Protection of Personal Data

NBS WEBSITE PRIVACY NOTICE NBS Human Resources and Management Consulting Inc. (hereinafter referred to as “NBS”) informs you through this Privacy Notice, in accordance with the Personal Data Protection Law No. 6698 (hereinafter referred to as the “Law”), about the methods of collecting, processing, legal grounds, transfer, destruction of your personal data, and your rights under the Law on the website www.nbshr.net owned by NBS. The data subject (related person) declares to be informed about the processing of their personal data through this text. Data Controller In accordance with the Personal Data Protection Law No. 6698, NBS acts sometimes as a data processor and sometimes as a data controller, depending on the specific circumstances, as described below in the processing of personal data. Scope and Fundamental Principles Personal data will be processed based on legal reasons stated in Article 5 of the Law and for the purposes specified in this Privacy Notice, without being used out of scope, taking all necessary information security measures. It will be stored for the legal retention period or as long as necessary for the processing purpose and will be anonymized by our company at the end of the required period or destroyed in compliance with the Law and related legislation as per company procedures. NBS pays particular attention to the processing of personal data according to the Law, ensuring that it is:

• Accurate and up-to-date when necessary, in accordance with the law and the principle of honesty,
• Processed for specific, clear, and legitimate purposes,
• Connected and limited to the purposes for which they are processed,
• Processed only for the period stipulated in the relevant legislation or necessary for the purposes for which they are processed.

NBS demonstrates utmost sensitivity regarding data privacy and takes all necessary technical, administrative, and legal measures to protect personal data. Personal Data The following personal data categories are processed by NBS within the scope of services offered on the website:

• Identity Data (Name, surname, date of birth, etc.)
• Contact Data (Address, phone number, email address, etc.)
• Professional Experience Data (Resume information, education, and certification details, etc.)
• Customer Transaction Data (Content of requests, etc.)
• Transaction Security Data (Website access logs, username-password information, etc.)
• Marketing Data (Cookie records, etc.)

Collection Method and Legal Reason The personal data categories listed above are collected through information input on the website www.nbshr.net by the data subject. NBS processes your personal data within the scope of services offered on the website in light of legal reasons specified in Article 5 of the Law. The following table details the legal reasons for processing each category of personal data.

Personal Data Categories	Data Processing Activity	Data Processing Purposes	Legal Reason and Legal Basis
Identity, Contact, and Professional Experience Data	Personal data are processed as per the contract with NBS to find the best job opportunity for you	ii, iii, ix	Processing of personal data is necessary for the performance of the contract in accordance with Article 5(2)(c) of the Law
Identity, Contact, Professional Experience, and Customer Transaction Data	Personal data are processed to receive and conclude your requests and complaints submitted to NBS	v, vii, viii, x	Data processing is necessary for the establishment, exercise, or defense of legal claims in accordance with Article 5(2)(e) of the Law
Identity, Contact, Professional Experience, Marketing Data	Personal data such as identity, contact, and professional experience data are processed for placement activities on our People Box system, identity and contact data for being informed about new job opportunities, and cookie records for providing a functional website, based on your explicit consent	i, ii, iii, iv, v, vi, viii	Processing based on explicit consent obtained via website interaction in accordance with Article 5(1) of the Law

Purpose of Processing Personal Data Your personal data will be processed orally, in writing, or electronically within the framework permitted by the Law, for the following purposes:

• Steps required for making, implementing, and actualizing commercial decisions by NBS,
• Conducting job placement processes,
• Proper execution of services provided through the NBS website,
• Planning, monitoring, and execution of information security processes to protect NBS's commercial secrets and ensure information security,
• Conducting customer relations and satisfaction in compliance with regulations,
• Establishing and managing infrastructures for human resources and job placement activities,
• Establishment and protection of Intellectual and Industrial Property rights,
• Execution of communication activities,
• Fulfillment of NBS’s obligations arising from contracts and legislation,
• Evaluation, response, and improvement activities based on suggestions, requests, complaints, and fault notifications submitted to NBS.

The data processing purposes listed in the table above are specified through the numerals under this heading