Data Protection Notice (KVKK)

This Notice has been prepared under Türkiye's Personal Data Protection Law No. 6698 ("KVKK") by YK Executive Search in its capacity as data controller.

The data controller's service address is Merkez/Düzce, Türkiye, and its contact email is yakupkurhann@gmail.com.

YK Executive Search operates as a private employment agency under license no. 1820, issued by the Turkish Employment Agency (İŞKUR) on 03.03.2025.

This Notice applies to personal data relating to visitors to our website, users of our contact form, people requesting information about our services, candidates, and company representatives who communicate with us.

Depending on the nature of your relationship with us, we may process the following categories of personal data:

• Identity data: full name
• Contact data: email address, phone number, and contact address
• Professional data: CV, title and company, employment and education history, areas of expertise, languages, professional-profile links, and compensation expectations
• Request and process data: service of interest, message and correspondence content, interview notes, candidate assessments, and recruitment status
• Client and contract data: company, authorized contact, service scope, project, and contract information
• Digital records: website access and security logs, cookie preferences, and device/browser data

We process personal data to respond to inquiries, assess service needs, conduct Executive Search and advisory engagements, evaluate candidates for relevant roles, manage client and candidate communications, perform contractual and operational processes, maintain information security, comply with legal obligations, and establish, exercise, or protect legal rights in potential disputes.

We do not request special-category personal data. If you provide such information, it will be processed only where an appropriate condition under Article 6 of KVKK applies and the required safeguards are in place.

Personal data may be obtained through website forms, email and telephone communications, online or in-person meetings, documents you provide, client and reference conversations, and professional platforms on which you have made information public. Data may be collected by wholly or partly automated means, or by non-automated means where it forms part of a data filing system.

Depending on the processing activity, we rely on the legal grounds in Article 5 of KVKK that processing is necessary to establish or perform a contract, comply with a legal obligation, establish, exercise, or protect a right, process information made public by the data subject in line with its public purpose, or pursue our legitimate interests without prejudicing your fundamental rights and freedoms. Where none of these grounds applies, we obtain your separate explicit consent.

Limited to the purposes stated above, personal data may be transferred to client companies involved in candidate assessment, suppliers providing IT, database, hosting, email, or similar support services, legal and financial advisers, and public authorities or legally authorized persons where required by law.

Candidate information is not shared with a client company without informing the candidate and identifying an appropriate legal ground. Data shared with suppliers is limited to what is necessary for the relevant service.

Where our cloud, database, or communications infrastructure operates through systems located outside Türkiye, personal data may be transferred abroad. Such transfers are carried out using the applicable mechanism under Article 9 of KVKK, including an adequacy decision, appropriate safeguards, or one of the limited occasional-transfer circumstances provided by law.

We retain personal data only for as long as necessary for the processing purpose, taking into account applicable statutory retention and limitation periods. When all grounds for processing cease to apply, data is deleted, destroyed, or anonymized in accordance with applicable law.

We apply appropriate technical and organizational measures, including access restrictions, logging, and authorization controls, to prevent unlawful processing or access and to keep personal data secure.

Under Article 11 of KVKK, you may apply to us to exercise the following rights:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used accordingly
• To know the third parties to whom it is transferred, domestically or abroad
• To request correction if processed incompletely or incorrectly
• To request deletion or destruction under the conditions set out in Article 7 of KVKK
• To request that correction, deletion, or destruction be notified to third parties to whom data was transferred
• To object to a result that is to your detriment arising from analysis carried out solely through automated systems
• To request compensation for damages arising from unlawful processing

You may submit a KVKK request in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, either in writing to Merkez/Düzce, Türkiye, or, using an email address already registered in our systems, to yakupkurhann@gmail.com.

Your application must include your full name; Turkish identity number for Turkish citizens, or nationality and passport or identification number for non-citizens; an address for service; an email address and phone number, where available; and a clear description of your request. You may attach supporting information and documents.

We respond free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request. Where processing the request incurs an additional cost, the tariff set by the Personal Data Protection Board may apply.