CANDIDATE PRIVACY NOTICE
Privacy

CANDIDATE PRIVACY NOTICE

Version: 1.0 (Draft — requires legal-language review)

v1.02026-08-23

1. Data Controller

The data controller responsible for your personal data is: WGSA DENİZCİLİK TAŞIMACILIK FUAR ORGANİZASYON TANITIM İTHALAT VE İHRACAT LİMİTED ŞİRKETİ Registered address: Limonluk Mah. 2453 Sk. Ofis Çözümleri No: 3C, Yenişehir/Mersin, Türkiye MERSİS: 0385124605600001 Trade Registry No.: 52164 Tax Number: 3851246056 Email: info@wgsa.co Phone: +90 533 652 8541

2. Candidate Information Collected

When you apply for a vacancy at WGSA, we may collect and process the following categories of personal information: - Your full name, contact details (email address, phone number), and current location (city, country). - Your professional background, including current role, employer, years of experience, languages, work authorization status, and salary expectation. - Your curriculum vitae (CV), cover letter, portfolio links, and LinkedIn profile. - Your answers to vacancy-specific screening questions and interview notes. - Information you provide in recruitment communications (emails, messages, interview correspondence). - CAPTCHA responses and limited security information used to protect the integrity of the application form. This information is processed temporarily and is deleted shortly after submission, unless it is required in connection with an investigated security incident. - Technical metadata such as the date and time of your application and the source channel (e.g., website, referral). You should not include unnecessary sensitive information in your CV or application, such as data concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, unless it is directly relevant to a specific vacancy requirement. If you voluntarily provide such information, it will be processed in accordance with applicable law.

3. Purposes of Processing

We process your personal information for the following purposes: - To evaluate your suitability for the vacancy you applied for. - To communicate with you regarding your application, including scheduling interviews and requesting additional information. - To conduct interviews, assessments, and reference checks where relevant. - To make hiring decisions and, where applicable, to prepare for the possible establishment of an employment contract. - To maintain recruitment records and comply with legal obligations. - To contact you about future job opportunities, only if you have given separate optional explicit consent (see Section 9). - To ensure the security and integrity of the recruitment system and to prevent fraud. No solely automated system makes the final hiring decision. All hiring decisions involve meaningful human evaluation by authorized WGSA personnel.

4. Collection Method and Legal Grounds

Your personal data is collected directly from you through the application form, your CV, vacancy-specific questions, interviews, and subsequent recruitment communications. The legal grounds for processing your personal data are: - For the recruitment and evaluation of your application, processing is based on Article 5(2)(c) of Turkish Law No. 6698 (KVKK), where necessary for steps prior to the possible establishment of an employment contract at your request. - Processing required to comply with legal obligations may rely on Article 5(2)(ç). - Processing necessary for the establishment, exercise, or protection of legal rights may rely on Article 5(2)(e). - Proportionate security, audit, and recruitment-administration activities may rely on Article 5(2)(f). - Retention of your data for contact regarding unrelated future vacancies must rely on your separate optional explicit consent under Article 5(1). These legal grounds remain subject to confirmation by legal counsel before this notice is approved.

5. Recipients and Service Providers

Your personal information may be accessed only by authorized WGSA recruitment personnel, the relevant hiring manager and interview panel, and authorized system administrators where necessary. Contracted cloud hosting, recruitment technology, private document-storage, cybersecurity, and communication providers may process your information solely to provide their services under confidentiality and data-protection obligations. Your information may also be disclosed to courts, regulators, or authorized public bodies where legally required. Your CV is stored privately and accessed only by authorized ERP users within WGSA.

6. International Transfers

DRAFT — WGSA's website and recruitment system use contracted cloud technology providers. Your personal information may be processed or accessed outside Türkiye depending on the confirmed infrastructure and subcontractors of those providers. Before this notice is approved, WGSA and its legal consultant must confirm the actual processing locations, recipient groups, and the applicable international-transfer mechanism and safeguards in accordance with Articles 9 and 10 of Law No. 6698. This Draft statement must not be published as final wording.

7. Retention and Security

We retain your personal information as follows: - Standard applications: Your personal data is retained for 365 days from the date of your application. - Talent Pool applications with optional consent: If you have given separate optional explicit consent to be considered for future vacancies, your personal data is retained for 730 days from the date of that consent. When the approved retention period ends, your personal data is deleted, destroyed, or anonymized, unless a legal obligation requires longer retention. We implement appropriate technical and organizational measures to protect your personal information, including access controls, encryption in transit, secure private document storage, and regular security reviews.

8. Candidate Rights and Request Method

Under applicable law, you may have the right to: - Be informed about the processing of your personal data. - Access your personal data. - Request correction of inaccurate or incomplete personal data. - Request deletion of your personal data, subject to legal obligations. - Object to or restrict the processing of your personal data. - Withdraw consent for processing based on consent, without affecting the lawfulness of processing carried out before withdrawal. You may exercise your applicable privacy rights by submitting a written request to: - Our registered company address: Limonluk Mah. 2453 Sk. Ofis Çözümleri No: 3C, Yenişehir/Mersin, Türkiye - Our official KEP address: wgsadenizciliktasimacilikfuarorganizasyonontanitim@hs01.kep.tr - From an email address previously registered with WGSA, to info@wgsa.co Requests must contain sufficient information to identify the applicant and the right being exercised. WGSA may request proportionate identity verification before responding.

9. Optional Future-Opportunities Consent

Separate from your job application, you may choose to give explicit consent for WGSA to retain your personal information and contact you about future job opportunities that may be relevant to your profile. This future-opportunities consent is optional and is unchecked by default. You are not required to provide it to submit an application. Refusing or withdrawing future-opportunities consent does not affect the evaluation of your current application in any way. If you grant this consent, it is valid for the Talent Pool retention period (730 days). You may withdraw it at any time by submitting a request as described in Section 8.

10. Notice Version and Effective Date

This is version 1.0 of the WGSA Candidate Privacy Notice. This version is currently a Draft and has not yet been approved or published. It is provided for internal review and legal-language verification only. Once approved, the effective date will be confirmed in this section, and the notice will be published on the WGSA careers website.