GetirFinans Candidate Privacy Notice
Introduction
We, as Getir Teknolojik Hizmetler A.Ş. (“GetirFinans”, “we“ or “us“), show utmost care for the processing and protection of your personal data in accordance with the Law on Protection of Personal Data No. 6698 (“PDPL”), its secondary legislations and the Personal Data Protection Board Decisions.
We recommend you read this Candidate Privacy Notice (“Notice”) carefully as it sets out how GetirFinans handles your personal data when you apply for a role with us, and the rights you have in connection with that information. The term “Candidates“ in this Notice refers to anyone who applies for a permanent or non-permanent role.
In case you have any comments or questions about this Notice, please contact us via Data Subject Application Form.
We recommend you read this Candidate Privacy Notice (“Notice”) carefully as it sets out how GetirFinans handles your personal data when you apply for a role with us, and the rights you have in connection with that information. The term “Candidates“ in this Notice refers to anyone who applies for a permanent or non-permanent role.
In case you have any comments or questions about this Notice, please contact us via Data Subject Application Form.
Types of Personal Data We Collect In Terms of Your Application
GetirFinans collects your personal data directly from you, your references, GetirFinans employees who think you are suitable for the relevant position, through your application submitted via electronic environments, e-mails which are sent to us, correspondences with the recruiters, headhunters, or candidate recognition meetings by automated, partially automated and non-automated methods. The types of personal data that is collected and processed when you apply for a role with GetirFinans includes the following
| Identification Data | Name, surname, identity number, date of birth |
|---|---|
| Contact Details | Phone number, address, e-mail address |
| Education History | Education information, academic qualifications |
| Professional Experience | Professional qualifications, profession/task/title information, job qualifications, employment references, employment experience, job titles/positions, work preferences |
| Skills | Language skills, computer skills, personal skills, certificates and achievements |
| Visual Data | Photograph |
| Other Information | Military service, letter of intent, personal website information, career website profile information, other details included in the CV/résumé, other information voluntarily provide throughout the process, including through assessment centers and interviews |
| Personal Data Provided by Other Sources | References provided by referees, other background information provided or confirmed by academic institutions and training or certification providers, information provided by recruitment or executive search agencies and platforms, information obtained from publicly available sources |
In order to assess your suitability for the position, it is sufficient to share only the necessary personal data. Therefore, we advise you not to include personal data that are not relevant to the position, and especially special categories of personal data (such as health information and membership in associations), in the applications and resumes you submit to GetirFinans.
If the candidate shares the personal data of third parties, such as a reference person or family member, with GetirFinans, they are responsible for informing those individuals in accordance with the PDPL and relevant secondary legislation and obtaining explicit consent from those individuals when necessary. The candidate shall bear all legal and criminal liability arising from the failure to fulfill this obligation.
If the candidate shares the personal data of third parties, such as a reference person or family member, with GetirFinans, they are responsible for informing those individuals in accordance with the PDPL and relevant secondary legislation and obtaining explicit consent from those individuals when necessary. The candidate shall bear all legal and criminal liability arising from the failure to fulfill this obligation.
Purposes, Methods and Legal Grounds for Processing Your Personal Data
Your personal data is processed based on the legal grounds specified in Article 5 of the PDPL. In the absence of at least one of these legal reasons, your personal data may be processed if you have provided your explicit consent.
As GetirFinans, we process your personal data for the following purposes and legal grounds:
As GetirFinans, we process your personal data for the following purposes and legal grounds:
| Your Personal Data Processed in the Process | Personal Data Processing Purposes | Legal Grounds |
|---|---|---|
| Identification Data, Contact Details, Professional Experience, Skills, Visual Data, Other Information, Personal Data Collected from Other Sources | To get in touch with the Candidates; to conduct application processes of Candidates; to conduct selection, evaluation, and placement processes of Candidates; to conduct candidate assessment processes such as personality inventory and general ability tests and to report the results; to perform reference checks during the recruitment process of the Candidates; to receive feedback of the Candidates regarding the recruitment process, to send surveys or questions to improve the recruitment processes. | Personal data processing is necessary for the establishment or performance of the contract between the Candidate and GetirFinans (Art. 5/2-c of the PDPL) Personal data have been made public by the data subject (Art. 5/2-d of the PDPL) Personal data processing is mandatory for our legitimate interests (Art. 5/2-f of the PDPL) |
| Identification Data, Contact Details, Professional Experience, Skills, Visual Data, Other Information, Personal Data Collected from Other Sources | To evaluate Candidates’ suitability for openings within GetirFinans in the future, in the event of adverse conclusion of the recruitment process. | Explicit consent to the processing of personal data (Art. 5/1 of the PDPL) |
If you are accepted for a role at GetirFinans, the information collected during the recruitment process will form part of your personal file and will be processed in accordance with our Employee Privacy Notice which will be provided to you.
Whom We Share Your Personal Data With
Your personal data is transferred to domestic third parties under the following circumstances, in connection and limited with the purposes, in accordance with Article 8 of the PDPL. Your personal data is transferred to third parties abroad under the following circumstances, in connection and limited with the purposes, in accordance with Article 9 of the PDPL and the Regulation on Procedures and Principles Regarding the Transfer of Personal Data Abroad, when appropriate safeguards are present or in the event of incidental, as below:
| Transferred Personal Data | Purpose of the Transfer | Transferred Party | Legal Grounds |
|---|---|---|---|
| Identification Data, Contact Details, Education History, Professional Experience, Skills, Other Information, Personal Data Provided by Other Sources | Within the scope of conducting recruitment processes through career portals that GetirFinans uses and managing our business partner and supplier relations, to conduct service procurement processes from third parties providing infrastructure and information services used by GetirFinans (for example, getting support from companies that provide services for personality inventories). | Business partners & suppliers in Turkey and abroad | Personal data processing is mandatory for our legitimate interests (Art. 5/2-f of the PDPL) |
Your Data Privacy Rights
Article 11 of the PDPL regulates the rights of the data subjects (real persons whose personal data are processed). You may exercise the rights pursuant to Article 11 of the PDPL which are as follows:
1. To be informed whether your personal data is processed or not,
2. If your personal data has been processed, to request information regarding the same,
3. To be informed on the purpose of processing your personal data and whether it is used in accordance with its purpose,
4. To be informed on the third parties to whom your personal data is transferred in the country or abroad,
5. To request the correction of your personal data if it is incomplete or incorrectly processed,
6. To request the deletion or destruction of your personal data within the scope of the conditions stipulated in Article 7 of the PDPL,
7. If your personal data is deleted or destroyed within the scope of Article 7 of the PDPL and your personal data is incomplete or incorrectly processed, to request the notification of the third parties to whom the personal data has been transferred to,
8. To object to the emergence of a result against you due to the analysis of your personal data exclusively by automated systems,
9. To request compensation of the damage in case you suffer damage due to unlawful processing of your personal data.
1. To be informed whether your personal data is processed or not,
2. If your personal data has been processed, to request information regarding the same,
3. To be informed on the purpose of processing your personal data and whether it is used in accordance with its purpose,
4. To be informed on the third parties to whom your personal data is transferred in the country or abroad,
5. To request the correction of your personal data if it is incomplete or incorrectly processed,
6. To request the deletion or destruction of your personal data within the scope of the conditions stipulated in Article 7 of the PDPL,
7. If your personal data is deleted or destroyed within the scope of Article 7 of the PDPL and your personal data is incomplete or incorrectly processed, to request the notification of the third parties to whom the personal data has been transferred to,
8. To object to the emergence of a result against you due to the analysis of your personal data exclusively by automated systems,
9. To request compensation of the damage in case you suffer damage due to unlawful processing of your personal data.
How to Use Your Data Privacy Rights
You can choose the following methods to exercise your rights specified in Article 11 of the PDPL and to submit your requests to GetirFinans:
• You can submit your request via Data Subject Application Form.
• You can submit your request via your registered electronic mail (KEP) address to getirteknolojik@hs01.kep.tr via secure electronic signature or mobile signature,
• You can submit your request in writing, including the documents proving your identity, to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Site T Blok No:13/334 Beşiktaş/İstanbul.
In accordance with Article 13 of the PDPL, GetirFinans will finalize your requests within 30 (thirty) days at the latest, depending on the nature of the request. If the transaction requires any cost, then the tariff determined by the Personal Data Protection Board will be applied. If your request is rejected, the reason(s) for the rejection will be communicated to you within 30 (thirty) days at the latest.
Getir Teknolojik Hizmetler A.Ş.
Date: October 2026
• You can submit your request via Data Subject Application Form.
• You can submit your request via your registered electronic mail (KEP) address to getirteknolojik@hs01.kep.tr via secure electronic signature or mobile signature,
• You can submit your request in writing, including the documents proving your identity, to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Site T Blok No:13/334 Beşiktaş/İstanbul.
In accordance with Article 13 of the PDPL, GetirFinans will finalize your requests within 30 (thirty) days at the latest, depending on the nature of the request. If the transaction requires any cost, then the tariff determined by the Personal Data Protection Board will be applied. If your request is rejected, the reason(s) for the rejection will be communicated to you within 30 (thirty) days at the latest.
Getir Teknolojik Hizmetler A.Ş.
Date: October 2026