Book a Call
Book a Call

Candidate & Freelancer Privacy Notice

Başak Feyzioğlu (Libre Studio)Last updated 15 October 2026

1. Data Controller

In accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and applicable global data protection standards, your personal data is processed by Başak Feyzioğlu (“Libre Studio”) as the data controller. This notice covers candidates for freelance or full-time roles and the freelancers we work with. If you are hired into a full-time role, you will be informed separately about how your data is processed as an employee.

2. Categories of Personal Data Processed

  • Identity & Contact Data: Full name, e-mail address, phone number, city/country of residence, Passport/ID number (only at the contracting stage), professional profiles (LinkedIn, GitHub, Behance, etc.).
  • Professional Experience & Portfolio: Resume/CV, portfolio assets, previous project experience, technical/design skills, educational background, references.
  • Evaluation Data: Application answers, interview notes, paid trial assessments, compensation expectations.
  • Call Recordings (subject to explicit consent): Audio/video recordings of online meetings and AI-generated transcription summaries (Meet, Zoom, Fathom).
  • Financial Data (trial & contracting stage): Bank details, Wise/Upwork ID, invoice details.

Special categories of sensitive data (health, criminal records, etc.) are NOT requested; please do not include them in your applications.

3. Purposes and Legal Bases of Processing

Your data is collected via the application form (ClickUp Forms), e-mail, Upwork and LinkedIn messages, online meetings, the portfolio and profile links you share (Behance, Dribbble, GitHub, etc.) and documents you send us directly, by fully or partly automated means, and processed under KVKK Article 5/2 for:

  • Evaluating applications, scheduling technical calls, conducting paid trials, and executing service agreements (directly related to the conclusion/performance of a contract),
  • Compliance with tax and accounting rules (legal obligation of the data controller),
  • Protecting the right to evidence in possible disputes (establishment, exercise or protection of a right),
  • AI-assisted preliminary review (final decisions are made by humans) and operational management (legitimate interest of the data controller).

Meeting recordings, placement in the 1-year Talent Pool, and sharing portfolios with client projects rely exclusively on your explicit consent.

4. Data Transfers

Your data is never shared with third parties in a general or open-ended way. It goes only to the recipient groups below, and only for the stated purpose. The brackets name the core tools where candidate and freelancer data is actually held.

  • Cloud storage, email and project management providers (Google Workspace, ClickUp, Slack): to record and store applications, write to you and track the process,
  • Design and code repositories (Figma, GitHub): to share and review trial and project files,
  • Communication and interview tools (Google Meet, Zoom; Fathom only for candidates who consent to recording): to hold calls and, with your consent, record and transcribe them,
  • AI tools (OpenAI ChatGPT, Anthropic Claude, Google Gemini): to support the first review of applications and the drafting of messages; a human always makes the final decision,
  • Hiring platforms (Upwork, LinkedIn): for job posts, messages and work relationships set up on the platform,
  • Payment providers (Wise, banks, Upwork): to pay for paid trials and project work,
  • Our accountant: to book payments and meet tax obligations,
  • Legal advisers: only in a possible dispute, to establish, exercise or protect rights,
  • Authorised public bodies: where the law requires it,
  • Client project leads: only if you give explicit consent, for a project you are planned for (with your contact details masked).

Most of these providers are based, and keep their servers, outside Turkiye (mainly in the USA), so using them transfers your data abroad. For hosting of this website and the application form, see section 7. You can ask for the current full list of tools we use at basak@librestudio.co.

5. Data Retention and Erasure

Unsuccessful candidate records without Talent Pool consent are permanently deleted within 3 months. Talent Pool data is retained for 1 year. For freelancers paid for a trial or project, payment and accounting records (invoices, freelance receipts, expense vouchers, payment slips and the identity and account details on them) are kept for 5 years from the start of the calendar year after the year they relate to, as the Turkish Tax Procedure Law (VUK Art. 253) requires. Expired data is securely erased.

6. Your Rights

Under KVKK Article 11, you have the right to:

  • learn whether your personal data is processed,
  • request information if it has been processed,
  • learn the purpose of processing and whether it is used for that purpose,
  • know the third parties in Turkiye or abroad to whom it is transferred,
  • request rectification if it is incomplete or inaccurate,
  • request erasure or destruction under the conditions in KVKK Article 7,
  • request that rectification, erasure or destruction be notified to the third parties it was transferred to,
  • object to a result against you that arises solely from automated analysis,
  • claim compensation for damage caused by unlawful processing.

See section 9 for how to make a request.

7. This Website and the Application Form

  • Hosting: librestudio.co is hosted by Netlify, Inc. (USA). To deliver the site and protect it from abuse, Netlify processes technical data such as IP addresses.
  • Application form: our application form is hosted by ClickUp (Mango Technologies, Inc., USA); the button at librestudio.co/careers/apply opens it on ClickUp's own site. Your answers and files go straight into our ClickUp workspace; they are not stored on this website or at Netlify.
  • Cookies: the site itself sets no cookies and loads no third-party content. When the form opens on ClickUp's site, ClickUp and its partners may set their own cookies there. Details: Cookie Notice.
  • Applying without the form: if you would rather not use the form, email your portfolio to basak@librestudio.co; your application is assessed the same way.
  • Version: this notice is dated 2026-10-15. The date changes whenever the text changes.

9. How to Make a Request

Email basak@librestudio.co from the address you applied with, or send a signed request to the business address in section 1. Say which right from section 6 you want to use. Requests are answered free of charge within 30 days at the latest.

Formal requests under KVKK must be made in Turkish (Communiqué on Applications to the Data Controller, Art. 4). You can use the İlgili Kişi Başvuru Formu; write to us in English and we will help you complete it.