APPSYNERGY YAZILIM HİZMETLERİ A.Ş.
CANDIDATE PRIVACY NOTICE
Effective Date 31 May 2025
1 · Introduction & Data Controller
AppSynergy Yazılım Hizmetleri A.Ş. (“AppSynergy,” “we,” “us”) is committed to protecting your privacy throughout our recruitment process. For the purposes of Türkiye’s KVKK and the EU GDPR, AppSynergy Yazılım Hizmetleri A.Ş. is the data controller of the personal data you provide when you apply for a job.
Registered address: 19 Mayıs Mah. Halaskargazi Cad. No:226 Çiftkurt Apt. Kat:7 İç Kapı No:24, Şişli – İstanbul, Türkiye
Trade Registry No.: 1072598
Data Protection Officer (DPO): support@appsynergy.co
Primary contact for all privacy matters: support@appsynergy.co
By submitting your application via our website, e-mail or any other channel you confirm that you have read this Candidate Privacy Notice and—where applicable—have provided the explicit consents requested on the application form (e.g., inclusion in our Talent Pool and international data transfer).
2 · What Information We Collect
| Category | Typical Data Elements | Source |
|---|---|---|
| Identity & Contact | name, surname, e-mail address, residential location (city/country) | you |
| Application Data | CV / résumé, cover letter, education & employment history, certifications, salary expectations, portfolio or GitHub links | you |
| Assessment Data | interview notes, coding-challenge results, aptitude or language-test scores | us / assessment provider |
| Reference Data | referee name, contact details and reference letter | your referees |
| Special Category (voluntary) | disability/health info for accommodation; diversity data (e.g., gender) | you (explicit consent) |
| Device & Usage Logs | IP address, browser/device type, access timestamps (when using our online ATS) | your device |
Providing special-category or diversity data is entirely optional and never affects hiring decisions.
3 · Why We Use Your Data & Legal Bases
| Purpose | KVKK / GDPR Legal Basis |
|---|---|
| Evaluate your application, verify qualifications, conduct interviews | KVKK 5/2(c) & GDPR Art 6(1)(b) – steps at your request prior to entering an employment contract |
| Maintain Talent Pool for future roles (max 36 months) | KVKK 5/1 & GDPR Art 6(1)(a) – explicit consent (opt-in) |
| Comply with legal obligations (audit, immigration, diversity reporting) | KVKK 5/2(ç) & GDPR Art 6(1)(c) |
| Protect or defend legal rights (fraud prevention, litigation) | KVKK 5/2(e–f) & GDPR Art 6(1)(f) – legitimate interest |
| Analyse & improve recruitment process (aggregated statistics) | GDPR Art 6(1)(f) – legitimate interest |
| Special-category data (disability accommodation) | KVKK 6/2 & GDPR Art 9(2)(a) explicit consent or Art 9(2)(b) employment-law obligation |
4 · How Long We Keep Data
Unsuccessful applicants: retained 24 months after final decision, then deleted/anonymised.
Talent Pool (opt-in): retained up to 36 months, then renewed consent or deletion.
Interview recordings / assessment files: deleted 12 months after process end.
System logs: retained 12 months for security and audit.
Where longer retention is required by labour or tax laws, we keep data for the mandatory period, then delete/anonymise.
5 · Sharing & International Transfers
We never sell your data. We share only with:
Service Providers — ATS platform, video-interview software, background-check agency (bound by DPAs).
Affiliates / Group companies — solely to evaluate you for other roles.
Legal authorities — where required by law or to defend legal claims.
Cross-border transfers may occur when we use cloud providers (currently EU-based servers). For transfers outside the EEA/UK/Türkiye we rely on EU Standard Contractual Clauses (SCC 2021) and commit to adopt the forthcoming SCC 2025 within six months of their effective date.
6 · Security
We implement safeguards such as TLS 1.3 encryption in transit, AES-256 at rest, role-based access controls, least-privilege practices, regular penetration testing, and ISO 27001-aligned policies. No system is 100 % secure; please notify us promptly at support@appsynergy.co if you suspect any breach.
7 · Your Rights
Under KVKK m.11 and GDPR Chapter III you may:
Access your data
Request correction or deletion
Restrict or object to processing
Withdraw any consent given
Request data portability (GDPR Art 20)
We respond within 30 days; complex cases may extend by up to an additional 30 days (Art 12 GDPR). You may lodge a complaint with the KVKK Kurumu or your local supervisory authority.
To exercise any right: e-mail support@appsynergy.co from the address used in your application.
8 · Equal Opportunity Statement
AppSynergy is an equal-opportunity employer. We evaluate candidates without regard to race, colour, religion, sex, gender identity, sexual orientation, age, disability, or any other protected characteristic.
9 · Changes
We may update this Notice periodically. Material changes will be highlighted in the posting and, where appropriate, notified by e-mail. Continued participation in our recruitment process after the effective date of an update constitutes acceptance.
10 · Contact
Questions or concerns?
E-mail: support@appsynergy.co (Attn.: Data Protection Officer)
Last revised: 31 May 2025
