Employee Candidate Clarification Text

Employee Candidate Privacy Notice

Pursuant to Legislation on Protection of Personal Data

Dear Employee Candidate,

We, Dream Games Dijital Teknolojiler Anonim Şirketi (“Dream Games” or “Company”), may process the personal data we obtain from you because of your job application within the framework of the Personal Data Protection Law No. 6698 (“PDPL”)and detailed below, in connection with these purposes, in a limited and measured way. Accordingly, we present this Employee Candidate Privacy Notice for your information in order to clarify our data processing activity in accordance with the PDPL for you.

a. Definitions Regarding PDPL

In the implementation of PDPL;

• Anonymization: means making personal data incapable of being associated with an identified or identifiable natural person in any way, even by matching with other data,
• Data Subject: means the natural person whose personal data is processed,
• Personal Data: means any information relating to an identified or identifiable natural person,
• Processing of Personal Data: means all kinds of operations performed on the Personal Data such as collection, recording, storing, preserving, modifying, reorganizing, disclosure, transferring, taking over, making accessible, classifying or preventing use of Personal Data completely or partially automatically or non-automatically provided that it is a part of any data filling system,
• Board: means Personal Data Protection Board,
• Authority: means Personal Data Protection Authority,
• Data Processor: means the natural or legal person who processes Personal Data on behalf of the data controller, based on the authority given by the data controller,
• Data Filing System: means the registration system in which Personal Data is processed and structured according to certain criteria,
• Data Controller: means the natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the Data Filing System,
• Special Categories of Personal Data: means data concerning persons’ race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, membership in associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and persons’ biometric and genetic data

b. Your Personal Data Processed by Us and the Purpose of Processing

Within the scope of our legitimate interest, our company will also keep your data, in order to evaluate your resume for suitable positions that may arise in the future in case you are not recruited, provided that this processing shall not violate your fundamental rights and freedom.

c. Methods of Collecting Your Personal Data

Your Personal Data categorized in the table above are collected through filling in the job application forms on www.dreamgames.com and job application forms sent via e-mail (including other information and documents such as the resume you shared with us with the job application form) or if we communicate with you because you shared your job search on other platforms, and in case the human resources companies that we cooperate with for recruitment purposes share with us, either electronically if you use automatic methods or physically by non-automatic methods if you come to our center and deliver the job application form and related documents in person.

d. How is the Security of Personal Data Provided?

Dream Games attaches great importance to protecting the privacy and security of Personal Data. In this context, necessary technical and administrative security measures are taken to protect Personal Data against unauthorized access, damage, loss or disclosure. In this direction, necessary system controls, data access controls, security transfer controls, business continuity controls and other necessary corporate controls are applied.

e. To Whom and For What Purposes Can Your Personal Data Be Transferred?

Your Personal Data may be transferred to shareholders for the purposes of planning human resources processes and executing recruitment activities.

Since we use a server based in abroad, your Personal Data is transferred abroad within the scope of our legitimate interest and in accordance with Article 9 of the PDPL, provided that this processing shall not violate your fundamental rights and freedom. We, Dream Games, undertake that your Personal Data will be stored securely and will not be processed unlawfully, and take steps to ensure that transfers out of Türkiye are adequately protected. More specifically, these steps include the execution of standard contractual clauses published by the Authority. A copy of the relevant standard contractual clauses can be obtained by contacting privacy@dreamgames.com.

f. Application Procedure Regarding the Rights You Have as a Data Subject Pursuant to PDPL

i. Your Rights Regarding Your Personal Data

We would like to state that you have the following rights regarding your data being processed by Dream Games:

• Learning whether your Personal Data is processed or not,
• If your Personal Data is being processed, obtaining information about them,
• Learning what is the purpose of processing your Personal Data and whether your Personal Data is used in accordance with its purpose,
• Learning who the third parties to whom the data is transferred in the country, if any, and which data are transferred,
• Requesting correction of the processed Personal Data in case of incomplete or inaccurate data,
• In case of correction, deletion or destruction of your Personal Data, requesting these transactions to be notified to the third parties to whom your Personal Data has been transferred,
• Requesting the deletion or destruction of your processed Personal Data, in case the reasons requiring the processing of your Personal Data disappear or your Personal Data loses its up-to- dateness,
• Objecting to the emergence of a result against you by analyzing your processed Personal Data exclusively through automated systems,
• YYou have the right to request the compensation of the damage in case you suffer any damage due to the unlawful processing of your Personal Data.

You can forward your requests regarding these rights to us using the following application procedures.

ii. Application

You may submit your requests regarding your Personal Data to our Company by filling the application form on our website and delivering it to our address given at the end in person, via mail, courier, or notary public, or to our registered electronic mail (KEP) address through secure e-signature or mobile signature, or by applying to privacy@dreamgames.com through your email address which you have previously registered in our system.

Dream Games will finalize the requests as soon as possible and within thirty days at the latest depending on the nature of the request and free of charge. In the event that a cost arises due to the fulfillment of your requests, we can only charge you the fees in the tariff determined by the Board.

As a result of the requests made to Dream Games, we can accept the requests or reject them by explaining the reason, and we can forward this response to the requester in writing or electronically. If the request is accepted, as Dream Games, we are obliged to fulfill the demand immediately.

iii. Data Controller's Identity Information

The term Dream Games used in this text has been issued for Dream Games Dijital Teknolojiler Anonim Şirketi, which is established in Turkey and whose information is given below, and is addressed to the data subjects of which the following company is the Data Controller: