1. Introduction

This Privacy Agreement explains how information about users is collected, used and protected within the services offered through the E-Tender Portal ("Portal") operated by Medcem (the "Company"). By using the Portal, you are deemed to have accepted the principles set out in this agreement.

2. Information We Collect

The following information may be collected through the Portal:

• Identity and contact details (name, surname, phone number, e-mail, company/supplier information),
• Login and verification records (SMS verification, session data),
• Data relating to tender and bid transactions,
• Technical data (IP address, browser type, log records).

3. Purposes of Use

• Providing Portal services and performing account verification,
• Conducting tender processes and evaluating bids,
• Fulfilling legal obligations,
• Ensuring security and preventing misuse.

4. Sharing of Information

Your information may be shared only to the extent necessary to provide the service, with authorized employees, with our service providers (e.g. the SMS provider), and with legally authorized public institutions. Your information is not sold to third parties for marketing purposes.

5. Retention Period

Your personal data is retained for as long as required by the purpose of processing and for the statutory retention periods set out in the relevant legislation; at the end of the period it is deleted, destroyed or anonymized.

6. Cookies

The Portal may use mandatory cookies to maintain the session and provide core functions. You can manage your cookie preferences through your browser settings.

7. Security

The Company takes reasonable administrative and technical measures to protect your information against unauthorized access, loss and misuse.

8. Contact

For questions about our privacy practices: [E-mail] · [Phone] · [Address]

Information notice under the Turkish Personal Data Protection Law No. 6698 ("KVKK").

1. Data Controller

Your personal data is processed by Medcem ([Full legal title], [Address]) as the data controller, within the scope explained below.

2. Personal Data Processed

Name-surname, phone number, e-mail, company/supplier information, session and verification records, tender/bid transaction data, and technical records related to transaction security (IP, logs).

3. Purposes of Processing

• Providing E-Tender Portal services and user verification,
• Conducting, evaluating and finalizing tender and bid processes,
• Fulfilling contractual and legal obligations,
• Carrying out information security and audit activities.

4. Legal Grounds for Processing

Your personal data is processed under Articles 5 and 6 of the KVKK, based on the legal grounds of the establishment or performance of a contract, fulfillment of a legal obligation, establishment/exercise of a right, and the legitimate interests of the data controller.

5. Transfer

In accordance with Articles 8 and 9 of the KVKK, your data may be shared only to the extent necessary with our service providers (e.g. the SMS provider) and legally authorized public institutions.

6. Method of Collection

Your personal data is collected through forms on the Portal, login/verification operations and electronic systems by automated and partially automated means.

7. Rights of the Data Subject (KVKK Art. 11)

You have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing, to request correction of incomplete/incorrect data, to request its deletion/destruction within the framework of the relevant legislation, to request notification of these operations to third parties, to object to a result against you arising from automated analysis, and to request compensation for damages.

8. Application

You may submit your requests regarding your rights to the data controller via [E-mail] / [Registered e-mail (KEP)] / [Address]. Applications are concluded within the period stipulated in the relevant legislation.