1. Identity of the Data Controller

​

This Privacy Notice has been prepared by Güneş Ekspres Havacılık A.Ş. ("SunExpress") in its capacity as the data controller in accordance with Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR").

 

Güneş Ekspres Havacılık A.Ş.
Yenigöl Mah. Nergiz Sok. No: 84
07230 Muratpaşa, Antalya, Türkiye

Telephone: +90 (0)242 310 26 26

Website: https://www.sunexpress.com

 

Data Protection Officer (DPO)

If you have any questions regarding the processing of your personal data or wish to exercise your rights under the GDPR, you may contact our Data Protection Officer:

Email: sxs.dpo@sunexpress.com

Postal Address: Güneş Ekspres Havacılık A.Ş., Yenigöl Mah. Nergiz Sok. No:84, 07230 Muratpaşa, Antalya, Türkiye

 

2. Categories of Personal Data Processed

​

Within the scope of your job application, SunExpress may process the following categories of personal data:

• Identification data (name, surname)

• Contact details (telephone number, address, email address)

• Education information

• Professional experience

• Certificates and diplomas

• Reference information

• Photograph

• Driving license information

• Military service status (where applicable)

• Marital status

• Date and place of birth

• Foreign language skills

• Salary expectations

• Hobbies and interests

• For cabin crew applicants: height, weight, and swimming ability

• Any other information included in your CV, cover letter, or application documents

• Information voluntarily disclosed during interviews or other stages of the recruitment process

 

3. Purposes and Legal Bases for Processing

​

Purposes

Your personal data is processed for the following purposes:

• Assessing your job application;

• Managing and conducting recruitment and selection processes;

• Communicating with you regarding your application;

• Assessing your suitability for the relevant position;

• Conducting reference checks and qualification verification processes;

• Planning and managing human resources operations;

• Defending and exercising legal rights where necessary;

• Complying with applicable legal and regulatory obligations.

 

Legal Bases

Your personal data is processed based on:

 

Article 6(1)(b) GDPR
Processing is necessary to take steps at your request before entering into a potential employment contract.

 

Article 6(1)(f) GDPR
Processing is necessary for the legitimate interests pursued by SunExpress, including evaluating candidates, conducting efficient recruitment processes, maintaining recruitment records, protecting its business interests, and selecting suitable candidates for employment opportunities.

 

Article 6(1)(c) GDPR
Processing is necessary for compliance with legal obligations to which SunExpress is subject.

 

Special Categories of Personal Data

Where special categories of personal data within the meaning of Article 9 GDPR are processed, such processing will only take place where necessary and where a condition under Article 9(2) GDPR applies, including where the candidate has voluntarily provided the relevant information or where processing is otherwise permitted by applicable law.

 

4. Recipients of Personal Data and International Transfers

​

Your personal data may be shared, where necessary, with:

• Individuals you have identified as references for the purpose of reference checks;

• Educational institutions, licensing authorities, and certification bodies for verification of qualifications and credentials;

• Information technology, recruitment, and human resources service providers acting on behalf of SunExpress;

• Companies within the SunExpress corporate group;

• SunExpress offices and affiliated entities located outside your country of residence, where necessary for recruitment and human resources purposes;

• Competent public authorities, regulators, or courts where required by law.

 

Reference checks will be conducted only where permitted under applicable law and, where required, after informing the candidate.

Where personal data is transferred outside the European Economic Area ("EEA"), such transfers will be carried out only where appropriate safeguards are in place in accordance with Chapter V of the GDPR, including, where applicable:

• An adequacy decision adopted by the European Commission; or

• The execution of the European Commission's Standard Contractual Clauses ("SCCs"); or

• Any other valid transfer mechanism permitted under applicable data protection legislation.

 

You may request further information regarding the safeguards applied to international transfers by contacting the DPO.

 

5. Method of Collection

 

Your personal data may be collected through automated or partially automated means and, where necessary, through non-automated methods, including:

• Career portals;

• Electronic recruitment systems;

• Email communications;

• Curriculum vitae (CVs);

• Application forms;

• Interviews and assessment processes;

• Reference checks;

• Professional networking platforms and publicly available professional information, where permitted by applicable law.

​

6. Retention Period

 

If your application is unsuccessful, your personal data will be retained only for as long as necessary to complete the recruitment process, manage potential disputes, and comply with applicable legal and regulatory obligations.

Where you provide your explicit consent to remain in our talent pool, your CV and related recruitment data will be retained for five (5) years for the purpose of considering you for future employment opportunities within SunExpress.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.

Upon expiry of the applicable retention period, your personal data will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable legal requirements.

 

7. Requirement to Provide Personal Data

 

The provision of certain personal data is necessary for SunExpress to assess your application and conduct recruitment activities.

Failure to provide information required for the recruitment process may prevent SunExpress from evaluating your candidacy, verifying your qualifications, or proceeding with your application.

 

8. Automated Decision-Making

 

SunExpress does not make decisions that produce legal effects concerning candidates, or that similarly and significantly affect candidates, based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.

Recruitment decisions are made with meaningful human involvement and assessment.

 

9. Your Rights under the GDPR

 

Subject to the conditions and limitations set out in the GDPR, you have the right to:

• Request access to your personal data;

• Request rectification of inaccurate or incomplete personal data;

• Request erasure of your personal data;

• Request restriction of processing;

• Object to processing based on legitimate interests;

• Receive your personal data in a structured, commonly used, and machine-readable format and request its transmission to another controller (data portability);

• Withdraw your consent at any time where processing is based on consent;

• Lodge a complaint with the competent supervisory authority.

 

To exercise your rights, please contact:

Email: sxs.dpo@sunexpress.com

Postal Address:
Güneş Ekspres Havacılık A.Ş.
Yenigöl Mah. Nergiz Sok. No:84
07230 Muratpaşa, Antalya, Türkiye