Türk Hava Yolları Anonim Ortaklığı (hereinafter referred to as “THY”, “Company” or “We”), pays the utmost attention to the lawfulness of the processing of personal data of its employees. The Turkish Airlines Privacy Announcement for Job Candidates (“Announcement”) herein have been prepared in accordance with the Article 10 of Law on Protection of Personal Data numbered 6698 (“Law”) and EU General Data Protection Regulation (“GDPR”) to ensure that your personal data, as the job candidates, are processed under your full control and in a transparent manner.
In this respect, within this Announcement we provide you information on, as a data controller, which personal data of yours we process and for what purposes, the third parties we share your data with, your rights and methods that you may contact us.
For more detailed information about the processing of your personal data, you may review the Data Authorities Registry (VERBİS) (https://verbis.kvkk.gov.tr/) managed by the Presidency of the Personal Data Protection Authority.
How Do We Collect Your Personal Data?
From the start of your job application process, your personal data can be collected wholly or partly automated or non-automated via printed documents (e.g. CV information that you may provide or social security records), through forms (e.g. recruitment form / periodic examination application form) and in some instances, through digital channels (e.g. information obtained directly from public institutions, or from the authorized hospitals of the Directorate General of Civil Aviation (“SHGM”) to fulfil certain legal obligations and ensure the continuation of the application process. As per the Law, your personal data may only be processed where one or more conditions that are stipulated under Law are present. As THY, regardless of the purpose for which we process your personal data, we process it in accordance with the provisions of national and international law, primarily the general principles stated under Article 4 of the Law and by relying on conditions for lawful data processing listed under Article 5 and 6 of the Law.
Which Personal Data We Process?
General information on your personal data processed by THY are as follows (For more detailed information about the type of personal data processed, you may review the Data Authorities Registry (VERBİS) https://verbis.kvkk.gov.tr/ managed by the Presidency of the Personal Data Protection Authority.
Why Do We Process Your Personal Data?
THY will process your personal data for the following purposes. (For more detailed information about the purposes of processing of your personal data, you may review the Data Authorities Registry (VERBİS) https://verbis.kvkk.gov.tr/ managed by the Presidency of the Personal Data Protection Authority.
To Whom We Transfer Your Personal Data and Why?
Under certain circumstances, we may transfer your personal data that we process to third parties residing within borders or abroad, in accordance with the provisions of national and international law, particularly Article 8 and 9 of the Law.
Third parties that we may transfer your data can be listed categorically as follows:
What are Your Rights as Data Subjects?
As data subjects, you are entitled to a number of rights under Article 11 of the Law in relation to your personal data. We would like to inform you about the rights that you are entitled to and the ways you may use them.
The rights you have under the Article 11 of the Law are as follows:
We have prepared Application Form which you may find at firstname.lastname@example.org. You may easily use your rights mentioned above by filling and signing the Application Form and send us via Our e-mail address email@example.com. We will respond you in the shortest time possible, based on the nature of your request and within 30 days at the latest. As a general rule, responses to data subject requests are given free of charge; however, we reserve the right to charge you according to the tariff to be determined by the Personal Data Protection Board in case the request requires additional costs.
Türk Hava Yolları A.O. Genel Yönetim BinasıAtatürk Havalimanı,Yeşilköy, 34149 İstanbul00 90 212 463 63 63 - 0850 224 23 29
THY aims to take the necessary measures to ensure that the personal data of our job candidates are processed in compliance with all relevant legislative provisions and international regulations, particularly the Personal Data Protection Law and GDPR. In this respect, under certain circumstances your explicit is necessary for the processing of your personal data.
Nevertheless, we would like to remind you that, aside from the purposes stated hereunder, the purposes stated within the Announcement above are pursued solely within the context of employment relationship and your explicit consent is not required to pursue them.
In any case, you may find more detailed information about the processing of your personal data from the Türk Hava Yolları Anonim Ortaklığı Policy on the Processing and Protection of Personal Data published on our website.
In light of the information above, if you wish to give your explicit consent for the data processing activities stated below, we ask you to check the corresponding box. We would like to remind you that you may withdraw your explicit consent whenever you wish.
In this respect, as a data controller, we provide you information on which personal data we process and for which purposes, the third parties we share your data with, your rights and the methods that you may use to contact us.
Data Protection Principles
We will comply with data protection law and principles, which means that your data will be:
From the start of your application process, your personal data can be collected via printed documents (e.g. CV information that you may provide or social security records) and in some instances, through digital channels (e.g. information obtained directly from public institutions) to fulfil certain legal obligations and ensure the continuation of the application process or where applicable, your documents can be sent to us by the recruitment agency you provided with your information. In any case, your personal data may only be collected and processed in accordance with applicable laws.
Which Personal Data Do We Collect & Process?
We Collect and process the following types of personal data:
As well as collecting information from you directly, THY receives information relating to you from recruiters and persons who you have named as referees.
Why Do We Process Your Personal Data and What is the Legal Basis for this Use?
THY will process your personal data for the following purposes:
Where we require you to provide personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to complete your recruitment process, or to meet obligations placed on us. In all other cases, provision of requested personal data is optional. Where you do not provide the relevant data for in these circumstances, the consequences will be explained to you at the time.
To Whom Why and Where We Transfer Your Personal Data?
Under certain circumstances, we may transfer your personal data to third parties in accordance with applicable laws.
The categories of third parties that we may transfer your data to can be listed as follows:
Where information is transferred from inside the EEA to outside the EEA (e.g. Turkey), and where this is to a stakeholder or vendor in a country that is not subject to an adequacy decision by the EU Commission, data is adequately protected by EU Commission approved standard contractual clauses, an appropriate Privacy Shield certification or a vendor's Processor Binding Corporate Rules. A copy of the relevant mechanism can be provided for your review by contacting us using the details set out below.
Information about EU standard contractual clauses can be found here.
How long will you retain my data?
If you are successful: We will retain your personal data for the purposes of the recruitment process and, once this process is finished, for an appropriate period so as to be able to deal with any legal claims linked to the application process and for any periods we are required to keep your personal data under applicable law. After this period which we will take steps to delete your personal data or hold it in a form that no longer identifies you. If you become a Turkish Airlines employee, your personal data will become a part of your employee file and will be used later for the management of the employment relationship.
If you are not successful: We will retain your personal data for up to 12 months to review our recruitment decision and to keep you in mind for future recruitment processes. If you do not want us to keep your personal data for the purposes of potentially considering you for future positions, please let us know.
Where permitted by law you are entitled to a number of rights:
Under the GDPR, these rights may be limited, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in the GDPR. We will inform you of relevant exemptions we rely upon when responding to any request you make.
In most cases we will not charge a fee for your requests. However, where the request is manifestly unfounded or excessive we may charge a reasonable fee based on the administrative costs generated by your request.
How do we keep your Personal Data secure?
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal data on our specific instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, save for the exemptions to this rule i.e. if automated decision making is required or authorised by law or is necessary for entering into or performing the contract or is based on your individual explicit written consent.
If you have any concerns about how we process your data, or if you would like to opt-out of direct marketing, based on the laws applicable to you, you can reach out to:
THY Headquarter Entitiy:
Türk Hava Yolları Genel Yönetim BinasıAtatürk Havalimanı,Yeşilköy, 34149 İstanbul00 90 212 463 63 63 - 0850 224 23 firstname.lastname@example.org
If you live in Germany and have an unresolved concern you can also contact our German DPO:
📞 +49 069 955171 22/53📠 Turkish Airlines Inc. Hamburger Allee 4 (Westendgate) 60486 FRANKFURT/M