This English text is provided for information. The Turkish version is the binding text; in case of any difference, the Turkish version prevails.
Cookie and Browser Storage Policy
Last updated: 31.10.2026 · Version: 1.1
This policy explains the cookies and browser storage entries used by Kardan Dijital Teknoloji ve İlaç Sağlık Dan. Ltd. Şti. ("Kardan.Digital") on the ekt.one, eifu.one and eup.one websites and on product pages published on the Platform. For general information on the processing of personal data, see the Privacy Notice.
1. What are cookies and browser storage?
A cookie is a small text file that a website saves in your browser. Browser storage (localStorage) similarly keeps data in your browser but is not sent to the server automatically. This policy covers both.
2. What do we use on which page?
| Page | Strictly necessary | Functional | Analytics |
|---|---|---|---|
| ekt.one, eifu.one and eup.one marketing pages | Session cookie, your cookie choice | Language preference | Google Analytics (only with your consent), anonymous visitor identifier (if the assistant is used) |
| Product pages (e-KT, eIFU and product passport pages opened via QR code) | Session cookie | Font size, healthcare professional answer | Anonymous visitor identifier. Google Analytics is not used. |
| Platform (logged-in users) | Session and company selection cookies | Language preference | — |
3. Cookies
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| session_id | Kardan.Digital | Maintaining the session and security (e.g. form validation); session of logged-in users | 7 days | Strictly necessary |
| frontend_lang | Kardan.Digital | Remembering your chosen language | 1 year | Functional |
| cids | Kardan.Digital | Selected company of a user with access to several companies on the Platform | Session | Strictly necessary (Platform only) |
| _ga, cookies starting with _ga_ | Google LLC (Google Analytics 4) | Visit statistics of the marketing pages: number of visits, source, page views | 2 years | Analytics — marketing pages only and only with your consent |
The Google Analytics script is not loaded, and these cookies are not set, unless you choose "Accept" in the cookie banner. The script is loaded through our own domain; the cookies are first-party cookies. Google Analytics data may be processed by Google LLC in the USA (see the Privacy Notice, Sections 6–7).
4. Browser storage (localStorage)
| Key | Purpose | Duration | Type |
|---|---|---|---|
| ekt_vid | A randomly generated anonymous visitor identifier, used to count unique and returning visitors. Only an irreversible hash (SHA-256) is sent to the server; the identifier itself never leaves your browser and does not identify you as a person. It is not shared across sites. | Until you delete it | Analytics (first-party) |
| ekt_consent | Your cookie choice on the marketing pages (whether you consented to Google Analytics) and when you made it. Each site (ekt.one, eifu.one, eup.one) asks separately. | Until you delete it or change your choice | Strictly necessary |
| ekt-font-idx | The font size you selected on a product page | Until you delete it | Functional |
| keys starting with ekt_hcp_ | Your answer to the "Are you a healthcare professional?" question on a product page, so that it is not asked on every visit | Until you delete it | Functional |
5. Legal ground
- Strictly necessary and functional cookies and storage entries are necessary to provide the service you request and to keep the site secure (KVKK Art. 5/2-c and f).
- The anonymous visitor identifier is based on our legitimate interest in measuring service quality (KVKK Art. 5/2-f). The identifier does not identify a person, only its hash is sent to the server, and it is not used for advertising.
- Google Analytics is based only on your consent (KVKK art. 5/1; for visitors in the EU, GDPR art. 6(1)(a)). It is not loaded without consent; declining does not affect how the site works.
- Recording your cookie choice (
ekt_consent) is necessary to respect that choice.
6. How can you manage your preferences?
- Cookie banner and "Cookie preferences": On your first visit to a marketing page you can choose "Accept" or "Decline" in the cookie banner. You can change your choice at any time with the "Cookie preferences" link in the footer. When you withdraw consent, Google Analytics is stopped and its cookies are deleted; withdrawal does not affect the lawfulness of earlier processing.
- Browser settings: All common browsers let you view, delete and block cookies and site data (e.g. Settings → Privacy and security → Cookies and site data). Deleting site data also deletes browser storage entries.
- Opting out of Google Analytics: You can use Google's browser add-on: https://tools.google.com/dlpage/gaoptout
- Private / incognito window: In this mode browser storage is deleted when the window is closed; the anonymous visitor identifier does not persist.
If you block strictly necessary cookies, logging in to the Platform and submitting forms may not work.
7. Changes and contact
If the cookies we use change, this policy is updated; each version is published with its version number and date. For questions: info@kardan.digital.
Version archive (Turkish):1.0