Employee Candidate Information Text

DISCLOSURE TEXT FOR EMPLOYEE CANDIDATES APPLYING FOR A JOB ON THE WEBSITE OF PROFEN DEFENCE TECHNOLOGIES AND SERVICES INDUSTRY AND TRADE INC.

A) General Disclosure

This ”Disclosure” text, prepared by PROFEN DEFENCE TECHNOLOGIES AND SERVİCES INDUSTRY AND TRADE INC. (the ”Company”) as the Data Controller in accordance with the Personal Data Protection Law No. 6698 (the “PDPL”) and the Communiqué on the Procedures and Principles for the Fulfilment of Disclosure Obligation, published in the Official Gazette No. 30356, dated March 10, 2018, is issued to provide you information about for what purposes your personal data will be processed, to whom and for what purposes your personal data processed can be transferred, the method and legal ground for collecting your personal data within the framework of Article 10-Disclosure Obligation of Data Controller, Article 11-Rights of Related Person of the Personal Data Protection Law and Articles 4 and 5 of the Communiqué on the Procedures and Principles for the Fulfilment of Disclosure Obligation, and about your other rights listed in Article 11 of the Personal Data Protection Law.

B) Purposes and Legal Ground of Processing of Your Personal Data

Your personal data is is collected and processed based on Article 5 of the Law No. 6698 by the Company, to carry out the job interview process with you, to fulfil the contractual relationship established after your have made a job application to the Company, to fulfil our legal obligation arising from the interviews made before the employment contract that is considered to entered into with you or if it is necessary for the legitimate interests of our Company, provided that your fundamental rights and freedoms are protected. Please note the fact that the servers of the e-mail service providers from which services are received for sending e-mails are abroad causes these e-mails to be data transfer abroad in nature. Therefore, all your personal data processed by the Company can be transferred abroad through e-mail service providers whose servers are located abroad, based on the legal ground of “express consent”.

C) Detailed Information on Personal Data (Which data do we process? Why and how do we process? Who do we transfer them to?)

After you have made a job application through the “Join Our Team” section on the Company’s website, the Company shall process your personal data listed in the table above for the following purposes:

• carrying out your job application process;
• planning the job interview process, contact you for job interviews and to inform you about the results of the job interviews;
• holding written or oral interview exams for you before or after job interviews and employment interviews;
• holding interviews, and making tests, with you;
• performing the contractual relationship that may be established with you and fulfilling our legal obligations arising from such contract;
• making organizational, financial and administrative planning for the most appropriate position in line with the needs of the Company, based on the personal data you have provided to the Company;

in an accurate and up-to-date manner in accordance with the law and the rule of honesty, provided that the processing is carried out in a limited and responsible manner within the scope of clear and legitimate purposes.

Your personal data listed in the above paragraph is processed by the Company; automatically by our human resources departments by being stored on computers/servers; by non-automatic means by being kept in printed form under lock; by creating a database, making lists, filling documents, filling forms, etc.

In case of legal obligations or the requirements of Articles 8/2 and 9/2 of the PDPL, your personal data may be shared with/transferred to third-party human resources companies from which the Company receives external services, the law office from which the Company receives legal services and the Company’s business partners with organic bonds between them, or public institutions and organizations authorized to request such data due to any legal requirements, for purposes, like carrying out the job interview process by such third-parties on behalf of the Company, preparing interview questions specific to you, in an accurate and up-to-date manner in accordance with the law and the rule of honesty, provided that the processing is carried out in a limited and responsible manner within the scope of clear and legitimate purposes. Information about the Company’s partners can be found at www.ito.org.tr.

D) Method of Collecting Personal Data

Your personal data listed in Clause C above is collected in accordance with the applicable legislation by the Company when you submit this data to the Company by applying electronically through the Company’s website.

E) Keeping Your Personal Data Accurate and Up-To-Date

Those who share their personal data with the Company agree and represent that they are aware that keeping this date accurate and up-to-date is important both in terms of the rights they have on their personal data within the meaning of the Personal Data Protection Law No.6698 and other relevant legislation and that any liabilities arising from providing false information will entirely lie with them.

You can notify us of any changes and/or updates regarding the personal data you have shared through the Company’s e-mail address at profensavunma@hs03.kep.tr and/or by submitting a notice to be served through a notary public, a registered mail or physical petition to the Company.

F) Deletion, Destruction or Anonymization of Personal Data

Your personal data processed for the purposes specified in this Disclosure Text will be deleted, destroyed by us in accordance with the Company’s Personal Data Storage and Destruction Policyex officio or upon your request when the purpose requiring processing according to Article 7/f.1 of the PDPL has disappeared and the time periods provided for in the Laws have passed, but in any case, within two (2) years at the latest after your data above is transmitted to the Company, or will continue to be used by being anonymizing the same.

G) Measures on Protection of Personal Data

Protection of personal data is important for the Company. The Company takes the necessary technical and administrative measures to protect personal data against unauthorized access or loss, misuse, disclosure, alteration or destruction of such personal data. The Company undertakes to keep your personal data confidential and to take all necessary technical and administrative measures and take due care to ensure the confidentiality and protection of your personal data.

In the event that your personal data is damaged or captured by third-parties as a result of attacks to the website and the system although the Company has taken the necessary information security measures, the Company will immediately notify you and the Personal Data Protection Board of the incident.

H) Other Rights Listed in Article 11 of the PDPL

You can at any time apply to the Company to exercise your rights below:

1. a) to find out whether your personal data has been processed;
2. b) if your personal data has been processed, to request information related thereto;
3. c) to find out the purpose of processing of your personal data and whether or not your personal data is used in accordance with the purpose;
4. d) to receive information about third-parties to whom your personal data has been transferred home or abroad;
5. e) to request correction if your personal data has been processed incomplete/incorrectly;
6. f) to request for deletion or destruction of your personal data in accordance with the requirements provided for in Article 7 of the PDPL;
7. g) to request for notification of any transactions carried out in accordance with sub-paragraphs (ç ) and (d) to third-parties to whom your personal data has been transferred;
8. h) to object to the emergence of any consequences against you through the analysis of your personal data processed exclusively by means of automatic systems;
9. i) if you suffer any loss and/or damage due to the unlawful processing of your personal data, to claim indemnification for losses and/or damages you have suffered;

You can contact us at any time to exercise your rights in Article 11 of the Law No. 6698 through the Company’s e-mail address at profensavunma@hs03.kep.tr and/or by submitting a notice to be served through a notary public, a registered mail or physical petition to the Company.