PRIVACY, PERSONAL DATA PROTECTION, AND COOKIE POLICY

1. Purpose of the Privacy, Personal Data Protection, and Cookie Policy

This Privacy, Personal Data Protection, and Cookie Policy:

Details what types of personal data are collected by Bioxcin (brand), owned by BİOTA HERBAL MEDICINE AND COSMETIC LABORATORIES INC. ("Company"), located at Emek Mah. Sıvat Cad. No9 Sancaktepe/Istanbul;

1. Explains how and for what purposes these personal data are used;

2. Clarifies with whom Biota may share these personal data;

3. Outlines the rights of visitors and how they can exercise these rights;

4. Provides information about cookies.

For more detailed information on how your personal data is processed by our Company, we recommend reading our "General Information Notice on the Protection of Personal Data under Law No. 6698."

2. Information on the Protection of Personal Data

In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), personal data shared by visitors with our Company, as stated in this Privacy, Personal Data Protection, and Cookie Policy, will be:

Recorded, stored, preserved, modified, and rearranged within the scope of the purposes that necessitate their processing;

Shared with legally authorized institutions that are entitled to request such data;

Transferred, disclosed, made accessible, classified, or otherwise processed under the conditions and purposes prescribed by KVKK, either to third parties in Turkey or abroad with whom we collaborate.

The processing of such personal data will always remain limited to and in connection with the purposes outlined above.

3. Processed Personal Data, Purpose of Data Processing, and Legal Basis

If visitors contact our Company through the website, the following data is collected: name and surname information, address information, email address, and written message content. IP and log information, which is mandatory under Law No. 5651, is stored on the servers where our site is hosted in compliance with the law. These logs and IP information include the date-time information of the connection, the request made, and the amount of data.

Additionally, it can be processed to provide better service to visitors, ensure the continuation and improvement of the service provided to visitors, carry out commercial communication and related operational activities, conduct statistical studies, and perform market research. Other purposes of processing these Personal Data include compliance with the Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications and related secondary legislation, the Law No. 6563 on the Regulation of Electronic Commerce and related secondary legislation, the Law No. 6112 on the Establishment and Broadcasting Services of Radio and Television Organizations and related regulations, the Law No. 5846 on Intellectual and Artistic Works, the Turkish Penal Code No. 5237, and other relevant legal regulations. Data will also be processed to prepare all records and documents required by the purpose of data processing in electronic or paper form, and to comply with information storage, reporting, notification, and information sharing obligations required by relevant regulatory authorities and other organizations.

Personal Data may be processed, limited to the purposes of data processing and legal reasons, based on the explicit consent of visitors, in compliance with legal regulations. It may also be transferred to subsidiaries, affiliates, or third parties within the country or abroad, with whom our Company collaborates or receives services, as part of contractual agreements, ensuring compliance with the KVKK and taking necessary data security measures.

Personal Data such as browsing and traffic information of visitors may be shared with authorized institutions and organizations, to fulfill our obligations regarding security and legal matters (including but not limited to crime prevention, state and public security threats), as mandated by the law.

4. Rights Regarding Personal Data

The visitor is deemed to have been informed of their rights granted under Article 11 of the KVKK and, based on this Article, may:

Learn whether their Personal Data has been processed and, if processed, request information regarding this;

Learn the purpose of processing their Personal Data and whether it has been used in accordance with that purpose;

Learn the third parties to whom their Personal Data has been transferred domestically or abroad;

Request the correction, modification, or update of their Personal Data if it has been processed incompletely or inaccurately, or if there are any changes to their processed Personal Data;

Request the deletion, destruction, or anonymization of their Personal Data under the conditions stipulated in Article 7 of the KVKK;

Request notification of the transactions (correction, deletion, destruction, or anonymization of incomplete or inaccurate Personal Data) to third parties to whom the Personal Data has been transferred;

Object to any adverse outcome arising exclusively from the automated analysis of their processed Personal Data; and

Demand compensation if they suffer damages due to unlawful processing of their Personal Data.

The visitor may exercise these rights within the scope of Article 13, paragraph 1 of the KVKK, by submitting a written application to our Company. This can be done by completing, signing, and printing the sample Application Form provided below, and submitting it in person, through a Notary, via secure electronic signature, mobile signature, registered electronic mail (KEP), or through an email address previously notified to and registered in our systems. Additional information may be requested from you during the evaluation of your request if necessary. Applications will be processed free of charge. However, if the application entails additional costs, fees may be charged as stipulated by the relevant legislation.

Below are the methods through which applications can be submitted to us:

Application Methods

In-Person Application

Notification via Notary

Registered Electronic Mail (KEP)

Electronic Mail

Company Contact Information

Emek Mah. Sıvat Yolu Cad. No:9 PK: 34785, Sancaktepe, ISTANBUL

biota@hs01.kep.tr

info@biotalab.com

Applications submitted to us will be responded to within thirty days from the date they are received, in accordance with paragraph 2 of Article 13 of the KVK Law. Our responses will be sent to you in writing or electronically, as required by Article 13 of the KVK Law.

Click here to download the BIOXCIN RELEVANT PERSON APPLICATION FORM.

5. Personal Data Retention Period

Our Company retains Personal Data processed under the KVKK only for the duration specified in the relevant legislation or, if no duration is specified, for the period required to fulfill the purpose of processing. Once the reasons necessitating the processing of the data cease to exist, the retained data is deleted, destroyed, or anonymized. For example, under the Electronic Commerce Regulation Law No. 6563 and its associated regulations, Personal Data records used for marketing or promotional purposes are retained for one year following the withdrawal of the visitor's consent. Records of the content of commercial electronic messages and other related records are retained for three years to be provided to the relevant ministry if required. Under the Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications, traffic data processed by us is retained for two years and anonymized after this period. In any case where Personal Data is processed for multiple purposes, the data is deleted, destroyed, or anonymized once all the reasons for its processing cease to exist.

6. Cookie Policy Purpose, Scope, and Usage

As BİOTA Herbal Medicine and Cosmetics Laboratories Inc., we prioritize the privacy of your personal data. To ensure the privacy of individuals who benefit from our websites, the most secure measures have been taken within our systems and infrastructure. This website and cookie application policy apply to all websites owned by BİOTA Herbal Medicine and Cosmetics Laboratories Inc., branded websites on third-party platforms (Facebook, Instagram, Twitter), and applications used for these websites.

Our company may process visitors' browsing and cookie information within the framework of the purposes and scope specified in this “Privacy, Personal Data Protection, and Cookie Policy” and in compliance with legal obligations to provide better services to visitors.

Cookies are text files containing small pieces of information that are stored on the visitor's computer, mobile phone, or tablet when the visitor accesses the website via their browser. Biota stores these cookies, which may also be collected through log files, blank gif files, and/or third-party resources, to create a summary of the visitor's preferences and may share this information with third parties for this purpose. Brands can track the visitor's browsing activities and/or usage history on these platforms to offer personalized promotions, marketing offers, and content tailored to the visitor's preferences or improve the content of these platforms.

Additionally, information collected online and offline through various methods or at different times may be matched with data collected on these platforms and used together with information obtained from other sources, such as third parties. Such matching and use will remain within the purposes and scope specified in this Privacy, Personal Data Protection, and Cookie Policy and will only be shared with third parties for these purposes.

We use cookies to make our website easier to use, improve your user experience, perform measurements, and customize our website to better suit your usage. Additionally, we use these cookies to maintain anonymous statistics that do not contain usernames. We also utilize these cookies to deliver promotional and informational content to individuals who use our websites.

By accepting our request to place cookies via our website, you consent to the use of cookies in compliance with this Cookie Policy. If you wish to disable the use of these cookies later, you can delete or deactivate them through your browser settings. Disabling these cookies may affect your experience on our websites.

7. Cookie Applications

Cookie applications are text files stored on your computer (or mobile devices such as a phone or tablet connected to the internet) when you visit our websites. A cookie typically contains the name of the website it was received from, the lifespan of the cookie, and a randomly generated unique number.

8. Functions of Cookies

Cookies are small files sent to your computer when you visit a website. They aim to provide a more user-friendly experience on a website. Cookies enable the presentation of personalized web pages tailored to your personal needs, allowing for a more suitable and faster visit experience. Cookies can be used for various purposes.

9. Types of Cookies

Biota uses the following cookies on its platform, and this table may be updated periodically:

10. Cookie Duration

Session/Temporary Cookies: These cookies are deleted once you leave the website.

Persistent Cookies: These cookies remain on your device for a specific duration after your use of the website, depending on their intended purpose.

Permanent Cookies: These cookies are not deleted when you leave the website. They are stored for a longer period.

11. Third-Party Cookies

To provide the services they offer, we collaborate with certain third-party providers that set necessary cookies on your behalf when you use BİOTA websites. When you visit our websites, you may receive cookies from third-party websites and domains.

12. Cookies Accepted from Third Parties

During your visit to our websites, cookies listed below, originating from third-party websites, may be stored on your device to personalize and improve the content provided to you, including advertisements:

Social Media Content: We may publish content from social networks on our support pages. By accessing this content on our support pages, a cookie from the relevant social network may be stored on your device. For more detailed information, we recommend reading the cookie policies of these social networks.

Flash Cookies: These are files stored by Flash software. This tool is primarily installed as a browser extension to display dynamic objects such as animated graphics or video directories. Therefore, Flash Cookies may be installed due to the use of this application. For more information, we recommend reading the cookie policy available on www.adobe.com.

12. Regarding the Use of Cookies

Cookies are used to provide content and advertisements tailored to the visitor's interests, in other words, for targeted advertising/promotion purposes. In this way, the Platform can offer more relevant content to the Visitor during their usage. The Platform associates the information obtained through cookies with the Personal Data we have collected.

Additionally, cookies may be used to activate "advertising technology" to present advertisements that the visitor might find interesting during their visit to the Platforms. Advertising technology uses information about the visitor's previous visits to provide personalized advertisements. While delivering these advertisements, a unique third-party cookie may be placed in the visitor's browser to enable the Platforms to recognize them.

13. Cookie Management for Our Website Visitors

The settings for deleting or accepting cookies vary depending on the browser program you are using. Many internet browsers automatically accept these cookies. You can restrict, block, delete cookies, or configure your browser settings to notify you when cookies are sent to your device. Different methods may be required for different internet browsers; for detailed information on this, refer to the "Help/Support" section of your internet browser. Alternatively, if you are using one of the browsers listed below, you can change your settings by following the provided guidelines:

• Click here to disable Google Analytics cookies.

• Click here to manage personalized ad experiences provided by Google.

• To manage cookies on mobile devices, use the settings menu specific to your device.

• You can also personalize your cookie preferences by modifying your browser settings through the links provided in the table below.

Adobe Analytics

http://www.adobe.com/uk/privacy/opt-out.html

Google Adwords

https://support.google.com/ads/answer/2662922?hl=en

Google Analytics

https://tools.google.com/dlpage/gaoptout

Google Chrome

http://www.google.com/support/chrome/bin/answer.py?hl=en&answer=95647

Internet Explorer

https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

MozillaFirefox

http://support.mozilla.com/en-US/kb/Cookies

Opera

http://www.opera.com/browser/tutorials/security/privacy/

Safari:

https://support.apple.com/kb/ph19214?locale=tr_TR

You can also access information about all browsers via the link provided below:

https://www.aboutcookies.org/

If you access our website from different devices, ensure that the "cookie settings" of the internet browser on each device are configured according to your preferences.

14. Measures for the Protection of Personal Data

The protection of Personal Data is an important matter for our Company and Brands. We take all necessary technical and administrative measures to safeguard visitors against unauthorized access to, loss, misuse, disclosure, alteration, or destruction of Personal Data. While processing Personal Data, we utilize widely accepted security technology standards.

We commit to keeping Personal Data confidential, taking all necessary technical and administrative precautions to ensure its privacy and security, and exercising due diligence. Despite the security measures we implement, in the event of Personal Data being compromised or accessed by third parties as a result of attacks on the Platforms or systems owned by Biota, we will promptly inform you and the Personal Data Protection Authority of the situation and take the necessary steps to address it.

15. Adjustments

This Privacy, Personal Data Protection, and Cookie Policy may be updated periodically. These updates will become effective immediately upon the publication of the revised Privacy, Personal Data Protection, and Cookie Policy on the Platforms. For this reason, we recommend that visitors periodically review this document.

16. Governing Law, Competent Court, and Enforcement Offices

This Privacy, Personal Data Protection, and Cookie Policy is subject to the laws of the Republic of Turkey. Any disputes arising from the application of the Privacy, Personal Data Protection, and Cookie Policy will be resolved under the jurisdiction of the Istanbul Anadolu Courts and Enforcement Offices.

Additionally, website visitors can access our “Website Visitor Clarification Text” via this link: (Visitor Clarification Text) to learn and be informed about their rights regarding personal data protection under Law No. 6698.