Your Privacy Across Your Whole INTERNIF Experience Across Your Whole INTERNIF Experience

• About This Policy

• Your Rights and Control Over Your Personal Data

• Personal Data We Collect About You

• Purposes and Legal Grounds for Processing Your Personal Data

• Sharing Your Personal Data

• Data Retention and Erasure

• Cross-Border Data Transfers

• Safeguarding Your Personal Data

• Changes to This Policy

• Contact

• About This Policy

• All free or paid INTERNIF services utilized by you as a user or applicant, including job simulations (The Taste, The Practice, etc.), internship programs (The Proof, The Performance), community processes (The Circle), and mentorship sessions.

• All digital platforms and services that link to this Privacy Policy, including profile creation, interviewing, performance analytics, and certification workflows.

• Learn whether your personal data is being processed;

• Request information if your personal data has been processed;

• Learn the purpose of processing your personal data and whether it is used in accordance with its purpose;

• Know the third parties to whom your personal data is transferred domestically or abroad (in particular, international Host Companies matched for internships);

• Request rectification if your personal data has been processed incompletely or inaccurately;

• Request erasure, destruction, or anonymization of your personal data within the framework of conditions stipulated under statutory legislation and the GDPR;

• Request that rectification, erasure, and destruction actions be notified to third parties to whom your personal data has been transferred;

• Object to any adverse result affecting you arising exclusively through the analysis of processed data by automated systems (e.g., job simulation assessments, matching algorithms);

• Claim compensation for damages incurred due to the unlawful processing of your personal data;

• Under the GDPR, the rights to restrict processing, request data portability in a structured and commonly used format, and withdraw consent at any time without detriment.

• Personal Data We Collect About You

• User and Applicant Identity/Contact Data: Full name, email address, phone number, date of birth, gender, residential address, country and city details, and profile photo.

• Education, Career, and Competency Data: School/university name, department/major, grade level/graduation status, foreign language proficiency levels, resume/CV files, internship/employment history, sectors of interest, and target internship jurisdictions (Europe, the United Kingdom, the United States, Canada, etc.).

• Corporate and Representative Data (For Host Companies or Corporate Partners): Corporate name, business address, authorized representative's full name, corporate email address, corporate telephone number, and verification documentation such as tax certificates and signature circulars.

• Parent/Legal Guardian Data (For Users Under 18): Full name, contact credentials, and electronic consent logs of legal guardians in instances involving users under the age of 18.

• Residential Address and Location Data: Address details processed to verify eligibility for internship programs, administer tax/invoicing requirements, fulfill physical kit or document deliveries, and conduct geographic verification.

• Usage and Transaction Data: Selected service options (The Taste, The Practice, The Proof, The Performance, Mentorship, etc.), transaction date and time stamps, search queries, and clickstream interactions on the platform.

• Job Simulation and Task Deliverables: Responses submitted within simulation modules, completed scenarios, assigned project deliverables submitted to Host Companies, reports, presentations, and simulation evaluation outputs.

• Audio and Video Recordings: Digital audio and video recordings captured with your express consent during online mentorship sessions, simulation interviews, verification meetings, or assessment sessions.

• Performance, Assessment, and Proof Data: Simulation proficiency scores, evaluation notes submitted by Host Company mentors/supervisors, attendance and completion ratios (determining the minimum 75% benchmark required for The Circle), and international verifiable proof records generated in your name.

• Technical and Cookie Data: IP addresses, cookie identifiers, device identifiers, operating system details, browser type and language, network connection types (Wi-Fi, 4G, 5G, etc.), hardware diagnostic performance, and general (non-precise) geographic location data.

• Payment Information: Full name, billing address, mobile phone number, purchased package details (The Proof Europe, Custom Europe, Proof Anglo-Saxon, etc.), transaction amount, currency, and payment history logs.

• Payment Card Security Notice: Credit card and debit card credentials are never stored on INTERNIF servers under any circumstances. Payment processing is executed through internationally licensed payment gateways (e.g., Stripe) in full compliance with PCI-DSS standards.

• Full name, mobile phone number, email address, and message inquiries submitted through contact forms or newsletter subscriptions on our website.

• Authentication Providers: Basic profile metadata transmitted by third parties when signing up or logging in via Google, LinkedIn, or equivalent identity providers.

• Host Companies: Performance reports, attendance validations, and project feedback provided by external international host enterprises throughout the internship.

• Payment and Technical Partners: Settlement confirmations received from payment processors (e.g., Stripe) and diagnostic validation data from IP geolocation resolving services.

• Institutional Partners: Universities, high schools, and associated educational establishments.

• Purposes and Legal Grounds for Processing Your Personal Data

• Sharing Your Personal Data

• Host Companies: Your CV, contact details, and simulation scores are transferred to independent foreign companies to facilitate matching, schedule interviews, assign tasks, and assess performance within chosen programs (Europe, UK, US, Canada, etc.).

• Mentors and Advisors: Shared with relevant mentors and professional advisors to deliver contracted or integrated academic/business mentoring sessions.

• Payment Infrastructure Providers: Shared with Stripe and associated banking networks to verify collections, generate invoices, and handle payment dispute/chargeback procedures.

• Technical Infrastructure and Software Vendors: Shared on a need-to-know basis with cloud hosting providers, transactional email processors, cybersecurity platforms, and customer ticketing systems to sustain platform operations.

• Competent Public Authorities and Law Enforcement: Disclosed to statutory public institutions upon lawful request pursuant to binding court orders, regulatory mandates, or judicial proceedings.

• Data Retention and Erasure

• Under the KVKK: Transferred pursuant to Article 9 of the KVKK to jurisdictions designated as adequate by the Personal Data Protection Board, or in the absence of an adequacy status, through approved standard contractual clauses (Standard Contracts/Undertakings) or appropriate statutory transfer grounds where the transfer is an inherent prerequisite for cross-border contractual execution.

• Under GDPR and UK Legislation: Transferred to countries covered by European Commission Adequacy Decisions, or to other jurisdictions by implementing appropriate safeguards, such as European Commission Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA).

• Transfers Driven by Applicant Selection: Where a user enrolls in The Proof or The Performance tiers and specifically requests matching with an independent Host Company domiciled in Europe, the United States, the United Kingdom, or Canada, profile and resume records are transferred directly to execute the contractual engagement at the user's direction.

• Safeguarding Your Personal Data

• Platform communications are secured with end-to-end SSL/TLS encryption protocols.

• Sensitive databases are fortified with role-based access restrictions, multi-factor authentication (MFA), and periodic penetration testing.

• Payment card numbers are not retained on our servers; transactions are processed through tokenized integrations with certified processors.

• Internal staff, external mentors, and third-party vendors are bound by non-disclosure agreements and explicit data security commitments.

• Because absolute security cannot be guaranteed over internet networks, users remain responsible for maintaining strong credentials, avoiding shared devices without logging out, and preventing third-party password access.

• Email: [email protected]

• Web: www.internif.com

• Sending an email from your verified address registered on our system to [email protected] with the subject line "Data Subject Access Request"; or

• Submitting a written petition bearing a wet-ink signature accompanied by identity-verifying documents to: "Bilişim Vadisi - Teknoloji Geliştirme Bölgesi, İzmir Teknoloji Üssü, Gülbahçe Mah. İçmeler Cad. 35433 İzmir, Türkiye"