Employee Candidate Privacy Notice on The Processing of Personal Data

Dear Employee Candidate,

As Sestek Ses ve İletişim Bilgisayar Teknolojileri San. Tic. A.Ş. (“SESTEK”), we respect and attach great importance to the privacy of your private life and the protection of your personal data. Therefore, within the scope of the Law on the Protection of Personal Data No. 6698 (“KVKK”), we would like to inform you, within this Employee Candidate Privacy Notice on the Processing of Personal Data (“Privacy Notice”), about the personal data processed during recruitment processes.

 

1. DATA CONTROLLER

As SESTEK, we process your personal data in the capacity of data controller within the scope of the KVKK and the relevant legislation.

 

2. YOUR PROCESSED PERSONAL DATA AND PERSONAL DATA CATEGORIES

As SESTEK, we process the following personal data in order to carry out our business processes.

PERSONAL DATA CATEGORY	PERSONAL DATA
Identity Information	Name–Surname, Place of Birth, Date of Birth, Age, Marital Status
Contact Information	Mobile Phone Number, E-mail Address, Address
Professional Experience Information	Occupation Information, Professional Title, Attended Course/Certificate Program Information, Professional Certificates, Foreign Language Information, Previous Job, Internship and Voluntary Work Experience
Education Information	Diploma Information, Graduated School, Graduated Department, Graduation Grade, University/Graduate School Start and End Dates
Visual and Audio Recording Information	Photographs and Video Records (If included in your CV, your photograph; in case an interview is conducted within the recruitment processes, your visual and audio recording information may be processed within the relevant online interview environment.)
Association, Foundation, Union Membership Information	If included in your CV, your association, foundation or union membership information may be processed. Such personal data are not otherwise requested by SESTEK.
Other Information	Military Service Status, Driver's License Information, Motivation Letter, Personal Website, Information related to Technical or Personality Tests if conducted, Information on LinkedIn, GitHub, Medium Accounts

 

**If the employee candidate shares personal data belonging to third parties (such as name, surname, title, phone number, etc.), particularly references, with SESTEK during the job application processes, the employee candidate is obliged, under the KVKK and related secondary legislation, to inform the relevant individuals and to obtain explicit consent for the sharing of their personal data.**

 

3. PURPOSES OF PROCESSING PERSONAL DATA AND LEGAL GROUNDS

Your personal data are processed for the purposes listed below during recruitment processes, based on the specified legal grounds.

PURPOSES OF PERSONAL DATA PROCESSING	LEGAL GROUNDS
Human Resources Processes (Employee Candidate Evaluation, Interview, Recruitment Processes)
Conducting employee candidate selection and placement processes Conducting employee candidate application processes Conducting technical tests and/or presentations if the employee candidate’s application process is positive Managing onboarding processes if the interview with the employee candidate is positive Conducting storage and archiving activities Conducting activities in compliance with legislation Conducting communication activities Ensuring human resources activities are carried out in compliance with legislation	KVKK Art. 5/2-c: Necessary for the establishment or performance of a contract, provided that it is directly related to the parties to the contract KVKK Art. 5/2-ç: Necessary for the data controller to fulfil its legal obligation KVKK Art. 5/2-d: Personal data made public by the data subject KVKK Art. 5/2-e: Necessary for the establishment, exercise or protection of a right KVKK Art. 5/2-f: Necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject KVKK Art. 6/3-f: Necessary for the fulfilment of legal obligations in the fields of employment, occupational health and safety, social security, social services and social assistance
Legal Affairs (Handling Possible Legal Disputes, Information and Document Requests within Employee Candidate Selection and Placement Processes)
Exercising our right of defense in case of a possible legal dispute Initiating legal proceedings, including litigation and execution Providing information to authorized institutions and organizations Conducting and following legal affairs	KVKK Art. 5/2-e: Necessary for the establishment, exercise, or protection of a right

 

4. METHOD OF COLLECTING PERSONAL DATA

Your personal data are obtained verbally, in writing, or electronically, through automated or non-automated methods in order to fulfil the purposes stated above, including but not limited to the methods specified below.

Within this scope:

• Sharing of personal data by the employee candidate during job interviews,
• If the CV is submitted by the employee candidate within the job application process,
• Within the scope of job interviews conducted with the employee candidate,
• Submission of physical or electronic documents to the relevant departments in order to carry out business processes,

your personal data may be collected.

 

5. TRANSFER OF PERSONAL DATA AND RECIPIENT GROUPS TO WHICH PERSONAL DATA ARE TRANSFERRED

As SESTEK, we attach importance to the protection of your personal data and share your personal data with only authorized persons, institutions or private legal entities located domestically or abroad, and only when necessary.

Accordingly, your personal data are transferred within Türkiye for the purposes listed below, in accordance with Article 8 of the KVKK:

• In order to fulfil legal obligations under the relevant legislation, your personal data will be shared with relevant public institutions and organizations and private institutions and organizations if necessary or upon request.

• If a personality inventory is conducted for the purpose of managing human resources evaluation processes, your personal data (name, surname, e-mail address, etc.) will be shared with the service provider. 

• Within the scope of application processes, for the purpose of conducting various evaluation tests (English, technical tests, etc.), your personal data will be shared with the training company. 

• For the purpose of following potential legal processes, your personal data will be shared with our attorneys, to the extent necessary and within the framework of confidentiality obligations.

 

Your personal data are transferred abroad for the purposes listed below, in accordance with Article 9 of the KVKK:

• Within the scope of conducting human resources processes, personal data are transferred abroad because the infrastructure and databases of the application used for these purposes are located abroad. (The personal data categories transferred abroad within the scope of using the application are Identity Information, Contact Information, Professional Experience Information, Visual and Audio Recording Information, and Other Information.)

• Within the scope of carrying out our business activities, information and communication technology applications and software (“IT Systems”) (Microsoft Office365 e-mail software, online meeting and remote connection software) are used. The infrastructure and databases of these services are located abroad. Personal data are transferred abroad within the scope of using these services.

 

6. SECURITY OF PERSONAL DATA

As SESTEK, we take the necessary administrative and technical measures to prevent the unlawful processing of your personal data, to prevent unlawful access to your personal data, and to ensure their secure storage.

 

7. YOUR RIGHTS UNDER ARTICLE 11 OF THE KVKK

Within the scope of Article 11 of the KVKK, you have certain rights as the data subject.

These rights are:

• To learn whether personal data are processed,
• If personal data have been processed, to request information regarding the processing,
• To learn the purpose of the processing of personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request the correction of personal data if they are incomplete or incorrectly processed,
• To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
• To request notification of the transactions carried out pursuant to subparagraphs (d) and (e) of Article 11 of the KVKK to third parties to whom personal data have been transferred,
• To object to a result that is detrimental to your person arising from the analysis of processed data exclusively through automated systems,
• To request compensation for damages in case of suffering damage due to unlawful processing of personal data.

 

If you wish to exercise your rights under the KVKK, you may submit your request to SESTEK using one of the methods below, within the scope of Article 11 and Article 13/1 of the KVKK and the Communiqué on the Principles and Procedures for the Application to the Data Controller. 

In this regard, your application must include:

a) Name, surname, and signature if the application is in writing,
b) Turkish ID number for Turkish citizens; nationality, passport number, or identification number (if any) for foreigners,
c) Residential or workplace address for notifications,
ç) If available, e-mail address, telephone number, and fax number for notifications,
d) Subject of the request.

Your application will be evaluated and responded to by SESTEK within 30 days at the latest, either positively or negatively.

 

You may exercise your rights:

• By visiting SESTEK in person at the address Ayazağa Mah. Azerbaycan Cad. 1B Blok, No: 3 B İç Kapı No: 4, Sarıyer, İstanbul- TÜRKİYE
• Through our registered electronic mail (KEP) address in the format sestek@hs03.kep.tr  
• In writing via notary or registered mail with return receipt, in order to verify your identity and avoid providing information to the wrong persons,
• By sending an e-mail to privacy@sestek.com using your secure electronic signature, mobile signature, or (if available) the e-mail address previously notified to SESTEK and registered in our systems.

 

8. AMENDMENTS AND UPDATES

This Privacy Notice has been prepared within the scope of the KVKK and the relevant legislation. Necessary updates will be made to the Privacy Notice by SESTEK in line with changes in the relevant legal legislation and/or in the purposes and policies regarding the processing of personal data.