NISO YAZILIM TEKNOLOJİLERİ ANONİM ŞİRKETİ

PROTECTION OF PERSONAL DATA OF EMPLOYEE CANDIDATES DISCLOSURE

According to Law No. 6698 on the Protection of Personal Data (“Law“), this document has been prepared for the enlightenment of our employee candidates in connection with legal grounds and methods of processing the personal data and the necessary administrative and technical measures taken to provide the security of the personal data of our employee candidates as Niso Yazılım Teknolojileri Anonim Şirketi (“Company“).

We would like to inform you about the Company processes of processing your data and your rights under the Law through the “Protection Of Personal Data Of Employee Candidates Disclosure” (“Disclosure“) hereby.

1. Processed Personal Data

Your data specified below are processed directly or through various channels during the job application procedures and evaluations :

Identity	Name, Surname, Turkish ID Number, Date of Birth, Marital Status
Contact	Residence Information, Home and Cell Phone Number, E-mail
Personnel & Employee Candidate Information	Previous experience, military service information for male candidates, reasons for leaving the job, working time, preferences, and expectations regarding other working conditions including wages
Professional Experience Information	Schools Attended, Years of Education, Vocational Training Information, Skills and Competencies, Information Obtained as a Result of Skills and Competency Tests and Questionnaires, Foreign Language Knowledge
Reference Information	Name, surname, title, telephone, and e-mail information of the person who is reported as a reference by the employee candidates during the job application

2. Legal Grounds And Methods Of Processing Personal Data

We process your data based on your explicit consent or without your explicit consent where the data has been made public by you or where data processing is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms.

3. Purposes of Processing Personal Data

Your Personal Data is processed for the purposes set out below:

Fulfillment of Human Resources Operations and Processes	Execution of Job Application and Recruitment Process Evaluation of Employee Candidates Determination of Wage Policy Execution of Assignment Processes
Fulfillment of Communication Activities	Execution of Communication Activities Ensuring Internal Communication and Collaboration
Compliance with Legislation and Fulfillment of Obligations & Execution of Audit Activities	Execution of Activities in Compliance with the Legislation Providing Information to Authorized Institutions and Organizations Execution of Emergency Management Processes
Execution of Company Activities and Policies	Processing of Business Activities Execution of Management Activities

 4. Transfer of Personal Data

We may transfer your data to business partners, lawyers, consultants, and audit firms from whom our Company provides support and services to examine the suitability of the candidate for the position sought, to the authorized institutions and organizations the requirements set out in Articles 8 and 9 of the Law by the legislation or upon request, provided that Our Company complies with the requirements set out in Articles 4, 8 and 9 of the Act and takes the necessary security measures. We may contact your reference and discuss the information you have provided.

In case your job application is unsuccessful, your application shall be kept for the period stipulated by the Law to be evaluated for the same positions, provided that you have given your explicit consent, and shall be destroyed upon expiration of the period.

Within the scope of conducting and organizing our Company activities, we may provide services from multinational cloud providers equipped with adequate security measures for data storage, data backup, and e-mail services. Since the system infrastructure of our Company (such as Mail-File Server etc.) is based on a cloud structure, your data shall be transferred abroad.

5. Measures for the Security of Personal Data

Our Company takes all required physical, administrative and technological measures and periodically updates these measures to ensure that your data is not processed unlawfully and to protect the security of your data.

6. Your Rights as Personal Data Owner

Subject to applicable laws, you as the data owner may exercise several rights by applying to our Company, including;

a) The right to be informed whether your data is being processed,- Request information if your Personal Data has been processed,

b) The right to request information about the purpose of the processing of your data and whether this was done legitimately,

c) The right to be informed about third parties that your data was disclosed to locally or internationally,

d) The right to request rectification of any inaccuracies of your data and, if applicable, completion of your data,

e) The right to request, on legitimate grounds, erasure or disposal of your data,

f) The right to request that any transactions made to third parties in which your data has been disclosed,

g) The right to object to the result occurred against you by analyzing the processed data exclusively through automated systems,

h) The right to seek damages should you sustain any harm as a result of illegitimate processing of your data.

Application to the Company regarding your Rights

You can complete and sign the Data Owner Application Form (You can obtain the application form from the Human Resources Department) by the methods specified below or other methods determined by the Personal Data Protection Board. You can send a copy of the form with a wet signature or signed with your “secure electronic signature” by the Electronic Signature Law No. 5070 to our Company address or hr@niso.com.tr/ email address free of charge by hand or through a notary public. Our Company finalizes your application within 30 days, accepts the request or rejects it by explaining the reason, and notifies you of the answer in writing or electronically.