CLARIFICATION TEXT FOR THE PROCESSING OF PERSONAL DATA OF EMPLOYEES/TRAINEE CANDIDATES

1. Data Controller and Scope

GÜNER KUZU CONSTRUCTION INDUSTRY AND TRADE INC. as the Data Controller, (Bayraktar Mah. Suna Sok. No:3 G.O.P. / Çankaya / ANKARA), processes your personal data that you share with us in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) and the relevant legislation.

This clarification text explains the purposes for which your personal data are processed, with whom they are shared, the storage period and your rights under the KVKK within the scope of recruitment and intern evaluation processes.

2. Your Processed Personal Data and Collection Methods

We process your following personal data during the job application process:

• Identity and Contact Information: Name, surname, date of birth, address, telephone number, e-mail address.
• Education and Professional Information: Curriculum vitae (CV), educational background, transcripts, language test results, certificates, professional experience.
• Reference and Verification Information: The references you provided in your job application and the information obtained as a result of our verifications.
• Interview Records: Data obtained during face-to-face or videoconference interviews.
• Other Supporting Documents: Additional documents you provide as part of your job application.

Your data are collected by the following methods:

• Printed forms: Job application forms, interview notes.
• Digital means: Applications made through our Company's e-mail addresses, our website (www.gunerkuzu.com) or platforms such as Kariyer.net.

3. Purposes and Legal Basis for Processing Your Personal Data

Our Company processes your personal data for the purpose of carrying out recruitment and intern evaluation processes. Within this scope, your data are processed on the following legal bases:

Being directly related to the draw up or performance of the employment contract (Labor Law No. 4857, Code of Obligations No. 6098 Art. 419).

• Fulfillment of the legal obligations of the data controller (For example, recruitment processes in connection with Turkish Employment Agency).
• Being made public by the data subject himself/herself.
• Being mandatory for the establishment, exercise or protection of a right.
• Being processed in line with the legitimate interests of the data controller (For example, security practices in the workplace, identity control).
• In some cases, your explicit consent is required for the processing of your special categories of data.

4. Special Categories of Personal Data and Cases Requiring Explicit Consent

As a rule, we make sure that your special categories of personal data (race, ethnic origin, political opinion, religious belief, biometric data, etc.) are not processed. However, for certain positions or legal obligations, we may process your information on criminal convictions and security measures provided that you give your consent

Within this framework, it is your responsibility to inform the persons in your CV about their personal data (name, surname, telephone, e-mail, etc.) and to obtain their explicit consent.

5. Transfer of Your Personal Data

Your personal data may be shared with the following parties in a limited and restrained manner for the purpose of carrying out recruitment processes:

• Company officials (HR department and managers).
• Service providers bound by a confidentiality agreement (e.g. IT services, cloud service providers, recruiting firms).
• Administrative and judicial authorities within the framework of legal obligations.

Your personal data are shared only for the legal reasons specified in Articles 5 and 6 of the KVKK and by protecting your privacy.

6. Your Rights under KVKK

Pursuant to Article 11 of KVKK, you have the following rights:

• Learning whether your personal data are being processed or not.
• Requesting information if your data have been processed.
• Learning the purpose of processing and whether used appropriately.
• Learning the third parties to whom personal data are transferred in Türkiye or abroad.
• Requesting correction if incomplete or incorrectly processed.
• Requesting erasure or destruction of your data within the scope of Article 7 of KVKK.
• Requesting that third parties to whom data are transferred be notified of their correction or erasure.
• Objection to any result arising against you due to the exclusive analysis of your data by automated systems.
• Requesting compensation for your damages in case you suffer damage due to unlawful processing.

In order to exercise these rights, you can submit your requests, together with the documents confirming your identity, by one of the following methods:

• In person or through a notary public to Bayraktar Mah. Suna Sok. No:3 G.O.P. / Çankaya / ANKARA.
• Via KEP (Registered Electronic Mail): KEP address of gunerkuzuinsaat@hs02.kep.tr or info@gunerkuzu.com
• Via KVKK application form on our Company's website.

7. Explicit Declaration of Consent

The following data processing activities shall only be carried out with your explicit consent. Please give your consent by checking the relevant boxes:

☐ I consent to the processing/sharing of my personal data regarding criminal convictions and security measures.

By filling out the application form or sharing your CV, you acknowledge that you have read, understood and approved this clarification text.

With kind regards,

Güner Kuzu Construction Industry and Trade Inc.