Explicit Consent Text Regarding the Processing of Personal Data

1. Data Controller

This Explicit Consent Text has been prepared by DEEPWORK BİLİŞİM TEKNOLOJİLERİ ANONİM ŞİRKETİ (“Company” or “HR-AI”), acting as the data controller, within the scope of the Personal Data Protection Law No. 6698 (“KVKK” or “Law”) and the Communiqué on Procedures and Principles for Fulfilling the Obligation to Inform, in order to obtain your explicit consent regarding the processing of your personal data detailed below. Our Company attaches the highest level of importance to the security and privacy of your personal data, and your data is protected in accordance with international security standards.

2. Subject and Scope of Explicit Consent

As the data subject, I declare that I have read and understood the Privacy Notice provided to me by the Company, and with this Explicit Consent Text, I freely consent to the processing of my personal data for the purposes specified below, limited, connected, and proportionate to the specific, clear, and legitimate purposes in accordance with the law and rules of honesty. My explicit consent covers the processing, storage, and, when necessary, transfer to third parties of the data categories listed below for the purposes specified below.

3. Processed Personal Data Categories and Content

The personal data to be processed by the Company are as follows:

• Identity Data: Name, surname, Turkish ID number (if necessary), date of birth, gender, nationality information.
• Communication Data: E-mail address, phone number (GSM/landline), residence address or contact address.
• Visual and Audio Data (May be Considered as Special Categories of Personal Data): Video recordings, voice recordings, facial images, mimic and gesture recordings taken during the interview process.
• Biometric Data (Special Categories of Personal Data): Facial geometry data obtained through facial recognition technology, iris scan (if any), voice print data, biometric markers processed for emotion analysis (happiness, sadness, anger, surprise, fear, disgust, neutral state analyses), eye movements and focus points.
• Professional Experience and Education Data: Resume, diploma information, certificates, transcripts, foreign language knowledge, previous work experiences, competencies, and skills.
• Transaction Security Data: IP address, access logs, user transaction records, login-logout information, device and browser information used.
• Behavioral and Evaluation Data: Behavior analyses during the interview, personality inventory results, competency-based scorings, AI-generated assessment reports and scores.

4. Purposes of Processing Personal Data

My personal data specified above will be processed by the Company limited to the purposes listed below:

• Execution of recruitment and placement processes, carrying out candidate evaluation procedures.
• Conducting competency, behavior, and emotion analyses of candidates using artificial intelligence technologies.
• Evaluating and reporting interview performance according to objective criteria.
• Fulfillment and improvement of human resources technology services provided by the Company.
• Managing the matching processes of candidates with employer companies or client institutions.
• Execution of information security processes and management of access authorizations.
• Increasing service quality, detecting and resolving system errors, conducting software development studies (over anonymous data sets).
• Fulfillment of obligations arising from legislation, providing information to authorized persons, institutions, and organizations.
• Execution of storage and archive activities, ensuring business continuity.
• Follow-up of legal affairs, use as evidence in possible disputes.

5. Transfer of Personal Data

My personal data processed within the scope of this consent may be transferred to the following recipient groups in line with the realization of the above purposes:

• Employer Companies/Clients Receiving Service: Employer companies and institutions to which I apply for a job or in whose evaluation process I am included.
• Suppliers and Business Partners: Cloud providers from whom data hosting service is received (servers may be domestic or abroad - separate consent is obtained for cross-border transfer), AI analysis service providers, SMS and e-mail sending service providers, legal advisors, financial advisors.
• Legally Authorized Institutions: Courts, prosecutor's offices, ministries, and other public institutions in case of a legal obligation or a duly request from an authorized authority.

6. Processing of Special Categories of Personal Data

I explicitly consent to the processing, recording, and transfer to the specified recipient groups (especially employer institutions making evaluations) of my special categories of personal data, especially Biometric Data (face recognition, emotion analysis, voice print, etc.), by the Company in accordance with the conditions specified in Article 6 of the KVKK, for the purposes of enabling more effective and objective evaluation in recruitment processes, ensuring identity verification, and performing artificial intelligence-supported analyses.

7. Rights of the Data Subject

My rights under Article 11 of the KVKK are as follows:

• To learn whether my personal data is being processed,
• To request information if my personal data has been processed,
• To learn the purpose of processing my personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom my personal data is transferred domestically or abroad,
• To request correction of my personal data if it is incomplete or incorrectly processed,
• To request deletion or destruction of my personal data within the framework of the conditions stipulated in the Law,
• To request notification of the correction, deletion, and destruction operations to third parties to whom my personal data has been transferred,
• To object to the emergence of a result against me by analyzing my processed data exclusively through automated systems,
• To request compensation for the damage if I suffer damage due to the unlawful processing of my personal data.

8. EXPLICIT CONSENT DECLARATION

I have read and understood the text above and the Privacy Notice. I CONSENT with my free will, without any pressure, and having been fully informed about the subject, to the processing, recording, storage, preservation, alteration, reorganization, disclosure, transfer, takeover, making available, classification, or prevention of use of my personal data, including my special categories of personal data (biometric data, indirect data regarding health status, etc.), by the Company for the purposes and scope specified above; and to the transfer of the same to the third parties specified above, domestically and abroad (without prejudice to my cross-border transfer consent which I have separately approved).