PeopleBox Applicant Tracking System Privacy Policy

Purposeand Scope
‍This Privacy Policy ("Policy") has been prepared to explain the proceduresand principles regarding situations where Lityum Yazılım Anonim Şirketi("Lityum") processes personal data as a data controller within thescope of the PeopleBox Applicant Tracking System ("PeopleBox" or"Platform") offered by Lityum. With respect to personal data ofapplicants within the scope of PeopleBox, PeopleBox customers are essentiallythe data controllers, whereas Lityum acts as a data processor. This PrivacyPolicy applies to limited and specific cases where Lityum acts as a datacontroller. 
‍InformationNotice for Applicants
‍Personal data of applicants submitted through job applications on PeopleBox areprocessed for purposes determined by the company to which the application ismade. Lityum acts solely as a technical infrastructure provider without anydiscretionary authority over such data. Applicants must exercise their rightsregarding their personal data by contacting the company to which they haveapplied. 
‍Definitions
‍Personal Data: Refers to any information relating to an identified or identifiablenatural person.
Platform:Refers to the PeopleBox Applicant Tracking System.
Data Subject: Refers to the natural person whose personal data is processed.
Data Controller: Refers to the natural or legal person who determines the purposesand means of processing personal data.
Data Processor: Refers to the natural or legal person who processes personal data onbehalf of the data controller based on the authority granted by the datacontroller. Personal
Data Processed as Data Controller
Personal data processed by Lityum as data controller is listed below: 
a)Personal data of customer users-Name and surname
-Company information-Job title/position information
-Corporate email address-Mobile phone number
-User transaction records (log records) 
b)Personal data of website visitors
-IP address
-Cookie information
-Website usage data 
c)Data relating to sales, marketing and communication processes
-Identity and contact information shared through contact forms and demo requests  
 Purposes of Processing Personal Data as Data Controller
‍Lityum processes personal data as data controller for the purposes listed below:
-Providing access to the PeopleBox platform and managing user accounts.
-Fulfillment of contracts concluded with our customers and improvement ofservice quality.
-Maintaining traffic records in accordance with Law No. 5651 and conductinginformation security processes.
-Improving website experience, conducting technical analyses and ensuringwebsite security.
-Responding to demo requests and sending commercial electronic messages uponconsent. 
‍Legal Grounds for Processing Personal Data
‍Personal data processed by Lityum as data controller are processed based on the legalgrounds specified below within the scope of Law No. 6698 on the Protection ofPersonal Data ("KVKK") and other relevant legislation: 
a)Data of website visitors-Fulfillment of legal obligations pursuant to KVKK Article 5/2-ç-Legitimate interests of Lityum pursuant to KVKK Article 5/2-f 
b)Data of customer users-Establishment and performance of contract pursuant to KVKK Article 5/2-c-Legitimate interests pursuant to KVKK Article 5/2-f 
c)Data relating to sales, marketing and communication processes-Responding to pre-contractual requests pursuant to KVKK Article 5/2-c-Explicit consent of the data subject where necessary for commercial electronicmessages 
‍Transfer of Personal Data and International Data Transfer
‍Personal data may be transferred to technical infrastructure, hosting and cloud serviceproviders, and third parties providing information security and technicalsupport services for the purpose of providing PeopleBox services and incompliance with KVKK. In case of international transfer of personal data, theconditions stipulated in KVKK and relevant secondary legislation are fulfilled;explicit consent is obtained from data subjects where necessary, or transfersare made to countries with adequate protection announced by the Board.Necessary technical and administrative measures are taken within the scope ofthe European Union General Data Protection Regulation (GDPR). 
Personal data of applicants are processed by Lityum not as data controller but as dataprocessor in accordance with customers' instructions; responsibility for datatransfer with respect to such data belongs to the relevant customers. Lityumregularly evaluates the compliance of third-party service providers to whompersonal data are transferred with current data protection legislation andrelevant data security standards; and prefers to work only with third partiesdetermined to be compliant with relevant data protection regulations. 
‍Retention Period of Personal Data
‍Personal data are retained for the period required by the processing purposes andlimited to the retention periods stipulated in relevant legislation; uponexpiration of the period, they are deleted, destroyed or anonymized.  
Security of Personal Data
‍Lityum undertakes that, pursuant to the relevant provisions of Law No. 6698 on theProtection of Personal Data, it has taken the necessary administrative andtechnical measures to prevent unlawful processing of personal data under itscontrol and stored on the PeopleBox platform and unlawful access to such data,and to ensure the preservation of personal data. Lityum is responsible for thesecurity of personal data only within the scope of its own platform andtechnical infrastructure, whether acting as data controller or providingservices as data processor. 
‍Cookies
‍Cookies are used on the PeopleBox website to improve user experience and ensureeffective delivery of services. Detailed information regarding the use ofcookies is provided in the Cookie Policy. 
‍Rights of Data Subjects and Application Procedure
‍With respect to cases where PeopleBox is the data controller; pursuant to Article 11of KVKK, by applying to Lityum, you have the right to learn whether yourpersonal data is being processed, to request information regarding this if itis processed, to learn the purpose of processing of your data and whether it isused in accordance with its purpose. You also have the rights to learn thepersons to whom your data is transferred domestically or abroad, to requestcorrection of incomplete or incorrect data, to request destruction of your datawithin the framework of the provisions of Article 7 of KVKK, to object to theresults of analysis made with automated systems, and to request compensationfor damages arising from unlawful processing. 
With respect to cases where PeopleBox is the data processor; PeopleBox customers arethe data controllers with respect to personal data of applicants. Your rightsand requests for destruction regarding your personal data in this scope must bedirected to the relevant PeopleBox customers who are the data controllers. 
You may submit your requests regarding the rights specified above by sending themto destek@peoplebox.biz from your email address registered in our system, togetherwith information and documents that will verify your identity, or by applyingto our Company in writing. Additional verifications (such as SMS transmissionor phone call) may be requested from you in order to confirm that theapplication belongs to you personally and to protect your rights. 
Application requests will be concluded free of charge within a maximum of 30 (thirty) daysaccording to their nature. However, if the transaction requires an additionalcost for PeopleBox, the fee in the tariff determined by the Board may beapplied. In case of destruction requests, the appropriate method amongdeletion, destruction or anonymization of data will be evaluated by PeopleBoxaccording to the circumstances of the specific case. 
‍ContactInformation
‍Company Name: Lityum Yazılım Anonim Şirketi
MERSIS No: 0609-1151-7780-0001
Contact Email: destek@peoplebox.biz
Address:Caferağa Mah. General Asım Gündüz Cad. Bahariye Plaza Kat: 4/K No: 62 Daire No:41 Kadıköy/İstanbul 

This Privacy Policy maybe updated when deemed necessary. The current text enters into force on thedate it is published on the PeopleBox website.