for advertising or marketing purposes.
6. Retention
Personal data is retained only for as long as the processing purpose requires. Standard retention periods are:
- E-mail correspondence: 3 years (general limitation periods and the Turkish Commercial Code).
- Server access logs: 6 months (Law No. 5651 on the Regulation of Internet Publications).
- Cookie data: up to the duration stated in the Cookie Policy (maximum 365 days).
Expired data is deleted, destroyed, or anonymised pursuant to KVKK Art. 7 and related regulation. These periods are extended by any explicit legal requirement or court / administrative order.
7. Your Rights
As a data subject under KVKK Art. 11 (equivalent rights under GDPR Arts. 15–22) you have the right to:
- learn whether your personal data is being processed,
- request information if it has been processed,
- learn the purpose of processing and whether the data is used in line with that purpose,
- know the third parties — inside or outside Türkiye — to whom your data has been transferred,
- request correction of incomplete or inaccurate data,
- request erasure or destruction of your personal data under the conditions set out in KVKK Art. 7,
- request that operations performed under (e) and (f) are notified to third parties to whom the data has been transferred,
- object to an outcome that is to your detriment and that results from automated analysis of your data,
- claim compensation if you suffer damage due to unlawful processing.
8. How to Exercise Your Rights
To exercise your rights, submit your request to info@vethia.com.tr (using a secure or mobile electronic signature) or in writing to the physical address in §1. Your request must contain the information required to verify your identity and clearly state the right you are exercising.
Requests are handled free of charge within 30 days, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller (OG: 10.03.2018, No. 30356). Where a request genuinely entails a cost, a fee not exceeding the tariff set by the Turkish DPA (KVK Kurulu) may be applied.
You retain the right to file a complaint with the Turkish DPA if your request is denied, answered insufficiently, or not answered within the statutory period.
9. Updates
This Privacy Policy may be updated from time to time to reflect changes in law or in the Company's business processes. The current version is always published on this page. Prior versions are available by contacting info@vethia.com.tr.