CLARIFICATION TEXT ON THE PROTECTION OF EMPLOYEE CANDIDATE PERSONAL DATA

In this Clarification Text, the principles regarding the processing of your personal data in accordance with the Law No. 6698 on the Protection of Personal Data ("Law") and the relevant legislation by the data controller "Büyükdere Cad. No.74 D Torun Center Office Kule K:11 N:45 Şişli/İstanbul", the principles regarding the processing of your personal data by Demir Grup Yapı İnşaat Sanayi ve Ticaret Anonim Şirketi ("Company") are stated below.

1. Purpose of Processing Personal Data

In accordance with the basic principles stipulated by the Law, your personal data such as identity, communication, education and professional experience, resume, visual records collected as a result of your application to work in our Company; within the scope of the contractual relationship based on the execution of the recruitment process, your job application is processed for the purposes of receiving your job application, examining your resume and investigating your suitability for the job description, conducting recruitment processes and contacting you within this scope, and the disability / health information obtained additionally from disabled employee candidates is processed for the purposes of evaluating the suitability of your health status for the relevant position.

2. Places of Transfer of Processed Personal Data and Purpose of Transfer

Your personal data may be transferred to our business partners, relevant official institutions and exceptionally to private persons in accordance with the Law and legislation. The purpose of processing personal data and the purpose of data transfer are parallel. Our Company may transfer the personal data it collects to the program partner institutions and organizations with which it cooperates in order to carry out human resources activities, to the business partners from which we receive support for the infrastructure of the website and application, and, if you give your explicit consent, your personal data may be transferred abroad within the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, since the servers of our computer programs and our system providing cloud computing services are located abroad.

3. Method and Legal Grounds for Collection of Personal Data

Your personal data is collected by our Company in written and electronic media as part of the data recording system by filling out the form on our website (https://demirgrup.com/ik-formu/) for the execution of recruitment activities by our Company, by fully or partially automated methods through digital forms. Your personal data collected as a result of your application to work in our Company, your explicit consent pursuant to Article 5/1 of the Law, your explicit consent pursuant to Article 5/2 of the Law. Your explicit consent pursuant to Article 5/1 of the Law, explicitly stipulated by law pursuant to Article 5/2(a), provided that it is directly related to the establishment or performance of a contract pursuant to Article 5/2(c), it is necessary to process personal data belonging to the parties to the contract, it is mandatory for our data controller Company to fulfill its legal obligation pursuant to Article 5/2(ç) of the Law, data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned pursuant to Article 5/2(f) of the Law. Health data obtained from disabled employee candidates are processed based on the legal reason that your explicit consent has been obtained within the scope of Article 6/1 of the Law.

Ways to Apply to the Data Controller and Your Rights

Pursuant to Article 11 of the Law, by applying to our Company, your personal data;

1. a) to learn whether it has been processed,
2. b) to request information if it has been processed,
3. c) to learn the purpose of processing and whether it is used in accordance with its purpose,
4. d) to learn the parties to whom it is transferred domestically / abroad,
5. e) to request correction if incomplete / incorrectly processed,
6. f) To request the deletion/destruction within the framework of the conditions stipulated in Article 7 of the Law,
7. g) to request notification of the transactions made in accordance with the above-mentioned subparagraphs (e) and (f) to the third parties to whom it is transferred,
8. h) to object to the occurrence of a result against you due to the analysis exclusively by automated systems,
9. i) You have the right to demand compensation for the damage in case you suffer damage due to processing in violation of the Law.

In cases where the application made by following the above-mentioned procedure is rejected, the response is found insufficient or the application is not responded to in due time; there is the right to file a complaint to the Personal Data Protection Board ("Board") within thirty days following the notification of the response and in any case within sixty days from the date of application. However, a complaint cannot be filed before exhausting the remedy. The Board, upon a complaint or ex officio if it learns about the alleged violation, shall conduct the necessary examination on matters within its jurisdiction.

Upon a complaint, the Board examines the request and gives a response to those concerned. If no response is given within sixty days from the date of the complaint, the request shall be deemed rejected. If it is understood that there is a violation as a result of the examination made upon complaint or ex officio, the Board decides that the unlawfulness detected by the Board shall be eliminated by the data controller and notifies the relevant parties. This decision shall be fulfilled without delay and within thirty days at the latest following the notification. The Board may decide to suspend data processing or transfer of data abroad in the event of irreparable or impossible damages and in the event of a clear violation of the law.

We would like to state that your data is sensitively protected by our Company and thank you for your trust in us.

Declaration of Consent Regarding the Processing of My Personal Data