Employee Candidate Clarification Text

Pursuant to the Personal Data Protection Legislation Employee Candidate Clarification Text

Dear Employee Candidate, As Gen Temizer Erdoğan Girgin Avukatlık Ortaklığı (“GenTemizer”), as the data controller, we hereby inform you that we will record, store and preserve the personal data we obtain from our employee candidates within the framework of the purposes specified in the Personal Data Protection Law No. 6698 (“PDPL”) and detailed below, in connection with these purposes, in a limited and measured manner by maintaining the accuracy and the most up-to-date version of personal data; we will share personal data with institutions that are legally authorised to request personal data and transfer it to third parties under the conditions stipulated by the PDPL.

Definitions Regarding the PDPL

The following terms have the meanings ascribed to them under the PDPL.

Anonymization: The process in which personal data may, by no means, associated with an identified or identifiable person even though matching them with order data,
Data Subject: Natural person whose data is processed,
Personal Data: All information related to a natural person whose identity is known or could be identified,
Processing of Personal Data: Any transaction performed on the data such as collection, recording, storing, retention, alteration, editing, disclosure, transfer, receiving, making retrievable, classification or prevention of the use thereof, totally or partially through an automatic registry system or non-automatic means provided that it is part of any data registry system,
Board: Personal Data Protection Board,
Authority: Personal Data Protection Authority,
Data Processor: Natural or legal person authorized by the data controller to process personal data on behalf of the controller,
Filing system: Any structured set of personal data which are accessible according to specific criteria,
Data Controller: The natural or legal person who determines the purpose and means of processing personal data and is responsible for establishing and managing the data filing system,
Special Category of Personal Data: Data concerning race, ethnicity, political opinion, philosophical opinions, religion, denomination or other beliefs; appearance; memberships in associations, foundations or syndicates; health; sex life; convictions; and data concerning security measures and biometric and genetic data.

What is the Personal Data? Which Personal Data is Processed?

Personal data is any information that identifies or makes your identity identifiable. In this context, any information that can be associated with you, such as your name, surname, Turkish ID number, address and telephone information, bank account information, which are your main identity information, is referred to as “Personal Data”. Your race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, association, foundation or trade union membership, health, sexual life, criminal conviction and security measures and your biometric and genetic data regulated in accordance with Article 6 of the PDPL are referred to as “Special Category of Personal Data”. Accordingly, your Special Category Personal Data are not processed by GenTemizer. The data processed and/or shared by GenTemizer during the recruitment process of our employee candidates are detailed as follows:

Category of Data that can be processed	Identity* *In the presence of your explicit consent, your personal data in the identity category may be stored by us for the purpose of carrying out human resources activities for positions that may be opened in the future.
Personal Data that can be processed	Name, Surname, Turkish ID No, Date of Birth
Processing Purposes	Execution of Information Security Processes, Execution of Employee Candidate / Intern / Student Selection and Placement Processes, Execution of Application Processes of Employee Candidates, Execution of activities in accordance with the legislation, Planning of Human Resources Processes, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations
Legal grounds for processing	Publicised by the Data Subject Itself, Being Compulsory for the Fulfilment of Legal Obligations in the Fields of Employment, Occupational Health and Safety, Social Security, Social Services and Social Assistance, *Presence of the Explicit Consent

Category of Data that can be processed	Audio and Visual Recordings* *In the presence of your explicit consent, your personal data in the identity category may be stored by us for the purpose of carrying out human resources activities for positions that may be opened in the future.
Personal Data that can be processed	Photograph
Processing Purposes	Execution of Information Security Processes, Execution of Employee Candidate / Intern / Student Selection and Placement Processes, Execution of Application Processes of Employee Candidates, Planning of Human Resources Processes, Execution of activities in accordance with the legislation, Execution of Communication Activities, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations
Legal grounds for processing	Publicised by the Data Subject Itself, Being Compulsory for the Fulfilment of Legal Obligations in the Fields of Employment, Occupational Health and Safety, Social Security, Social Services and Social Assistance, *Presence of the Explicit Consent

Category of Data that can be processed	Contact* * In the presence of your explicit consent, your personal data in the identity category may be stored by us for the purpose of carrying out human resources activities for positions that may be opened in the future.
Personal Data that can be processed	Telephone Number, Email Address, Address
Processing Purposes	Execution of Information Security Processes, Execution of Employee Candidate / Intern / Student Selection and Placement Processes, Execution of Application Processes of Employee Candidates, Planning of Human Resources Processes, Execution of activities in accordance with the legislation, Execution of Communication Activities, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations
Legal grounds for processing	Publicised by the Data Subject Itself, Being Compulsory for the Fulfilment of Legal Obligations in the Fields of Employment, Occupational Health and Safety, Social Security, Social Services and Social Assistance, *Presence of the Explicit Consent

Category of Data that can be processed	Professional Experience* * In the presence of your explicit consent, your personal data in the identity category may be stored by us for the purpose of carrying out human resources activities for positions that may be opened in the future.
Personal Data that can be processed	CV-Diploma Information, Courses Attended, Vocational Training Information, Certificates, Transcript Information
Processing Purposes	Execution of Information Security Processes, Execution of Employee Candidate / Intern / Student Selection and Placement Processes, Execution of Application Processes of Employee Candidates, Planning of Human Resources Processes, Execution of activities in accordance with the legislation, Execution of Communication Activities, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations
Legal grounds for processing	Publicised by the Data Subject Itself, Being Compulsory for the Fulfilment of Legal Obligations in the Fields of Employment, Occupational Health and Safety, Social Security, Social Services and Social Assistance, *Presence of the Explicit Consent

Personal Data in the categories of identity and contact belonging to the real persons you refer to within the scope of your CV you have submitted to us may be processed during the creation of your personal file within the scope of the reasons that (i) it has been made public by you and (ii) we have a legitimate interest. In this case, you are required to ensure that your reference persons are informed in this clarification text.

Which Method Do We Collect/Process Your Personal Data?

We collect your Personal Data during the execution of GenTemizer human resources processes, during the execution of the application processes of employee candidates and during the execution and planning of human resources processes, in case we contact you due to your job application to GenTemizer on online and other platforms or sharing your job search on other platforms, during the execution of the application processes of employee candidates and during the execution and planning of human resources processes, by various methods that are fully or partially automatic or non-automatic as part of any data recording system, provided that they are in verbal, written or electronic environment. In addition, we will be able to process your CV that you submit to us in a connected, measured and limited manner for the purposes of evaluating your suitability for possible future positions and communicating with you about new positions to be opened in the future by recording it in GenTemizer’s human resources system if you give your explicit consent.

How is the Security of Personal Data Ensured?

GenTemizer attaches great importance to protecting the confidentiality and security of Personal Data. In this context, necessary technical and administrative security measures are taken to protect Personal Data against unauthorised access, damage, loss or disclosure. In this direction, necessary system controls, data access controls, security transfer controls, business continuity controls and other necessary corporate controls are implemented.

Do We Transfer Your Personal Data to Third Parties and/or Abroad?

As GenTemizer, we undertake that your Personal Data will be kept securely and will not be processed unlawfully. Your Personal Data may be shared with lawyers and, if necessary, authorised public institutions and organisations for the purposes of following and conducting legal affairs in case of a possible dispute in accordance with Article 8 of the PDPL and other legislation, limited to the realisation of the above purposes and the fulfilment of these purposes. In addition, your Personal Data may be transferred abroad in the presence of your explicit consent in accordance with Article 9 of the PDPL due to our use of foreign-based e-mail and server.

What are your rights as a data subject and what is the application procedure?

Your Rights Regarding Your Personal Data

We would like to state that you have the following rights regarding your data being processed within GenTemizer:

To be informed whether your Personal Data is processed or not,
To request further information regarding your Personal Data if it is being processed,
To be informed of the purpose of processing of Personal Data and whether such data is used consistently with the purpose,
To be informed of the third parties in the country or abroad whom Personal Data is transferred,
To request rectification of Personal Data if processed incompletely or inaccurately,

In case of correction, deletion or destruction of your Personal Data, to request notification of these transactions to third parties to whom your Personal Data has been transferred,
To request the deletion or destruction of your Personal Data that has been processed in the case that the reasons requiring the processing of your Personal Data have ceased to exist or that your Personal Data has become outdated,
To object to the processing, exclusively by automatic means of your Personal Data, which leads to an unfavourable consequence for the data subject,

To request compensation for the damage arising from unlawful processing of your Personal Data.

You may submit your requests regarding these rights to us with the application procedures below.

Application

You can submit your requests regarding your Personal Data to GenTemizer in accordance with the conditions specified in the Communiqué on the Procedures and Principles regarding the Application to the Data Controller by hand delivery, mail or cargo or notary public to the address specified in the last section or by applying via info@gentemizer.com via your e-mail address previously notified to us and registered in our system. GenTemizer will finalise the requests addressed to it free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. If a cost arises due to the fulfilment of your requests, we may only charge you the fees in the tariff determined by the Board. The application form is available on GenTemizer’s common platform, and you can access it at any time. As a result of the requests addressed to GenTemizer, we may accept the requests or reject them by explaining the reason and we may communicate this answer in writing or electronically to the person making the request. If the request is accepted, GenTemizer is obliged to fulfil the requirements of the request immediately.

Data Controller Identity Information

GEN TEMİZER ERDOĞAN GİRGİN AVUKATLIK ORTAKLIĞI Address: Levent, Ebulula Mardin Caddesi No:55 Beşiktaş/İstanbul Telephone: (90) 212 34 00