Privacy Policy

This policy describes how data is actually processed in the GoTeam service offered at goteamx.app: which records we keep, which provider sees what, where the data sits and how long it stays.

It is not the same document as the KVKK Privacy Notice. That notice lists the identity of the data controller, the processing purposes, the legal grounds and your rights under Article 10 of Law No. 6698. This page does not repeat those lists, it describes the practice. If the two read differently on a point, the privacy notice governs as far as the legal ground is concerned.

For the candidate data that our employer customers upload to the panel, the customer is the data controller and we are the data processor. The boundaries of that division of duties are set out in the Data Processing Agreement. If you applied to a posting as a candidate, the privacy notice of the company you applied to is shown separately on the application page.

Data arrives in two ways: either you type it into a form, or it is produced while the service runs. The four sets below are all of it.

Apart from the companies below, no personal data is transferred to any third party. Your data is not sold, rented or shared with advertising networks, data brokers or any other party that trains models. Each line says what that provider sees.

• Cloud file storage provider established outside Türkiye: Storing the CV and document files that are uploaded. Data it sees: CV and document files. The data is processed outside Türkiye.
• AI analysis provider established outside Türkiye: Analysing and scoring CV content. Data it sees: CV text and position criteria. The data is processed outside Türkiye.
• Site usage measurement provider established outside Türkiye: Measuring how the site is used. Data it sees: Device, browser and browsing data. The data is processed outside Türkiye.
• Bot protection provider established outside Türkiye: Verifying that forms are filled in by a person. Data it sees: IP address and browser verification record. The data is processed outside Türkiye.
• PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş.: Collecting the payment. Data it sees: Full name, e-mail, transaction amount and payment result. It is a company established in Türkiye.
• ePlatform Bulut Bilişim A.Ş. (Turkcell e-Şirket): Issuing the official e-Arşiv invoice. Data it sees: Invoice title, tax details, address, e-mail and amount. It is a company established in Türkiye.

CV files are hosted by our cloud file storage provider established outside Türkiye and are sent to our AI provider established outside Türkiye for analysis. These two providers are the places where the data is processed outside Türkiye. The transfer falls within Article 9 of Law No. 6698 (KVKK, the Turkish Data Protection Law) and is necessary for the service to be provided; for the analysis service your explicit consent is obtained in addition. You can learn the identity of the providers through the channel described on the Data Subject Request page. If you do not give consent, no analysis can be carried out; on its own this leads to no other consequence.

The part processed outside Türkiye is these three: storing CV files, analysing CV content and measuring site usage. Payment collection and the issuing of official invoices run through companies established in Türkiye. Account records, postings, applications and audit records are held in the GoTeam database and are not sent to any provider outside the three tasks above.

The measures we take are listed one by one below. We do not claim here a certificate or an audit report that we do not hold.

• All traffic is carried over an encrypted connection (HTTPS/TLS); an unencrypted connection is not accepted.
• Permissions are granted through roles. Every user belongs to a role and every role to a set of individually defined permissions; a user without a permission does not see the screen, and their request is refused on the server as well.
• The least privilege principle is applied: a role is never given more permission than the work requires.
• The company boundary is enforced on the server. One customer's data never appears in another customer's panel; every query is limited by the identity of the account.
• Critical changes are written to the audit trail and the record cannot be edited afterwards.
• In KVKK masking mode, candidate identity details are hidden on screen. Masking does more than cover the view: the delete and export buttons disappear for a masked user, and masking is applied on the server as well.
• The payment page is not our page, it is the payment institution's page; card data never passes through our servers at any stage.

Your data is kept for the duration of the relationship between us and throughout the limitation periods set out in the legislation. Payment and invoice records are kept for 10 years under Article 82 of the Turkish Commercial Code (at least 5 years under Article 253 of the Tax Procedure Law); even if you delete your account, these records are held for that period and are then anonymised by severing the links to you.

The periods below are the concrete form of that rule. A record whose period has expired is deleted, destroyed or anonymised by severing its link to a person.

• Unverified CV Analysis upload: a record left without the e-mail address being verified is deleted together with its file at the end of 7 days.
• Distance transaction records: 3 years.
• Electronic commerce transaction records under Article 11/3 of Law No. 6563: 10 years.
• Candidate data: the employer customer sets the retention period and we delete on that instruction. Requests about the period and about deletion are addressed to the company applied to.

Mandatory cookies exist to keep the session open and for security and bot protection; without them you cannot log in. On the measurement side there is a single tool and it runs only when you allow it. We use no advertising network cookies and no profiling trackers.

What each cookie does, how long it stays and how to change your preference are set out on the Cookie Policy page.

You can send your questions about this policy to [email protected] or reach us on 0551 406 11 90.

Data controller: Motivex Intelligence Bilişim Yazılım Robotik Sanayi ve Ticaret Anonim Şirketi. Address: Muradiye Mah. Celal Bayar Üniversitesi Kampüsü Küme Evleri Teknokent No: 22 Ofis No: Z-27, 45140 Yunusemre / Manisa. Tax office and number: Mesir Vergi Dairesi / 6232288048.

You may send your requests under Article 11 of Law No. 6698 (KVKK, the Turkish Data Protection Law) to [email protected]. Your request is concluded within 30 days at the latest. How the request is made and which information it must carry is set out on the Data Subject Request page.