MEDEX SAĞLIK VE TEKNOLOJİ ÇÖZÜMLERİ YATIRIM A.Ş.

EMPLOYEE/ INTERN CANDIDATE PRIVACY NOTICE


Dear Employee Candidate/Intern;


As MEDEX SAĞLIK VE TEKNOLOJİ ÇÖZÜMLERİ YATIRIM A.Ş. (hereinafter referred to as "Company"), we respect and attach importance to the privacy of private life. For this reason, we would like to inform you about your rights regarding the use and protection of your personal data within the scope of the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as "KVKK").


a) Data Controller 


As MEDEX SAĞLIK VE TEKNOLOJİ ÇÖZÜMLERİ YATIRIM A.Ş. (hereinafter referred to as "Company"), we inform you that we process your personal data in the capacity of data controller within the scope of the Law on the Protection of Personal Data No. 6698 and other relevant legislation.


b) Purposes and Legal Grounds for Processing Personal Data


i. In terms of Your Personal Data of General Nature


The personal data of our employee candidates are processed in line with the legal reasons specified in the table below and for the following purposes.


Processed Personal Data Purpose of Processing Personal Data Legal Grounds for Processing Personal Data


• Name-Surname

• Date of Birth

• E-Mail

• Cell Phone Number*

• Address Information

• Education Information

• Knowledge of Professional Experience

• Reference Information

• Driver's License Information

• Military Service Information

• Managing employee/intern candidate selection and placement processes

• Carrying out the application processes of employee/intern candidates

• Planning of human resources processes

• Conducting communication activities

KVKK 5 (2) c: Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract.


KVKK 5 (2) f: Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject


*The employee accepts and declares that if he/she provides our Company with the contact information of third parties who can be reached other than himself/herself in case of emergency, this information will only be used by our Company specific to the emergency and limited to this; he/she also accepts and declares that he/she has informed the third parties authorized by him/her within the scope of KVKK and obtained their explicit consent.


ii. In terms of Your Special Categories of Personal Data


In the event that you have Special Categories of Personal Data in your resume information that you will send to our e-mail address hr@medex-cro.com , such data will be processed in accordance with your explicit consent in accordance with Article 6 (3) a of the KVKK in order to fulfill the purposes in paragraph (b) of this text.


c) Method and Legal Grounds for Collection of Personal Data 


In order to fulfill the purposes in paragraph (b) of this text, your personal data will be obtained electronically by sending your resume to our e-mail address hr@medex-cro.com for the purpose of conducting the business relationship with our Company, based on the legal reasons set out in Article 5 (2) of the KVKK.


d) To whom and for what purpose the processed personal data can be transferred 


Pursuant to Article 8 (2) (a) of the KVKK, your personal data may be shared with the relevant public institutions and organizations, if necessary or upon request, in order to fulfill legal obligations in accordance with the relevant legislation, without seeking the explicit consent of the person concerned.


e) Transfer Abroad


Your personal data processed by our Company will be transferred to the servers of Microsoft Corporation abroad in accordance with your explicit consent pursuant to Article 9 (6) a of the KVKK in order for us to benefit from the services of Office 365 e-mail service, Microsoft Teams and Office 365 Sharepoint platforms for the purposes specified in paragraph (b) of this text, since the information technology infrastructure and e-mail server service we use are stored in the cloud environment located abroad. 


KVKK 9 (6) a: In the absence of an adequacy decision and if any of the appropriate assurances stipulated in the fourth paragraph cannot be provided, to give explicit consent to the transfer, provided that it is incidental and the data subject concerned is informed about the possible risks.”


f) Your Rights under Article 11 of the KVKK 


Within the scope of Article 11 of the KVKK, you have rights as a data subject and you can submit your requests regarding these rights by filling in all the information specified in Data Subject Application Form in accordance with Article 11 and paragraph 1 of Article 13 of the KVKK and Communiqué on the Procedures and Principles of Application to the Data Controller;


• Yaşamkent Mah. 3066 Sk. Kapı No:10/ Çankaya-Ankara" by coming to our Company in person,

• via our registered electronic mail (KEP) address mdx@hs01.kep.tr ,

• In order to identify your identity and not to provide information to the wrong people, in writing through a notary public or by registered letter with return receipt,

• By sending an e-mail to kvkk@medex-cro.com by using a secure electronic signature, mobile signature or (if any) the e-mail address previously notified to our Company by you and registered in our systems 


or by other methods to be determined by the Personal Data Protection Authority in the future. 


g) Retention Period of Personal Data


In the event that the purpose of processing personal data ceases to exist, the Company destroys personal data within 6 months from the date of job application. In case the employee/trainee candidate starts a job, your personal data will be kept for 10 years from the end of the employment relationship to be kept in the personal files. 


h) Changes and Updates


This Privacy Notice has been prepared within the scope of the Law on the Protection of Personal Data No. 6698 and other relevant legislation. Necessary changes may be made in the said Privacy Notice in line with the relevant legislation and/or changes in the Company's personal data processing purposes and policies. You can access the most up-to-date version of the Privacy Notice on our website.