Privacy Notice for Job Applicants

PRIVACY NOTICE FOR JOB APPLICANTS UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA

Dear Applicant,

This privacy notice has been prepared by Mateks Makina ve Yedek Parça Sanayi – Dursun Bal, acting in the capacity of data controller, in order to inform you about the purposes for which your personal data is processed, the legal grounds for processing, the methods of collection, the parties to whom it may be transferred and your rights under the Law No. 6698 on the Protection of Personal Data (“KVKK”), in accordance with Article 10 of the KVKK and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

1. Which Personal Data Do We Process?

Pursuant to the employment contract and the applicable legislation:

IDENTITY DATA
Data processed: name, surname, date of birth, place of birth, gender, marital status
Collection methods and sources: the applicant’s own declaration; online career platforms; identity and other documents submitted by the applicant; the form on our website — collected by automated and non-automated means
Purposes: conducting applicant, intern and student selection and placement processes; conducting applicant application processes; planning human resources processes; carrying out activities in compliance with legislation; monitoring and conducting legal affairs; carrying out storage and archiving activities; providing information to authorised persons, institutions and organisations
Legal grounds: KVKK Art. 5/2-a (expressly provided for by law); Art. 5/2-c (directly related to the conclusion or performance of a contract); Art. 5/2-ç (mandatory for the data controller to fulfil its legal obligation)
Recipients: authorised public institutions and organisations, suppliers, judicial authorities
Purposes of transfer: fulfilment of statutory notifications and obligations; conducting recruitment procedures and interviews

CONTACT DATA
Data processed: telephone number, full address, e-mail address
Collection methods and sources: the applicant’s own declaration; online career platforms; identity and other documents submitted by the applicant; the form on our website — collected by automated and non-automated means
Purposes: conducting applicant, intern and student selection and placement processes; conducting applicant application processes; planning human resources processes; carrying out activities in compliance with legislation; monitoring and conducting legal affairs; carrying out storage and archiving activities; providing information to authorised persons, institutions and organisations
Legal grounds: KVKK Art. 5/2-a; Art. 5/2-c; Art. 5/2-ç
Recipients: authorised public institutions and organisations, suppliers, judicial authorities
Purposes of transfer: fulfilment of statutory notifications and obligations; conducting recruitment procedures and interviews

PERSONNEL FILE DATA
Data processed: curriculum vitae, military service discharge certificate, availability for flexible working hours
Collection methods and sources: the applicant’s own declaration; online career platforms; identity and other documents submitted by the applicant; the form on our website — collected by automated and non-automated means
Purposes: conducting applicant, intern and student selection and placement processes; conducting applicant application processes; planning human resources processes; carrying out activities in compliance with legislation; monitoring and conducting legal affairs; carrying out storage and archiving activities; providing information to authorised persons, institutions and organisations
Legal grounds: KVKK Art. 5/2-a; Art. 5/2-c; Art. 5/2-ç
Recipients: authorised public institutions and organisations
Purposes of transfer: fulfilment of statutory notifications and obligations

TRANSACTION SECURITY DATA
Data processed: IP address, port information, device MAC address, session start and end times, website/system login and logout records
Collection methods and sources: automatically, through company information systems, network devices, servers and security software
Purposes: conducting information security processes; ensuring the security of the data controller’s operations; carrying out activities in compliance with legislation; monitoring and conducting legal affairs; carrying out storage and archiving activities; providing information to authorised persons, institutions and organisations; creating and monitoring visitor records
Legal grounds: KVKK Art. 5/2-f (legitimate interests of the data controller)
Recipients: IT and information security service providers and suppliers; authorised public and judicial authorities
Purposes of transfer: ensuring the security of information systems; managing access; detecting and investigating security incidents; responding to official requests

PROFESSIONAL EXPERIENCE DATA
Data processed: educational background, diplomas, certificates, training received, skills, courses
Collection methods and sources: the applicant’s own declaration; online career platforms; identity and other documents submitted by the applicant; the form on our website — collected by automated and non-automated means
Purposes: conducting applicant, intern and student selection and placement processes; conducting applicant application processes; conducting communication activities; planning human resources processes; carrying out activities in compliance with legislation; carrying out storage and archiving activities
Legal grounds: KVKK Art. 5/2-c; Art. 5/2-ç
Recipients: suppliers
Purposes of transfer: conducting human resources activities; conducting training, career and assignment processes; verifying professional qualifications; conducting business processes

VISUAL AND AUDIO RECORDS
Data processed: visual and audio recordings shared with the company
Collection methods and sources: shared directly by the applicant; online career platforms; other documents submitted by the applicant; the form on our website — collected by automated and non-automated means
Purposes: conducting applicant, intern and student selection and placement processes; conducting applicant application processes; planning human resources processes; carrying out activities in compliance with legislation; carrying out storage and archiving activities
Legal grounds: KVKK Art. 5/2-a; Art. 5/2-c; Art. 5/2-ç; Art. 5/2-f
Recipients: authorised persons, institutions and organisations
Purposes of transfer: fulfilment of the data controller’s legal obligations

HEALTH DATA — SPECIAL CATEGORIES OF PERSONAL DATA
Data processed: information regarding disability status, information on illness and treatment, medication used, prosthesis used, chronic illness information
Collection methods and sources: the applicant’s own declaration and the medical reports and documents submitted
Purposes: conducting applicant, intern and student selection and placement processes; conducting applicant application processes; carrying out activities in compliance with legislation; planning human resources processes
Legal grounds: KVKK Art. 6/3-b (expressly provided for by law); Art. 6/3-e (necessary for the protection of public health, preventive medicine, medical diagnosis, treatment and care services, and the planning, management and financing of health services, by persons or authorised institutions under an obligation of confidentiality); Art. 6/3-f (mandatory for employment and occupational health and safety)
Recipients: joint health and safety unit (OSGB) / workplace physician; authorised public institutions and organisations
Purposes of transfer: fulfilment of occupational health and safety obligations; social security processes

2. For Which Purposes Do We Process Your Personal Data?

Your personal data and special categories of personal data set out above will be processed, recorded, stored, retained and classified for the purposes specified under each data category, and where necessary transferred to the recipient groups specified under the relevant category for the stated purposes of transfer.

3. By Which Methods and on Which Legal Grounds Is Your Personal Data Collected?

The methods and sources from which your personal data is obtained and the legal grounds on which it is processed are set out above in relation to each data category.

Within the scope of the purposes stated in this notice, your personal data is processed in accordance with the general principles listed in Article 4 of the KVKK:

a) lawfully and in accordance with the rules of good faith,
b) accurate and, where necessary, kept up to date,
c) for specific, explicit and legitimate purposes,
d) relevant, limited and proportionate to the purposes for which they are processed,
e) retained for the period stipulated in the applicable legislation or required for the purpose of processing,

and will be processed, recorded, stored, retained and classified by automated means or by non-automated means provided that they form part of a data recording system, and where necessary transferred to the recipient groups set out above.

4. What Are Your Rights and How Can You Exercise Them?

You may submit your requests under Article 11 of the KVKK regarding your personal data processed by us at any time, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing, or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the e-mail address you have previously notified to us and which is registered in our system, to the addresses below.

Data Controller

Mateks Makina ve Yedek Parça Sanayi – Dursun Bal
Address: İkitelli OSB Mahallesi, Dersankoop Sanayi Sitesi, Trios 2023 İş Merkezi, A Blok Kat: -2 No:1/24 Başakşehir / İstanbul
E-mail: kvkk@mateksmakina.com
KEP: mateksmakina@hs01.kep.tr

This notice has been translated from Turkish for convenience. In the event of any discrepancy, the Turkish version shall prevail.