Privacy Notice and Privacy Policy

Career Leap Solutions (hereinafter referred to as the “Company”) attaches great importance to the protection of personal data. This notice has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) to inform you about the processing, storage, transfer of personal data, and the rights of data subjects.

1. Definitions

Personal Data: Any information relating to an identified or identifiable natural person.

Special Categories of Personal Data: Data such as health data and biometric data that are subject to enhanced protection under KVKK.

Data Controller: The natural or legal person who determines the purposes and means of processing personal data.

Data Processor: The natural or legal person who processes personal data on behalf of the data controller.

Data Subject: The natural person whose personal data is processed.

Explicit Consent: Consent that is based on prior information and freely given for a specific matter.

2. Identity of the Data Controller

Within the scope of KVKK, the data controller is Career Leap Solutions. Our Company undertakes to process and protect personal data obtained from employers, candidates, business partners, and visitors in a lawful and fair manner.

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes within the scope of our international recruitment, workforce consulting, and process coordination services:

• Creating and managing employer registrations,
• Receiving and evaluating candidate applications and matching them with suitable positions,
• Coordinating employer-candidate communication and interview processes,
• Managing documentation, applications, contracts, and process tracking,
• Providing operational coordination related to visa, work permit, and relevant official procedures,
• Managing customer relations and handling requests/complaints,
• Improving service quality and optimizing operational processes,
• Fulfilling legal obligations,
• Conducting information security processes,
• Handling legal processes and fulfilling evidentiary obligations where necessary.

4. Method of Collection and Legal Grounds

Your personal data may be collected through website forms, registration and application pages, email, telephone, online meetings, physical document submissions, contracts, business partners, and similar written, verbal, or electronic channels.

Your personal data may be processed under Articles 5 and 6 of the KVKK based on the following legal grounds:

• Your explicit consent,
• Necessity for the establishment or performance of a contract,
• Compliance with the Company’s legal obligations,
• Necessity for the establishment, exercise, or protection of a legal right,
• Necessity for the legitimate interests of the Company, provided that your fundamental rights and freedoms are not harmed.

5. Transfer of Personal Data

Your personal data may be transferred, in line with the purposes stated above and in compliance with Articles 8 and 9 of the KVKK, to:

• Authorized public institutions and authorities,
• Legal and financial advisors,
• IT, hosting, email, and infrastructure service providers,
• Our business partners where necessary for the execution of services,
• Domestic and international solution partners where necessary for recruitment and placement processes.

Where cross-border data transfers are required, appropriate technical and administrative safeguards are implemented in accordance with applicable legislation; where necessary, explicit consent and/or appropriate transfer mechanisms (such as standard contractual clauses) are applied.

6. Storage and Security of Personal Data

The Company implements appropriate technical and administrative measures to prevent unlawful processing or unauthorized access and to ensure the secure retention of personal data.

• Authorization matrix and access controls,
• Encryption and secure data storage methods,
• Up-to-date security software and system checks,
• Employee confidentiality obligations and awareness practices,
• Logging and audit processes where necessary.

Personal data is retained for the periods prescribed by applicable laws or for as long as required by the purpose of processing. At the end of the retention period, data is deleted, destroyed, or anonymized in accordance with the law.

7. Rights of the Data Subject (KVKK Article 11)

Under Article 11 of the KVKK, data subjects have the following rights:

• To learn whether their personal data is being processed,
• To request information if their personal data has been processed,
• To learn the purpose of processing and whether data is used in line with that purpose,
• To know the third parties to whom data is transferred domestically or abroad,
• To request correction of incomplete or inaccurate data,
• To request deletion or destruction of personal data in accordance with the KVKK,
• To request notification of correction/deletion actions to third parties,
• To object to an adverse result arising from analysis exclusively through automated systems,
• To request compensation for damages in case of unlawful processing.

8. Application Procedure

Data subjects may submit their requests regarding their KVKK rights to the data controller in writing or by other methods set out in applicable legislation. Requests are finalized as soon as possible and no later than thirty (30) days, depending on the nature of the request.

An application should preferably include the following information:

• Name, surname, and signature (for written applications),
• Turkish ID number / passport number (together with nationality information),
• Residential or business address for notification,
• Email address and phone number, if available,
• Subject of the request and any supporting information/documents.

9. Contact

For your applications and questions within the scope of KVKK, you may contact us through the following channels:

Data Controller: Career Leap Solutions
Address: Hahnstraße 70, 60528 Frankfurt am Main, Germany
Email: info@careerleapsolutions.com

10. Privacy Policy

The Company undertakes to protect the confidentiality of personal data shared by employers, candidates, and visitors. Collected data is processed solely for the purposes stated in this notice and in compliance with applicable legislation.

Personal data is:

• Protected against unauthorized access,
• Not used outside the processing purpose,
• Not retained longer than necessary,
• Managed with due regard to the rights of data subjects.

The Company may update this notice due to legal changes or operational requirements. The updated version becomes effective as of the date it is published on our website.