Applicant privacy notice.
Last updated:
How SRV Studio handles the personal data you send us when you apply for a role.
1. Who we are
SRV Studio is a trading name of Server Yaşam A.Ş., registered at Kısıklı Mah. Alemdağ Cad. No:75/4, Üsküdar, İstanbul, Türkiye. For the purposes of Law No. 6698 on the Protection of Personal Data (KVKK) and, where applicable, the GDPR, Server Yaşam A.Ş. is the data controller for your application.
Contact for all privacy matters: hi@srv.studio
2. What we collect, and how
Application form. Your name, email address, phone number, the role you apply for, the link to your CV, any portfolio, showreel or LinkedIn link, your message, and the documents those links lead to. We collect these electronically, through the application form on this website, directly from you.
During the process. Notes from interviews, the results of any task we ask you to complete, and our correspondence with you, collected by email, video call or in person.
Please do not include special categories of personal data in your CV, such as a photo, religion, health information, union membership or criminal record. We do not need them to assess your application. If you send them anyway, we do not use them and delete them.
3. Why we process it, and on what legal basis
Assessing your application and contacting you about it. Basis: processing is necessary for steps taken prior to entering into an employment contract (KVKK art. 5(2)(c)).
Keeping your application for future roles. Only if you ask us to in your message or later by email. Basis: your explicit consent (KVKK art. 5(1)). You can withdraw it at any time; withdrawal does not affect processing carried out before it.
Defending legal claims. Basis: processing is necessary to establish, exercise or defend a right (KVKK art. 5(2)(e)).
We do not make hiring decisions solely by automated means.
4. Who we share it with
We do not sell personal data, and your application is seen only by the people involved in hiring for the role. We use these service providers, acting on our instructions:
Our website hosting provider, for hosting the site and processing the application form
Google Workspace, for email and file storage, including the notification we receive when you apply
Both store data outside Türkiye. These transfers rely on the safeguards permitted under KVKK art. 9, such as standard contractual clauses, and on GDPR Chapter V where it applies. We also share data with public authorities where the law requires it.
5. How long we keep it
If you are not hired, we delete your application 6 months after the role is filled or closed. If you asked us to consider you for future roles, we keep it for 12 months from the date you applied. If you are hired, your application becomes part of your personnel file. At the end of these periods we delete or anonymise the data.
6. Your rights
Under KVKK art. 11 you may ask us to:
confirm whether we process your personal data, and give you information about it
tell you the purpose of the processing and whether the data is used for that purpose
tell you which third parties, in Türkiye or abroad, have received it
correct incomplete or inaccurate data
erase or destroy it under the conditions in KVKK art. 7
notify the third parties who received it of any correction, erasure or destruction
object to an outcome against you that results solely from automated analysis
compensate you for damage caused by unlawful processing
Where the GDPR applies, you also have the rights in its arts. 15 to 22, including restriction and portability. You may withdraw your application at any time.
7. How to make a request
Send your request in writing to the address in section 1, by registered electronic mail (KEP), or by email to hi@srv.studio from the email address you used to apply, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. We respond free of charge within 30 days. If we reject your request or you are not satisfied with our answer, you may complain to the Personal Data Protection Authority (KVKK Kurumu), or to your local supervisory authority where the GDPR applies.
8. Changes
We will post any changes on this page and update the date above.
