KVKK Clarification Notice

Your personal data is processed by Sezra as data controller. Sezra is a virtual assessment center that measures candidates' competencies through a simulated workday in hiring processes.

In this notice, the candidate is the person taking the assessment and the customer is the employer running it. For a given assessment the customer may act as data controller and Sezra as data processor; this is set out in the contract.

The personal data we process includes: identity and contact data (full name, email); candidate assessment data (simulation responses, decisions, free-text answers); the assessment transcript and the competency scores and evidence quotes derived from it; transaction-security data (IP address, session and access logs); and information you send us through contact forms.

We do not request special categories of personal data. Please do not enter such data into free-text fields.

We process your personal data to run the assessment process and report its results, to provide and improve the service, to maintain transaction security, to meet our legal obligations and to communicate with you.

Candidate assessment data is used only to evaluate the relevant hiring process; it is not used for any other purpose.

Our processing rests on the grounds in KVKK Article 5: that it is directly related to the conclusion or performance of a contract, that it is necessary to meet a legal obligation, and the legitimate interest of the data controller. Where none of these applies, processing rests on your explicit consent.

For special categories of personal data, KVKK Article 6 applies; as a rule we do not process such data.

Your personal data may be transferred to the hosting and infrastructure providers we use to deliver the service. Hosting may be in the European Union or in Türkiye; where an international transfer is involved, we comply with the conditions in KVKK Article 9 and, where required, obtain your explicit consent.

Your data may be shared with legally authorised public authorities only to the extent required by law.

Your personal data is kept for as long as the purpose of processing requires and for the limitation periods set out in the relevant legislation. The retention period is set in the contract with the customer; once it ends, records are deleted, destroyed or anonymised.

A deletion request covers the transcript, the scores and the evidence quotes together.

The assessment includes automated systems that score candidates' responses. Because these scores can feed into a hiring decision, AI systems used in recruitment may be classified as high-risk under the European Union AI Act. For that reason we require that a decision is not made by an automated system alone and that every report is reviewed by a human.

Candidate assessment data and report content never train any model. This is not a preference but an architectural rule.

Under KVKK Article 11 you have the right to: learn whether your personal data is processed; request information if it has been; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred at home or abroad; request correction if it is incomplete or inaccurate; request its erasure or destruction; request that correction and erasure be notified to the third parties to whom it was transferred; object to analysis solely by automated systems; and claim compensation if you suffer loss due to unlawful processing.

To exercise your rights, you can send us your requests together with information verifying your identity. You can raise your request through the contact form on our help page; we will conclude it within thirty days at the latest.

This text is a draft; the final application channels and data-controller contact details will be published after legal review.