Privacy Policy

Last updated: 9 October 2026

1. Data controller

Your personal data is processed by GGATECH TEKNOLOJİ VE DANIŞMANLIK ANONİM ŞİRKETİ (“GGAtech”), Nidakule Kuzey No:3/B, 34750 Ataşehir / İstanbul, Türkiye, tax number 3952378939, acting as data controller under KVKK. You can reach us at info@ggatech.com.tr.

2. Personal data we process

Depending on how you interact with us, we may process the following categories of personal data:

• Candidates: identity details (name, surname), contact details (email, phone, city), CV and professional background, education, languages, certifications, LinkedIn profile, salary expectation, availability, work preferences, interview notes and assessments, and your applications.
• Employer clients and their representatives: identity and contact details, company and position details, hiring requests, contract, invoicing and payment information.
• Website visitors: IP address, browser and device information, pages visited, language preference, cookie data and the information you send through our forms.

We do not ask for special categories of personal data (such as health, religion or criminal records). Please do not include them in your CV unless a role legally requires it.

3. How we collect it

We collect personal data electronically through this website, the candidate and client portals, sign-up and application forms, email and phone, and from publicly available professional sources such as LinkedIn and from references you provide.

4. Purposes and legal grounds

• Running recruitment and headhunting processes, matching candidates with open positions and presenting suitable candidates to employers (establishment and performance of a contract, legitimate interest, and your explicit consent where required).
• Creating and managing your portal account and talent pool record (establishment and performance of a contract).
• Managing contracts, job orders, invoicing and placements with employer clients (performance of a contract, legal obligation).
• Answering your messages and requests, and informing you about suitable roles (legitimate interest; marketing messages only with your consent).
• Keeping the website and our systems secure, and meeting legal and regulatory obligations (legal obligation, legitimate interest).

These grounds are set out in Articles 5 and 6 of KVKK. Where processing relies on your explicit consent, you may withdraw it at any time; this does not affect processing carried out before the withdrawal.

5. AI-assisted processing

As an AI-native recruitment agency, we use AI-assisted tools to read CVs, summarise profiles and suggest matches between candidates and positions. These tools support our consultants; hiring decisions are always made by people, never by an automated system alone. Under Article 11 of KVKK you may object to a result that affects you adversely and arises exclusively from automated analysis.

6. Who we share it with

• Employers: your profile and CV are shared with an employer only for a specific position you applied for or agreed to be presented for.
• Service providers: hosting, software, email and AI service providers that process data on our behalf and under our instructions.
• Authorities: courts, public authorities and other parties where required by law.

Some of our service providers may store or process data outside Türkiye. Such transfers are carried out in line with Article 9 of KVKK, including appropriate safeguards and, where required, your explicit consent.

7. How long we keep it

We keep personal data for as long as the purpose requires and as required by law. Candidate profiles in our talent pool are kept for up to two years after your last interaction with us, unless you ask us to delete them earlier. Contract and invoicing records are kept for the periods set by commercial and tax law. Data is then deleted, destroyed or anonymised.

8. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse, including access controls, encrypted connections and limiting access to staff who need it.

9. Your rights

Under Article 11 of KVKK you have the right to:

• learn whether your personal data is processed and request information about it;
• learn the purpose of the processing and whether data is used accordingly;
• know the third parties in Türkiye or abroad to whom data is transferred;
• request correction of incomplete or inaccurate data, and deletion or destruction of data under the conditions of Article 7, and notification of these actions to the third parties the data was transferred to;
• object to a result that is adverse to you and arises exclusively from analysis by automated systems;
• claim compensation for damage arising from unlawful processing.

10. How to apply

Send your request in writing to the address above, or by email to info@ggatech.com.tr from the email address registered with us, stating your name, surname and the right you wish to exercise. We will respond free of charge within 30 days at the latest.

11. Cookies

We use cookies that are necessary for the website to work, such as keeping you signed in and remembering your language choice. You can manage cookies in your browser settings; blocking necessary cookies may stop parts of the website from working.

12. Changes

We may update this policy. The current version is always published on this page with its date.

Terms of Service