Privacy Notice for Intern Candidates

As Kumkumoğlu Ergün Cin Özdoğan Avukatlık Ortaklığı (“KECO”); we have drawn up this privacy notice to inform Intern Candidates about the processing, storage, and transfer of your personal data within the framework of our activities, under the Personal Data Protection Law numbered 6698 (“PDPL”) and related legislation and legal regulations.

1. Which Personal Data is Being Processed and What are The Purposes of Processing Your Personal Data?

As KECO, we have processed identity, contact, professional experience, and reference information for the purpose of conducting application, selection, and placement processes of intern candidates, planning human resources processes, and searching for references.

2. What are the Methods of Collecting Your Personal Data?

Your personal data mentioned above, have been collected via the resume that you delivered, and the documents declared verbally and in writing by you.

3. What is the Legal Reason for Collecting Your Personal Data?

In line with the realization of the above-mentioned purposes, your personal data is processed by KECO, within the scope of Article 5(2)(c) of the PDPL “Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract” and Article 5(2)(f) of the PDPL “Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.”

4. Do We Transfer Your Personal Data to a Third Party?

Your personal data can be transferred to Cloud Service Providers located abroad based on “your explicit consent”, for the purposes of carrying out information and document management, storage, and archiving activities, and information security.

5. What are the Rights You Can Exercise Regarding Your Personal Data?

Regarding your personal data you have the rights

To learn whether your personal data were processed or not,
If your personal data have been processed, to request information about it,
To learn the purpose of processing your personal data and whether these data were used in compliance with the purpose,
To know the third parties to whom your personal data were transferred in country or abroad,
To request the rectification of the incomplete or inaccurate data, if any,
To request the erasure or destruction of your personal data under the conditions referred to in the PDPL,
If you demand for the correction of missing or incorrect data and deletion or destruction of your personal data, to request reporting of the operations carried out pursuant to these situations to the third parties to whom your personal data have been transfered,
To request compensation for the damage arising from the unlawful processing of your personal data.

6. How Can You Exercise Your Rights?

If you wish you can deliver your personal data applications and requests through the Data Subject Application Form,

By applying to KECO with a valid identity card directly,
By sending to ‘Levent Yeni Sülün Sok. No: 14/2 34330 Beşiktaş İstanbul” address together with wet signature and ID photocopy,
By sending via kvkk@kecolegal.com e-mail address belongs to KECO with the petition signed by secure e-signature or mobile signature.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, it is necessary to include in the application while the Data Subject delivers a personal data application and request: the name, surname, and signature -if the application is in writing-, R.T. ID number (passport number in case the applicant is a foreigner), address of the place of residence which is base for notification or workplace/business address, -if available- electronic mail address base for notification, telephone number.

The Data Subject should clearly and comprehensibly state the matter requested in the application to be made in order to exercise the above-mentioned rights and contain explanations regarding the right requested to be exercised. Relevant information and documents should be attached to the application.

Although the subject of the request should be related to the applicant in person, if the person is acting on behalf of someone else, the applicant should be specifically authorized in this matter and this authorization must be documented (special power of attorney). In addition, the application should include the ID number and address, and the identity documents should be attached to the application. Requests made by unauthorized third parties on behalf of someone else shall not be considered
.

7. How Long Will It Take to Reply to Your Requests Regarding the Processing of Your Personal Data?

Your demand for rights on your personal data are evaluated and replied within 30 days from the date we receive it. In case your application is evaluated negatively, the reasons for rejection are sent to the address you specified in the application particularly by e-mail or mail, or by one of the means chosen in the Data Subject Application Form.