PDPA Policy — TFON Machine

Privacy information notice regarding personal data collected in job applications submitted to TFON MACHINE A.Ş.

a) Data controller

Under the Turkish Personal Data Protection Law No. 6698 (“Law No. 6698” or “Law”), your personal data will be processed by TELEFONCULAR METAL SAN. VE TİC. LTD. ŞTİ. (“Company”) as the data controller, within the scope described below.

b) Purposes of processing

Personal data and, where applicable, special categories of personal data collected in connection with your job application are together referred to below as “personal data”. They are processed for the following purposes:

Assessing your job application and your suitability for the relevant position, to the extent you disclose personal data to us;
Carrying out and concluding recruitment processes, classification of suitable candidates, assessment of candidates’ qualifications and competences, and contacting you within this scope, in line with our human resources policies;
Ensuring the legal and commercial security of the Company and of persons in a business relationship with the Company;
Determining and implementing our commercial and business strategies and developing and improving our recruitment principles;
Carrying out activities by relevant business units that are necessary for the Company’s commercial operations and related business processes.

c) Categories of personal data processed

Identity data: name, surname, date and place of birth, gender, marital status, nationality information;
Contact data: email address, address, mobile phone number;
Special categories of personal data: health status and disability information, where relevant;
Education data: education level, certificates and diplomas, expertise, foreign languages, education and skills, seminars and courses, IT skills, examination information;
Employment experience: total experience, employment status and title, work history (employer names, periods, job descriptions);
Visual and audio data: photographs and audio recordings relating to the data subject;
Other: driving licence data, competences, salary expectations, military service status, reference details (reference person’s name, title, workplace, phone, email), and any Word, Excel, presentation files attached to your CV, and information provided in the application form.

You are responsible for informing reference persons whose personal data (name, surname, phone, email, etc.) appears in your CV and, where required, obtaining their explicit consent.

d) Recipients and purposes of transfers

Collected personal data may be transferred on a limited basis, in accordance with Articles 8 and 9 of the Law and the applicable processing conditions and purposes, to legally authorised public institutions and private persons, suppliers, and (where you have given explicit consent for special categories of data) business partners, shareholders, affiliates and group companies, for the purposes of assessing your application and suitability, conducting recruitment processes, arranging English test appointments, sending personality inventories, obtaining work permits where necessary, referring candidates for medical checks, contacting you, and ensuring legal and commercial security, as well as determining and implementing commercial and business strategies and improving recruitment principles.

e) Collection methods and legal bases

The Company collects and processes personal data using fully or partly automated means, as well as non-automated methods that form part of a filing system—via phone calls, paper forms in physical environments, and automated channels (including third-party career sites where you may apply, the Company website, data integration and telephone).

The Company relies on the legal bases set out in Articles 5 and 6 of the Law, including where:

Processing is expressly provided for by law;
Processing is necessary for compliance with a legal obligation;
Processing is necessary for the performance or conclusion of a contract;
Processing is necessary for the Company’s legitimate interests;
Data have been made public by you;
Processing is necessary for the establishment, exercise or protection of a right;
Processing is based on your explicit consent.

Collected personal data (and special categories where explicit consent applies) will be retained for the storage period and used by our Human Resources unit in recruitment processes and related activities.

f) Rights of the data subject under Article 11 of the Law

You may exercise your rights by contacting the Company using the methods below. The Company will conclude your request as soon as possible and within thirty days at the latest, depending on the nature of the request. No fee is charged for up to ten pages of response; each additional page may be charged at 1 Turkish Lira. If the response is provided on a CD, flash drive or similar medium, any fee will not exceed the cost of the medium.

Within this scope, data subjects have the right to:

Learn whether personal data are processed;
Request information if personal data have been processed;
Learn the purpose of processing and whether data are used in line with that purpose;
Know the third parties to whom personal data are transferred domestically or abroad;
Request rectification of incomplete or inaccurate data and notification of rectification to third parties to whom data were transferred;
Request erasure or destruction of personal data where grounds for processing no longer exist, despite lawful processing, and notification of such operations to third parties;
Object to outcomes produced solely by automated processing that are to your detriment;
Request compensation for damage arising from unlawful processing.

You may submit requests in Turkish and in writing as required by Article 13(1) of the Law and the Communiqué on the Procedures and Principles of Application to the Data Controller (Official Gazette No. 30356, 10 March 2018), or via registered electronic mail (KEP), secure electronic signature, mobile signature, or an email address previously notified to and registered with the Company. The Company reserves the right to verify your identity before responding.

Your application should include:

Your name and surname, and if the application is in writing, your signature;
For citizens of the Republic of Türkiye, your Turkish ID number; if you are a foreign national, your nationality, passport number or ID number if any;
Your residential or business address for notification;
Where applicable, your email, telephone and fax for notification;
The subject of your request, and any information and documents relating to the matter, where required.

You may submit applications using the KVKK application form on our website. For written applications, you may send the required documents to the Company as data controller at: FEVZİÇAKMAK MAHALLESİ 10730. SOKAK NO: 4/1 KARATAY, KONYA, TÜRKİYE.

For applications by email, you may write to info@telefoncular.com.tr.

For applications via KEP, you may use telefoncularprofil@hs01.kep.tr.

Depending on the nature of your request, information and documents must be provided to us completely and accurately.

If required information and documents are not properly supplied, investigations related to your request may be incomplete. In that case, the Company reserves its statutory rights. Please therefore submit your application with complete information and documents appropriate to the nature of your request.