Privacy Policy
As ONYX AGENT BİLİŞİM TEKNOLOJİLERİ ANONİM ŞİRKETİ (the “Company” or “Onyx Agent”), we attach great importance to the privacy of our users and visitors and to the protection of their personal data. This Privacy Policy explains how the personal data obtained during your visits to our website and your use of our services is collected, processed, stored and protected in accordance with Turkish Personal Data Protection Law No. 6698 (the “KVKK”) and related legislation.
Personal Data We Collect
Depending on the nature of the services we provide, we may collect and process the following categories of data:
- Identity Information: First name, surname, Turkish ID number (where applicable under Turkish law).
- Contact Information: Email address, telephone number, address details.
- Personnel Information: Curriculum vitae, education status, work experience, certificates, foreign language proficiency.
- Audio Records: Voice recordings taken as part of our voice-based pre-screening service and the written transcripts of those recordings.
- Assessment Data: Match scores against job posting requirements, AI-assisted assessment outputs, recruiter notes.
- Transaction Security Data: IP address, access logs, device information, browser type.
- Usage Data: On-site activity, preferences and usage patterns.
Purposes of Processing Personal Data
The personal data we collect is processed for the following purposes:
- Providing and improving the AI-assisted recruitment and HR solutions offered by our Company.
- Conducting and evaluating voice-based pre-screening interviews.
- Matching candidates against job posting requirements and tracking process stages.
- Fulfilling legal obligations and sharing information with authorised institutions.
- Ensuring user security and preventing fraud and unauthorised access.
- Managing customer support processes and resolving requests or complaints.
- Carrying out analysis and reporting work aimed at improving service quality.
Transfer of Personal Data
In line with the purposes stated above and in accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred to:
- The employer organisations from which you receive services or to which you have applied,
- Domestic suppliers and, where your explicit consent exists or within the scope of statutory exceptions, suppliers abroad with whom we cooperate in order to provide our services (cloud service providers, artificial intelligence infrastructure providers, voice interview infrastructure providers, email and notification service providers and similar),
- Public institutions and organisations authorised by law, within the scope of legal obligations,
- Our legal counsel, for the purpose of resolving legal disputes.
For details regarding transfers abroad, please see the Explicit Consent Text on the Transfer of Personal Data Abroad.
Method of Collection and Legal Grounds
Your personal data is collected in electronic form through our website, the candidate portal, our recruitment platform, email, telephone and cookies. This collection activity is based on the legal grounds of “being directly related to the establishment or performance of a contract”, “being necessary for the data controller to fulfil its legal obligation” and “being necessary for the legitimate interests of the data controller, provided that this does not harm the fundamental rights and freedoms of the data subject”. For transfers abroad, the legal ground of “explicit consent” is relied upon.
Data Security
Our Company takes the necessary technical and administrative measures to protect your personal data against unauthorised access, loss or alteration. These measures include encryption in transit and at rest, role-based access control and authorisation mechanisms, secure server infrastructure, and data processing agreements concluded with service providers.
Your Rights as a Data Subject
Under Article 11 of the KVKK, as a data subject you have the right to learn whether your data is being processed, to request information if it has been processed, to learn the purpose of processing and whether your data is used in accordance with that purpose, to know the third parties to whom your data is transferred in Türkiye or abroad, to request correction of your data if it has been processed incompletely or incorrectly, to request its deletion or destruction within the conditions set out in the Law, to object to any outcome to your detriment arising from the analysis of your processed data exclusively through automated systems, and to request compensation for damages you suffer as a result of unlawful processing.
To exercise these rights, you may contact us through the channels below.
Updates
This Privacy Policy may be updated in line with changes in legislation or developments in our services. The current text takes effect on the date it is published on our website.
Contact
For questions regarding our privacy policy or your personal data, you may contact us: