BEYANLAB PRIVACY POLICY AND KVKK INFORMATION NOTICE

Last updated: 7 August 2026

Beyanlab Laboratuvar Ürünleri Sanayi Ticaret Limited Şirketi (the “Company”) attaches importance to the privacy and protection of the personal data of individuals who visit www.beyanlab.com (the “Website”) and use our communication channels.

This document has been prepared under Turkish Personal Data Protection Law No. 6698 (“KVKK” or the “Law”) and the applicable legislation to provide information about the collection, processing, transfer, retention and protection of personal data and to fulfil the obligation to inform data subjects.

1. Data Controller and Contact Details

The organisation responsible for processing your personal data is:

Company name: Beyanlab Laboratuvar Ürünleri Sanayi Ticaret Limited Şirketi
Address: Oruçreis Mahallesi, Giyimkent Sitesi, 17. Sokak, No: 49A–51A, Esenler / İstanbul
Email: info@beyanlab.com
Telephone: +90 (212) 438 74 50
Fax: +90 (212) 438 74 57
Website: www.beyanlab.com

2. Scope of This Notice and Personal Data Processed

This notice covers Website visitors, individuals submitting enquiries and quotation requests, individuals requesting technical support, applicants for dealership or distribution arrangements, and individuals using the dealer portal. Personal data relating to representatives of corporate customers and business partners are also covered.

Depending on the service you use and your request, the following information is processed to the extent necessary:

• Identity information: First name and surname.

• Contact information: Email address, telephone number and any contact address provided in connection with your request.

• Professional information: The organisation you represent, your position and information relating to the business relationship.

• Request and transaction information: Messages, correspondence, product and quotation requests, technical support records, and dealership or distribution applications.

• Dealer account information: User information associated with the account, authentication and access records, and information about transactions carried out through the portal.

• Transaction security information: IP address, access time, server access and error logs, and technical information about your browser and device.

Please do not share health information, copies of identity documents or similar sensitive information that is unnecessary for assessing your request through general contact forms.

For other data processing activities, such as job applications, additional information specific to the relevant process is provided.

3. Methods of Collecting Personal Data

Your personal data are collected through contact and quotation forms, the dealer portal, email correspondence and the Website’s technical logs by wholly or partly automated means.

Data are also collected by non-automated means when information provided by telephone is entered into request records or written documents are filed, provided that such processing forms part of a data filing system.

4. Purposes and Legal Grounds for Processing

Your personal data are processed for the following purposes and on the legal grounds indicated:

Only personal data necessary for the relevant purpose are used in each processing activity.

5. Transfers of Personal Data Within Türkiye

Your personal data are transferred to the following categories of recipients under the conditions set out in Article 8 of the KVKK and to the extent necessary for the relevant purpose:

• Hosting, email, software, maintenance and information security service providers: To operate the Website and dealer portal, facilitate communication and store records securely.

• Technical service and other service providers in Türkiye involved in fulfilling your request: To assess technical support and service requests and provide the relevant service.

• Legal advisers and lawyers: To obtain legal advice and protect rights in disputes.

• Legally authorised public bodies, courts and other competent authorities: To fulfil legal obligations and comply with legally binding requests.

Data sharing is limited to the scope required by the relevant service or legal obligation.

6. Transfers of Personal Data Abroad

Your personal data are not transferred abroad in connection with the use of the Website or the communication, product information, quotation, technical support, dealership and distribution processes covered by this notice.

7. Cookies and Similar Technologies

The Website does not use cookies.

Visiting the Website or continuing to browse does not, by itself, constitute consent to data processing activities requiring explicit consent.

8. External Links and Other Websites

The Website may contain links to an online store, catalogues or other services.

Information about personal data processing on linked websites is provided in the information notices and privacy policies of the relevant services. This notice does not cover all data processing activities of every linked service.

Using another service provider does not remove the Company’s obligations concerning its own data processing and transfer activities.

9. Retention Periods and Disposal

Your personal data are retained for the periods prescribed by applicable legislation or for as long as necessary for the processing purpose.

For request and correspondence records, consideration is given to resolving the request, the continuation of the relevant business relationship and the need to protect rights in disputes. For dealer account records, the continuation of the account and business relationship is considered. For technical logs, information security and investigation needs are taken into account.

When all conditions requiring the processing of personal data cease to exist, the data are deleted, destroyed or anonymised in accordance with the legislation, either on the Company’s own initiative or at your request.

10. Confidentiality and Data Security

The Company is required to take technical and organisational measures appropriate to the nature of the data to prevent unlawful processing, unauthorised access and data loss.

The Company’s approach is to restrict access to personal data according to duties and need, establish confidentiality obligations and ensure that data security is considered in processes involving service providers.

Dealer portal users must not share their account access credentials with unauthorised persons and must notify the Company of any suspected unauthorised use.

11. Your Rights Under the KVKK

By applying to the Company under Article 11 of the KVKK, you may:

• Find out whether your personal data have been processed and request information if they have.

• Learn the purpose of processing and whether your data have been used in accordance with that purpose.

• Learn which third parties have received your data within Türkiye or abroad.

• Request the correction of incomplete or inaccurate data.

• Request the deletion or destruction of your data under the conditions set out in Article 7 of the KVKK.

• Request that third parties receiving your data be notified of any correction, deletion or destruction.

• Object to an adverse outcome resulting from the analysis of your data exclusively through automated systems.

• Request compensation for damage suffered as a result of processing contrary to the Law.

12. Application Methods and Response Period

In accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller, you may submit requests concerning your rights:

• By delivering a signed written application in person or by post to the address in Section 1.

• By sending an email to info@beyanlab.com from an email address previously notified to the Company and registered in our system.

• By using a secure electronic signature or mobile signature in accordance with the legislation.

Your application must include your first name and surname; your signature for written applications; your Turkish identity number or, if you are a foreign national, your nationality and passport number or identity number, if any; your address for service of notices; your email address, telephone and fax numbers for notifications, if available; and the subject of your request. Relevant information and documents must be attached.

Applications are resolved as soon as possible, depending on the nature of the request, and within 30 days at the latest. Acceptance or a reasoned rejection is communicated in writing or electronically.

Applications are generally free of charge. If processing the request incurs an additional cost, a fee may be charged only in accordance with the tariff determined by the Personal Data Protection Board.

13. Explicit Consent and Updates to This Notice

This document provides information about privacy and fulfils the information obligation under the KVKK.

Reading this notice, using the Website, logging into the dealer portal or submitting a contact form does not constitute general permission for advertising, marketing or other activities requiring explicit consent. This document does not replace consent to receive commercial electronic communications.

Where explicit consent is required, information provision and consent collection are carried out separately.

This notice is updated when data processing activities or legislation change. If data are to be processed for a new purpose, the necessary information is provided before processing begins. The current version is published on www.beyanlab.com.