INFORMED CONSENT FORM REGARDING THE PROTECTION OF PERSONAL DATA

This disclosure text has been prepared by Pause Yeni Nesil Kişisel Bakım Hiz. San. Tic. Ltd. Şti., with Tax Identification Number 7230936079, providing services at Barbaros Mahallesi Yeşilçim Sok. No:24/1 Ataşehir/Istanbul, affiliated with Kozyatağı Tax Office, hereinafter referred to as “AWE,” in the capacity of data controller, in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation of Disclosure. AWE shows utmost sensitivity regarding the confidentiality and security of personal data. This disclosure text has been prepared within the scope of the relevant law.

1. WHAT IS PERSONAL DATA?

Personal data is defined under the KVKK as any information relating to an identified or identifiable natural person. Accordingly, personal data you share with us includes identity-related data (such as your name, surname, date of birth, identification number), contact information (such as email address, phone number, address), and sensitive data such as your chronic health conditions and medications, which are considered personal health data.

2. PROCESSING AND PURPOSES OF YOUR PERSONAL DATA

Due to your relationship with AWE, your personal data is collected and processed in accordance with the data processing conditions stipulated by law, for purposes such as fulfilling legal obligations, obtaining information regarding your registration, communication, health history, lifestyle, ensuring you are not adversely affected, and informing you about campaigns and offers.

In this context, your personal data may be stored, processed, and transferred for the following purposes:

• Verifying your identity,

• Preparing and delivering services suitable for you,

• Sharing information with public institutions as required by law,

• Planning and managing the internal operations and daily activities of our center and affiliated centers,

• Communicating with you regarding our services,

• Conducting customer acquisition activities and providing service offers,

• Notifying you about appointments if you schedule one,

• Carrying out risk management and quality improvement activities,

• Complying with legal and regulatory requirements,

• Marketing activities,

• Media and communications,

• Providing campaign participation and information via call center personnel,

• Designing and delivering personalized content, tangible and intangible benefits on web and mobile channels.

Furthermore, in accordance with Article 5, Paragraph 2 of Law No. 6698, personal data may be processed automatically or non-automatically without your consent under the following conditions:

• Explicitly stipulated by law,

• Necessary for protecting the life or bodily integrity of the person or another, when consent cannot be obtained,

• Necessary for the establishment or performance of a contract directly related to the person,

• Necessary for the data controller to fulfill a legal obligation,

• Made public by the data subject,

• Required for establishing, exercising, or protecting a right,

• Required for the legitimate interests of the data controller without harming the fundamental rights and freedoms of the data subject.

3. PURPOSES AND RECIPIENTS OF PERSONAL DATA TRANSFER

Your personal data may be shared with AWE shareholders, domestic/foreign partners and institutions collaborating with us during the business relationship (lawyers, auditors, tax advisors, other consultancy and service providers, companies providing courier, call center, database, cloud, and employee services) for the purposes of legal and financial follow-up, business operations, and auditing. Additionally, personal data may be shared with courts and other public authorities within the scope of legal obligations and accepted confidentiality policies.

4. YOUR RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA

You have the right to: access your personal data, request correction, deletion, or restriction of processing, object to processing, file a complaint with a supervisory authority, receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another data controller (data portability) without obstruction from the controller, including sending it directly from one controller to another if technically feasible.

Under Article 11 of the Law, data subjects have the following rights:

1. To learn whether personal data about them is processed,

2. To request information if their personal data has been processed,

3. To learn the purpose of processing and whether personal data is used accordingly,

4. To know domestic or foreign third parties to whom personal data is transferred,

5. To request correction of incomplete or incorrect personal data and to have such corrections notified to third parties,

6. To request deletion or destruction of personal data when the reasons for processing no longer exist and notification of such actions to third parties,

7. To object to results arising from automatic analysis of data processed solely through automated systems,

8. To request compensation for damages due to unlawful processing of personal data.

Requests for exercising these rights can be submitted through the methods specified in AWE’s Personal Data Processing and Protection Policy. AWE will evaluate requests and respond as soon as possible, and no later than 30 (thirty) days. AWE reserves the right to charge a fee in accordance with the tariff (if any) set by the Personal Data Protection Board regarding such requests.