L/01 · Legal
Privacy Notice
Last updated: October 2026
Website Visitors and Form Users. This is a translation; in case of discrepancy the Turkish version prevails.
1. Data controller
PathEra Laboratuvar Çözümleri Anonim Şirketi (the "Company"), Büyükdere Cad. Plaza 33 İş Merkezi No:33 K:3 D:8 Şişli / İstanbul, info@diacore.com.tr. The Company is the data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"). This notice has been prepared pursuant to the Communiqué on the Principles and Procedures to Be Followed in Fulfilment of the Obligation to Inform. The Company is a Diacore Group company.
2. Scope
This notice concerns the personal data of individuals who visit pathera.com.tr and use the forms on the website.
3. Categories of personal data processed
| Data category | Data | Circumstances |
|---|---|---|
| Identity | First name, last name | Contact form |
| Contact | E-mail address, telephone number | Contact form |
| Professional information | Institution, job title | If provided in the form |
| Request information | Subject, message content | Form submission |
| Transaction security | Irreversible hash of the IP address, date and time of form submission, page from which the form is submitted | Form submission (prevention of misuse and spam) |
| Preference information | Your cookie preferences (in your browser’s local storage) | When you use the cookie notice |
The forms do not request special categories of personal data (health, religion, ethnic origin, political opinions, criminal convictions, etc.). Please do not enter such information in message fields; if provided, it will not be taken into account and will be destroyed unless necessary to respond to your request.
4. Purposes and legal grounds for processing
| Purpose | Legal ground (KVKK Article 5/2) |
|---|---|
| Receiving, evaluating and responding to your requests for information, quotations, cooperation and other matters | (c) directly related to the establishment or performance of a contract; (f) the Company’s legitimate interests |
| Forwarding your request to the relevant Diacore Group company | (f) legitimate interests |
| Ensuring the security of the website and forms and preventing misuse and spam submissions | (f) legitimate interests |
| Remembering your cookie preferences | (c) provision of the service you request; (f) legitimate interests |
| Fulfilling requests from competent authorities and obligations arising from legislation | (ç) legal obligation |
| Establishing, exercising and protecting rights in potential disputes | (e) establishment, exercise or protection of a right |
The website does not use cookies for analytics or marketing purposes. If introduced in the future, they will operate only after your explicit consent has been obtained under KVKK Article 5/1.
5. Method of collection
Your personal data is collected electronically through the forms on the website and by partially automated means (transaction security data).
6. Transfers
- Diacore Group companies: If your request falls within the activities of another group company (Diacore Diagnostik Sistemler A.Ş., PathEra Laboratuvar Çözümleri Anonim Şirketi, BioDPC Teşhis Sistemleri Sanayi ve Ticaret A.Ş.), only the data necessary to respond to the request is transferred to the relevant company (Articles 8/2 and 5/2-f).
- Service providers: To service providers supplying the website’s hosting, database and e-mail infrastructure, to the extent required for the service.
- Competent authorities: To legally authorized public institutions and bodies, upon request and to the extent required by legislation.
Transfers abroad: The website’s hosting and database infrastructure is provided by cloud service providers located abroad. Personal data you submit through the forms is stored on these servers. This transfer is carried out on the basis of appropriate safeguards under KVKK Article 9, by signing the standard contract announced by the Personal Data Protection Board with the service provider and notifying the Authority.
7. Retention periods
Contact requests: 2 years from the date the request is answered. Transaction security data: the same period, together with the corresponding form record. Cookie preferences: in your browser until you delete them.
At the end of the period, the data is deleted, destroyed or anonymized in accordance with the Company’s personal data retention and destruction processes. In the event of a legal dispute or a request from a competent authority, the relevant data may be retained until the process is concluded.
8. Data security
Data is transmitted over an encrypted connection (HTTPS); database access is restricted to authorized personnel; forms are configured to permit only the addition of records, without public read access.
9. Your rights under KVKK Article 11
You have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether the data is used in accordance with that purpose; to know the third parties to whom it is transferred in Türkiye or abroad; to request correction if it has been processed incompletely or inaccurately; to request deletion or destruction under the conditions prescribed in KVKK Article 7; to request notification of these actions to third parties to whom the data has been transferred; to object to a result arising against you through analysis of the processed data exclusively by automated systems; and to request compensation for damage arising from unlawful processing.
10. Application procedure
You may submit requests regarding your rights in accordance with the Communiqué on the Principles and Procedures for Applications to the Data Controller, together with information establishing your identity and an explanation of your request:
- by a petition bearing your handwritten signature, delivered in person or through a notary to Büyükdere Cad. Plaza 33 İş Merkezi No:33 K:3 D:8 Şişli / İstanbul
- by a document signed with a secure electronic signature or mobile signature, sent to info@diacore.com.tr
- from the e-mail address previously notified to the Company and registered in our system, sent to info@diacore.com.tr
Your application will be concluded free of charge as soon as possible according to its nature, and within 30 days at the latest. If the procedure requires an additional cost, the fee specified in the tariff determined by the Board may be charged. If your application is rejected, the response is considered insufficient, or no response is provided within the prescribed period, you may lodge a complaint with the Personal Data Protection Board under KVKK Article 14.
11. Amendments
This notice may be updated; the current version is always published on this page. Last updated: October 2026.