Privacy Notice for Job Applicants

YEDITEPE UNIVERSITY HOSPITALS AND AFFILIATED INSTITUTIONS 
PROCESSING OF PERSONAL DATA
PRIVACY NOTICE
(JOB APPLICANT)

As T.C. YEDITEPE UNIVERSITY HOSPITAL (hereinafter referred to as “Yeditepe University Hospital”), we attach the utmost importance to the security of your personal data. With this awareness, we take the necessary technical and administrative measures to ensure that all kinds of personal data belonging to all persons associated with Yeditepe University Hospital, and above all to you, our valued job applicants, are processed and retained in accordance with Personal Data Protection Law No. 6698 (hereinafter referred to as the “Law”). Aware of the responsibility we bear and in our capacity as Data Controller, we process your personal data as explained below and within the limits prescribed by Article 4 of the Law, namely:
a) In compliance with the law and the rules of good faith,
b) Accurately and, where necessary, kept up to date,
c) For specified, explicit and legitimate purposes, 
d) In a manner that is relevant, limited and proportionate to the purposes for which they are processed,
e) By retaining them for periods appropriate to the purposes for which they are processed.

1.    Types of Personal Data Processed, Purposes of Processing, Methods of Collection and Legal Grounds
As Yeditepe University Hospital, we process the personal data set out below for the specified purposes in order to fulfil our legal and contractual obligations towards you, our valued job applicants.

Your personal data will be collected and processed by Yeditepe University Hospital for the purposes of receiving the job application you have submitted, carrying out the necessary processes for evaluating and finalising your request and your suitability for the relevant position, and conducting recruitment processes within the framework of human resources policies. For the purposes set out below, your data will be collected by Yeditepe University Hospital through job application forms, e-mail correspondence, the human resources system or other communication channels you establish with Yeditepe University Hospital, by fully or partially automated means, through the systems in which examinations and personality inventory assessments are carried out, or by non-automated/physical means provided that they form part of a data filing system.

a) Identity and Contact Data 
Your name and surname, gender, Turkish Identity Number, copy of identity document, date of birth, e-mail address, mobile phone number, home phone number, physical address details and similar information will be processed pursuant to subparagraphs (c) and (f) of Article 5(2) of the Law for the purpose of fulfilling obligations arising from the establishment of an employment contract and in line with our legitimate interests. Your personal data within this scope will be processed and retained for the purposes of evaluating your job applications and communicating with you regarding your job application.

b) CV and Professional Experience Information
Information relating to your past education and working life, including diplomas, certificates, foreign languages, courses, sector, titles of companies worked for, positions held, references, military service status, disability status, relatives or acquaintances working at the institution,  your hobbies, cultural and sporting activities, driving licence information  and travel restrictions, if any, will be processed by Yeditepe University Hospital in line with our legitimate interest pursuant to subparagraph (f) of Article 5(2) of the Law. Within this scope, the relevant data will be processed for the purposes of carrying out the recruitment evaluation of our job applicants and identifying the areas in which you may be productive once you start working.

c) Physical Premises Security Information 
Data relating to your entries to and exits from Yeditepe University Hospitals, as well as your image and audio data due to camera recordings made at Yeditepe University Hospital, will be processed in line with our legitimate interest pursuant to subparagraph (f) of Article 5(2) of the Law and for the purpose of ensuring hospital security.

d) IP Information                            
MAC ID and Internet Protocol (“IP”) information generated through computers belonging to you or allocated to our job applicants by Yeditepe University Hospital will be processed for the purpose of monitoring the internet service provided by Yeditepe University Hospital, in accordance with the obligations arising from subparagraph (a) of Article 5(2) of the Law, Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications, and other relevant laws, and will be shared with government authorities upon request.
All data stated in this article to be processed by Yeditepe University Hospital may be shared with Yeditepe University, to which Yeditepe University Hospital is affiliated, and its other affiliates, and with the business partner companies that provide server and infrastructure services to Yeditepe University Hospital, under the conditions set out in the Law or where your explicit consent has been obtained.

2.    Rights of the Data Subject under the Law
Within this scope, our valued job applicants may, whenever they deem appropriate, exercise the rights listed below by applying to Yeditepe University Hospital, which holds the title of data controller, under Article 11 of the Law. 
Accordingly, data subjects have the right to:
a) Learn whether their personal data are being processed, 
b) Request information about their personal data if they have been processed, 
c) Learn the purpose of processing their personal data and whether these data are used in accordance with that purpose, 
d) Know the third parties to whom their personal data have been transferred, request the correction of errors in their personal data and, if a transfer has taken place, request that this correction be requested from the relevant third party, 
e) Where the reasons requiring the processing of personal data no longer exist, request the deletion, destruction or anonymisation of these data within thirty days in accordance with the provisions of the Regulation on the Deletion, Destruction or Anonymisation of Personal Data, and, if a transfer has taken place, request that this request be communicated to the third parties to whom the data were transferred,  
f) Object to any adverse outcome for the person arising from the processed data,
g) Claim compensation within the framework of the law if they suffer damage due to the processing of data in breach of the Law.

3.    Application Procedure and Content
Applications concerning the requests stated above:
If you make your request in writing, you may deliver a wet-signed copy of the Data Subject Application Form to the Correspondence Directorate (Yazı İşleri Müdürlüğü) of Yeditepe University Koşuyolu or Kozyatağı Hospitals in person together with a document verifying your identity, or by proxy with a notarised power of attorney showing that you are authorised to apply regarding the rights listed under Article 11, or you may send it through a notary public to the address shown on our Hospitals’ websites.
Applications made by our job applicants through channels other than these will not be taken into consideration, in line with the principles of lawfulness and data security.
Together with the information and documents relating to the request, applications must include:
a) Your name, surname and, if the application is made in writing, your signature,
b) For citizens of the Republic of Türkiye, the Turkish Identity Number; for foreign nationals, nationality, passport number or, if available, foreign identity number,
c) Residential or business address for notification purposes,
d) E-mail address, telephone or fax number for notification purposes, and
e) A clear statement of the subject of the request.
The inclusion of the above information in applications is mandatory under the legislation, and an application with any missing information cannot be processed.

4.    Responding to Applications
Applications submitted to Yeditepe University Hospital containing the data subject’s requests and written in Turkish will be answered as soon as possible and within 30 (thirty) days at the latest by e-mail or physical letter, and the necessary actions requested will be carried out by our relevant departments.

Under the Communiqué on the Procedures and Principles of Application to the Data Controller (the “Communiqué”) published by the Personal Data Protection Authority, if the response process requires an additional cost, this process will be carried out for a fee based on the fee schedule set out in the Communiqué.