One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş.

Information Notice on the Processing of Personal Data

Candidate Membership Form

One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş. (“OneNewOne” or the “Company”) considers the protection of your personal data obtained while conducting our processes as one of our primary priorities. We attach great importance to ensuring the security of your personal data and to using/processing it in compliance with the law.

This information notice contains details on how we, as the data controller, process your personal data in connection with the membership activity carried out through our website https://candidate.onenewone.com/register (“Website”).

1. Which personal data do we process, for what purposes, and on which legal grounds?

Article 5 of the Law on the Protection of Personal Data (the “Law”) regulates the legal grounds for personal data processing. Below, we explain the purposes for which we process your personal data and the corresponding legal grounds:

Processed Data	Purposes of Data Processing	Legal Grounds for Data Processing
Identity (name – surname) Contact (phone number, e-mail address) Transaction Security (password, IP address, log records of user activities)	Execution of membership, registration, activation, and user verification processes for our Website, Ensuring you benefit from the job search and interview services provided under your membership, Providing you with updates, error notifications, and transaction information on the Website, Managing member relations.	Law Art. 5/2-(c) Processing is necessary for the establishment or performance of a contract.
Identity (name – surname) Contact (e-mail address) Legal Transaction (information in correspondence with judicial authorities, information in case files)	Fulfilling our legal obligations in cases where authorized institutions or organizations request information from our Company or where notification to such institutions is required (e.g., sharing your information if a public authority requests it in relation to a transaction suspected to be unlawful).	Law Art. 5/2-(ç) Compliance with our legal obligations.
	In case of a possible legal dispute, protecting and exercising our rights, and conducting legal proceedings.	Law Art. 5/2-(e) Processing is mandatory for the establishment, exercise, or protection of a right.
Identity (name – surname) Contact (e-mail address) Transaction Security (password, IP address, log records of user activities)	Performing login operations when you sign in to the Website, Providing information about open positions that may interest you, Receiving and resolving your suggestions, requests, and complaints, Carrying out customer satisfaction activities, Conducting improvement and development activities for our products, services, and processes, Reporting, auditing, and reviewing our business processes, Training and developing the artificial intelligence system provided by ONO within the scope of delivering products and services to you.	Law Art. 5/2-(f) Processing is mandatory for our legitimate interests, provided it does not harm the fundamental rights and freedoms of the data subject.
Identity (name – surname) Contact (e-mail address) Transaction Security (password, IP address, log records of user activities)	Providing you with information about campaigns, promotions, events, surveys, and opportunities in line with your communication consent preferences (these communications allow us to increase your engagement and satisfaction with our products/services), Personalizing your experience with our products/services, offering products and services tailored to your preferences and interests, conducting marketing analysis, Sharing your information with employers with open positions to include your profile in the pools of companies using OneNewOne, provided you have given explicit consent.	Law Art. 5/1 Explicit consent
Identity (name – surname) Contact (phone number, e-mail address) Professional Experience (profile information on career platforms including LinkedIn and KariyerNet)	Transferring profile information from career platforms including LinkedIn and Kariyer.net to our system for updating your data within OneNewOne and enabling better matching with job postings compatible with your profile.

1. With whom and for what purposes do we share your personal data?

Your personal data is shared with third parties in accordance with the rules on the transfer of personal data set out in the Law and applicable regulations. The parties with whom we share your data and the purposes of sharing are as follows:

• Authorized Institutions and Organizations: To fulfill our legal obligations in cases where our Company is requested to provide information or documents, or where notification to such institutions is required.

• Suppliers and Business Partners: To fulfill the purposes specified under the section “1. Which personal data do we process, for what purposes, and on which legal grounds?,” by obtaining support from suppliers providing IT infrastructures, products, and services (e.g., using cloud computing services to store data in the cloud).

• Employers with Open Positions: With your explicit consent, sharing your information with employers that use OneNewOne to include your profile in their candidate pools.

1. Through which channels do we collect your personal data?

When you visit our Website and carry out transactions on it, we collect your personal data through our sites and, with your consent, via career platforms using automatic and semi-automatic methods.

1. How can you exercise your rights regarding your personal data?

Article 11 of the Law on the Protection of Personal Data regulates the rights of data subjects. Under this Article, you have the following rights:

• To learn whether your personal data has been processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether it is used in line with that purpose,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request the correction of your personal data if it is incomplete or incorrect and to request notification of this correction to third parties to whom your personal data has been transferred,
• To request the deletion or destruction of your personal data if the reasons requiring its processing cease to exist, even though it was processed in accordance with the Law and other applicable laws, and to request notification of such deletion or destruction to third parties to whom your personal data has been transferred,
• To object to the emergence of a result against you by means of analyzing your processed data exclusively through automated systems,
• To demand compensation for damages in case you suffer harm due to unlawful processing of your personal data.

You may submit your requests regarding the above-mentioned rights to the Company through the following methods:

• You may send an e-mail from your registered e-mail address in our systems to info@onenewone.com,
• You may also use other methods specified in the Communiqué on the Procedures and Principles of Application to the Data Controller.