KVKK Privacy Notice

Under Article 10 of Personal Data Protection Law No. 6698 (KVKK, the Turkish Data Protection Law), the identity of the data controller is as follows: Motivex Intelligence Bilişim Yazılım Robotik Sanayi ve Ticaret Anonim Şirketi.

The company offers AI assisted recruitment software under the GoTeam brand. Every question and request concerning personal data goes to the e-mail address below; there is no separate application address.

• Registered address: Muradiye Mah. Celal Bayar Üniversitesi Kampüsü Küme Evleri Teknokent No: 22 Ofis No: Z-27, 45140 Yunusemre / Manisa
• Tax office and tax identification number: Mesir Vergi Dairesi / 6232288048
• E-mail: [email protected]
• Phone: 0551 406 11 90
• Product and site: GoTeam, goteamx.app

This privacy notice was written for three groups: people who visit goteamx.app, the representatives of customer companies that open an account, and people who buy the CV Analysis service for their own CV.

The data of a candidate who applies for a job falls outside the scope of this notice. When you apply to a posting, the data controller is the company that published the posting. GoTeam is the data processor acting on that company's instructions: the company decides which data is collected, how long it is kept and when it is deleted, and the privacy notice that applies to the candidate is that company's notice.

The division of duties between the two parties is set out on the Data Processing Agreement page. If, as a candidate, you want your data deleted or corrected, send your request to the company you applied to. If the request reaches us, we tell you whom to apply to and pass the request on to that company.

If you are reaching us from within the European Union, the equivalent of your data protection rights is summarised on the GDPR Notice page.

Which data is processed depends on the relationship we have with you. Not all of the categories below are processed for every person.

• Identity and contact data: full name, e-mail address, phone number.
• Data on the customer company: trade name, tax office and tax identification number, invoice address, the name and role of the authorised person.
• Transaction security data: login records, IP address, session information and the record of actions taken in the panel.
• Financial data: order amount, payment result, transaction number, invoice number and date, the last four digits of the card and the card brand.
• CV Analysis data: the CV file you upload and the education, experience and skill information inside it, the target position you select, and the score and report produced.
• Browsing data: the pages visited, device and browser information, cookie records. Which cookie does what is set out one by one on the Cookie Policy page and is not repeated here.

Next to each purpose is the rule of law on which it rests. When a purpose disappears, the processing tied to it stops as well.

• Opening an account, setting up a subscription and providing the service. Legal ground: Article 5/2-c of the Law, being directly related to the formation or performance of a contract.
• Collecting the payment and completing the order. Legal ground: Article 5/2-c of the Law.
• Issuing the official e-Arşiv invoice and keeping the financial records. Legal ground: Article 5/2-ç of the Law, fulfilling a legal obligation (Tax Procedure Law and Turkish Commercial Code).
• Keeping electronic commerce transaction records. Legal ground: Article 5/2-ç of the Law, the record keeping obligation under Article 11 of Law No. 6563 on the Regulation of Electronic Commerce.
• Handling support requests and investigating fault reports. Legal ground: Article 5/2-f of the Law, legitimate interest.
• Security of the service: preventing unauthorised access, account takeover and automated request floods. Legal ground: Article 5/2-f of the Law.
• Measuring site usage and improving the pages. Legal ground: explicit consent, obtained on the cookie consent banner.
• Analysing and scoring a CV with AI and transferring it abroad to providers for that work. Legal ground: explicit consent.
• Exercising the right of defence in a legal dispute and meeting the lawful requests of competent public authorities. Legal ground: Article 5/2-e of the Law, the establishment, exercise or protection of a right.

All of the data is collected electronically. You do not fill in a paper form and no phone calls are recorded.

• Directly from you: the sign-up form, the contact form, the fields in the panel, the invoice details screen and the files you upload.
• By automated means: server logs, security logs and cookies. Cookies are detailed on the Cookie Policy page.
• From the payment institution: the payment result, the transaction number, the last four digits of the card and the card brand.

Your personal data is transferred to the recipients below only for the work stated next to each of them. No transfer is made to a party that is not on the list; your data is not sold and is not shared for advertising purposes.

• Cloud file storage provider established outside Türkiye: Storing the CV and document files that are uploaded. Data transferred: CV and document files. The place of processing is outside Türkiye.
• AI analysis provider established outside Türkiye: Analysing and scoring CV content. Data transferred: CV text and position criteria. The place of processing is outside Türkiye.
• Site usage measurement provider established outside Türkiye: Measuring how the site is used. Data transferred: Device, browser and browsing data. The place of processing is outside Türkiye.
• Bot protection provider established outside Türkiye: Verifying that forms are filled in by a person. Data transferred: IP address and browser verification record. The place of processing is outside Türkiye.
• PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş.: Collecting the payment. Data transferred: Full name, e-mail, transaction amount and payment result. The place of processing is Türkiye.
• ePlatform Bulut Bilişim A.Ş. (Turkcell e-Şirket): Issuing the official e-Arşiv invoice. Data transferred: Invoice title, tax details, address, e-mail and amount. The place of processing is Türkiye.

CV files are hosted by our cloud file storage provider established outside Türkiye and are sent to our AI provider established outside Türkiye for analysis. These two providers are the places where the data is processed outside Türkiye. The transfer falls within Article 9 of Law No. 6698 (KVKK, the Turkish Data Protection Law) and is necessary for the service to be provided; for the analysis service your explicit consent is obtained in addition. You can learn the identity of the providers through the channel described on the Data Subject Request page. If you do not give consent, no analysis can be carried out; on its own this leads to no other consequence.

Site usage measurement is also carried out abroad: the measurement data is processed by our site usage measurement provider established outside Türkiye. This measurement runs only when you have given cookie consent, and you can withdraw that consent through the steps on the Cookie Policy page.

Apart from these, no transfer abroad is made. Account data, panel records and financial records are held on servers in Türkiye.

Each category has its own retention period. When the period expires, the record is deleted, destroyed or anonymised by severing its link to an identity.

• Membership and account records: for as long as the account stays open. When you close the account the record is deleted; financial records are outside this rule.
• Candidate application records: for the period set by the company that published the posting. That company sets the period and gives the deletion instruction.
• Unverified CV Analysis records: 7 days. An upload left without the e-mail address being verified is deleted together with its file at the end of that period.
• Payment, invoice and financial records: for the period required by the Turkish Commercial Code and the Tax Procedure Law. The period itself is stated under the financial records heading below and is not written a second time here.
• Electronic commerce transaction records: 10 years (Article 11/3 of Law No. 6563).
• Records relating to a distance transaction: 3 years.
• Cookie consent record: 1 year. This record is kept in your browser rather than on our server; at the end of the period you are asked for your preference again.

The assessment is AI assisted. The score is produced against a fixed, evidence based rubric, and the final decision always belongs to a person. If you believe that an exclusively automated analysis has produced a result to your detriment, you may object under Article 11 of Law No. 6698 (KVKK, the Turkish Data Protection Law).

The CV Analysis score and the position fit score are produced from the share of a fixed, predetermined rubric that has been met. A score does not screen out an application on its own: the screening decision is made by a representative of the company that published the posting, and that person can disregard the score.

What the AI does, what it does not do and how a decision can be challenged are set out in detail on the AI Transparency Notice page.

Article 11 of Law No. 6698 gives you the following rights:

• To learn whether your personal data is being processed.
• To request information if it has been processed.
• To learn the purpose of the processing and whether the data is used in line with that purpose.
• To know the third parties in Türkiye or abroad to whom the data has been transferred.
• To request correction of data that has been processed incompletely or incorrectly.
• To request deletion or destruction of the data within the conditions of Article 7 of the Law.
• To request that correction, deletion and destruction be notified to the third parties to whom the data was transferred.
• To object to a result to your detriment arising from the analysis of the data exclusively by automated systems.
• To claim compensation if you suffer loss because of unlawful processing.