1. Identity of the Data Controller
Pursuant to Personal Data Protection Law No. 6698 ("PDPL"), we, Enetki Defence Inc. ("ENETKI"), acting as the data controller, process and retain the personal data we obtain through the job application form on our website in accordance with the Law and applicable legislation.
2. Personal Data Processed and Data Categories
Through our online application form and the CV you upload, we process the minimum necessary data in the following categories in accordance with the principle of data minimisation:
- Identity Information: First name, surname and date of birth. A Turkish identity number and place of birth are not mandatory in the initial application form.
- Contact Information: Telephone number, email address and city/place of residence.
- Education and Professional Experience: Educational qualifications, schools and departments attended or graduated from, certificates, foreign language proficiency, previous work experience, job titles and references expressly provided by the candidate.
- Visual Data: A non-biometric portrait photograph, if voluntarily included in the CV by the candidate.
- Transaction Security Data: The IP address, form logs and transaction date and time recorded as required by legislation when the website form is submitted.
Important Notice: Our company does not request special categories of personal data at the initial application stage. Please do not include health information, criminal convictions or membership of associations, foundations or trade unions in your application form or CV.
3. Collection Method and Legal Grounds for Processing
Your personal data are collected by wholly or partly automated means when you complete the application form on our website and upload any accompanying documents. The data are processed on the following legal grounds set out in Article 5 of the Law:
- Article 5/2-f of the Law: Processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed. This covers conducting our human resources processes, assessing your suitability for the vacancy you applied for, organising evaluation, interview and communication processes, and ensuring transaction security.
- Article 5/2-c of the Law: Processing the personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract. If your job or internship application is successful, this covers communicating a job/internship offer to you and conducting the preliminary and acceptance procedures for concluding an employment contract, internship agreement or internship acceptance/training protocol.
- Article 5/2-e of the Law: Processing is necessary for the establishment, exercise or protection of a right. This enables our company to exercise its rights of defence and proof in potential legal disputes relating to recruitment.
4. Purposes of Processing Personal Data
The personal data collected are processed in accordance with the general principles in Article 4 of the Law and are limited to the following purposes:
- Planning and managing recruitment and candidate evaluation processes,
- Analysing and determining whether the candidate's professional and personal competencies meet the requirements of the vacancy applied for,
- Contacting the candidate regarding the application, interview scheduling and offer processes,
- Verifying work experience and qualifications only through the individuals and organisations expressly named as references in the CV, without contacting the candidate's current employer,
- Ensuring information security and server infrastructure security, and fulfilling obligations arising from applicable legislation.
5. Transfer of Personal Data
For the purposes stated above and in accordance with the conditions in Article 8 of the Law, your personal data may be transferred to:
- Technical service providers established in Türkiye that supply our company with IT infrastructure, email, database and server hosting services,
- The relevant authorities in response to lawful requests from authorised public institutions and organisations and judicial authorities.
6. Retention Period and Data Security
If your application is unsuccessful, your personal data are retained for a maximum of one year pursuant to Article 5/2-e of the Law, to establish our rights of proof and defence in potential disputes relating to recruitment. At the end of this period, the data are deleted, destroyed or anonymised. Requests for deletion under Article 11 of the Law are resolved within no more than 30 days in accordance with applicable legislation.
Under Article 12 of the Law, all necessary technical and organisational measures, including firewalls, access restrictions and encryption, are fully implemented on our company's servers to prevent unlawful processing of or access to personal data and to ensure their protection.
7. Your Rights under Article 11 of the Law
Under Article 11 of the Law, you have the following rights regarding your personal data by applying to Enetki Defence Inc. as the data controller:
- To learn whether your personal data are being processed,
- To request information if your personal data have been processed,
- To learn the purposes of processing and whether your personal data are used in accordance with those purposes,
- To know the third parties to whom your personal data are transferred in Türkiye or abroad,
- To request correction of incomplete or inaccurate personal data,
- To request deletion or destruction of your personal data under the conditions set out in Article 7 of the Law,
- To request notification of correction, deletion or destruction to the third parties to whom your personal data have been transferred,
- To object to a result against you arising from the analysis of your personal data exclusively by automated systems,
- To request compensation for damage suffered as a result of unlawful processing of your personal data.
You may submit requests concerning these rights in accordance with the Communiqué on the Procedures and Principles for Applications to Data Controllers, in writing to our registered head office address in person or through a notary, through our registered electronic mail (REM/KEP) address enetki@hs01.kep.tr, using a secure electronic signature or mobile signature, or from your email address registered in our system. Under Article 13 of the Law, your application will be resolved free of charge as soon as possible, depending on its nature, and within no more than thirty days.
Data Controller
Enetki Defence Inc.
Address: Çamlıca Neighbourhood, Anadolu Boulevard, Block AA1, No. 21/A, Yenimahalle, Ankara, Türkiye
Email: info@enetki.com
Registered Electronic Mail (REM/KEP): enetki@hs01.kep.tr
