Privacy Policy

This Privacy Policy has been prepared to inform you about your personal data processed within the framework of Article 10 of the Personal Data Protection Law No. 6698 (“Law”).

  1. Who Processes Your Personal Data?

Your personal data is processed by the company you applied to listed under this heading (“Company” or “Data Controller”) in a limited and proportionate manner in connection with the purposes specified below within the scope described below, while maintaining its accuracy and up-to-datedness.

  • Zorlu Enerji Elektrik Üretim A.Ş.
  • Zorlu O/M Enerji Tesisleri İşletme ve Bakım Hizmetleri A.Ş.
  • Zorlu Elektrik Enerjisi İthalat İhracat ve Toptan Ticaret A.Ş.
  • Rotor Elektrik Üretim A.Ş.
  • Zorlu Doğal Elektrik Üretimi A.Ş.
  • Zorlu Jeotermal Enerji Elektrik Üretimi A.Ş.
  • Eway Araç Kiralama Ticaret A.Ş.
  • Nemrut Jeotermal Elektrik Üretimi A.Ş.
  • Zorlu Osmangazi Enerji Sanayi ve Ticaret A.Ş.
  • Zorlu Yenilenebilir Enerji A.Ş.
  • Zorlu Doğal Gaz İthalat İhracat ve Toptan Ticaret A.Ş.
  • Zes Teknik Enerji Tesisleri Bakım ve Yenileme A.Ş.

  1. Which Personal Data Do We Process, for What Purposes and for What Legal Reasons?

As a company, we process and store your personal data in accordance with the law and the rules of honesty; accurate and up-to-date when necessary; for specific, clear and legitimate purposes and in a limited and proportionate manner in connection with these purposes.

Your collected personal data is processed in accordance with the personal data processing conditions specified in Articles 5 and 6 of the Law for the purposes stated below:

Personal Data

Purpose

Legal Reason

1. Identity Information

2. Contact Information

3. Personal Information

4. Financial Information

5. Visual and Audio Information

6. Professional Experience Information

7. Health Information

8. Reference Information

9.Process Security Information

Within the scope of planning and executing our company's human resources policies and processes and conducting candidate selection and evaluation processes,

• Receiving and evaluating job applications and conducting interview processes,

• Evaluating applications for suitable positions within our company and/or group companies (with your approval) for existing or future job openings,

• Auditing our human resources processes and making necessary reports,

• Protecting the legal interests of our company and fulfilling legal obligations.

  1. The processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract,
  2. Data processing is mandatory for the establishment, exercise or protection of a right,
  3. It is mandatory to fulfill legal obligations in the fields of employment, occupational health and safety, social security, social services and social assistance,
  4. Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person,
  5. It has been made public by the relevant person himself/herself
  6. Explicit consent of the person concerned, limited to certain conditions.

  1. Processing of Health Information

As a rule, our company does not process health information of candidates. If the nature of the position applied for by the candidate necessitates the processing of health information, health information may be processed by taking all necessary technical and administrative measures, based on the legal reason “It is mandatory for the fulfillment of legal obligations in the fields of employment, occupational health and safety, social security, social services and social assistance” in Article 6 of the Law, in line with the purposes specified in Article 2 of this Privacy Policy titled “Which of Your Personal Data Do We Process, for What Purposes and for What Legal Reasons?” and in order to ensure occupational health and safety and the safety of the candidate, limited to the relevant position only.

  1. Audio and Video Recording Processing in Candidate Evaluation Processes

Positions opened within our company may require candidate evaluation processes such as foreign language proficiency, general skills and personality inventory due to their qualifications. Within the scope of the said candidate evaluation processes, your visual and audio information may be processed and transferred to the talent management platforms from which we receive services, based on the legal grounds of “Provided that it is directly related to the establishment or execution of a contract, the processing of personal data of the parties to the contract is necessary” and “Provided that it does not harm the fundamental rights and freedoms of the relevant person, the processing of data is mandatory for the legitimate interests of the data controller” as stated in Article 5 of the Law.

Our Company takes all necessary technical and administrative measures in accordance with the Law regarding your data regarding your audio and video recordings. In this context, upon completion of your candidate evaluation process, your relevant data is destroyed in accordance with the Law and is not transferred to any third party other than the talent management platform that provides the relevant service to our Company.

  1. Which of your personal data is processed?

Personal Data

Explanation

Identity Information

It refers to Name-Surname, Date of Birth, Signature data.

Contact Information

It refers to the city/district of residence, e-mail address, contact address, registered e-mail address (KEP), and telephone number data.

Personal Information

Payroll information, Disciplinary investigation, Employment document records, CV information, Performance evaluation reports, Insurance service record, Military service document, Interview notes, Work document received from the previous workplace.

Financial Information

It refers to financial data such as gross wage at the last workplace.

Professional Experience Information

Reference Information

Diploma information, Courses attended, İŞKUR registration document, In-service training information, Certificates, License or license information, Transcript information, Foreign language proficiency, seminar data.

Visual and Audio Information

It refers to photo, audio or video recording data.

Process Safety Information

IP address information, website login and logout information, password and passphrase information, log records data.

Health Information

It refers to information on disability status, blood type information, personal health information and reports, information on devices and prostheses used, and health reports and examinations from the former workplace.

Reference Information

It refers to the data of real persons notified to the Company in order to provide information about the professional qualifications, experience and professional attitude of the candidate for employment, and the information about the candidate for employment conveyed by the persons specified as references.

  1. Personal Data Processing Activities Subject to Your Consent

In line with the data processing purposes specified in the second article of this Privacy Policy:

Your personal data may be processed based on the legal reason of explicit consent in order to evaluate your application for suitable positions that may be available or open in the future within our company and/or group companies.

Within the scope of the candidate employee evaluation processes; reference checks can be carried out by interviewing real persons you have notified to the Company in order to provide information about your professional competence, experience and professional attitude. In order to carry out a reference check, your personal data can be processed based on the legal reason of explicit consent.

  1. For what purposes and for what legal reasons do we transfer your personal data?

The personal data of our job candidates may be transferred to the third parties listed below based on the following legal grounds: the processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or execution of a contract; the processing of data is mandatory for the establishment, exercise or protection of a right; the processing of data is mandatory for the fulfillment of legal obligations in the fields of employment, occupational health and safety, social security, social services and social assistance; and the processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

In this context, your personal data may be transferred, collected and processed to our business and solution partners through career platforms whose servers are located in the country or abroad for the purposes of receiving and evaluating job applications and conducting interview processes, talent management platforms used in the selection and evaluation processes of employee candidates (software testing, foreign language, general talent and personality inventory) and applications that offer online interview opportunities. If the servers of the service providers in question are located abroad, your personal data may be transferred abroad based on appropriate safeguards in the Law.

In addition, personal data may be transferred to third parties such as supervisory authorities, courts, law firms or legally authorized public institutions to the extent necessary to comply with applicable legal regulations, to exercise, assert or defend legal rights.

If you have given your explicit consent, your personal data may be transferred to Zorlu Holding Group Companies for the purpose of evaluating your application for suitable positions that may be available or open in the future within the group companies.

In the event of a company merger or acquisition, personal data may be transferred to the acquiring or merging company. The relevant transfer may be made based on the legal ground that "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person."

  1. Security and Storage of Your Personal Data

Your personal data is stored in secure environments and if it is to be transferred, the necessary technical and administrative measures are taken in this regard. Our company will store personal data for the period required for the processing purposes specified above. In addition, our Company may store your personal data for the limited purpose of establishing the necessary defenses within the scope of the dispute in the event of any dispute that may arise and for the statute of limitations determined in accordance with the relevant legislation.

  1. How Do We Collect Your Personal Data?

Your personal data that we process may be collected through automatic and non-automatic methods, primarily through the printed job application form and CV that you have submitted to our Company, as well as our Company's human resources websites and talent management platforms that we use in the selection and evaluation processes of employee candidates, career platforms, applications that offer online interview opportunities, municipalities, university clubs, İŞKUR, interviews with references, e-mail and human resources consultancy companies from which we receive services.

You can access the details of the legal reasons for collecting personal data in Article 2 of this Privacy Policy.

  1. What are your rights regarding your personal data?

Pursuant to Article 11 of the Law, you have the right to; a) learn whether your personal data has been processed, b) request information if processed, c) learn the purpose of processing and whether it is used in accordance with its purpose, ç) know the third parties to whom it has been transferred domestically/abroad, d) request correction if it has been processed incomplete/incorrect, e) request deletion/destruction within the framework of the conditions stipulated in Article 7 of the Law, f) request notification of the transactions made pursuant to subparagraphs (d) and (e) above to the third parties to whom it has been transferred, g) object to the emergence of a result to your detriment due to analysis by exclusively automated systems, ğ) request compensation for the damages in case you suffer damages due to processing in violation of the law.

In order to exercise your rights specified above or to revoke the approvals you have given to our Company for the processing of personal data specified above, you can send your requests including the necessary information identifying your identity and explanations regarding the right you request to exercise among the rights specified in Article 11 of the Law to our Company's contact address in writing or by using the registered electronic mail (KEP) address, secure electronic signature, mobile signature or the electronic mail address registered in our Company's system. You can also make your applications regarding your personal data through the Data Owner Application Form on our Company's official website or by contacting our Company's Human Resources Department. Your requests will be answered as soon as possible and within 30 days at the latest.

Updated Date: 01.06.2024