YEPZ BİLİŞİM TEKNOLOJİLERİ ANONİM ŞİRKETİ (Yepz IT Technologies Inc.)
CANDIDATE EMPLOYEE CLARIFICATION TEXT WITHIN THE SCOPE OF THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA,

Yepz Bilişim Teknolojileri A.Ş. (Yepz IT Technologies Inc.) attaches importance to the protection and confidentiality of your personal data. For this reason, in accordance with the Law on the Protection of Personal Data No. 6698 ("Law"), with this clarification text, it informs you about your personal data collected and processed based on your job or internship applications you have made through https://yepz.com/ and other job application platforms.

The following personal data groups are collected and processed for the purposes of conducting job and internship applications, planning and conducting interviews, making evaluations and communicating about the results, and for the legal reason that it is mandatory within the scope of the establishment or performance of a contract:

Identity (Name, Surname, Date of Birth, Place of Birth, Photograph)
Contact (E-Mail Address, Telephone No, City of Residence)
Professional Experience (Diploma Information, Courses Attended, On-the-Job Training Information, Previous Work Experience, Certificates, Programme and Software Information, Transcript Information, Foreign Language Information)

YEPZ may share personal data domestically with institutions or organisations authorised to request the personal data of the data subject, such as legal advisors, financial advisors and tax advisors, regulatory and supervisory bodies, regulatory and supervisory institutions, courts and enforcement offices, and persons designated by them, provided that all necessary measures are taken in accordance with Article 8 of the Law for the purposes set out in this Clarification Text. YEPZ does not transfer the personal data of the Employee Candidate, which it processes in accordance with Law No. 6698, abroad.

The Data Subject whose personal data is processed by YEPZ may exercise the following rights listed in Article 11 of the Law:

To learn whether their personal data is being processed or not,
Request information if personal data has been processed,
To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
To know the third parties to whom personal data are transferred domestically or abroad,
To request correction of personal data in case of incomplete or incorrect processing,
Request deletion or destruction of personal data,
To request notification of the correction, deletion or destruction of personal data to third parties to whom personal data are transferred,
To object to the emergence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems,
In case of damage due to unlawful processing of personal data, to demand compensation for the damage.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the Data Subject may submit his/her requests in writing or by using his/her registered electronic mail address, secure electronic signature, mobile signature or electronic mail address. For this purpose, you can apply to "Kızılırmak Mah Ufuk Üniversitesi Cad No 4 Next Level Loft Office No 24 06530 Çankaya/Ankara" with a petition containing explanations regarding the right to be used, together with your name-surname, signature, Turkish Republic Identity Number, address, e-mail address, telephone number, if any. You can also get information via [email protected] e-mail address.

The application will be replied to free of charge within the statutory period of 30 days from the person concerned. In order to receive the reply, please make sure that you have provided the above information correctly. In cases that require a separate cost calculation for the fulfilment of the relevant person's requests, YEPZ may request the cost of the recording medium in question from the relevant person if the answer is given on recording media such as CD, flash memory.

YEPZ has the right to make changes in this Disclosure Statement due to changes that may occur in the Law and new methods or regulations that may be determined by the Personal Data Protection Board. Personal data processed by YEPZ may be processed by taking all necessary information security measures, provided that they are not used outside the purposes and scope specified in this Clarification Text; in case the application is evaluated negatively, it will be destroyed in accordance with the relevant legislation and procedure.

In accordance with the Law, YEPZ pays particular attention to the processing of the personal data of the data subject in accordance with the law and the rule of honesty, accurately and, where necessary, up-to-date, for specific, clear and legitimate purposes, in connection with the purpose for which they are processed, limited and measured, for the period stipulated in the relevant legislation or for the period required for the purpose for which they are processed, and takes the necessary measures for this purpose.  

YEPZ IT TECHNOLOGIES INC.
WEBSITE VISITOR CLARIFICATION TEXT

As Yepz Bilişim Teknolojileri A.Ş. (Yepz IT Technologies Inc.), we attach importance to the protection and privacy of your personal data. For this reason, in accordance with the Law on Protection of Personal Data No. 6698, we provide information on the collection method of your personal data, the purposes of processing, the transfer to third parties and the rights of the person concerned, with this clarification text.

Yepz processes personal data in order to fulfill its obligations under the Internet Law No. 5651, Turkish Penal Code No. 5237 and other applicable legislation. Yepz collects your personal data electronically via https://yepz.com/ in accordance with the 'personal data processing conditions' specified in the law and for the legal reasons specified in this text.

Within the scope of your visit to this website, Transection Security records (such as IP Address, Log Records, Input-Output Records) are collected and processed in order to ensure that data processing is legally compulsory for the legitimate interests of the data controller and to fulfill the obligations pursuant to the Law No. 5651, for the purpose of ensuring the security of the data controller operations and detecting and eliminating technical malfunctions within the website, provided that the fundamental rights and freedoms of the data subject are not harmed.

Your Identity (name and surname), Contact (e-mail, telephone, address) information in the e-mails and mails you send to us via our contact addresses on our website may be processed for communication activities and fulfillment of requests.

Transfer of Personal Data

Yepz, in accordance with Article 8 of the Law, for the purposes specified in this Clarification Text, provided that all necessary precautions are taken; may share it domestically with institutions or organizations authorized to request the personal data of the person concerned, such as legal advisors, financial advisors and tax advisors, regulatory and supervisory institutions, courts and enforcement offices, and persons designated by them. Yepz will be able to transfer data abroad due to the mail infrastructure and servers being used abroad.

Yepz, in accordance with Article 8 of the Law, for the purposes specified in this Clarification Text, provided that all necessary precautions are taken; may share it domestically with institutions or organizations authorized to request the personal data of the person concerned, such as legal advisors, financial advisors and tax advisors, regulatory and supervisory institutions, courts and enforcement offices, and persons designated by them. Yepz will be able to transfer data abroad due to the mail infrastructure and servers being used abroad.

Rights of the Relevant Person

The Relevant Person whose personal data is processed by Yepz can exercise the following rights listed in Article 11 of the Law:

i. Learning whether their personal data is processed or not,
ii. If their personal data has been processed, requesting information about it,
iii. Learning the purpose of processing their personal data and whether they are used in accordance with their purpose,
iv. Knowing the third parties to whom personal data is transferred at home or abroad,
v. Requesting correction of personal data in case of incomplete or incorrect processing,
vi. Requesting the deletion or destruction of personal data,
vii. Requesting notification of the transactions regarding the correction, deletion or destruction of personal data to the third parties to whom the personal data has been transferred,
viii. Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
ix. To request the compensation of the damage in case of loss due to unlawful processing of personal data.

You can apply to Next Level Loft Office Çankaya/Ankara or [email protected] with a petition containing explanations about the right you want to use. Due to the Communiqué on Application to the Data Controller, it is important that you include your name - surname, signature, identity number, residence or workplace address, e-mail address, if any, and telephone or fax number in your application. Yepz cannot be held responsible if your application is not concluded properly due to incomplete or incorrect information. Your application will be concluded free of charge within the legal period of 30 days.

Yepz pays special attention to the collection of personal data of the person concerned in accordance with the law and the rule of good faith; to the correct collection of data and updating it when necessary; to the processing of data for specific, clear and legitimate purposes; to the processing the data subject in connection with the purpose for which they are processed, in a limited and measured manner, for the period stipulated in the relevant legislation, or for the period required for the purpose for which they are processed, and takes the necessary measures regarding this.

YEPZ IT TECHNOLOGIES INC.
WEBSITE PRIVACY POLICY

As Yepz Bilişim Teknolojileri A.Ş. (Yepz IT Technologies Inc.), we focus on providing innovative and customer-oriented solutions with websites and initiatives in various sectors. This website is available for you to provide information about our services, to conduct recruitment processes and to direct you to our other affiliates.

We attach importance to the privacy and security of your personal data within the scope of your visits to our website. In accordance with the Law No. 6698 on the Protection of Personal Data ("Law"), we inform you about this Policy about the processing and protection of your personal data and your rights.

Personal Data and Processing of Personal Data

Personal data is any information relating to an identified or identifiable natural person. A process that starts with obtaining personal data for the first time by fully or partially automated or non-automatic means, provided that it is part of any data recording system, and any subsequent processing is defined as data processing. Within the scope of your visits to the website, your entries and exits, your IP address, your name, surname, telephone number and e-mail address are processed within the scope of your communication activities. For the applications you have made through the General Application or Career tab, please read our 'Candidate Employee Disclosure Text' on the relevant tab.

Data Controller

Data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

For What Purpose Is Personal Data Used?

• Fulfillment of Obligations Arising from Legislation
• Providing Information to Authorized Persons, Institutions and Organizations
• Execution of Communication Activities
• Execution of Storage and Archive Activities
• Ensuring the Security of Data Controller Operations
• Execution of Information Security Processes
• Providing Information on Our Company's Business and Activities
• Execution of Recruitment Processes

Transfer Status of Personal Data

In line with the above-mentioned purposes, in accordance with Article 8 of the KVKK (GDPR), we may share your personal data with affiliates, contracted legal and real persons, legal advisers, financial advisors and tax advisors, provided that all necessary precautions are taken in the country. In case of legal necessity, transfers can be made to institutions authorized to request personal data such as regulatory and supervisory institutions, courts and enforcement offices, and to persons authorized by them. There is no data transfer abroad.

What are the Relevant Person Rights?

Read our Clarification Text to get information about your personal data. You can send additional questions and requests to [email protected]. In accordance with the KVKK No. 6698, you can exercise your rights below:

a) Learning whether your personal data is processed or not,
b) If your own personal data has been processed, requesting information about it,
c) To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
d) Knowing the third parties to whom your personal data is transferred, in the country or abroad,
e) Requesting correction of your personal data if it is incomplete or incorrectly processed,
f) To request the deletion or destruction of your personal data within the framework of legal conditions,
g) Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to the third parties to whom your personal data has been transferred,
h) Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
i) To request the compensation of the damage in case of loss due to unlawful processing of personal data.

With this Policy, YEPZ has adopted the principle of confidentiality of your personal data, taking necessary data security measures and keeping them within the legal retention periods. Due to the legislation and new methods or regulations determined by the Board, it may make changes in the Privacy Policy. Therefore, we request you to visit this Privacy Policy periodically.