PRIVACY POLICY

1. Data Controller and Data Processor Roles

There are two different data processing roles within the scope of the Platform:

1.1. Regarding Buyer Account Data

Garaj Technology is the Data Controller regarding the following data:

  • Membership information
  • Subscription and payment information
  • Billing information
  • Login and security logs

1.2. Regarding Candidate Data

The buyer using the platform accepts that they are the data controller regarding the candidate data they upload to the platform. Garaj Technology is in the position of processing candidate data only in line with the Buyer's instructions. The Buyer is responsible for;

  • Informing candidates,
  • Obtaining consent in cases where explicit consent is required,
  • Uploading data to the system in accordance with the law.

2. Processed Data

2.1. User Account Data

  • Name-surname
  • E-mail
  • Phone
  • Hashed password
  • Billing information
  • IP and log records

2.2. Candidate Data

  • Name
  • E-mail
  • Position relationship
  • Voice recording
  • Transcript
  • Artificial Intelligence evaluation outputs

3. Data Processing Purposes

For User Data:

  • Subscription management
  • Payment transactions
  • Billing
  • Security
  • Legal obligations

For Candidate Data:

  • Executing the interview process
  • Artificial Intelligence analysis and report generation

4. Data Transfer

The Seller does not sell personal data or transfer it to third parties for commercial purposes. Data may be transferred to the following parties:

  • Payment providers
  • Cloud server providers
  • Artificial Intelligence service providers
  • Authorized public institutions

If service providers are located abroad, personal data may be transferred abroad by providing the necessary legal guarantees within the scope of GDPR/KVKK art.9. Data transfers to these parties are carried out only for the purpose of providing the service and in accordance with the legislation.