Careers

Data controller

The data controller is Tuna & Tuncer Law and Consultancy. Address: Levent, Yasemin Sk. No:16, 34330 Beşiktaş/Istanbul, Türkiye. Email: info@tunatuncer.com.

Personal data we process

• Identity and contact details: name, surname, email address, phone number,
• Application details: the position you apply for and the note you write in the application form,
• Education, professional experience, skills and reference details contained in your résumé and attachments.

Please do not include special categories of personal data, such as health, religion, or association or union membership, or your Turkish ID number in your résumé. These are not needed for the assessment and will be disregarded.

Purpose of processing

Your personal data is processed only to receive and evaluate your application, to contact you during the evaluation process, and to inform you of its outcome.

Method of collection and legal basis

Your data is collected directly from you, electronically, through the application form on our Careers page and by email (including your résumé and attachments).

Processing relies on the following legal grounds in Article 5(2) of the KVKK: evaluating your application, provided that it is directly related to the formation of a contract (sub-paragraph c), and retaining it for the establishment, exercise or protection of a right in the event of a dispute concerning the application process (sub-paragraph e).

The “future positions” purpose does not rely on these grounds; it relies solely on the explicit consent you may give separately, as described below.

Transfer of personal data

Your application is reviewed by the partners of Tuna & Tuncer and the lawyers involved in the evaluation process, and is not shared with third parties.

Because applications are received by email, they may be hosted on servers outside Türkiye by our email infrastructure provider, Google (Google Workspace). This is done in accordance with the conditions set out in Article 9 of the KVKK.

Where a legal obligation arises, information may be provided to competent public authorities to the extent required by law.

Retention period

After the application process is concluded, your data is retained for six months and then deleted or destroyed. If there is a dispute, it may be retained until the dispute is resolved.

If you give explicit consent for “future positions”, your data is retained for one year from the conclusion of the application process. You can withdraw your consent at any time, in which case your data will be deleted.

Future positions

Whether you want your application to be kept for future suitable positions, and to be contacted for that purpose, is entirely up to you. Unless you tick the relevant box in the application form, your application is not used for this purpose, and this choice does not affect the evaluation of your application. If you apply by email without using the form, you need to state this request separately in your email.

Data security

We take the necessary technical and administrative measures to protect your personal data.

Your rights

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred; to request correction if it is incomplete or inaccurate; to request deletion or destruction under the conditions in Article 7 of the KVKK; to request that these actions be notified to the third parties to whom the data has been transferred; to object to a result against you arising from analysis of the data exclusively by automated systems; and to claim compensation if you suffer damage due to unlawful processing.

You may submit your requests, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, by emailing info@tunatuncer.com or applying in writing to our office address. Your application will be concluded within thirty days at the latest, depending on the nature of the request. If you find the response insufficient, you may file a complaint with the Personal Data Protection Board.