PERSONAL DATA PROCESSING AND PROTECTION DISCLOSURE

This Disclosure has been prepared by Maden Dış Ticaret Metin Maden (“Our Company” or “Atera”) acting as the data controller, in accordance with the Personal Data Protection Law No. 6698 (“KVKK” or “Law”), to inform our customers, users, and all individuals related to our Company, including those who use our products and services, about the processing of their personal data.

Detailed information regarding the processing of your personal data can be accessed at www.ateralab.com and in the Personal Data Protection Policy available at our showroom.

Purposes of Processing Personal Data

Within the scope of your legal relationship with our Company, the personal data you provide may be processed for the following purposes in accordance with applicable laws:

• To enable the use of our products and services,
  
• To carry out operational processes with our business partners and/or suppliers,
  
• To maintain records of customers for future purchases, and ensure proper invoice issuance without confusion due to similar names,
  
• To inform customers about general or personalized campaigns, promotions, or offers via e-mail, SMS, or phone,
  
• To customize products and services based on customer preferences, habits, and needs,
  
• To manage post-purchase processes, complaints, and inquiries,
  
• To carry out marketing, sales, and post-sales operations,
  
• To ensure legal and commercial security for our Company and all related individuals,
  
• To plan and implement our commercial and business strategies, manage internal systems, communications, finance, research, quality, and production processes,
  
• To plan and implement customer relationship and satisfaction management processes,
  
• To contact customers for inquiries, complaints, and marketing purposes,
  
• To manage visitor records and ensure their security.
  

Recipients of Personal Data

In accordance with Articles 8 and 9 of KVKK, your personal data may be shared with:

• Our business partners, suppliers, agencies,
  
• Legally authorized public institutions and organizations,
  
• Authorized private legal entities,
  
• And third parties designated by any of the above,
  

for purposes including operational support, campaigns, promotions, notifications, post-sales services, and any legally required processing.

Additionally, personal data may be transferred to service providers abroad, including but not limited to:

• Shopify (e-commerce platform),
  
• Microsoft 365 (email and document management),
  
• Google Analytics, Meta (Facebook/Instagram Ads), Mailchimp (newsletter management).
  

If a particular processing activity does not fall under the legal exemptions of the Law, explicit consent will be obtained.

Methods and Legal Basis for Collecting Personal Data

Your personal data may be collected via:

• Our website (www.ateralab.com),
  
• E-mail, phone, or social media accounts,
  
• Written, verbal, or electronic communications,
  

and will be processed based on the legal grounds of contractual necessity, legal obligation, and legitimate interests, in accordance with Articles 5 and 6 of the KVKK.

Rights of the Personal Data Owner

As a personal data owner, you have the right to:

• Learn whether your personal data is being processed,
  
• Request information if your data has been processed,
  
• Learn the purpose of processing and whether it is used accordingly,
  
• Learn third parties to whom personal data has been transferred domestically or abroad,
  
• Request correction if your data is incomplete or inaccurate,
  
• Request deletion or destruction if the reason for processing no longer exists,
  
• Request that corrections or deletions be communicated to third parties,
  
• Object to negative results arising solely from automated processing,
  
• Claim compensation in case of damages caused by unlawful processing.
  

Requests can be submitted:

• In person, by post, or via notary to Beşyol, Eski Londra Asfaltı no:20/2 Küçükçekmece/İstanbul,
  
  
• Or through other methods specified by the Personal Data Protection Board.
  

Requests will be processed free of charge within 30 days. If additional costs are required, fees will apply in accordance with the Board’s regulations.

Attachment: Request Form

EXPLICIT CONSENT FORM FOR PROCESSING PERSONAL DATA

I have read the Personal Data Processing and Protection Disclosure provided to me, and I have been informed about the Personal Data Protection Law No. 6698. I understand my legal rights and provide my consent freely for the following:

My personal data may be processed by Atera for the purposes of:

• Using Atera products and services,
  
• Receiving information about relevant products, applications, advantages, or campaigns,
  
• Receiving general communication and marketing.
  

I also consent to the transfer of my personal data, if necessary, to:

• Atera business partners, stakeholders, and authorized personnel,
  
• Legally authorized public institutions,
  
• Legally authorized private entities,
  
• Or third parties designated by any of the above,
  

and to receive marketing, promotional, and informational content via SMS, MMS, phone, e-mail, and similar communication channels.

Personal Data Owner

Name & Surname:
Date:
Signature: