Candidate Privacy Notice
Effective date: 18 August 2026
This notice has been prepared under Article 10 of Law no. 6698 on the Protection of Personal Data for job candidates who apply through the careers pages on dreaviontechnology.com.
1.1. Data controller
Official data controller name: Dreavion Teknoloji Sanayi ve Ticaret Limited Şirketi. Istanbul Trade Registry Office, registry no 1154612. MERSİS no 0313155054000001. Zincirlikuyu Tax Office, tax identification no 3131550540. Address: Emniyet Evleri Mah. Eski Büyükdere Cad. Sapphire No: 1/1, İç Kapı No: 1B04, Kağıthane / İstanbul. Email: info@dreaviontechnology.com
1.2. Categories of personal data processed
Only the following data is collected through the application form:
Identity: name and surname. Contact: email address and phone number. Application details: the role applied for, the free text field where you describe yourself, and the focus area you select if any. Professional experience: a LinkedIn, GitHub or portfolio link if you choose to share one.
The free text field is limited to what you write and you determine its content. Content reached through a link you share is subject to that platform's own privacy practices.
Transaction security data may also arise while the application is submitted: connection and submission records, technical records intended to prevent abuse, and connection data including IP address.
1.3. Please do not share special categories of personal data
The application process is not intended to collect special categories of personal data. Please do not write health status, disability, religion or belief, ethnic origin, trade union membership, political opinion, criminal convictions or similar special category information into the free text field, and please do not share your national identity number, an image of an identity document, or financial information.
If such data is submitted without being requested, it is deleted to the extent it is not required for the recruitment process.
1.4. Purposes of processing and legal bases
Receiving and evaluating the application, contacting the candidate and conducting interview processes. Legal basis: that processing personal data belonging to the parties to a contract is necessary, provided it is directly related to the conclusion or performance of that contract, and the legitimate interest of the data controller, provided it does not harm fundamental rights and freedoms.
Keeping application records, ensuring recruitment processes can be audited and exercising the right of defense in potential disputes. Legal basis: that processing is mandatory for the establishment, exercise or protection of a right.
Ensuring information security and preventing abuse. Legal basis: the legitimate interest of the data controller.
Fulfilling statutory obligations and responding to requests from competent authorities. Legal basis: that processing is mandatory for the fulfilment of a legal obligation.
1.5. Method of collecting personal data
Personal data is obtained directly from you in electronic form and by methods that are not wholly automated, through your completion of the application form on the careers pages. If you contact us by email about your application, that correspondence is processed in the same scope.
1.6. Automated decision making
Applications are concluded through human assessment. No evaluation producing an adverse result for you is made by analysis carried out solely by automated systems.
1.7. Parties to whom personal data may be transferred
Personal data is transferred only to the extent necessary: to the hosting, database and email infrastructure providers used to submit and store the application, to legal and financial advisors in the event of a legal obligation or dispute, and to competent public institutions and organizations where there is a statutory obligation or a duly made request.
Application data is not used for any purpose other than recruitment, is not sold to third parties, and is not processed for marketing purposes.
1.8. Transfer abroad
Some of the infrastructure services used may process data outside Türkiye. Where personal data is transferred abroad, the transfer is carried out relying on whichever of the conditions set out in Article 9 of Law no. 6698 is applicable.
Transfer mechanism and appropriate safeguard: the applicable mechanism under Article 9 will be announced in this section once infrastructure agreements and data flows are settled.
1.9. Retention period
Where your application is unsuccessful or the position closes, your personal data is kept for as long as necessary so that the right of defense against potential legal claims can be exercised, and is erased, destroyed or anonymized at the end of that period.
If your application results in employment, your data passes into your employee personnel file and is kept for the periods required by employment legislation.
Records that legislation requires to be kept for longer, and records within the scope of an ongoing dispute, fall outside these periods.
1.10. Talent pool
Keeping your application on file so that it can be considered in future for positions other than the one you applied for is only possible if you give separate explicit consent to that. Not giving explicit consent does not prevent your application from being evaluated and has no effect on the process.
You can withdraw the explicit consent you have given at any time. A withdrawal request can be submitted through one of the application methods below.
1.11. Your rights under Article 11 of the Law
You have the right to learn whether your personal data is processed, to request information about it if it has been processed, to learn the purpose of processing and whether it is used in line with that purpose, to know the third parties in Türkiye or abroad to whom it has been transferred, to request correction where it has been processed incompletely or incorrectly, to request erasure or destruction where the conditions are met, to request that correction or erasure be notified to the third parties to whom the data was transferred, to object to a result arising against you through analysis carried out solely by automated systems, and to claim compensation if you suffer loss because of unlawful processing.
1.12. How to apply
You can submit your requests using whichever of the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller is appropriate. For example: in writing and signed to the address Emniyet Evleri Mah. Eski Büyükdere Cad. Sapphire No: 1/1, İç Kapı No: 1B04, Kağıthane / İstanbul, from the email address you used in your application to info@dreaviontechnology.com, to Dreavion Technology's registered electronic mail address if one has been announced, or through the other secure application methods legislation accepts.
Your application must contain the identity and contact information legislation requires along with the subject of your request. For the purpose of data security, additional verification proportionate to the nature of the request may be sought.
Requests are concluded as soon as possible depending on their nature and within thirty days at the latest. Applications are free of charge as a rule. Where the process entails an additional cost and legislation permits a fee, the relevant tariff may be applied.
1.13. Updates and contact
This notice may be updated if recruitment processes or legislation change. The current version and its effective date are published on this page.
Dreavion Teknoloji Sanayi ve Ticaret Limited Şirketi. Address: Emniyet Evleri Mah. Eski Büyükdere Cad. Sapphire No: 1/1, İç Kapı No: 1B04, Kağıthane / İstanbul. Email: info@dreaviontechnology.com