Information Text for Employee Candidates

Our Company, acting in its capacity as data controller, namely Glasstech Fırın Refrakter Çelik İnşaat Turizm Sanayi ve Tic. A.Ş. (Address: Çavuşoğlu Mah. Çobanyıldızı Cad. No:44 Kartal, İstanbul / Türkiye, Tel: +90 530 300 35 50, E-mail: [email protected], MERSİS No: 0396068843800016), has prepared and published this disclosure text in order to inform employee candidates in accordance with the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as the “KVKK” or the “Law”) and the Communiqué on the Principles and Procedures to Be Followed in Fulfilling the Obligation to Inform (hereinafter referred to as the “Communiqué”).

Article 10 of the KVKK provides that:
“During the acquisition of personal data, the data controller or the person authorized by the data controller is obliged to inform the data subjects about the identity of the data controller and, if any, of its representative, the purposes for which personal data will be processed, to whom and for which purposes the processed personal data may be transferred, the method and legal grounds for the collection of personal data and the rights of the data subject listed in Article 11.”

BASIC DEFINITIONS

Personal Data: Any information relating to an identified or identifiable natural person.

Processing of Personal Data: Any operation performed on personal data such as obtaining, recording, storing, retaining, altering, re-organizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, whether fully or partially by automated means or by non-automated means provided that it forms part of any data recording system.

Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. For the purposes of this text, the data controller is Glasstech Fırın Refrakter Çelik İnşaat Turizm Sanayi ve Tic. A.Ş., located at Çavuşoğlu Mah. Çobanyıldızı Cad. No:44 Kartal, İstanbul / Türkiye.

Data Recording System (VERBIS): The recording system in which personal data are processed by being structured according to specific criteria.

Explicit Consent: Consent that is based on information and expressed with free will regarding a specific subject.

Board: Refers to the Personal Data Protection Board.

PERSONAL DATA RELATING TO EMPLOYEE CANDIDATES

The personal data of employee candidates may be processed by our Company in line with the purposes and conditions for processing set out in this text. The said personal data:

Are processed in compliance with the law and the principle of good faith,
Are kept accurate and, where necessary, up to date as notified to us,
Are processed for specific, explicit and legitimate purposes,
Are processed in a manner that is relevant, limited and proportionate to the purposes for which they are processed,
Are retained for the period stipulated in the relevant legislation or required for the purposes for which they are processed,

and are processed within this framework.

The personal data subject to processing are as follows:

Identity Data:
Name and surname, date of birth, Turkish Identity Number, gender, marital status, nationality information, passport information, duty and title information.

Contact Data:
Telephone number, e-mail address, address information.

Visual and Audio Data:
Photograph of the natural person, camera recordings.

Special Categories of Personal Data:
Association/foundation memberships, disability status, blood group, and information on smoking habits as included in the curriculum vitae.

Education Data:
Educational status, certificate and diploma information, foreign language skills, education and skills, seminars and courses.

Work Experience Data:
Total experience, employment status and title, work experience, education information, work experience, positions, internship experience, information on tools used/programs used, document number, completed department/program, profession information, graduation period, educational status, previous professions, certificate and qualification document information, exam information – exam score, competencies, start and end dates / type of work for previous professions, courses, vocational training (company names, periods of employment, job description).

Other Data:
Driver’s licence details, hobbies, military service status, reference information (name and surname, title, workplace, telephone number and e-mail address of the reference person), and Word, Excel and presentation files attached to the CV.

METHOD AND LEGAL GROUNDS FOR COLLECTION OF PERSONAL DATA

Personal data may be obtained directly from the data subject, from third parties or from competent authorities during the establishment of a legal relationship or at the time of application. In this context, contracts and applications, application forms available on our official website and other tools, as well as written or verbal communication channels established with our Company, are used to collect personal data verbally, in writing or in electronic format. Visual data are collected from CVs sent with photographs and from cameras installed to ensure the security of the Company, based on our legitimate interests.

Pursuant to Article 5 of the KVKK, personal data may not be processed without the explicit consent of the data subject. The Law, however, sets out certain exceptional circumstances in which explicit consent is not required. In the following cases, personal data may be processed by our Company without seeking explicit consent: where it is clearly prescribed by law; where it is necessary, provided that it is directly related to the conclusion or performance of a contract, to process personal data of the parties to the contract; where it is mandatory in order for the Company to fulfil its legal obligations; where the personal data have been made public by the data subject; where data processing is mandatory for the establishment, exercise or protection of a right; and where data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Within this scope, in order for Glasstech Fırın Refrakter Çelik İnşaat Turizm Sanayi ve Tic. A.Ş. to carry out its activities, personal data are processed for the purposes and under the conditions set out in Articles 5 and 6 of the KVKK and in accordance with the principles and procedures stipulated by the applicable legislation, for the purposes specified in this Disclosure Text and for the fulfilment of legal obligations, on the legal grounds stated above.

PURPOSE OF PROCESSING PERSONAL DATA

In accordance with Article 10 of the KVKK and Article 5 of the Communiqué, and in compliance with the conditions for processing set out in Article 4 of the KVKK, the personal data of employee candidates may be processed for the following purposes:

Recruitment of new personnel, reviewing candidates and identifying the candidate to be recruited,
Verifying your data and information via the reference persons stated in your curriculum vitae,
Recording CV information in order to determine suitability for the applied position and for future verification,
Ensuring security within the Company,
Execution of application processes of employee candidates,
Execution of selection and placement processes for employee candidates / interns / students,
Ensuring occupational health and safety,
Ensuring secure entry to and exit from the Company headquarters and factory,
Execution of reception services and informing the Human Resources and Training Department,
Ensuring communication,
Evaluating candidates for potential suitable positions in the future in the event the job interview is concluded negatively,
Determining salary information and scale.

Your personal data shall be retained for the maximum period stipulated in the relevant legislation or required for the purposes for which they are processed and, in any event, for the statutory limitation periods.

REGARDING YOUR SPECIAL CATEGORIES OF PERSONAL DATA

Special categories of personal data are data relating to an individual’s race, ethnic origin, political opinion, philosophical belief, religion, sect or other belief, attire, association, foundation or trade union membership, health, sexual life, criminal conviction and security measures, as well as biometric and genetic data.

The information shared by the Employee Candidate may include special categories of personal data. Within the scope of the KVKK, data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other belief, attire, association, foundation or trade union membership, health, marital status, sexual life (female, male etc.), any criminal conviction and security measures, and biometric and genetic data are considered special categories of personal data. Unless the Employee Candidate wishes to do so, they have the right not to share their special categories of personal data. The personal data that the Employee Candidate shares of their own free will are used by different departments within the Company for the purpose of evaluating the CV application and in line with the purposes of the relevant departments. In cases where the Employee Candidate is recommended, personal data may be shared among departments for the purpose of verifying information with the reference persons and for department managers to interview the Employee Candidates. Personal data are processed for the purposes stated above. Within the legal framework, special categories of personal data may be shared with the Company’s attorneys in order to exercise the Company’s right of defence and, upon request, with the courts.

PERSONS TO WHOM PERSONAL DATA MAY BE TRANSFERRED AND PURPOSES OF TRANSFER

The personal data obtained by the Company regarding employee candidates may be transferred within the Company only for the purpose of presenting them to the relevant internal department for evaluation and confirming the suitability of the candidate for the position. In addition, CVs of candidates may be forwarded to group companies for the purpose of evaluating appropriate positions related to the recruitment of the employee candidate.

TRANSFER ABROAD

Due to communication with employee candidates via e-mail or through online meeting applications, the aforementioned Personal Data are stored in the databases of e-mail service providers (Microsoft Outlook) and online meeting service providers (Zoom or Microsoft Teams), which are located abroad. Apart from this, the Personal Data of Employee Candidates are not shared with any other third party abroad.

RETENTION PERIOD OF PERSONAL DATA

In accordance with the provisions of the KVKK, your personal data processed for the purposes specified in this “Disclosure Text on the Processing of Personal Data” shall be retained within the personnel file in the event that recruitment is finalized; in the event that an employment relationship is not established, your personal data shall be deleted, destroyed or anonymized and may continue to be used in anonymized form by us, taking into account our Personal Data Retention and Destruction Policy.

RIGHTS OF THE DATA SUBJECT

The data subject has the following rights:

To learn whether his/her personal data are being processed,
If his/her personal data have been processed, to request information regarding such processing,
To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
To know the third parties to whom personal data are transferred domestically or abroad,
To request rectification of personal data if they are incomplete or inaccurate,
To request the deletion or destruction of personal data if the reasons requiring their processing cease to exist, even if they have been processed in accordance with the KVKK and other relevant legislation,
To request that any rectification, deletion or destruction carried out at his/her request be notified to third parties to whom personal data have been transferred,
To object to the occurrence of a result to his/her detriment by means of analysis of processed data exclusively through automated systems,
To claim compensation for damages in the event of suffering damage due to unlawful processing of personal data.

EXCEPTIONS TO THE RIGHT OF APPLICATION

Pursuant to Article 28/2 of the KVKK, except for the right to claim compensation for damages, data subjects may not benefit from the rights listed in Article 11 of the KVKK in the following cases:

Where processing of personal data is necessary for the prevention of crime or for criminal investigation,
Where personal data have been processed by the data subject himself/herself by making them public.

METHOD OF APPLICATION AND FORM

The data subject may submit applications regarding the rights listed above to the Data Controller in accordance with the procedures stipulated in the Communiqué on the Principles and Procedures of Application to the Data Controller.

Requests within the scope of the rights listed in Article 11 of the Law on the Protection of Personal Data No. 6698 may be submitted to the Company by completing the form available at
www.glasstech.mediaclick.work/hakkimizda/yasal-beyanlar/ilgili-kisi-basvuru-formu
and/or by one of the methods set out below, pursuant to Article 13 of the KVKK and Article 5 of the Communiqué on the Principles and Procedures of Application to the Data Controller.

Applications submitted to the Company shall be responded to within thirty (30) days at the latest from the date on which the request reaches the Company, depending on the nature of the request, in accordance with Article 13/2 of the KVKK. Responses to the application shall be delivered to the applicant in writing or electronically in accordance with Article 13 of the KVKK. If the request is accepted, the necessary action shall be taken by our Company without delay. If the request is rejected, the grounds for rejection shall be explained and notified to the applicant electronically or in writing.

For the exercise of the above-mentioned rights, the Data Subject must submit his/her requests to the Company in writing, together with information enabling verification of identity, through one of the communication channels below:

a. By e-mail to [email protected], or

b. By post to the address Çavuşoğlu Mah. Çobanyıldızı Cad. No:44 Kartal, İstanbul / Türkiye.

If the request is accepted or rejected with reasons explained, the response shall be notified to the applicant electronically or in writing. If the request in the application is accepted, the necessary action shall be taken by our Company without delay.

Depending on the nature of your request, your applications shall be concluded as soon as possible and in any event free of charge within thirty days at the latest; however, if the process requires an additional cost, a fee may be charged in accordance with the tariff to be determined by the Personal Data Protection Board.

Information Text for Employee Candidates

This information text explains how Glasstech Furnace Refractory Steel Construction Tourism Industry and Trade Inc. (“GTR”) processes personal data of employee candidates in accordance with the Law on the Protection of Personal Data No. 6698 (KVKK). Personal data such as identity, contact details, education and professional background may be collected during the recruitment process through applications, CV submissions, interviews, and communication channels. These data are processed for purposes such as evaluating applications, verifying candidate information, conducting recruitment processes, and maintaining communication with candidates. Personal data are processed only for legitimate purposes, shared with relevant departments when necessary, and retained for the period required by applicable legislation or recruitment processes.

ACKNOWLEDGMENT OF RECEIPT

NAME – SURNAME:

DATE:

SIGNATURE: