Privacy Notice for Job Applicants

This notice is provided by Özel Lider Güneşli Koleji (the “School”) under Article 10 of Turkish Personal Data Protection Law No. 6698 (“KVKK”) to inform candidates who apply for a job through the Careers page of our website. The Turkish version prevails.

Data controller

Özel Lider Güneşli Koleji, Güneşli, 1297. Sk. No:8, 34212 Bağcılar/İstanbul, Türkiye. For requests under KVKK: gunesliliderbasvuru@k12net.com

Personal data we process

Identity and contact: first name, last name, phone number, email address
Professional information: the posting or subject you apply for, your message and the education, work experience and other information in your CV
Transaction security: the time of your application and acknowledgement, and an irreversible digest derived from your IP address (your IP address itself is not stored)
Evaluation: the status of your application and our HR team’s evaluation notes

Please do not include special categories of personal data in your CV, such as health, religion, membership of an association, foundation or trade union, or criminal convictions; this information is not needed to evaluate your application.

Purposes

Receiving and evaluating your application and matching it with suitable positions
Contacting you and scheduling interviews
Running and concluding the recruitment process
Preventing misuse of the application form and keeping information secure
Meeting legal obligations and responding to requests from competent authorities

How we collect data and legal grounds

Your personal data is collected electronically and directly from you through the application form on the Careers page. It is processed on the following grounds under Article 5(2) of KVKK:

(c) it is directly related to the conclusion of a contract (pre-employment evaluation)
(ç) it is necessary for the School to comply with a legal obligation
(f) the School’s legitimate interest (application security and preventing misuse), provided that it does not harm your fundamental rights and freedoms

Transfers

Your application can only be viewed by HR and management staff authorised by the School. For the purposes above only, your personal data may be transferred, in line with Articles 8 and 9 of KVKK:

to competent public authorities when required by law
to the service providers that host and operate the application system: Hetzner Online GmbH (Nuremberg, Germany) for server hosting and Cloudflare, Inc. for secure delivery of website traffic

Because the server is located in Germany, this transfer is carried out in line with the cross-border transfer rules in Article 9 of KVKK. Your application details are not sent to any artificial intelligence service, and application notification emails do not contain your personal data.

Retention

Your application and CV are kept for up to 1 year from the date of application; after that, your personal data and CV are deleted automatically. If you are hired, your data is kept in your employee file for the periods required by law. You can ask us to delete your data earlier at any time.

Security

Your personal data and CV are stored encrypted (AES-256) in our database. Access is limited to authorised staff who use two-step verification, and every view and CV download is logged.

Your rights

Under Article 11 of KVKK, you have the right to:

learn whether your personal data is processed
request information about the processing
learn the purpose of processing and whether data is used accordingly
know the third parties in Türkiye or abroad to whom data is transferred
request correction of incomplete or inaccurate data
request deletion or destruction under the conditions in Article 7 of KVKK
request that corrections and deletions be notified to third parties who received the data
object to a result against you arising exclusively from automated analysis
claim compensation for damage caused by unlawful processing

How to apply

You can send your requests in writing to the School’s address or to gunesliliderbasvuru@k12net.com, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests are concluded free of charge within 30 days at the latest, depending on their nature.