Privacy Notice (KVKK)

NEF FORTIS

As NEF FORTIS Bağımsız Denetim ve Danışmanlık A.Ş. (“NEF FORTIS” or the “Company”), we care about the security of your personal data. This Privacy Notice has been prepared under Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to inform you about the personal data processed through the www.neffortis.com.tr website and the forms on it. The Turkish version prevails.

1. Data controller

NEF FORTIS Bağımsız Denetim ve Danışmanlık A.Ş. · MERSIS No: 0630148457600001 · Address: 1071 Usta Plaza, Kızılırmak Mah. 1443. Cad. No:25 C Blok Kat:5 D:43 Çukurambar, Çankaya / Ankara, Türkiye · E-mail: info@neffortis.com.tr · Phone: +90 312 502 22 50

2. Personal data processed

• Identity and contact details: name and surname, e-mail address, phone number, name of the company you work for.
• Request details: the subject you select and the message you write in the meeting request and contact forms.
• CV and professional information: the CV, education and experience details and cover letter you submit through the career application form.
• Transaction security and usage data: IP address, browser and device information, pages visited and cookie data (see the Cookie Policy for details).

3. Purposes of processing

• Receiving and evaluating your meeting and information requests and responding to you,
• Conducting preliminary discussions towards a service agreement,
• Receiving and evaluating job and internship applications and communicating with applicants,
• Ensuring the security of the website and monitoring and improving its operation,
• Fulfilling legal obligations and responding to requests from competent authorities.

4. Legal grounds and method of collection

Your personal data are collected electronically through the forms and cookies on our website. They are processed on the legal grounds set out in Article 5(2) of the KVKK: being directly related to the conclusion or performance of a contract (para. c), fulfilment of our legal obligations (para. ç), and being necessary for our legitimate interests provided that your fundamental rights and freedoms are not harmed (para. f). Where explicit consent is required, such as for non-essential analytics cookies and transfers of personal data abroad, your explicit consent is obtained.

5. Transfer of personal data

Limited to the purposes above, your personal data may be transferred to our website hosting, e-mail and IT service providers, and to competent public authorities in legal disputes and as required by law. Because of the analytics service used on the site (Google Analytics), some data may be transferred to servers abroad; such transfers are made in accordance with the conditions in Article 9 of the KVKK.

6. Retention period

Your personal data are kept for as long as the purpose of processing requires and for the periods set out in the relevant legislation; at the end of these periods they are erased, destroyed or anonymised. Information from unsuccessful job and internship applications is kept for a maximum of 1 (one) year for consideration for future positions.

7. Your rights under Article 11 of the KVKK

• To learn whether your personal data are processed and, if so, to request information about it,
• To learn the purpose of processing and whether the data are used in line with that purpose,
• To know the third parties in Türkiye or abroad to whom the data are transferred,
• To request correction if the data are incomplete or inaccurate, to request erasure or destruction under the conditions in Article 7 of the KVKK, and to request that these actions be notified to the third parties to whom the data were transferred,
• To object to a result against you arising from analysis exclusively by automated systems,
• To claim compensation for damage arising from unlawful processing.

8. Applications

You may submit requests regarding your rights in writing to our address above, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or send them to info@neffortis.com.tr from the e-mail address registered in our records. Applications are concluded free of charge within 30 days at the latest.

Last updated: November 2026