One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş.

Privacy Notice Regarding the Processing of Personal Data

Company Employee Membership Form

At One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş. (“OneNewOne” or “the Company”), protecting the personal data we obtain during the conduct of our operations is one of our top priorities. We attach great importance to ensuring the security of your personal data and to processing/using it in accordance with the applicable laws.

This privacy notice contains information on how we, as the data controller, process your personal data in connection with the membership activities conducted through our website (“Website”) at https://company.onenewone.com/register.

1. Which personal data do we process, for what purposes, and on what legal basis?

Article 5 of the Law on the Protection of Personal Data (“Law”) regulates the legal grounds for processing personal data. Below, we specify the purposes for which we process your personal data and the legal grounds upon which this processing is based:

Processed Data	Purposes of Data Processing	Legal Basis for Processing
Identity (name – surname) Contact (phone number, email address) Corporate Information (company name, brand name) Transaction Security (password, IP address, log records of user actions)	To carry out membership, registration, activation, and user verification processes on our website, To manage service purchase requests directed to the Company and to conduct the necessary discussions regarding the contractual processes, When you submit a service purchase request, to process the related transactions and to collect payment, To process refund requests and execute the refund of fees, To carry out the processes for the goods and/or services provided to the Company.	Law Art. 5/2-(c) Processing is necessary for the formation or performance of a contract.
Identity (name – surname) Contact (phone number, email address) Corporate Information (company name, brand name) Transaction Security (password, IP address, log records of user actions) Legal Transaction (information in correspondence with judicial authorities, information contained in case files)	In cases where an authorized institution or organization requests information from our Company or when we are required to notify such institutions, in order to fulfill our legal obligations (for example, if a public institution requests information regarding an operation suspected to be unlawful, your information may be shared).	Law Art. 5/2-(ç) Fulfilling our legal obligations.
	In the event of a potential legal dispute, to protect and enforce our rights and to carry out legal proceedings.	Law Art. 5/2-(e) Processing is necessary to establish, exercise, or protect a right.
Identity (name – surname) Contact (phone number, email address) Corporate Information (company name, brand name) Transaction Security (password, IP address, log records of user actions)	If you log into the website, to execute the login processes, To integrate open positions on the site and to direct you to appropriate positions based on your qualifications and attributes, If you serve as a reference for a candidate, to store the reference’s information and, if necessary, to share it with employer representatives and authorized persons, To receive and process your suggestions, requests, and complaints, To conduct activities aimed at customer satisfaction, To perform activities to develop and improve our products, services, and processes, To conduct communication activities with our suppliers, business partners, and customers, To report, audit, and review our business processes, As part of providing you with the products and services offered by ONO, to train and develop the relevant artificial intelligence system.	Law Art. 5/2(f) Provided that it does not harm the fundamental rights and freedoms of the data subject, processing is necessary for our legitimate interests.
Identity (name – surname) Contact (phone number, email address) Transaction Security (password, IP address, log records of user actions)	Based on your communication consent preferences, to inform you about campaigns, promotions, events, surveys, and opportunities (such communications enable us to increase your engagement and satisfaction with our products/services), To personalize your experiences with our products/services, providing you with products and services tailored to your preferences and interests, and to conduct marketing analysis, To carry out marketing collaboration activities with business partners.	Law Art. 5/1 Explicit consent

1. With whom and for what purposes do we share your personal data?

Your personal data is shared with third parties in accordance with the rules on the transfer of personal data set forth in the Law and the relevant legislation. In this context, the parties with whom we share the data and the purposes of such sharing are as follows:

• Authorized Institutions and Organizations: In cases where such institutions request information or documents from our Company, or where we are required to notify them, in order to fulfill our legal obligations.

• Suppliers and Business Partners: To fulfill the purposes stated under “1. Which personal data do we process, for what purposes, and on what legal basis?”, we obtain support from suppliers that provide information technology infrastructures, products, and services (for example, by obtaining a cloud computing service for data storage).

1. From which channels do we collect your personal data?

When you visit our website and perform transactions on the site, we collect your personal data through our websites by automatic and partly automatic methods.

1. How can you exercise your rights regarding your personal data?

Article 11 of the Law on the Protection of Personal Data regulates the rights of data subjects. In accordance with this article, you have the following rights:

• To learn whether your personal data is processed,
• If your personal data is processed, to request information regarding the processing,
• To learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
• To know the third parties to whom your personal data has been transferred, either domestically or internationally,
• If your personal data has been processed incompletely or incorrectly, to request that it be corrected and to request that the corrections be communicated to the third parties to whom your data has been transferred,
• Even if your personal data has been processed in accordance with the Law and other relevant legal provisions, if the reasons for processing no longer exist, to request that your personal data be deleted or destroyed and, in cases of incomplete or incorrect processing, to request that the actions taken be communicated to the third parties to whom your data has been transferred,
• To object to a decision based solely on automated analysis of your processed data which leads to an unfavorable outcome for you,
• To request compensation for damages in case you suffer harm due to the unlawful processing of your personal data.

You can choose the following methods to submit your requests regarding the above-mentioned rights to the Company:

• You can send an email from the email address registered in our systems to info@onenewone.com,
• Notification Regarding the Procedure and Principles for Application to the Data Controller – you may also use the other methods specified in this document.