GLOBALISTIHDAM
KVKK Privacy Notice
Review collected data, processing purposes, transfer arrangements and your rights under Türkiye’s Law No. 6698 (KVKK).
KVKK scope
This draft describes the website and application portal under Türkiye’s Personal Data Protection Law No. 6698 (KVKK), including the information required by Article 10. It is not a declaration that all legal or operational requirements have been completed.
Data controller & contact
The company name and postal address currently displayed on this website are shown below. Their status as the current data-controller details must be confirmed before real applications are invited.
EMA Globalistihdam Kariyer İnsan Kaynakları Eğitim Danışmanlığı Anonim Şirketi
Mustafa Kemal Mah. 2118 Cad. No: 4/C, İç Kapı No: 140, Maidan İş Merkezi, Çankaya / Ankara, Türkiye
For help locating a test record, use the contact enquiry form in the application centre and quote its reference. This support form is not presented as the formal KVKK request channel. The controller’s current postal details and formal written/electronic request arrangements require confirmation. Activation and delivery for the planned corporate mailboxes have not been verified.
Data & collection methods
An account is not required. A random guest access token is held in a browser cookie; only its security hash is stored on the server to link and protect access to your applications. Where an existing account is used, sign-in supplies an account identifier, email address and, where available, a display name. Forms collect your name, contact email and the enquiry details below. Phone is optional except where telephone contact is selected for a robotics enquiry. References, submission times, review status and the acknowledged notice version are also recorded.
The portal does not request identity numbers, passport scans, bank-account details or health records. Please omit those details and confidential technical information from messages and uploaded documents.
Data reaches the system electronically through sign-in, web forms, portal messages and PDF uploads. Saving and retrieval use automated systems; administrator entries form part of the same electronic filing system. Messages, shared documents and administration activity may be added after the first submission.
| Enquiry | Information | Purpose |
|---|---|---|
| Contact | Message subject and message, with name, contact email and optional phone number. | Review questions and support requests, contact you and track their status. |
| Employee | Role, sector, experience, preferred location, message and optional PDF CV. | Review experience and recruitment preferences. |
| Employer | Company, role required, staffing count, location, sector and message. | Assess staffing requirements and discuss the enquiry. |
| Student | Residence country, destination, study level, subject, optional intake and university preference, message and optional academic PDF. | Assess study preferences and plan guidance. |
| University | Institution, country, official website, programmes or cooperation area and message. | Discuss university and student-recruitment cooperation. |
| Investment & advisory | Target country, sector, service, project stage, optional organisation, budget and timing, project summary. | Assess the requested business-advisory support. |
| Robotics | Organisation and role, project country/location, enquiry type, industry, service, stage, timing, preferred language/contact method; optional budget, solution, workforce/task details and marketing preference. | Assess project, supplier, workforce, partnership or training enquiries and coordinate follow-up. |
Processing purposes
Information supports assessment of your enquiry, contact with you, application tracking and administration. Staff may add internal review notes. No automated job, admission, financing or investment-eligibility decision is implemented. The site does not send automatic marketing messages.
Legal basis & consent
Article 5 defines the permitted bases for processing personal data. The controller must identify and disclose the specific basis for each purpose before real-data use; this draft does not assign an unverified contractual, statutory or legitimate-interest basis.
Where explicit consent is the applicable basis, it must be obtained separately from the privacy notice. The form’s acknowledgement confirms that you read the notice; it does not authorise marketing, unrelated processing or international transfers. The optional robotics marketing choice does not activate automated messages.
Special-category data is subject to Article 6 and additional safeguards. This portal does not request it. Do not include health, biometric, genetic, criminal-conviction or similar sensitive records in messages or documents.
Recipients & transfers
Application access is restricted to the browser holding a valid guest access cookie or the submitting signed-in account, and the authorised administrator. Anyone with access to that browser profile may use its guest access; keep it private. Document downloads require authorisation; internal review notes are administrator-only. The public marketing site and GitHub repository contain marketing content and links to the separate application portal, not application records.
The portal supports guest access and existing accounts, and uses managed hosting with Cloudflare database and file storage. These infrastructure providers support authentication, hosting and storage. Their applicable agreements, processing locations, recipient details and any international-transfer safeguards still need to be confirmed by the company before real-data launch.
Public news panels retrieve a public JSON feed from raw.githubusercontent.com, operated by GitHub. This request exposes normal connection information, such as IP address and browser technical metadata, to that provider. The feed request omits credentials and does not intentionally send application fields or the visitor’s account identity. Provider processing locations and any required transfer arrangements still need verification.
International transfers must meet Article 9. Its current framework distinguishes adequacy decisions, appropriate safeguards and limited occasional exceptions. A general notice acknowledgement is not a transfer mechanism. No particular country, signed standard contract or other safeguard is asserted for this site until verified.
Retention & erasure
KVKK Article 7 requires erasure, destruction or anonymisation when the reasons for processing no longer exist, subject to the applicable rules. The technical behaviour below does not replace that obligation.
Submitted records and uploaded CVs currently remain in the portal until separately removed by an authorised process. Automatic expiry and scheduled deletion are not configured. Marking an application “Closed” does not delete it.
A proposed retention schedule is available to the administrator for review. It is not an active retention policy. The company must agree periods, any justified exceptions, deletion responsibilities and provider-side backup handling before real-data launch.
Your rights · Article 11
Within the scope and conditions of KVKK Article 11, you may apply to the data controller to exercise the following rights.
- Ask whether your personal data is being processed.
- Obtain information about processing that has taken place.
- Learn its purpose and whether use matches that purpose.
- Learn the third parties receiving data in Türkiye or abroad.
- Request correction of incomplete or inaccurate data.
- Request erasure or destruction when Article 7 conditions apply.
- Ask for recipients to be informed of correction or erasure/destruction.
- Object to adverse results produced solely by automated analysis.
- Seek compensation for harm caused by unlawful processing.
KVKK requests
KVKK requests must first be addressed to the data controller before a complaint to the Board. Article 13 requires a response as soon as the nature of the request permits, within 30 days at the latest. This statutory period is not a claim that an automated response process is active here.
The operator must confirm and publish a valid written/electronic request channel and its response procedure before real applications are invited. Telephone help and the general enquiry form are not designated formal KVKK channels in this draft. Do not send identity or banking documents through this preview; any necessary identity verification must be proportionate.
Browser preferences
The website stores your language choice in your browser. Guest application access uses a necessary HttpOnly cookie, valid for 90 days from session creation and inaccessible to page scripts. The cookie supports application tracking, not advertising. Clearing or losing it, using another browser, or its expiry prevents direct access to that guest history; this does not delete the applications. Keep your reference number and contact the team if you lose access. To limit abuse, a one-way security hash derived from the network address, request scope and time window expires within 48 hours and is cleared during subsequent requests; the rate-limit records do not store the raw network address. Draft form entries are not submitted until you use the submit button. Authentication and hosting providers may process their own access and security records. Social-media and official-source links take you to external services under their own policies.
Official guidance
KVKK sources checked on 10 October 2026. This draft does not replace the company’s legal review.