This notice is provided in order to fulfill the information obligation pursuant to Article 10 of the Turkish Law on the Protection of Personal Data No. 6698 (“KVKK”) and the relevant legislation regarding the processing of your personal data.

Deva Holding A.Ş. (“DEVA”), located at Halkalı Merkez Mah. Basın Ekspres Cad. No:1 Küçükçekmece / Istanbul, processes the personal data you provide during your job application process in its capacity as data controller for the purpose of evaluating your application.

The personal data listed below are collected and processed pursuant to Article 5/2(c) of KVKK, as they are necessary for the evaluation of a potential employment contract. In addition, if you voluntarily include special categories of personal data within your CV or application documents, such data will be processed based on your explicit consent pursuant to Article 5/1 of KVKK.

If you provide the personal data of individuals as references in your application, you must ensure that the relevant reference persons have been informed and have given their consent to share their personal data with DEVA. By submitting such information, you acknowledge and undertake that the reference persons have been informed and have consented to the sharing of their personal data, and that any claims or demands arising from the reference person regarding such sharing shall be your responsibility.

I. Personal Data Processed

The following personal data that you disclose in your application form may be processed by DEVA’s Human Resources Department:

  1. Name and surname
  2. Photograph (not specifically requested; if provided voluntarily)
  3. Date of birth
  4. Gender
  5. Nationality
  6. Driving license information
  7. Military service status
  8. Education and diploma information
  9. Contact information (phone number, address and email)
  10. Foreign language skills
  11. Competencies and skills
  12. Courses, seminars and internships attended
  13. Previous employers (work experience)
  14. Hobbies
  15. Identity and contact information of reference persons

We recommend that you do not share any personal data with DEVA other than those listed above. If you provide additional personal data beyond those specified above, such data may be processed pursuant to Article 5/2(d) of KVKK, on the basis that it has been made public by the data subject.

Additionally, DEVA may retain records of trainings you attend prior to recruitment, results of foreign language examinations, technical assessments, general aptitude and behavioral tests, and interview notes regarding your personal profile evaluation. These data are processed pursuant to Article 5/2(c) and 5/2(f) of KVKK as they are necessary for the establishment of a contract and for the protection of DEVA’s legitimate interests in evaluating candidate suitability.

II. Purpose and Legal Basis for Processing Personal Data

Purpose of Processing

DEVA’s Human Resources Department processes your personal data for the following purposes:

a. Evaluating the qualifications, experience and suitability of candidates for open positions
b. Verifying the accuracy of the information provided by candidates or conducting reference checks where necessary
c. Communicating with candidates regarding the recruitment process or contacting candidates for future suitable positions
d. Complying with legal obligations or requests from authorized public institutions or organizations
e. Improving and developing DEVA’s recruitment policies and practices

Legal Basis for Processing

Your personal data are processed pursuant to Articles 5/2(c), 5/2(d), and 5/2(f) of KVKK on the basis that:

  • processing is necessary for the establishment of an employment contract,

  • the data have been made public by you, and

  • processing is necessary for the protection of DEVA’s legitimate interests provided that it does not harm your fundamental rights and freedoms.

Therefore, such processing does not require your explicit consent. Accordingly, you may not request deletion or destruction of such personal data until the expiration of the legally required retention periods.

If, during your job application, you voluntarily provide special categories of personal data such as health information, trade union membership, or membership in associations or foundations—although not requested by DEVA—such data will be processed based on your explicit consent pursuant to Article 6/2 of KVKK. You have the right to withdraw your consent regarding the processing of such special categories of personal data at any time in accordance with Article 7 of KVKK.

III. Retention Period of Personal Data

Personal data of job applicants are retained for two (2) years from the date of application if no employment relationship is established.

If you are not recruited, the personal data obtained during your application process, including training records and examination results, will be deleted or destroyed during the first destruction cycle following the expiration of the two-year retention period.

Application forms, CVs, training records and examination results are stored by DEVA’s Human Resources Department both:

  • physically in locked storage areas, and

  • electronically with restricted internal access.

Application forms and CVs are also stored on DEVA’s internal electronic corporate platforms with limited access authorization.

IV. Transfer of Personal Data to Third Parties

Your personal data may be shared with:

  • managers responsible for the relevant position you applied for

  • company executives

  • members of the board of directors where necessary

  • reference persons you have provided for verification purposes

  • independent audit firms within the scope of audit processes

The legal basis for such transfers is Article 8/2 of KVKK in conjunction with Articles 5/2(c) and 5/2(f), on the grounds that processing is directly related to the establishment of a contract and is necessary for DEVA’s legitimate interests.

Except for the cases listed above, your personal data will not be shared with any other institution or organization.

V. Method of Collecting Personal Data

Your personal data may be collected through:

  • LinkedIn
  • Kariyer.net
  • Youthall and similar career platforms
  • email applications submitted directly to DEVA

VI. Your Rights

As a data subject, you have the following rights under applicable legislation:

  • To learn whether your personal data are processed and how they are processed (Article 11/a-b)
  • To learn the purpose of processing and whether your data are used in accordance with that purpose (Article 11/c)
  • To know the third parties to whom your personal data are transferred (Article 11/ç)
  • To request correction of incomplete or inaccurate personal data (Article 11/d)
  • To request deletion of personal data where the reasons for processing no longer exist (Article 7 and 11/e)
  • To request notification of corrections or deletions to third parties to whom personal data have been transferred (Article 11/f)
  • To object to any adverse outcome resulting from automated analysis of processed data (Article 11/g)
  • To request compensation for damages arising from unlawful processing of personal data (Article 11/ğ)

The above rights may be subject to limitations under applicable law (particularly Articles 10 and 13 of KVKK).

Data Controller

DEVA HOLDİNG A.Ş.

MERSIS Number: 0294000023400015

Address:
Halkalı Merkez Mah. Basın Ekspres Cad. No:1
Küçükçekmece / Istanbul / Türkiye

Phone: +90 212 692 92 92
Email: info@deva.com.tr

For the exercise of your rights, you may contact the Human Resources Department via email.

Upon request, the Company may update your personal data at any time.