MESAİ TEKNOLOJİ DANIŞMANLIK VE TİCARET ANONİM ŞİRKETİ

EMPLOYEE CANDIDATE PERSONAL DATA PROTECTION INFORMATION TEXT

In this Information Text, the principles regarding the processing of your personal data in compliance with the Personal Data Protection Law No. 6698 (“Law”) and related legislation by the data controller Mesai Teknoloji Danışmanlık Ve Ticaret Anonim Şirketi (“Company”), located at “Maltepe Mah. Yılanlı Ayazma Sk. Nef 13 Sitesi D Blok No: 13d İç Kapı No: 84 Zeytinburnu / İstanbul,” are outlined below.

Within this relationship, in the event that the information and documents obtained contain personal data of another third party other than yourself, it is accepted by our Company that you have informed the relevant data subjects in accordance with Article 10 of the Law and obtained the necessary legal basis for sharing as per Article 5 of the Law. In this regard, the obligation to inform and obtain explicit consent, if necessary, lies with you.

Purpose of Processing Personal Data

Within the scope of your job application to our Company, your personal data, including but not limited to special categories of personal data such as identity, contact, professional experience, personnel, and visual records, are processed in compliance with the fundamental principles stipulated by the Law and under the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law. These data are processed for the purposes of managing the recruitment process, receiving your job application, reviewing your resume, assessing your suitability for the relevant position, evaluating your health status in relation to the position, carrying out hiring procedures, and communicating with you within this framework.

Within this relationship, in the event that the information and documents obtained contain personal data of another third party other than yourself, it is accepted by our Company that you have informed the relevant data subjects in accordance with Article 10 of the Law and obtained the necessary legal basis for sharing as per Article 5 of the Law. In this regard, the obligation to inform and obtain explicit consent, if necessary, lies with you.

Our legal obligations that necessitate the processing of your personal data arise from the Personal Data Protection Law No. 6698, the Labor Law No. 4857, the Social Insurance and General Health Insurance Law No. 5510, the Occupational Health and Safety Law No. 6331, and other regulations to which our Company is subject.

Recipients of Processed Personal Data and Purpose of Transfer

Your personal data may be transferred to our business partners, suppliers that enable us to carry out recruitment activities, tax consultants, subcontractors, relevant official institutions, and, in exceptional cases, private entities in accordance with the personal data processing conditions and purposes set forth in Articles 8 and 9 of the Law. If a cloud system is used, data may be transferred abroad. The purpose of the data transfer aligns with the purpose of processing the data.

Method and Legal Basis for Collecting Personal Data

Your personal data is collected in the context of the recruitment process through electronic means such as our website, emails, and various job application websites, as well as in physical format if you submit your resume in hard copy. These data are collected for the purpose of evaluating and concluding your job application and suitability for the relevant position. The collected personal data may be processed and transferred for the purposes stated in this Information Text in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.

Your personal data collected as a result of your job application to our Company is processed based on the following legal grounds:

• Article 5/1 of the Law: Your explicit consent,
• Article 5/2(a): Explicitly stipulated in the laws,
• Article 5/2(c): Necessary for the establishment or performance of a contract directly related to the processing of personal data belonging to the parties to the contract,
• Article 5/2(ç): Necessary for our Company, as the data controller, to fulfill its legal obligations,
• Article 5/2(f): Necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed,
• Article 6 of the Law: Necessary for fulfilling legal obligations in the fields of employment, occupational health and safety, social security, social services, and social assistance.

Methods of Application to the Data Controller and Your Rights

Pursuant to Article 11 of the Law, you have the right to apply to our Company and request:
a) To learn whether your personal data is processed,
b) If processed, to request information,
c) To learn the purpose of processing and whether it is used in accordance with its purpose,
d) To know the parties to whom your personal data has been transferred within the country or abroad,
e) If processed incompletely or incorrectly, to request correction,
f) Within the scope of Article 7 of the Law, to request the deletion or destruction of personal data,
g) To request notification of transactions made under (e) and (f) to third parties to whom personal data has been transferred,
h) To object to the occurrence of a result against you due to the analysis of your personal data exclusively through automated systems,
i) To request compensation for damages in case of unlawful processing of personal data.

You may submit your requests regarding the above-mentioned rights to our Company in accordance with the Communiqué on the Principles and Procedures for the Application to the Data Controller. You can send your requests for information and applications to the address “Maltepe Mah. Yılanlı Ayazma Sk. Nef 13 Sitesi D Blok No: 13d İç Kapı No: 84 Zeytinburnu / İstanbul” or via email to Contact@mesai.co.

Our Company will finalize your requests free of charge as soon as possible and at the latest within thirty days, depending on the nature of the request. However, if the process incurs an additional cost, a fee may be charged. Our Company may accept and process the request or reject it in writing by providing justification.

If your application is rejected, if the response is deemed insufficient, or if no response is given within the period, you have the right to file a complaint with the Personal Data Protection Authority (“Authority”) within thirty days from the notification of the response and, in any case, within sixty days from the application date. However, the complaint procedure cannot be initiated without exhausting the application procedure.

The Authority, upon complaint or upon learning of an alleged violation, conducts the necessary examination regarding matters within its scope. Upon review of the complaint, the Authority provides a response to the relevant parties. If no response is given within sixty days from the complaint date, the request is deemed rejected. If the Authority determines the existence of a violation as a result of its examination, it notifies the data controller and requests rectification. This decision must be implemented without delay and at the latest within thirty days from the notification. If the Authority determines that there is an explicit illegality or irreparable damage, it may decide to suspend data processing or data transfer abroad.

We assure you that your data is meticulously protected by our Company, and we thank you for your trust in us.