GDPR & Privacy Policies

İŞİNOLACAK BİLGİ TEKNOLOJİLERİ YAPAY ZEKA İNSAN KAYNAKLARI TİCARET VE SANAYİ ANONİM ŞİRKETİ

DISCLOSURE TEXT REGARDING RESUME UPLOAD

At İşinolacak Bilgi Teknolojileri Yapay Zeka İnsan Kaynakları Ticaret ve Sanayi Anonim Şirketi (“İşinolacak” or the “Company”), we respect and value your privacy. Accordingly, as the data controller, within the scope of our commercial relationship with you or in connection with our interactions, we hereby inform you that your personal data will be recorded, stored, preserved, shared with institutions legally authorized to request such data, transferred domestically or abroad, assigned, classified, anonymized for use by us, and otherwise processed in accordance with the Law No. 6698 on the Protection of Personal Data (hereinafter referred to as "KVKK"), all within the framework of the purposes that require their processing, and in a manner that is relevant, limited, and proportionate to those purposes, while maintaining the accuracy and up-to-date status of the personal data as provided by you.

This Disclosure Text has been prepared to inform you transparently, in accordance with the KVKK, regarding the methods of collection of your personal data, the purposes and legal grounds for processing activities, the principles relating to transfers of your personal data (if applicable), and your rights as the data subject. It concerns the use of personal data obtained from you and/or third parties during recruitment, selection, and evaluation processes as an individual member.

PERSONAL DATA PROCESSED

Depending on the nature of your relationship with the Company, the types and amounts of personal data processed may vary according to the purpose of processing. However, your personal data, as shared by you or obtained by the Company from third parties, are categorized as follows:

The MEMBER’s resume(s) are shared with third parties based on the candidate’s preferences. In this context, the MEMBER has two distinct preference options:

If the MEMBER activates the “Show my profile in the resume pool” button, the MEMBER’s applications will only be shared in accordance with this setting. In this case, not only the Member Companies to which the MEMBER has applied, but also other Member Companies may find the MEMBER through searches conducted on the platform.

If the MEMBER opts for the “Public Resume” feature on the Platform, they may, entirely at their own discretion, make the information they choose to include in their resume (including their personal data and/or special categories of personal data) searchable and accessible by Member Employer Companies on the Platform. The candidate may discontinue this feature at any time; however, during the period in which the MEMBER chooses to display their profile in the resume pool, they will have made the information in their resume — and, consequently, their personal data and/or special categories of personal data — publicly accessible. The MEMBER hereby acknowledges in advance that the COMPANY bears no responsibility or liability whatsoever with respect to the personal data and/or special categories of personal data disclosed to the public in this manner.

If the MEMBER deactivates the “Show my profile in the resume pool” button, only the companies to which the MEMBER has applied among the member companies of isinolacak.com will be able to view the MEMBER’s resume containing personal data.

The MEMBER may restrict or block specific companies from viewing and/or storing their resume and thus their personal data and/or special categories of personal data through the system. However, if such restriction or blocking is applied, no job postings from the restricted company will be displayed to the individual user.

GENERAL PRINCIPLES FOR THE PROCESSING OF PERSONAL DATA, CONDITIONS AND

PURPOSES OF PROCESSING

Your personal data are processed in compliance with the general principles specified in Article 4 of the Law on the Protection of Personal Data (KVKK), including being lawful and fair, accurate and, where necessary, up to date, processed for specified, explicit and legitimate purposes, relevant, limited, and proportionate to the purposes for which they are processed, and retained only for as long as required by relevant legislation or for the purpose for which they are processed.

The Company processes your personal data as covered by this Disclosure Text for the purposes of enabling the company that posted the job advertisement to accurately evaluate the applications, conducting the recruitment processes for Employee/Trainee/Intern candidates, managing communication processes, planning human resources processes, ensuring compliance of recruitment procedures with the Company’s policies and applicable laws, fulfilling legal obligations, planning administrative and personnel affairs, providing information to authorized institutions and organizations, managing legal procedures, maintaining information security processes, managing job application processes, executing processes related to member satisfaction and loyalty, and carrying out performance evaluations.

METHODS AND LEGAL BASES FOR COLLECTING PERSONAL DATA

• Your personal data may be collected by the Company through the following channels:

• Submission of an application by you via digital means

• Uploading of documents or information into the system during communication with the company posting the job advertisement

• Uploading your CV to our system

• Completion of pre-assessment and performance tests

• Communication with the employer posting the job through our Platform

• Completion of your Resume Information on our website

• Access provided or data transferred by third parties/institutions/organizations.

These data may be collected, processed, and transferred in accordance with the fundamental principles set forth under KVKK and under the conditions specified in Articles 5 and 6 of the Law, and for the purposes outlined in this Disclosure Text.

The legal bases for processing your personal data under this Disclosure Text include being directly related to the establishment or performance of a contract, your explicit consent, the necessity of processing for our legal obligations, and our legitimate interests as the Data Controller.

In this context, we would like to note that when you contact us, we process the personal data listed above for purposes such as: tracking your requests/complaints/suggestions and providing you with updates on the process; managing your job application processes in cooperation with the company to which you applied; making changes on our website according to your preferences; and customizing the site for your use. This processing is necessary to fulfill our legitimate interests and to ensure your right to receive information and not be disadvantaged during the application process.

TRANSFER OF PERSONAL DATA, PURPOSES OF TRANSFER AND DURATION

Your personal data specified in this Disclosure Text must be viewable by the company and its authorized personnel to which you submitted your job application, in order to evaluate your eligibility for the job posting. Accordingly, your personal data will be transferred by us to each company to which you applied.

We also inform you that due to our infrastructure provider being located abroad, your data are transferred internationally. Within this context, we, as İşinolacak, would like to assure you that we have taken all necessary legal and administrative precautions to prevent data breaches and to protect you from any potential harm.

Similarly, your personal data may be transferred — limited to the purposes stated above and based on the legal grounds set forth in Articles 8 and 9 of the KVKK — to legally authorized public institutions and private entities we collaborate with, including our cloud server provider Amazon and our notification and analytics service provider OneSignal.

SECURITY OF YOUR PERSONAL DATA

To protect your personal data, the Company adopts appropriate measures consistent with relevant privacy and data protection laws and regulations. These measures take into account the current state of technology, implementation costs, and the nature of the data being protected, and include technical and organizational safeguards to prevent risks such as destruction, loss, alteration, unauthorized disclosure, or access. Upon the expiration of the data processing period, your personal data will be deleted, destroyed, or anonymized in accordance with the Company’s Personal Data Processing, Retention and Destruction Policy.

Additionally, except where the nature of the job requires otherwise, please refrain from sharing documents or information containing personal data. If personal data are included in shared documents, please delete or anonymize such data before sharing. The Company assumes no responsibility for personal data shared unnecessarily.

RIGHTS AND OBLIGATIONS OF THE PERSONAL DATA SUBJECT

Employee candidates are responsible for ensuring that the personal data they share with the Company are accurate, complete, and up to date, and that any personal data shared about third parties have been collected in compliance with applicable laws. In this respect, you declare, represent, and undertake that the personal data of your references listed in your CV have been lawfully obtained and that the references have consented to the sharing of their information.

Applicants are obliged to inform any individuals whose personal data they share with the Company about the contents of this Disclosure, and to obtain their consent for the use of their data by the Company as described herein (including for transfer and disclosure).

Under KVKK and related legislation, Data Subjects have the following rights:

• To learn whether their personal data are being processed,

• To request information if their data have been processed,

• To learn the purpose of processing and whether the data are used in line with that purpose,

• To know the third parties to whom the data are transferred domestically or abroad,

• To request correction if the data are incomplete or inaccurate, and to request notification of such corrections to third parties,

• To request deletion or destruction of the data if the reasons for processing no longer exist, and to request notification of such deletion to third parties,

• To object to results generated solely through automated processing that produce a disadvantageous outcome,

• To request compensation if they suffer harm due to unlawful processing.

To exercise these rights, you may fill out the KVKK Application Form available at www.isinolacak.com and submit it to the Company. You must clearly express your request and include identification and contact information. Applications may be delivered in writing with a wet signature by hand, by mail, or via notary to the

Data Controller Company at “Kozyatağı Mah. Saniye Ermutlu Sk. By Otell No: 3c Kadıköy /İstanbul”, or sent via the PTT Registered Electronic Mail (KEP) address: [email protected].

The Company reserves the right to verify your identity prior to responding. Written applications must include your full name and signature, T.R. ID number (for Turkish citizens), nationality and passport or identity number (for foreigners), residential or business address for official notifications, an email address and phone/fax number (if available), and your request along with any relevant information or documents. The Company will respond to your request as soon as possible and within a maximum of thirty days, free of charge. However, if the process incurs a cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.