Şimşek Pharmacy

Profile narrative

Şimşek Pharmacy, also referred to as Rezzan Günday in some official disclosures, is a pharmacy based in Turkey. As a pharmacy operating within the Turkish healthcare sector, the organisation provides pharmaceutical dispensing services and related patient-facing healthcare services to individuals in its locality. The organisation handles sensitive personal data as part of its routine operations, including patient identification numbers, telephone numbers, and special category health data, which reflects the standard scope of information processing expected of a Turkish pharmacy serving the public.

The most notable documented event involving Şimşek Pharmacy is a data breach that became publicly known through a disclosure by the Turkish data protection authority, the Kişisel Verileri Koruma Kurumu (KVKK), dated 1 October 2019. According to KVKK's announcement, the breach was attributable to the misconduct of a former employee of the pharmacy. This individual obtained patient identification numbers and transferred them to another pharmacy without the knowledge or consent of the affected patients, with the apparent purpose of enabling the supply of drugs from other pharmacies. The authority noted that the unauthorised activity had been ongoing for an extended period prior to its discovery, indicating a prolonged period of data exposure for the pharmacy's patients. The categories of personal data involved included national identification numbers, telephone numbers, and health-related data classified as special category personal data under Turkish data protection law.

As a healthcare provider handling health data, Şimşek Pharmacy operates within a regulatory environment that places heightened obligations on the protection of patient information. The incident brought the organisation under the regulatory scrutiny of KVKK, which is the competent authority for enforcing Turkey's data protection legislation governing personal data, including special category health data. The breach underscored the importance of internal controls and employee oversight for entities entrusted with sensitive medical information, and it highlighted the specific risks faced by pharmacies that manage identifiable patient records and dispense medications.

Based on the available source material, no further details are provided regarding the ownership structure, corporate parentage, employee count, geographic footprint beyond its Turkish headquarters, or any subsidiaries of Şimşek Pharmacy. The organisation's profile is therefore anchored in its role as a Turkish pharmacy and in the documented 2019 data breach disclosed by KVKK, which remains the primary publicly available reference point concerning the entity's operations and regulatory exposure.

Incidents

1 incident linked to this organisation.