Job Application Privacy Notice
1. Data Controller
Under Law No. 6698 on the Protection of Personal Data (“KVKK”), the data controller for the processing of your personal data in connection with your job application is:
Biosmyrna Gıda Sanayi ve Ticaret A.Ş.
Kazım Karabekir Mah. Bekir Saydam Cad. B6 Blok No:104B6 İç Kapı No:17
Torbalı, İzmir — TÜRKİYE
Email: info@biosmyrna.com
Telephone: +90 232 502 61 60
Website: https://www.biosmyrna.com
This Privacy Notice has been prepared in relation to the processing of candidates’ personal data in connection with job and internship applications at Biosmyrna.
2. Personal Data Processed in Connection with Job Applications
The following personal data is processed through the job application form on our website:
- Identity information: first name and surname.
- Contact information: email address, telephone number and, if you provide it, the city where you live.
- Education information: educational status and the education details you include in your CV.
- Professional information: length of professional experience, the position or field of work you are applying for, and the duties, competencies and certificates you include in your CV.
- Application and assessment information: your cover letter, the CV file you upload, your statements during the application process and records relating to the assessment process.
What is not collected. The application form does not ask for a photograph, video or audio recording; date of birth, identity number, marital status, military service status and similar information are not requested. Your IP address is not recorded in the application record.
Information you add to your CV of your own accord (for example, a photograph) may be contained in the file; such information has not been separately requested by us.
3. Special Categories of Personal Data
Special categories of personal data (such as health, criminal convictions and security measures, biometric and genetic data, religion, sect, philosophical belief, and membership of associations, foundations and trade unions) are never asked for on the application form.
You are advised not to share information of this nature in your CV or cover letter. If it is nevertheless shared, such data may be processed only where the conditions set out in Article 6 of the KVKK are met and the processing activity concerned is necessary.
4. Purposes of Processing Personal Data
Your personal data obtained in connection with your job application is processed for the following purposes:
- Receiving and recording your application,
- Assessing your candidacy for the position applied for,
- Assessing your education, experience, competencies and professional suitability,
- Conducting interview and assessment processes,
- Communicating with you about the application process,
- Planning and conducting recruitment processes and making the recruitment decision,
- If you are hired, making preparations to begin employment processes,
- Fulfilling legal obligations and responding to requests from competent public institutions and organisations,
- Establishing, exercising or protecting a right, and conducting legal processes relating to recruitment.
5. Legal Grounds for Processing Personal Data
- Receiving and assessing the application and communicating with you: processing being directly related to the establishment of a contract (employment contract) (KVKK Art. 5/2-c) and the legitimate interest of the data controller, provided that it does not harm your fundamental rights and freedoms (KVKK Art. 5/2-f).
- Retention in the candidate pool: only your explicit consent (KVKK Art. 5/1).
- Legal obligations and requests from public institutions: processing being expressly provided for by law and necessary to fulfil a legal obligation (KVKK Art. 5/2-a, Art. 5/2-ç).
- Management of disputes: processing being necessary to establish, exercise or protect a right (KVKK Art. 5/2-e).
The obligation to inform applies regardless of whether data processing is based on explicit consent or on another processing condition under the Law. For this reason, the confirmation that you have read the privacy notice and the explicit consent for the candidate pool are obtained in separate boxes.
6. Method of Collecting Personal Data
Your personal data is collected electronically through:
- the job application form on the Biosmyrna website,
- the CV file you upload through the form,
- communication by email or telephone,
- interviews and meetings held if your application progresses.
Our job postings may also be published on kariyer.net. Applications made through this platform are viewed in the platform’s own employer panel; the application information is provided to Biosmyrna by the platform through this panel.
For applications made through Kariyer.net, the platform’s own privacy notice and data processing procedures also apply. This Privacy Notice relates to the data processing activities involved in Biosmyrna’s assessment of your application.
Apart from this, no cloud-based applicant tracking system (ATS) or human resources software is used.
7. Transfer of Personal Data
Your personal data processed in connection with your application may be transferred, limited to the purpose of processing, to the following groups of recipients:
- Authorised Biosmyrna employees involved in the recruitment process,
- The provider of the server (hosting) on which the website is hosted and the email service provider — solely for the technical operation of the service,
- Professional advisers providing legal, financial advisory and audit services — only to the extent required by the service concerned,
- Legally authorised public institutions and organisations.
No external human resources or consultancy services are used in the recruitment process; applications are assessed by Biosmyrna.
Biosmyrna holds an employer subscription on kariyer.net, and job postings may also be published on this platform. If the posting is seen on kariyer.net and the application is made through that platform, the platform’s own privacy notice and data processing procedures also apply. This Privacy Notice relates to applications received through Biosmyrna’s own website.
Applications made through our website are stored on Biosmyrna’s own server and are not transferred to any other platform. Kariyer.net processes data only with respect to applications made through that platform and within its own system; applications received from our website are not sent to this platform.
8. Transfer of Personal Data Abroad
The application form and the CV you upload are sent directly to the server on which Biosmyrna’s website is located; no data is sent from the visitor’s browser to any service provider abroad.
The information you enter in the application form and your CV file are not sent to Google Analytics or any other measurement service. The website’s visit statistics are measured only with your explicit consent, as described in the Cookie Policy.
The servers on which the hosting and email services are run are located in Türkiye.
Your personal data is therefore not transferred abroad.
Where a transfer abroad is to take place, it is carried out in accordance with the conditions set out in Article 9 of the KVKK.
9. Retention Period of Personal Data
Your personal data obtained in connection with your job application is retained for as long as necessary to conduct the application process, taking into account the retention periods set out in the relevant legislation.
- Application records and CV files: 1 year from the date of application
- Candidate pool record (if explicit consent has been given): 1 year from the date on which explicit consent was given
When the period expires and there is no other legal or factual reason requiring retention, your personal data is deleted, destroyed or anonymised in accordance with Biosmyrna’s personal data retention and destruction procedures.
10. Candidate Pool
In addition to assessing your application for the current position, assessing it in the candidate pool for suitable positions that may arise in the future is subject to separate explicit consent.
This consent is obtained on the application form by means of a separate, unticked box. Declining to be included in the candidate pool does not affect the assessment of your current job application.
Details are explained in the “Candidate Pool Explicit Consent Form”.
11. Application Documents and CVs
Only a single CV file in PDF or Word (DOC, DOCX) format and no larger than 5 MB can be uploaded through the application form.
Uploaded files are kept in a secure directory that cannot be downloaded by typing a web address, and can be accessed only by authorised users involved in the recruitment process.
If the CV or other documents you send contain personal data belonging to third parties (for example, the contact details of referees), you must take the necessary care with regard to sharing those people’s information.
12. Data Security
Technical and administrative measures appropriate to the nature of the data processed are taken to prevent the unlawful processing of, and unlawful access to, personal data processed in connection with job applications. The technical measures actually applied in the application process are:
- Forgery (CSRF) protection with a session key for form submissions,
- Multi-layered checks against automated bot submissions,
- Checks of both the extension and the file content (MIME) of uploaded files, and a size limit,
- Keeping CV files in a secure directory that cannot be downloaded by address,
- Application records not being published and being kept only in the administration panel accessible to authorised users,
- Server-side validation of each field individually.
No security verification (CAPTCHA) service is used during the application; this choice has been made both for accessibility and so that candidate data does not go to external services.
13. Rights of the Data Subject
Under Article 11 of the KVKK, you have the following rights regarding your personal data:
- To learn whether your personal data is being processed,
- If it has been processed, to request information about this,
- To learn the purpose of processing and whether it is used in accordance with that purpose,
- To know the third parties in Türkiye or abroad to whom personal data is transferred,
- To request the correction of personal data if it has been processed incompletely or inaccurately,
- To request the deletion or destruction of personal data within the framework of the conditions set out in the KVKK,
- To request that correction, deletion or destruction operations be notified to third parties to whom the personal data has been transferred,
- To object to a result arising against you through the analysis of the processed data exclusively by automated systems,
- To request compensation for damage if you suffer damage due to the unlawful processing of personal data.
14. Submitting Applications
You may submit your applications regarding your rights under the KVKK to Biosmyrna in accordance with Article 13 of the KVKK and the related secondary legislation.
Postal address:
Kazım Karabekir Mah. Bekir Saydam Cad. B6 Blok No:104B6 İç Kapı No:17
Torbalı, İzmir — TÜRKİYE
Electronic application: info@biosmyrna.com
Details of the application procedure are explained in the “KVKK Data Subject Application Procedure”.
15. Relationship with Other Personal Data Texts
The detailed provisions on the processing of your personal data in connection with job applications are set out in this Privacy Notice. However, the following texts relate to different purposes and processes:
- the KVKK Privacy Notice,
- the Privacy Policy,
- the Cookie Policy and Cookie Notice,
- the Candidate Pool Explicit Consent Form,
- the Terms of Use and other relevant legal texts.
These texts do not replace one another. In particular, the privacy notice and the explicit consent form are assessed separately; where a processing activity requires explicit consent, explicit consent is obtained separately and for a specific purpose.
16. Updates to the Notice
Biosmyrna may update this Privacy Notice in line with changes in its job application processes or personal data processing activities. The updated text is published on the website together with its effective date and version information.
If the purpose of processing personal data changes, the necessary information is provided to the data subjects before the new processing activity begins.
Biosmyrna Gıda Sanayi ve Ticaret A.Ş.
Kazım Karabekir Mah. Bekir Saydam Cad. B6 Blok No:104B6 İç Kapı No:17
Torbalı, İzmir — TÜRKİYE
Email: info@biosmyrna.com
Telephone: +90 232 502 61 60
Website: https://www.biosmyrna.com