Protection of Personal Data — Privacy Notice

1. Data Controller

Your personal data is processed within the scope explained below by [Trade name] ("Turanpass") in its capacity as data controller, pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"). Address: [Company address]. VERBİS registration: [VERBİS number].

2. Personal Data Processed

• Identity and contact: first name, surname, e-mail, telephone, date of birth.
• Professional experience: CV information (work experience, education, skills, languages, certificates, projects), CV files you upload, cover letters.
• Transaction security: IP address, browser information, session and sign-in records.
• Preferences: job-search status, profile visibility, notification and consent preferences.

Your contact details and CV content are stored encrypted in the database; they are shown to employers masked by default.

3. Purposes of Processing and Legal Grounds

• Provision of membership and the service (creating an account, searching listings, submitting applications) — necessity for the establishment and performance of the contract.
• Security and prevention of misuse (sign-in attempts, file virus scanning, audit records) — legitimate interest and legal obligation.
• Showing your profile to employers — your explicit consent. You may apply to listings even if you do not give consent.
• Promotional/informational e-mails — your explicit consent.
• Analytics cookies — your explicit consent (excluding strictly necessary cookies).

None of the processing based on explicit consent is mandatory for you to use the service, and you may withdraw your consent at any time from the Privacy and my data page.

4. To whom is it transferred?

• Employers: when you apply to a listing, your application and contact details are transmitted to the relevant employer (the application demonstrates your intention regarding this sharing). If your profile is "visible to employers", it appears masked in search results.
• Service providers: for hosting, e-mail delivery and security services, only to the extent necessary. Your data is hosted in Türkiye; no transfer abroad takes place.
• Competent public authorities: in the event of a legal obligation and within the scope requested.

5. Retention Period

Your personal data is processed for as long as your membership continues, without prejudice to the statutes of limitation and retention periods stipulated in the relevant legislation. Upon your deletion request, your data is anonymised irreversibly; audit records continue to be retained in a manner that does not reveal your identity.

6. Your Rights (KVKK Art. 11)

In relation to your personal data, you have the right to;

• learn whether it is processed and, if so, request information in this regard,
• learn the purpose of processing and whether it is used in accordance with that purpose,
• know the third parties to whom it is transferred domestically or abroad,
• request its correction if processed incompletely or inaccurately,
• request its erasure or destruction where the conditions are met,
• request that correction/erasure operations be notified to the third parties to whom it was transferred,
• object to an outcome against you arising from analysis by automated systems,
• request compensation for damages you suffer due to unlawful processing.

7. How to Apply

To exercise your rights, you may create a request directly from the Privacy and my data page in your account. You may also apply via [KEP address / e-mail] or in writing to [Company address]. Your applications are concluded within 30 days at the latest.

8. Cookies

Only strictly necessary cookies are used on the site by default (session management, security). Analytics cookies operate only with your explicit consent; if you do not give consent, no optional cookie is placed. You may change your preference from the Privacy and my data page.