6698 numbered Law on Protection of Personal Data ("Law") states that your personal data may be processed within the scope described below during your use of the solardaysenergy.com website.

Purposes and Legal Basis for the Processing of Personal Data Your collected personal data will be processed within the scope of the purposes stated below and in accordance with the personal data processing conditions specified in the relevant field: Based on the legal ground that processing is necessary for the establishment or performance of a contract with the data subject or processing is necessary for compliance with a legal obligation to which the data controller is subject:

• Creation of your membership on the website

• Provision of services such as appointment creation, home testing, mediating communication with laboratories based on your requests on the website

• Updating customer contact information

• Tracking service records and performing necessary financial transactions

• Providing technical support and customer services required during your use of the application

• Fulfillment of official institution requests

• Providing information to authorized institutions according to legal regulations

• Ensuring compliance with legal storage obligations

• Responding to requests from individuals in accordance with the law and performing necessary processes

• Conducting customer relations

• Tracking financial transactions

• Carrying out necessary activities by our business units for the use of our products and services, including sales and marketing activities

• Conducting necessary activities by our business units for the realization of commercial activities conducted by our company

• Ensuring the legal, technical, and commercial-business security of our company and individuals in business relationship with our company

• Determining and implementing the commercial and business strategies of our company

• Tracking legal affairs and their execution

• Conducting information security processes

• Conducting audit and ethical activities

• Planning and executing customer satisfaction and corporate communication activities

• Conducting raffles, campaigns, contests, promotions, or advertising activities

• Storing personal data for the general statute of limitations period for potential evidence in future disputes, Based on the legal ground that processing is necessary for the establishment, exercise, or protection of a right:

• Receiving, evaluating, and concluding your requests and complaints

• Storing personal data for the general statute of limitations period for potential evidence in future disputes, With your explicit consent:

• Limited storage and processing of your data by our company during your use of the application and provision to third-party healthcare institutions, which are our service providers, for the purpose of providing services and sending commercial electronic messages, if any

• Processing of your data by our company for marketing processes of our products and services, including profiling and analysis activities, and customization of our products and services offered by our company according to the preferences, usage habits, and needs of individuals, and presenting them to relevant individuals, Sending commercial electronic messages by our company to your contact information according to your preferences

• Your personal data collected for the fulfillment of the Purposes mentioned above may be transferred to laboratories, healthcare institutions, and healthcare professionals with whom we mediate services through the Application, and our suppliers providing services to us in technical, legal, and financial processes, and, within the framework of explicitly stipulated legal obligations, to public institutions authorized by law and private individuals authorized by law.

• Your personal data is collected and processed by our company through the Application, online application and membership forms, images, files, and other information transferred to the Application by you, call center, short message, and email channels for the fulfillment of the mentioned Purposes. Your personal data is collected and processed by our company based on the personal data processing conditions specified in Articles 5 and 6 of the Law.

• Rights of the Data Subject as Specified in Article 11 of the Law As the data subject in accordance with Article 11 of the Law, we inform you that you have the following rights:

• Requesting information if your personal data has been processed

• Learning the purpose of processing personal data and whether they are used in accordance with their purpose

• Knowing the third parties to whom personal data is transferred at home or abroad

• Requesting the correction of your personal data if it is incomplete or incorrectly processed and requesting the notification of this correction to third parties to whom your personal data has been transferred within the scope of this correction

• Requesting the deletion or destruction of your personal data if the reasons requiring its processing are eliminated, despite being processed in accordance with the law and other relevant laws, and requesting the notification of this deletion or destruction to third parties to whom your personal data has been transferred within the scope of this deletion or destruction

• Objecting to the occurrence of a result against you by analyzing the processed data exclusively through automated systems

• Demanding the compensation of damages in case of suffering damage due to the unlawful processing of your personal data

• You can communicate your requests regarding the above-mentioned rights to our company by sending an email to info@solardaysenergy.com from the registered email address in our systems. Depending on the nature of the request, our company will conclude the request as soon as possible and within a maximum of thirty days free of charge. However, if the transaction also requires a cost, our company will charge the fee specified in the tariff determined by the Personal Data Protection Board.