One Human Software and IT Consultancy Inc.

Privacy Notice Regarding the Processing of Personal Data

Candidate Membership Form

At One Human Software and IT Consultancy Inc. (“OneNewOne” or “the Company”), protecting your personal data, which we obtain while managing our processes, is one of our top priorities. We place great emphasis on ensuring the security of your personal data and on processing/using it in compliance with applicable laws.

This privacy notice contains information regarding how we, as the data controller, process your personal data in connection with our membership activities conducted through our website (“Website”) at https://candidate.onenewone.com/register.

1. Which personal data do we process, for what purposes, and on what legal grounds?

Article 5 of the Law on the Protection of Personal Data (“the Law”) regulates the legal grounds for processing personal data. Below, we specify the purposes for which we process your personal data and the legal grounds on which such processing is based:

Processed Data	Data Processing Purposes	Legal Ground for Data Processing
Identification (name – surname) Contact (phone number, email address) Transaction Security (password, IP address, log records of user actions)	To execute membership, registration, activation, and user verification processes for our website, To ensure that you benefit from the job search and interview-related products and services provided within your membership, To notify you about updates, errors, and transactions on the Website, To manage member relationships.	Law art. 5/2-(c) Processing is necessary for the formation or performance of a contract.
Identification (name – surname) Contact (email address) Legal Process (information contained in correspondence with judicial authorities, information in case files)	In cases where competent institutions or organizations request information from our Company or where we are required to notify these institutions, in order to fulfill our legal obligations (for example, if a public institution requests information regarding an operation suspected of being unlawful, your information may be shared).	Law art. 5/2-(ç) Fulfilling our legal obligations.
	In the event of a potential legal dispute, to protect and enforce our rights and to carry out legal proceedings.	Law art. 5/2-(e) Processing is necessary to establish, exercise, or protect a right.
Identification (name – surname) Contact (email address) Transaction Security (password, IP address, log records of user actions)	To execute login processes when you access the website, To provide you with information about open positions that may be of interest to you, To receive and address your suggestions, requests, and complaints, To conduct activities aimed at customer satisfaction, To carry out studies aimed at developing and improving our products, services, and processes, To report, audit, and review our business processes, To train and develop the relevant artificial intelligence system as part of providing you with the products and services offered by ONO.	Law art. 5/2(f) Processing is necessary for our legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject.
Identification (name – surname) Contact (email address) Transaction Security (password, IP address, log records of user actions)	To provide you with information about campaigns, promotions, events, surveys, and opportunities in accordance with your communication consent preferences (such communications help us increase your engagement and satisfaction with our products/services), To personalize your experiences with our products/services, to offer products and services tailored to your preferences and interests, and to conduct marketing analyses, To share your information with employers who have open positions, for the purpose of including your details in the talent pools of companies using OneNewOne, provided you have given your explicit consent.	Law art. 5/1 Explicit consent

1. With whom and for what purposes do we share your personal data?

Your personal data is shared with third parties in accordance with the rules on the transfer of personal data under the Law and relevant regulations. In this context, the parties with whom we share data and the purposes for such sharing are specified below:

• Authorized Institutions and Organizations: In cases where such institutions request information from our Company or when we are required to notify these institutions, in order to fulfill our legal obligations.

• Suppliers and Business Partners: In order to fulfill the purposes set forth under “1. Which personal data do we process, for what purposes, and on what legal grounds?”, we receive support from suppliers that provide information technology infrastructures, products, and services (for example, obtaining cloud computing services for data storage).

• Employers with Open Positions: If you have provided your explicit consent, your information may be shared with employers who have open positions so that your details can be included in the talent pools of companies using OneNewOne.

1. From which channels do we collect your personal data?

When you visit our website and perform transactions on it, we collect your personal data through our sites via automated and semi-automated methods.

1. How can you exercise your rights regarding your personal data?

Article 11 of the Law on the Protection of Personal Data regulates the rights of data subjects. Under this article, you have the following rights:

• To learn whether your personal data has been processed,
• If your personal data has been processed, to request information regarding it,
• To learn the purpose for which your personal data is processed and whether it is used in accordance with that purpose,
• To know the third parties to whom your personal data has been transferred domestically or internationally,
• In the event that your personal data has been processed incompletely or incorrectly, to request its correction and to ask that any corrections be communicated to third parties to whom your data has been transferred,
• If there is no longer any reason for processing your personal data, even though it has been processed in accordance with the Law and other relevant legislation, to request its deletion or destruction, and in cases of incomplete or incorrect processing, to request that corrections be communicated to third parties to whom your data has been transferred,
• To object to a decision based solely on automated processing of your data that produces an unfavorable effect on you,
• If you suffer damages due to the unlawful processing of your personal data, to request compensation for such damages.

To exercise the rights mentioned above regarding your personal data, you may contact the Company using the following methods:

• You may send an email from the email address registered in our systems to info@onenewone.com,
• Notification on the Procedure and Principles Regarding Applications to the Data Controller for other available methods.