GENERAL INFORMATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

Your personal data will be processed by Eruslu Sağlık Ürünleri Sanayi ve Ticaret A.Ş., acting as the data controller, in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK").

 The scope within which processing may be carried out by (“ERUSLU” or “the Company”) is explained below.

I. What are the Methods and Legal Basis for Collecting Your Personal Data?

Your personal data is collected by our Company through various channels for the purpose of conducting our activities and based on legal grounds to ensure compliance with legislation and Company policies. In accordance with the fundamental principles stipulated by the Personal Data Protection Law (KVKK), your personal data may also be processed and transferred for the purposes stated in this Privacy Notice, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

II. For what purpose do we process your personal data?

Your collected personal data may be processed by ERUSLU in accordance with the fundamental principles stipulated by the KVKK (Personal Data Protection Law) and within the scope of the conditions and purposes for processing personal data specified in Articles 5 and 6 of the KVKK, for the purposes listed below:

• To ensure that ERUSLU's commercial activities are carried out in accordance with legislation and company policies, the necessary work shall be undertaken by our company's business units and activities shall be conducted accordingly;
• Determining, planning, and implementing ERUSLU's short, medium, and long-term commercial policies;
• Designing and executing ERUSLU's human resources activities;
• Providing support in the design, planning, and execution of ERUSLU's human resources activities;
• To ensure the commercial and legal security of ERUSLU and the individuals with whom it has a business relationship;
• Protecting ERUSLU's commercial reputation and the trust it has built.

Detailed information regarding the purposes for which your personal data is processed by our Company can be found in the "Personal Data Protection and Processing Policy" available at www.sleepy.com.tr.

III. To Whom and for What Purpose Do We Transfer Your Personal Data?

Your collected personal data may be transferred by ERUSLU to our business partners, suppliers, ERUSLU affiliates and their subsidiaries, shareholders, legally authorized public institutions and private individuals for the following purposes, in accordance with the fundamental principles stipulated by the KVKK (Personal Data Protection Law) and within the scope of the conditions and purposes of personal data processing specified in Articles 8 and 9 of the KVKK:

• To ensure that ERUSLU's commercial activities are carried out in accordance with legislation and company policies, the necessary work shall be undertaken by our company's business units and activities shall be conducted accordingly;
• Determining, planning, and implementing ERUSLU's short, medium, and long-term commercial policies;
• Designing and executing ERUSLU's human resources activities;
• Providing support to ERUSLU's companies in the design, planning, and execution of human resources activities;
• To ensure the commercial and legal security of ERUSLU and the individuals with whom it has a business relationship;
• Protecting ERUSLU's commercial reputation and the trust it has built.

Detailed information regarding the transfer of your personal data by our Company can be found in the "Personal Data Protection and Processing Policy" available at www.sleepy.com.tr .

IV. What are your rights as a data subject under Article 11 of the KVKK (Law on Protection of Personal Data)?

The rights of natural persons whose personal data is processed, in accordance with Article 11 of the KVKK (Law on Protection of Personal Data), are as follows:

• To find out whether your personal data is being processed,
• The right to request information regarding the processing of personal data.
• To learn the purpose of processing personal data and whether it is being used appropriately for that purpose.
• Knowing the third parties to whom personal data is transferred, whether domestically or internationally.
• The right to request the correction of personal data if it has been processed incompletely or inaccurately, and to request that this correction be notified to third parties to whom the personal data has been transferred.
• Even if personal data has been processed in accordance with the KVKK (Personal Data Protection Law) and other relevant laws, the data subject has the right to request the deletion or destruction of their personal data when the reasons requiring its processing cease to exist, and to request that this action be notified to third parties to whom the personal data has been transferred.
• The right to object to an outcome that is detrimental to oneself, resulting from the analysis of processed data exclusively through automated systems.
• The right to claim compensation for damages incurred as a result of the unlawful processing of personal data.

You can submit your applications regarding the rights listed above using the Data Subject Application Form located at www.sleepy.com.tr. Our company will process the request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the process requires additional costs, we will charge the fee specified in the tariff determined by the Personal Data Protection Board.