Candidate Privacy Notice

Company

[FİRMA ADI]

Address

[ADRES, İLÇE / İL]

MERSIS

[MERSIS NO]

Tax ID

[VERGİ NO]

VERBİS Registration No

1779704743

Contact Email

kvkk@firma.com

Phone

[+90 5XX XXX XX XX]

• Identity (national ID, full name, date of birth)
• Contact (phone, email, address)
• Background (CV, education, work history, language)
• Visual/audio (ID photo, full-body photo, intro video)
• Sensitive — Religion (for cultural compatibility / dietary requirements of host businesses abroad, only with explicit consent — KVKK Art. 6)
• Sensitive — Health report (when required for overseas work permit application, only with explicit consent)
• Legal process (consulate reference code, ministry application notes)

• Management of overseas job application process
• Application to Republic of Türkiye foreign missions
• Notification to the Ministry of Labour and Social Security
• İŞKUR reporting

• KVKK Art. 5/2-c (necessary for the establishment or performance of a contract)
• Explicit consent — for sensitive personal data (religion and health report), explicit, separate and readable consent is obtained for each field under KVKK Art. 6/2. The candidate may withdraw consent at any time; in that case the relevant data is deleted or anonymised, and the application process may continue with fields that do not require consent.

• T.R. Ministry of Labour and Social Security
• T.R. Foreign Missions (consulates)
• Host businesses abroad
• Data processors — hosting and database: Vercel Inc. (Frankfurt / EU region), Supabase (EU region); AI-powered CV parsing: Anthropic (DPA signed), Google AI (DPA signed); media storage: Vercel Blob (EU); email delivery: Instantly.ai (DPA signed).

Under KVKK Art. 9, the system is hosted in the European Union (Frankfurt) region. Primary data processing (application servers, database, media storage) occurs within EU boundaries. For AI-powered CV parsing services (Anthropic, Google AI), Data Processing Agreements (DPA) are signed with providers, and Standard Contractual Clauses (SCC) plus data minimization policies apply.

• Active application process: until the process is concluded
• Rejected applications: 2 years (then anonymised)
• Completed applications: 10 years (legal retention)
• Deleted records: hard-delete / anonymised 6 months after deletion request

• Learn whether your data is processed
• Request information about how it is processed
• Learn the purpose of processing and whether data is used in line with that purpose
• Know third parties to whom data is transferred (domestic/abroad)
• Request correction of incomplete/incorrect data
• Request deletion/destruction under the conditions set by law
• Request that correction/deletion be notified to third parties
• Object to outcomes adverse to you arising from automated analysis
• Claim compensation for damages arising from unlawful processing

For data subject requests: https://globalideal-clone-two.vercel.app/data-subject-request

Email: kvkk@firma.com