OneNewOne prioritizes the protection of your personal data as a primary concern while conducting our processes. We highly value the security of your personal data and its processing in compliance with regulations.

This information text contains details about how we process your personal data as the data controller through our website activities.

1. For what purposes and on what legal grounds do we process your personal data?

The legal grounds for processing personal data are regulated by Articles 5 and 6 of the Law on the Protection of Personal Data. Below, we specify the purposes for which we process personal data and the legal grounds for these purposes:

Processing of personal data is necessary for the establishment or performance of a contract based on the legal ground, for the following purposes:

• Execution of membership, registration, activation, and user authentication processes for our websites,
• Execution of service purchase requests and contract processes directed to the Company,
• Execution of processes related to your purchase requests and processing of payments,
• Execution of processes related to return requests and refunding,
• Execution of processes related to the provision of goods and/or services to the Company.

Fulfillment of our legal obligations based on the legal ground, for the following purposes:

• Fulfillment of our legal obligations when requested by authorized institutions or organizations or when notification to these institutions is foreseen, such as sharing your information in cases where there is suspicion of an unlawful transaction and a public institution requests information,
• Execution of financial and accounting processes,
• Conducting our activities in compliance with regulations.

Processing of data is mandatory for the establishment, use, or protection of a right based on the legal ground, for the following purposes:

• In case of a possible legal dispute, the protection and use of our rights and the conduct of legal processes.

Processing is necessary for our legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject based on the legal ground, for the following purposes:

• Execution of login processes when logging into the website,
• Integration of open positions into the site and directing individuals to suitable positions based on their characteristics and qualifications when you log into the website,
• Retention of information of individuals who act as references for job candidates and sharing this information with employers and authorized persons when necessary,
• Receipt and resolution of suggestions, requests, and complaints,
• Conducting studies for customer satisfaction,
• Conducting studies for the improvement and development of our products, services, and processes,
• Conducting communication activities with our suppliers, business partners, and customers,
• Reporting, auditing, and reviewing our business processes.

In case of your explicit consent, for the following purposes:

• Informing you about campaigns, promotions, events, surveys, and opportunities in accordance with your communication preferences (such communication allows us to increase your loyalty and satisfaction with our products/services),
• Personalization of your experiences with our products/services, offering products and services tailored to your preferences and interests, and conducting marketing analysis processes,
• Conducting collaborative marketing activities with business partners.

Your explicit consent is separately obtained, and even if you give your consent, you have the right to withdraw this consent at any time.

2. What personal data do we process?

Under the purposes and processes mentioned above; you can find the individual groups of data subjects whose personal data is processed and the data processed for these groups in the table below:

Website Visitors	We process the identity information, contact information, and transaction security information of users who create an account on our website but do not share their resumes.
Customer Employee/Authorized Personnel	Within the scope of the activities carried out on our website, we process the identity, contact, customer transaction information, title, and professional information, transaction security information, and (in case of a dispute) legal transaction information and financial information in payment transactions of individuals working and/or authorized by employers who are looking for personnel.
Supplier/Business Partner Employees/Authorized Personnel	In the context of our cooperation activities to carry out the activities on our website, we process the identity, contact, customer transaction information, transaction security information, legal transaction information, and financial information in payment transactions of the employees and/or authorized persons of our suppliers and business partners.
Third Parties Referred as References	The identity, contact, title, and professional information of individuals referred to as references in the applications of candidates are processed. (If you think that your information has been shared with us knowingly, please inform us. However, for a more effective process, please also contact the job candidate who applied.)

In addition to the data categories mentioned above, we process some of your data during your visit to our site to provide you with a more quality and effective service. For detailed information, please visit our Cookie Policy.

3. Whom and for what purposes do we share your personal data?

Your personal data is shared with the employer parties with open job positions in the scope of the services provided by the Company when necessary based on the legal grounds mentioned in this information text for the fulfillment of the purposes specified in this information text. In addition, we share it with authorized institutions and organizations, suppliers, and business partners, in accordance with the rules regarding the transfer of personal data specified in Articles 8 and 9 of the Law on the Protection of Personal Data.

4. How and on what legal grounds do we collect your personal data?

When you visit our website and perform transactions on the site, we collect your personal data through our sites by automatic and partially automatic methods. We collect your personal data based on the legal grounds specified in Articles 5 and 6 of the Law on the Protection of Personal Data, namely the necessity of processing personal data for the establishment or performance of a contract, fulfillment of our legal obligations, the necessity of processing data to establish, use or protect a right, processing data is mandatory for our legitimate interests provided that it does not harm the fundamental rights and freedoms of the data subject, and your explicit consent if given. You can find detailed information about the purposes of data processing activities carried out based on these legal grounds in the first article of this information text.

5. How can you exercise your rights regarding your personal data?

Article 11 of the Law on the Protection of Personal Data regulates the rights of data subjects. In accordance with this article, you have the following rights:

• Learn whether your personal data is processed or not,
• If your personal data is processed, request information about it,
• Learn the purpose of processing your personal data and whether it is used appropriately for that purpose,
• Know the third parties to whom your personal data is transferred at home or abroad,
• If your personal data is incomplete or incorrectly processed, request their correction and request the notification of the transactions made within this scope to the third parties to whom your personal data has been transferred,
• Object to the emergence of a result against you by analyzing your processed data solely through automated systems,
• If your personal data is processed unlawfully and causes damage, request the removal of the damage.

To submit your requests regarding the above rights to the Company, you can use the following methods:

• You can send an email to info@onenewone.com from your registered email address in our systems,
• You can also prefer other methods specified in the Regulation on Application Principles and Procedures to the Data Controller.