Legal
Privacy Policy
Explains how Sezra collects, uses, shares and protects personal data.
Draft This text is a draft and is pending legal review. It is not the final version and may change to reflect applicable law.
Last updated: 24 August 2026 (draft)
Scope
This Privacy Policy explains how Sezra processes personal data as part of the virtual assessment service it provides. Our policy is designed to align with KVKK and the European General Data Protection Regulation (GDPR).
What we collect
The data we collect consists of account and contact details, candidate assessment data and the reports derived from it, technical records of your use of the service (IP, device and session information), and the messages you send us. We collect only the minimum data the service requires.
How we use data
We use data to run the assessment process, report results, provide and improve the service, maintain security and communicate with you. We do not use candidate assessment data for marketing and we do not sell it to third parties.
Legal grounds
Processing rests on performance of a contract, legal obligation, legitimate interest and, where required, explicit consent (KVKK Articles 5-6; GDPR Article 6). Where processing rests on consent, you can withdraw it at any time.
Sharing and processors
We share data only with the processors we use to deliver the service (hosting and infrastructure providers) and, where legally required, with competent authorities. Our processors handle data only on our instructions and within the limits of their contract.
Retention
We keep data for as long as the purpose of processing requires and the legislation prescribes. The period is set in the contract; once it ends, records are deleted or anonymised.
Security
We apply administrative and technical measures including access control, logging, encryption in transit and at rest, and the principle of least privilege. A report is reachable only by the users assigned to the relevant hiring process, and access is recorded.
International transfers
Hosting may be in the European Union or in Türkiye. Where an international transfer is involved, we carry it out with safeguards that comply with KVKK Article 9 and the GDPR's international-transfer rules.
Your rights
You have rights of access, correction, erasure, restriction of processing, data portability and objection. You can raise your request through the contact form on our help page.
Contact
You can send questions about this policy and data-protection requests through our contact form. Final data-protection contact details will appear on this page after legal review.