Employee Candidate Information Notice

The Personal Data Protection Law No. 6698 (“KVKK”), which came into effect in Turkey on April 7, 2016, includes regulations regarding the processing of any kind of information related to identified or identifiable real persons.

This Information Notice includes the statements and declarations of the data controllers regarding the processing of the personal data of job applicants under the KVKK, provided by Medsien Inc., located at 535 Mission St., 14th Floor, San Francisco, USA, as a joint data controller.

In accordance with the Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Obligation to Inform under the KVKK (“Communiqué”), we inform job applicants who apply to the Company as follows and enlighten them within the scope specified in Article 10 of the KVKK.

1. Definitions

Personal Data
Any information related to an identified or identifiable real person.

Processing of Personal Data
Any operation performed on data, such as collection, recording, storage, retention, alteration, rearrangement, disclosure, transfer, acquisition, making available, classification, or prevention of use, whether wholly or partially automated or non-automated, provided that it is part of a data recording system.

Data Controller
The real or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Within the scope of this document, the data controller is Medsien Inc., located at 535 Mission St., 14th Floor, San Francisco, USA.

Explicit Consent
Consent that is based on information and freely given regarding a specific subject.

Board
Refers to the Personal Data Protection Board.

2. Data Categories and Types

Identity Information
Name-surname, date of birth, gender.

Contact Information
Email, phone number, address, residence information.

Work and Education Information
Educational background, professional title, foreign language skills, computer skills, course and training certificates, previous workplaces, references, CVs, job application forms, and educational and professional details shared during interviews.

Visual/Audio Records
Photograph, if included in the resume.

If the job applicant provides personal data of third parties (such as references or relatives), they are obliged to inform these individuals under the KVKK and obtain explicit consent if necessary. Otherwise, all responsibility lies with the applicant.

3. Purpose and Legal Basis of Personal Data Processing

Personal data collected from job candidates are processed as specified in the table below, within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

Processed Personal Data

  • Identity Information
  • Contact Information
  • Work and Education Information

Purpose

  • Receiving and evaluating job applications
  • Managing recruitment processes
  • Conducting candidate evaluation processes

Legal Basis
Data processed for the establishment of an employment contract is based on the necessity of processing personal data of the parties for the formation or performance of the contract, as per Article 5 of KVKK.
If personal data has been made public by the applicant, it may also be processed.

Processed Personal Data

  • Visual/Audio Records

Purpose

  • Receiving and evaluating job applications
  • Managing recruitment processes
  • Conducting candidate evaluation processes

Legal Basis
Processed based on the presence of explicit consent.

Processed Personal Data

  • Identity Information
  • Contact Information
  • Work and Education Information
  • Visual/Audio Records

Purpose

  • Considering the applicant for future suitable positions

Legal Basis
Processed based on the presence of explicit consent.

Processed Personal Data

  • Identity Information
  • Contact Information

Purpose

  • Planning HR policies and conducting necessary reporting within the company

Legal Basis
Processed to ensure the company's operational continuity, provided it does not harm the fundamental rights and freedoms of the individual, based on the necessity of processing for the legitimate interests of the data controller (Article 5 of KVKK).

4. Parties to Whom Personal Data Can Be Transferred and Purpose of Transfer

Personal data collected from job applicants may be shared under the conditions of Article 8 of the KVKK:

  • May be transferred to legally authorized public institutions and private entities when required by law.
  • May be shared with overseas group companies for compliance with global quality standards, corporate communication, team management, strategic planning, and business continuity.

5. Method of Collecting Personal Data

Your personal data is collected through automated or non-automated means, verbally, in writing, or electronically via:

  • Medsien's career website
  • Online career portals
  • HR consultancy firms
  • Email
  • Online interviews
  • Physical interviews (if the application progresses positively)
  • Printed forms submitted by hand

6. Retention Period of Personal Data

  • As a joint data controller, personal data will be stored as long as required for the processing purposes stated above. Additionally, in the event of any disputes, data may be stored for the duration required by the statute of limitations applicable law, limited to what is necessary for defense.

7. Measures and Commitments on Data Security

As a joint data controller, we commit to:

  • Prevent unlawful processing of personal data
  • Prevent unauthorized access to personal data
  • Ensure the secure storage of personal data

by taking necessary technical and administrative measures and conducting relevant audits.
We also commit not to disclose or use your personal data for purposes other than those stated in this Information Notice and as permitted under KVKK and related legislation.

8. Rights of Data Subjects and Exercising These Rights

Pursuant to Article 11 of KVKK, data subjects have the right to:

  • Learn whether personal data is being processed
  • Request information if it has been processed
  • Learn the purpose of processing and whether it is used accordingly
  • Know the third parties to whom data is transferred domestically or abroad
  • Request correction of incomplete or inaccurate data and notify third parties
  • Request deletion or destruction of data when the legal grounds cease to exist and notify third parties
  • Object to adverse results produced exclusively by automated systems
  • Request compensation for damages due to unlawful processing

‍

You may send your requests regarding these rights, with identity verification, to the email address: turkey@medsien.com. Requests will be evaluated and concluded within 30 (thirty) days. Generally, no fee will be charged, but if the process incurs costs, data controllers reserve the right to charge a fee based on the tariff set by the Personal Data Protection Board.

‍