Home Personal Data Protection Job Applicant Privacy Notice
Job Applicant Privacy Notice.
Personal data TSY Energy processes in job applications under the KVKK: data categories, purposes, legal grounds, recipients and retention.
This English text is a translation provided for information. The Turkish text is the original and prevails in case of any discrepancy.
Job Applicant Privacy Notice under the Personal Data Protection Law
Dear Candidate;
This privacy notice has been prepared by TSY Enerji Endüstrisi Sanayi ve Ticaret Anonim Şirketi, acting as data controller, within the framework of Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, in order to inform you about the purposes and legal grounds for processing your personal data, the methods of collection, to whom it may be transferred and your rights under the KVKK.
We do not have absolute control over the information you provide in the CVs you send to our company or on the websites through which you reach us. We recommend that you do not share with our company any personal data, or special categories of personal data, that you do not want us to know.
1. Which Personal Data Do We Process?
| Personal Data Processed | Your first name, surname, date of birth, place of birth, gender and marital status |
|---|---|
| Collection Methods and Sources | Collected from the candidate’s direct statement; online career platforms; İŞKUR (Turkish Employment Agency) applications; identity and other documents submitted by the candidate; and by e-mail and telephone, by automated, partially automated and — provided they form part of a data recording system — non-automated means. |
| Processing Purposes | Conducting candidate / intern / student selection and placement processes, conducting candidates’ application processes, planning human resources processes, conducting activities in compliance with legislation, conducting storage and archiving activities |
| Legal Grounds | KVKK Art. 5/2-a — expressly provided for by law; Art. 5/2-c — directly related to the conclusion or performance of a contract; Art. 5/2-ç — mandatory for the data controller to fulfil its legal obligation |
| Recipient Groups | Where necessary, competent public institutions and organisations and judicial authorities |
| Transfer Purposes | Fulfilling legal notifications and obligations |
| Personal Data Processed | Telephone number, full address, e-mail address |
|---|---|
| Collection Methods and Sources | Collected from the candidate’s direct statement; online career platforms; İŞKUR (Turkish Employment Agency) applications; identity and other documents submitted by the candidate; and by e-mail and telephone, by automated, partially automated and — provided they form part of a data recording system — non-automated means. |
| Processing Purposes | Conducting candidate / intern / student selection and placement processes, conducting candidates’ application processes, conducting communication activities, planning human resources processes, conducting activities in compliance with legislation, conducting storage and archiving activities |
| Legal Grounds | KVKK Art. 5/2-a — expressly provided for by law; Art. 5/2-c — directly related to the conclusion or performance of a contract; Art. 5/2-ç — mandatory for the data controller to fulfil its legal obligation. |
| Recipient Groups | Where necessary, competent public institutions and organisations and judicial authorities |
| Transfer Purposes | Fulfilling legal notifications and obligations; |
| Personal Data Processed | CV, military discharge certificate |
|---|---|
| Collection Methods and Sources | Collected from the candidate’s direct statement; online career platforms; İŞKUR (Turkish Employment Agency) applications; identity and other documents submitted by the candidate; and by e-mail and telephone, by automated, partially automated and — provided they form part of a data recording system — non-automated means. |
| Processing Purposes | Conducting candidate / intern / student selection and placement processes, conducting candidates’ application processes, conducting communication activities, planning human resources processes, conducting activities in compliance with legislation, conducting storage and archiving activities |
| Legal Grounds | KVKK Art. 5/2-a — expressly provided for by law; Art. 5/2-c — directly related to the conclusion or performance of a contract; Art. 5/2-ç — mandatory for the data controller to fulfil its legal obligation. |
| Personal Data Processed | Education, diploma, certificates, training received, skills, courses. |
|---|---|
| Collection Methods and Sources | Collected from the candidate’s direct statement; online career platforms; İŞKUR (Turkish Employment Agency) applications; identity and other documents submitted by the candidate; and by e-mail and telephone, by automated, partially automated and — provided they form part of a data recording system — non-automated means. |
| Processing Purposes | Conducting candidate / intern / student selection and placement processes, conducting candidates’ application processes, conducting communication activities, planning human resources processes, conducting activities in compliance with legislation, conducting storage and archiving activities |
| Legal Grounds | KVKK Art. 5/2-c — directly related to the conclusion or performance of a contract; Art. 5/2-ç — mandatory for the data controller to fulfil its legal obligation |
| Personal Data Processed | Passport photograph and other visual and audio recordings shared with the company |
|---|---|
| Collection Methods and Sources | Collected from the candidate’s direct statement; online career platforms; İŞKUR (Turkish Employment Agency) applications; identity and other documents submitted by the candidate; and by e-mail and telephone, by automated, partially automated and — provided they form part of a data recording system — non-automated means. |
| Processing Purposes | Conducting candidate / intern / student selection and placement processes, conducting candidates’ application processes, planning human resources processes, conducting activities in compliance with legislation, conducting storage and archiving activities |
| Legal Grounds | KVKK Art. 5/2-a — expressly provided for by law; Art. 5/2-f — legitimate interest of the data controller. |
| Recipient Groups | Where necessary, competent public institutions and organisations and judicial authorities, service providers within the scope of HR consultancy, suppliers. |
| Transfer Purposes | Fulfilling legal notifications and obligations, conducting candidate selection and evaluation processes. |
| Personal Data Processed | Disability information of candidates applying under disability status; chronic illness, allergen and regular medication/prescription information of the candidate within the scope of workplace working conditions and occupational health and safety instructions |
|---|---|
| Collection Methods and Sources | Collected from the candidate’s direct statement and the health reports and documents submitted, by automated, partially automated and — provided they form part of a data recording system — non-automated means. |
| Processing Purposes | Conducting candidate / intern / student selection and placement processes, conducting candidates’ application processes, planning human resources processes, conducting storage and archiving activities |
| Legal Grounds | KVKK Art. 6/3-b — expressly provided for by law; Art. 6/3-e — necessary, by persons under a duty of confidentiality or by authorised institutions and organisations, for the protection of public health, preventive medicine, medical diagnosis, the provision of treatment and care services and the planning, management and financing of health services; Art. 6/3-f — mandatory for employment and occupational health and safety. |
| Recipient Groups | Where necessary, competent public institutions and organisations and judicial authorities, |
| Transfer Purposes | Fulfilling legal notifications and obligations. |
2. For What Purposes Do We Process Your Personal Data and How Long Do We Keep It?
Your personal data and special categories of personal data listed above will be processed, recorded, stored, preserved and classified for the processing purposes stated under each data category and, where necessary, may be transferred to the recipient groups stated under the relevant data category for the stated transfer purposes.
Your personal data may be kept for up to 1 year if your job application is not accepted and, if it is accepted, for up to 10 years from the date you leave the workplace. Health data, which is a special category of personal data, will be kept for the periods specified in the relevant legislation and subject to the strictest administrative and technical measures.
3. What Are the Methods of Collecting Your Personal Data and the Related Legal Grounds?
The methods and sources from which your personal data is obtained and the legal grounds on which it is processed are shown in the tables above for each data category.
Within the scope of the purposes stated in this Privacy Notice, your personal data will, in accordance with the General Principles listed in Article 4 of the Law, be processed:
- a) in compliance with the law and the rules of good faith,
- b) accurately and, where necessary, kept up to date,
- c) for specified, explicit and legitimate purposes,
- d) in a manner that is relevant, limited and proportionate to the purposes for which it is processed,
- e) retained for the period stipulated in the relevant legislation or required for the purpose for which it is processed,
and will be processed, recorded, stored, preserved and classified by automated means or, provided that they form part of a data recording system, by non-automated means and, where necessary, may be transferred to the recipient groups stated in the tables above.
4. What Are Your Rights Regarding the Processing of Personal Data and How Can You Exercise Them?
You may at any time submit your requests under Article 11 of the KVKK regarding your personal data processed by us, in writing in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or by using a registered electronic mail (KEP) address, a secure electronic signature, a mobile signature or the e-mail address you have previously notified to us and that is registered in our system, to the addresses below.
An application form you may use has been published on our website for your information and convenience. Click to view the form
Data Controller
Data Controller: TSY Enerji Endüstrisi Sanayi ve Ticaret Anonim Şirketi
Address: Köşklü Çeşme Mah. 563. Sk. No: 17 İç Kapı No: 1 Gebze / Kocaeli
E-mail: kvkk@tsyenergy.com
Kep: tsyenerji@hs01.kep.tr
This text was prepared within the scope of KVKK Compliance Consultancy. © Uyumbox Danışmanlık | www.uyumbox.com