Candidate Privacy Notice and Talent Pool Consent

1. Data Controller

This Candidate Privacy Notice and Talent Pool Consent is prepared, in accordance with Article 10 of the Turkish Law No. 6698 on the Protection of Personal Data and, for candidates located in the European Union, Article 13 of the GDPR, by Denim Moon Tekstil İthalat ve İhracat Sanayi Ticaret Limited Şirketi (hereinafter "Denim Moon") in its capacity as data controller, for candidates who apply through the Open Position Application Form or the Talent Pool Application Form on the Careers page of denimmoon.com. This text details the section of the Privacy Notice relating to job applications and is the basis of the explicit consent obtained for the talent pool.

• Company Name: Denim Moon Tekstil İthalat ve İhracat Sanayi Ticaret Limited Şirketi
• Central Registry (MERSİS) No: 0291196456700001
• Address: Oruçreis Mahallesi, Giyimkent 10. Sokak, Giyimkent B108 Blok, No: 36 A, Esenler / Istanbul, Türkiye
• Telephone: +90 212 438 72 37
• E-mail: contact@denimmoon.com
• Registered Electronic Mail (KEP): denimmoontekstil@hs01.kep.tr
• Authorised Representative / Contact Person: Yılmaz Beytaş

2. Personal Data Processed

• Identity and contact: Full name, telephone, e-mail, city, country, LinkedIn profile address;
• Professional information: Position or department applied for, industry experience, most recent employer and job title, languages and proficiency levels;
• CV and application text: The uploaded CV file, the text written in the "Why you for this position?" or "Why should you be part of the Denim Moon team?" fields, and other information contained in the CV;
• Process records: Application date, interview notes, evaluation result.

We kindly ask you not to include special categories of personal data, such as health, trade union membership, religion or political opinion, in your CV; such data is not used in the evaluation of your application.

3. Purposes and Legal Bases of Processing

Purpose	Legal Basis (Law No. 6698 / GDPR)
Receiving and evaluating the open position application, scheduling interviews and communicating the result	Article 5/2-c: taking steps at the request of the candidate prior to entering into an employment contract; GDPR Article 6(1)(b)
Keeping the application in the talent pool for positions to be opened in the future	Article 5/1: explicit consent (the "I consent to my application being kept in the talent pool" option in the form); GDPR Article 6(1)(a)
Recording recruitment processes and providing evidence in possible disputes	Article 5/2-e: establishment, exercise or protection of a right; Article 5/2-f: legitimate interest; GDPR Article 6(1)(f)
Fulfilling legal obligations	Article 5/2-ç: legal obligation of the data controller; GDPR Article 6(1)(c)

4. Method of Collection

Your personal data is collected by automated means through the application forms and the file upload field on the website, and by non-automated means through interviews, e-mail and telephone correspondence. If a reference check is required, reference persons are contacted only with your knowledge.

5. Transfers

Your candidate data is transferred to hosting and infrastructure service providers (Amazon Web Services, with data centres located abroad, under the safeguards set out in Article 9 of the Law and, where applicable, Chapter V of the GDPR), to e-mail service providers and, where legally required, to competent public authorities. Your data is not transferred to recruitment agencies or other employers; no automated decision-making or profiling is carried out for the recruitment decision.

6. Retention Periods

Situation	Retention Period
Open position application without talent pool consent	A maximum of 6 months from the closing of the position; deleted at the end of the period
Applications with talent pool consent	24 months from the date of consent; deleted at the end of the period or renewed with your fresh consent
Hired candidates	The application file is transferred to the personnel file and kept for the periods set out in employment legislation

7. Talent Pool Consent

The talent pool is the record in which Denim Moon keeps applications so that it can reach suitable candidates again for positions to be opened in the future. Inclusion in the talent pool is based solely on your explicit consent:

• The talent pool option in the Open Position Application Form is optional; even if you do not tick it, your application is evaluated for that position.
• Since the Talent Pool Application Form is used for the purpose of direct registration in the pool, talent pool consent is part of the application in this form; if you do not wish to give consent, you may apply separately for open positions.
• You may withdraw your consent at any time by sending an e-mail to contact@denimmoon.com; upon withdrawal, your application is deleted from the pool within 30 days at the latest. Withdrawal does not affect the lawfulness of processing carried out until that date.

8. Your Rights and Applications

Under Article 11 of Law No. 6698 and, where applicable, Articles 15 to 21 of the GDPR, you have the right to learn whether your personal data is processed, to request information, to learn the purpose of processing, to know the third parties to whom it is transferred, to request rectification, erasure or destruction, to request that these operations be notified to the third parties to whom the data has been transferred, to object to a result arising against you from analysis by automated systems, and to claim compensation for damage. You may submit your requests in writing to contact@denimmoon.com from the e-mail address registered in our system, to the registered electronic mail address denimmoontekstil@hs01.kep.tr, or to the postal address above together with documents verifying your identity. Applications are concluded free of charge within 30 days at the latest. Details are set out in the Privacy Notice.

9. Declaration of Consent (Talent Pool)

I have read the explanations above. I give my explicit consent to my personal data and CV shared in the application form being kept in the Denim Moon talent pool for 24 months from the date of consent, to be considered for positions to be opened in the future. I understand that I may withdraw this consent at any time.

Effective Date: 13.09.2026 · Version: 1.0