CANDIDATE PRIVACY NOTICE
I. YOUR PROCESSED PERSONAL DATA, DATA PROCESSING PURPOSES AND LEGAL BASIS OF PROCESSING
Identity Information
Name, surname, date of birth, nationality and other identity information shared by you during the application process.
PROCESSING PURPOSES
• Conducting employee candidate application processes, receiving your application, evaluating your suitability for the relevant position and finalizing the recruitment process.
LEGAL BASIS
Article 5/2(c) of the DPL: Processing of personal data belonging to the parties of a contract being necessary, provided that it is directly related to the establishment or performance of a contract.
Article 5/2(f) of the DPL: Processing of personal data being necessary for the legitimate interests of the data controller, provided that such processing does not harm the fundamental rights and freedoms of the data subject.
Contact Information
Phone number, e-mail address, address information and other contact details.
PROCESSING PURPOSES
• Communicating with the candidate, organizing interview and assessment processes and providing information regarding the application process.
LEGAL BASIS
Articles 5/2(c) and 5/2(f) of the DPL.
Professional Experience and Education Information
Educational information included in the resume, graduation information, diploma and certificate information, previous work experience, job titles, competencies, foreign language skills, technical skills, portfolio information, LinkedIn or similar professional profile links.
PROCESSING PURPOSES
• Evaluating your suitability for the applied position, reviewing your professional skills, planning human resources processes and conducting recruitment processes.
LEGAL BASIS
Articles 5/2(c) and 5/2(f) of the DPL.
For information made public by you on publicly available professional platforms, Article 5/2(d) of the DPL may also apply.
Application and Assessment Information
Applied position, application date, interview notes, competency assessments, technical assessment results, test and assignment results, portfolio reviews, reference information and assessment records relating to the recruitment process.
PROCESSING PURPOSES
• Managing the application process, comparatively evaluating candidates, matching the right candidate with the right position, conducting offer processes and finalizing the recruitment process.
LEGAL BASIS
Articles 5/2(c) and 5/2(f) of the DPL.
For the resolution of potential disputes and protection of the Company’s rights, Article 5/2(e) of the DPL may also apply.
Transaction Security and Process Records
Application records, system records, correspondence records, application channel information and transaction records relating to the recruitment process.
PROCESSING PURPOSES
• Conducting the application process securely, keeping process records, responding to data subject requests, fulfilling legal obligations and protecting the Company’s rights.
LEGAL BASIS
Article 5/2(ç) of the DPL: Processing being necessary for the data controller to fulfill its legal obligations.
Article 5/2(e) of the DPL: Processing being necessary for the establishment, exercise or protection of a right.
Special Categories of Personal Data
Although not requested by the Company as a rule, health information, disability information, criminal conviction and security measure information or other special categories of personal data that may be voluntarily shared by the candidate in the CV, portfolio, interview or correspondence.
PROCESSING PURPOSES
• Conducting the application process, evaluating suitability for the position, fulfilling legal obligations or protecting rights, only to the extent necessary and lawful.
LEGAL BASIS
Explicit consent under Article 6 of the DPL or the existence of another processing condition set out under Article 6 of the DPL, provided that adequate measures determined by the Personal Data Protection Board are implemented.
| DATA CATEGORY | PROCESSED PERSONAL DATA | PROCESSING PURPOSES | LEGAL BASIS |
|---|---|---|---|
| Identity Information | Name, surname, date of birth, nationality and other identity information shared by you during the application process. | • Conducting employee candidate application processes, receiving your application, evaluating your suitability for the relevant position and finalizing the recruitment process. | Article 5/2(c) of the DPL: Processing of personal data belonging to the parties of a contract being necessary, provided that it is directly related to the establishment or performance of a contract. Article 5/2(f) of the DPL: Processing of personal data being necessary for the legitimate interests of the data controller, provided that such processing does not harm the fundamental rights and freedoms of the data subject. |
| Contact Information | Phone number, e-mail address, address information and other contact details. | • Communicating with the candidate, organizing interview and assessment processes and providing information regarding the application process. | Articles 5/2(c) and 5/2(f) of the DPL. |
| Professional Experience and Education Information | Educational information included in the resume, graduation information, diploma and certificate information, previous work experience, job titles, competencies, foreign language skills, technical skills, portfolio information, LinkedIn or similar professional profile links. | • Evaluating your suitability for the applied position, reviewing your professional skills, planning human resources processes and conducting recruitment processes. | Articles 5/2(c) and 5/2(f) of the DPL. For information made public by you on publicly available professional platforms, Article 5/2(d) of the DPL may also apply. |
| Application and Assessment Information | Applied position, application date, interview notes, competency assessments, technical assessment results, test and assignment results, portfolio reviews, reference information and assessment records relating to the recruitment process. | • Managing the application process, comparatively evaluating candidates, matching the right candidate with the right position, conducting offer processes and finalizing the recruitment process. | Articles 5/2(c) and 5/2(f) of the DPL. For the resolution of potential disputes and protection of the Company’s rights, Article 5/2(e) of the DPL may also apply. |
| Transaction Security and Process Records | Application records, system records, correspondence records, application channel information and transaction records relating to the recruitment process. | • Conducting the application process securely, keeping process records, responding to data subject requests, fulfilling legal obligations and protecting the Company’s rights. | Article 5/2(ç) of the DPL: Processing being necessary for the data controller to fulfill its legal obligations. Article 5/2(e) of the DPL: Processing being necessary for the establishment, exercise or protection of a right. |
| Special Categories of Personal Data | Although not requested by the Company as a rule, health information, disability information, criminal conviction and security measure information or other special categories of personal data that may be voluntarily shared by the candidate in the CV, portfolio, interview or correspondence. | • Conducting the application process, evaluating suitability for the position, fulfilling legal obligations or protecting rights, only to the extent necessary and lawful. | Explicit consent under Article 6 of the DPL or the existence of another processing condition set out under Article 6 of the DPL, provided that adequate measures determined by the Personal Data Protection Board are implemented. |
II. TRANSFER OF YOUR PERSONAL DATA
Your collected personal data may be transferred, for the fulfillment of the purposes stated above and in accordance with Articles 8 and 9 of the DPL, to our service providers, suppliers, professional recruitment platforms, career portals, consultants, business partners, legally authorized public institutions and organizations and legally authorized private persons for the purposes of conducting recruitment processes, receiving applications, ensuring candidate communications, organizing interview processes, using e-mail and file storage infrastructure, managing human resources processes, operating information technology infrastructure, fulfilling legal obligations and protecting the Company’s rights.
Certain service providers, career platforms, e-mail and file storage infrastructures, video interview tools, communication systems or group companies/shareholders used during the recruitment process may be located abroad or may access personal data from abroad. In such case, the transfer of your personal data abroad will be carried out in accordance with Article 9 of the DPL and applicable secondary legislation.
Transfer abroad may primarily be carried out where one of the processing conditions set out under Articles 5 or 6 of the DPL exists and there is an adequacy decision regarding the country, sector or international organization to which the transfer will be made. In the absence of an adequacy decision, provided that the data subject has the opportunity to exercise their rights and access effective legal remedies in the country of transfer, one of the appropriate safeguards recognized under the DPL, such as standard contracts, binding corporate rules, written undertakings or other lawful transfer mechanisms, may be used. Where these conditions cannot be met, your personal data may be transferred abroad only on an incidental basis and only if one of the exceptional cases set out under the DPL is available.
III. METHOD OF PERSONAL DATA COLLECTION
Your personal data may be collected physically or electronically through Jymoon’s official website, career page, online application forms, professional recruitment platforms, career portals, LinkedIn and similar professional networks, e-mail correspondence, phone calls, video calls, online or in-person interviews, technical assessments, tests, assignments, portfolio reviews, reference checks, printed forms, internal Company systems and documents directly provided by the candidate.
Your personal data may be processed through automated or partially automated means or through non-automated means, provided that it forms part of a data recording system.
IV. RETENTION PERIOD OF PERSONAL DATA
Your personal data will be retained for the period necessary for receiving, evaluating and finalizing your job application and, in any case, by taking into account the purposes of processing, retention periods prescribed under applicable legislation, limitation periods, the Company’s legitimate interests and legal obligations.
If you are not hired, your personal data may be retained for 12 months following the completion of the application process and will be deleted, destroyed or anonymized at the end of such period. However, if you provide your explicit consent to be considered for future suitable positions, your personal data may be retained in the candidate pool for up to 24 months.
You may withdraw your explicit consent at any time. If you withdraw your explicit consent, your personal data retained in the candidate pool will be deleted, destroyed or anonymized unless there is another legal basis requiring its retention.
If you are hired, your personal data processed during the candidacy process may be transferred to your employee personnel file and employee records and will be retained in accordance with employee retention policies and applicable legislation.
V. YOUR RIGHTS UNDER ARTICLE 11 OF THE DPL
Pursuant to Article 11 of the DPL, you may apply to Jymoon as the data controller and exercise the following rights: to learn whether your personal data is processed; to request information if your personal data has been processed; to learn the purpose of processing and whether your personal data is used in accordance with such purpose; to know the third parties to whom your personal data is transferred domestically or abroad; to request correction if your personal data is incomplete or inaccurate; to request deletion or destruction of your personal data within the framework of the conditions set out under Article 7 of the DPL; to request notification of correction, deletion or destruction to third parties to whom your personal data has been transferred; to object to any result against you arising from the analysis of processed data exclusively through automated systems; and to request compensation if you suffer damage due to unlawful processing of your personal data.
You may submit your requests regarding the above rights, together with documents verifying your identity, by delivering a written application by hand, by post or through a notary public to our address listed below; by sending an e-mail from your e-mail address previously notified to the Company and registered in our systems or, provided that your request can be verified; or, by sending your request to the registered electronic mail address.
Requests submitted to the Company will be concluded free of charge as soon as possible and in any event within thirty days, depending on the nature of the request. However, if the transaction requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
Maslak Mahallesi, Eski Büyükdere Caddesi No: 7, Kat: 12, D: 45/46, Giz 2000 Plaza, 34475 Sarıyer/İstanbul, Türkiye
Inquiries submitted to the registered electronic mail address.