As Orak Çelikboya Law Firm (“Orak Çelikboya”), we have drafted this privacy notice to inform prospective Employee/Associate/Intern candidates about the processing, storage, and transfer of your personal data, within the framework of the activities originates from the Law No. 6698 on the Regulation of Personal Data Protection (“PDPL”) and related legislation.

1. Which Personal Data are Being Processed and What are The Purposes of Processing Your Personal Data?

Orak Çelikboya processes identity, contact, professional experience and reference information of candidates for the purpose of conducting employee candidate selection and placement processes, planning human resources processes, conducting a search about reference.

2. What are the Methods of Collecting Your Personal Data?

Your personal data mentioned above are being collected via your resume and other personal data that you delivered, and the documents declared or submitted physically, electronically, verbally and/or in writing by you.

3. What is the Legal Reason for Collecting Your Personal Data?

In line with the realization of above-mentioned purposes, your personal data are processed by Orak Çelikboya, within the scope of the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject; and for the establishment of the contract, in accordance with the reasons for compliance with law, as regulated in the second paragraph of Article 5 of PDPL.

4. Do We Transfer Your Personal Data to a Third Party?

Your personal data can be transferred to Cloud Service Providers located abroad within the scope of your explicit consent, for the purposes of providing document management, storage and archiving activities, ensuring information security.

5. What Are Your Rights With respect to Your Personal Data?

Regarding your personal data, under the PDPL you have the rights:

• To learn whether your personal data were processed or not,
• If your personal data have been processed, to request information about it,
• To learn the purpose of processing your personal data and whether such data were used in compliance with the purpose,
• To know the third parties to whom your personal data were transferred in Türkiye or abroad,
• To request the rectification of the incomplete or inaccurate data, if any,
• To request the erasure or destruction of your personal data under the conditions referred to in the PDPL.
• If you demand for the correction of missing or incorrect data and deletion or destruction of your personal data, to request reporting of the operations carried out pursuant to these situations to the third parties to whom your personal data have been transferred,
• To request compensation for the damage arising from the unlawful processing of your personal data.

6. How can you exercise your rights?

If you wish you can deliver your personal data applications and requests through the Data Subject Application Form:

• By directly applying to Orak Çelikboya in person with a valid identity card,
• By sending the original signed form to ‘Orak Çelikboya, Plaza Cubes- İçerenköy, Umut Sk. No:10 D:12- Kat 16, 34752 Ataşehir/İstanbul” address together with ID photocopy,
• By sending the e-signed form to [email protected] together with scanned copy of the ID.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the name, surname, signature if the application is in written, Turkish Republic ID number (passport number in case the applicant is foreigner), address of the place of residence which is base for notification or workplace/business address, if available electronic mail address base for notification, telephone number and fax number, and information about the request must be provided in the application.

The data subject should express in a clear and understandable way what is requested in the application, which of the above-mentioned rights you will exercise together with explanations. Information and documents related to the application should be attached. Although the subject of the request should be related to the applicant in person, if you are acting on behalf of someone else, you must be specifically authorized in this matter and this authorization must be documented (special power of attorney). In addition, the application must include the identity and address information and the identity documents must be attached to the application. Requests made by unauthorized third parties on behalf of someone else will be disregarded.

7. How Long Will It Take to Answer Your Requests Regarding the Processing of Your Personal Data?

Your demands for rights on your personal data are evaluated and answered within 30 days from the date we receive it. In case your application is evaluated negatively, the reasons for rejection are sent to the address you specified in the application particularly by e-mail or mail, or by one of the means chosen in the Data Subject Application Form.