Candidate Data Protection Notice Pursuant to Personal Data Protection Legislation
Dear Candidate,
As Bor Şeker A.Ş. (“Bor Şeker” or the “Company”), in our capacity as data controller, we hereby inform you that the personal data obtained from our candidates will be processed, recorded, stored, and retained within the scope of the purposes specified under Law No. 6698 on the Protection of Personal Data (“KVKK”), and as detailed below. Your personal data will be processed in a limited and proportionate manner, maintaining its accuracy and up-to-date status; it will be shared with authorized institutions entitled by law to request such data and transferred to third parties under the conditions stipulated by the KVKK.
Definitions Related to the KVKK
For the purposes of KVKK implementation;
- Anonymization: The process of rendering personal data in a way that it cannot be associated with an identified or identifiable natural person, even when combined with other data,
- Data Subject: The natural person whose personal data is processed,
- Personal Data: Any information relating to an identified or identifiable natural person,
- Processing of Personal Data: Any operation performed on personal data such as collection, recording, storage, retention, alteration, rearrangement, disclosure, transfer, acquisition, classification, or prevention of use, either fully or partially by automated or non-automated means,
- Board: Personal Data Protection Board,
- Authority: Personal Data Protection Authority,
- Data Processor: A real or legal person who processes personal data on behalf of and under authorization of the data controller,
- Data Recording System: The system where personal data is processed according to specific criteria,
- Data Controller: The real or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system,
- Special Categories of Personal Data: Data concerning race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, attire, membership to associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.
What is Personal Data? Which Personal Data is Processed?
Personal data means any information that identifies or can identify you. This primarily includes identity details such as your name, surname, Turkish ID number, as well as your address, phone number, bank account details, or any other information that can be linked to you. According to Article 6 of the KVKK, data regarding race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, association or union memberships, health, sexual life, criminal convictions and security measures, biometric and genetic data are classified as “Special Categories of Personal Data.” The explanations below concerning your personal data also cover these special categories.
The personal data processed and/or shared by our Company in connection with candidates during the recruitment process are detailed as follows:
| Data Category | Personal Data Processed | Processing Purposes | Legal Grounds for Processing |
|---|---|---|---|
| Identity | Turkish ID Number, Name, Surname, Gender, Place of Birth, Date of Birth, Marital Status | Management of candidate/intern/student selection and placement processes, management of candidate application processes, planning of human resources processes, retention and archiving activities, conducting communication activities | Disclosure by the data subject |
| Contact | Phone Number, Email Address, Address | Candidate/intern/student selection and placement processes, application process management, human resources planning, communication activities, retention and archiving | Disclosure by the data subject |
| Professional Experience | Educational background, courses attended, certificates, professional experience details, CV | Candidate/intern/student selection and placement processes, application management, human resources planning, retention and archiving | Disclosure by the data subject |
| Visual and Audio Records | Photograph | Candidate/intern/student selection and placement processes, application management, human resources planning, retention and archiving | Disclosure by the data subject |
| Physical Security | Camera and video recordings | Ensuring physical security of premises, security of data controller’s operations, occupational health and safety activities | Legal obligation of the data controller, or legitimate interests not infringing upon fundamental rights and freedoms of the data subject |
| Health Data* | Chronic illness and disability information | Candidate/intern/student selection and placement processes, application management, human resources planning, occupational health and safety, retention and archiving | Explicit consent of the data subject |
| Criminal Conviction and Security Measures* | Criminal record information | Candidate/intern/student selection and placement processes, application management, human resources planning, occupational health and safety, retention and archiving, ensuring security of data controller’s operations | Explicit consent of the data subject |
| Other | Military service status, driver's license, number of children | Candidate/intern/student selection and placement processes, application management, human resources planning, retention and archiving | Disclosure by the data subject |
*The processing of health data and criminal conviction data will only take place with your explicit consent and within the scope and purpose defined above.
How Do We Collect and Process Your Personal Data?
Your personal data is collected during the following activities:
- Conducting the Company’s human resources processes,
- Evaluation of your application submitted via online, physical, or other platforms,
- Conducting candidate application and suitability assessment processes,
- Ensuring physical security of the Company’s workplace and its surroundings, including camera recordings,
by verbal, written, electronic means, fully or partially automated or non-automated methods and as part of any data recording system.
Additionally, with your explicit consent, your submitted application may be stored in the Company’s human resources system for limited and proportionate processing related to evaluating your suitability for possible future vacancies and to notify you about new openings.
Your references’ personal data provided to us will be processed solely and limitedly for evaluating your job application. Please ensure you have informed your references that their identity, contact, and professional experience data will be processed by us.
How is the Security of Your Personal Data Ensured?
Bor Şeker places utmost importance on protecting the confidentiality and security of your personal data. Necessary technical and administrative measures are implemented to prevent unauthorized access, damage, loss, or disclosure. This includes system controls, access restrictions, secure transfer protocols, business continuity procedures, and other institutional safeguards.
Do We Transfer Your Personal Data to Third Parties or Abroad?
Bor Şeker guarantees that your personal data will be securely preserved and will not be processed unlawfully or transferred abroad.
Your personal data may be shared, under Article 8 of the KVKK and other relevant legislation, exclusively for the purposes of legal follow-up in case of disputes, legal responsibilities and obligations fulfillment, and ensuring lawful operation of the Company, with lawyers, official institutions, organizations, and judicial authorities, limited to the fulfillment of the above purposes.
What Are Your Rights as a Data Subject and How to Apply?
You have the following rights regarding your personal data processed by Bor Şeker:
- To learn whether your personal data is processed,
- To request information if your data is processed,
- To know the purpose of processing and whether your data is used accordingly,
- To learn to whom and which data is transferred domestically,
- To request correction of inaccurate or incomplete personal data,
- To request deletion or destruction of your personal data and notification of third parties to whom the data was transferred,
- To request deletion when the reasons for processing cease or data loses relevance,
- To object to decisions based solely on automated processing that adversely affect you,
- To request compensation for damages due to unlawful processing.
How to Submit Requests
You may submit your requests by completing the application form on our website and delivering it in writing by hand, post, cargo, via notary, secure electronic signature, mobile signature, registered electronic mail (KEP), or from your previously registered email address to kvkk@borseker.com.
Bor Şeker will respond free of charge within the shortest time, and no later than 30 days. If fulfillment causes costs, only fees determined by the Board may be charged.
Bor Şeker reserves the right to accept or reject your request with justification and will notify you accordingly in writing or electronically. If accepted, Bor Şeker is obliged to promptly fulfill the request.
Data Controller Contact Information
This notice is prepared for Bor Şeker A.Ş., established in Turkey, whose data controller contact details are as follows:
| BOR ŞEKER A.Ş. MERSIS No: 0478056194500010 Address: Şeker Mahallesi Bor Cad. Cadde No: 67A/ Bor Niğde Phone: +90 (850) 304 0 267 KEP Address: borseker@hs01.kep.tr |