INFORMATION NOTICE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

As Miprolab, we attach great importance to the protection and security of your personal data. For this reason, in order to protect the fundamental rights and freedoms of individuals, particularly the privacy of private life, and in accordance with the provisions of Law No. 6698 on the Protection of Personal Data and other relevant legislation enacted for the protection of personal data, we wish to inform you as the Data Controller in the clearest possible manner about the methods of collection of your personal data, the purposes of processing, the legal grounds for processing, and your rights.

.

Personal Data: Within the scope of the Personal Data Protection Law, personal data refers to any information relating to an identified or

identifiable natural person ("Personal Data").

1. Method of Collection of Personal Data and Purpose of Processing

Personal data is collected in connection with your transactions with Miprolab and for the purposes and within the scope specified below, by automated or non-automated means, verbally, in writing or electronically, and through the following methods and third parties.

Your personal data is processed by means of the information and documents provided by you, in accordance with Articles 5 and 6 of the Personal Data Protection Law (KVKK) regarding the processing of personal data.

• Your explicit consent,
• • Where explicitly provided for by law,
• • Where it is necessary to protect the life or physical integrity of the individual or another person, where the individual is unable to give consent due to actual impossibility or where consent is not legally valid,
• • Where personal data processing is necessary for the establishment or performance of a contract,
• • It is necessary for the fulfilment of our legal obligations,
• • It has been made public by the data subject,
• • It is necessary for the establishment, exercise or defence of a legal claim,
• • It is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms.

is stored for legal reasons.

Your personal information is collected from sources such as your visit to our website and your communications with our company via telephone or email. If you enter into a commercial or legal relationship with Miprolab, your data, including your identity information (name, surname, Turkish ID number, date of birth) and your contact details (email address, address and telephone number), will be processed for the purpose of fulfilling the contract concluded between the parties and complying with legal obligations.

2. To Whom and for What Purpose Personal Data May Be Transferred

Miprolab may transfer your personal data within the country in legally permitted circumstances (and within the scope of specific purposes) to real and legal person business partners with whom it cooperates and/or from whom it receives services, to persons receiving support in legal matters, and to other third parties to whom the transfer is necessary for the specified purposes, as well as to institutions and organisations authorised to request such data.

3. Rights of the Data Subject (Relevant Person) under Article 11 of the Personal Data Protection Law

As a data subject, you may exercise your rights at any time in accordance with Article 11 of the Personal Data Protection Law by submitting a request to us as the data controller.

The rights you possess in this regard are as follows:

• The right to know whether personal data has been processed,
• •  The right to request information regarding the processing of personal data,
• •  The right to know the purpose of processing personal data and whether it is being used for that purpose,
• • The right to know the third parties to whom personal data has been transferred within or outside the country,
• • Requesting the correction of personal data if it has been processed incompletely or incorrectly and, in this context, requesting that the third parties to whom the personal data has been transferred be notified of the action taken,
• • Deletion of Personal Data, in accordance with the provisions of the KVKK and other relevant laws, if the reasons for processing no longer exist, Requesting the deletion, destruction or anonymisation of such data within 30 (thirty) days in accordance with the provisions of the Regulation on the Deletion, Destruction or Anonymisation of Personal Data, and requesting that the third parties to whom the personal data has been transferred be notified of this action,
• • Object to the analysis of processed data exclusively through automated systems resulting in a consequence detrimental to the individual.
• • Request compensation for damages incurred due to the unlawful processing of personal data.

For comprehensive information regarding the principles of protection and processing of your personal data, please review the "Identification Information Policy" on the Miprolab website. Should you wish to request information within the scope of the Personal Data Protection Law, you may contact us via the methods specified below, provided that your request contains the minimum elements specified in the law.