Legal Information
Privacy and Cookie Policy, Data Protection Notice
This page explains when your personal data is processed on this website, with whom it is shared, and how you can exercise your rights.
Effective date: 13 August 2026
This notice has been prepared under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and is intended to inform visitors to our website and users of our contact form. The privacy policy, cookie policy and data protection notice are combined on a single page for ease of reading.
The information on this site is for general information purposes only and does not constitute legal advice. Completing the form does not create an attorney–client relationship.
1.Data controller
Your personal data is processed by our law office, whose contact details appear below, acting as data controller. Our office operates under Turkish Attorneyship Law No. 1136. An attorney’s duty of confidentiality (Article 36 of the Attorneyship Law) provides a professional safeguard for the protection of your personal data.
2.Personal data we process
The site has no membership system; personal data is processed only when you complete the contact form:
- Identity and contact data: full name, email address, telephone number.
- Content of your request: the subject and message you write.
- Transaction security data: the IP address of the connection used to submit the form, the date and time of submission, and the site language you selected.
Please do not share information that is not requested. Special categories of personal data — such as health data, criminal convictions or biometric data — and the details of your matter are better shared in direct communication with us rather than through the form at first contact.
3.Purposes of processing
- Assessing your request and responding to you.
- Arranging a meeting and carrying out a preliminary assessment where legal services are requested.
- Checking for conflicts of interest as required by professional obligations.
- Fulfilling statutory obligations and meeting the burden of proof before competent authorities.
- Ensuring the security of the website and preventing automated or malicious form submissions.
Your personal data is not used for marketing, profiling or advertising, and is never sold to third parties.
4.Legal grounds and method of collection
Your data is collected electronically through the website by partly automated means. Processing is based on the following grounds set out in Article 5/2 of the KVKK:
- (c) Processing is directly related to the conclusion or performance of a contract — the stage of discussing your request and establishing a mandate.
- (ç) Compliance with the controller’s legal obligations.
- (e) Processing is necessary for the establishment, exercise or protection of a right.
- (f) Our legitimate interests, provided that your fundamental rights and freedoms are not harmed — website security and the prevention of misuse.
Where none of these grounds applies, processing takes place only with your explicit consent, which you may withdraw at any time.
5.Who we share data with
As a rule, your personal data is not shared with third parties. We rely on the following service providers solely to operate the website and email infrastructure:
- Hosting: the website and database are hosted with a cloud infrastructure provider whose servers are located abroad. Form records are therefore stored on servers outside Türkiye, and such transfers take place within the framework of Article 9 of the KVKK.
- Email: notifications from the form are stored on the email server linked to our domain, located in Türkiye.
Beyond this, your data may be shared only upon a duly submitted request from public authorities or judicial bodies expressly authorised by law, within the framework of Articles 8 and 9 of the KVKK. The attorney’s duty of confidentiality is reserved.
6.Retention period
Messages submitted through the form are retained for as long as necessary to conclude your request. If no mandate is established following the initial discussion, your message is deleted within one year at the latest.
Where a mandate is established, data relating to your file is retained for the periods prescribed by the Attorneyship Law and related legislation, and for the limitation periods applicable to the nature of the matter. Once these periods expire, personal data is deleted, destroyed or anonymised.
7.Data security
Website and form traffic is encrypted with TLS (https). The administration panel where messages are viewed is accessible only to authorised staff using a separate access key and password, and is closed to search engines. Appropriate technical and organisational measures are taken against unauthorised access, loss and alteration in accordance with Article 12 of the KVKK. Our staff are bound by professional confidentiality.
8.Your rights under Article 11 of the KVKK
By applying to the data controller you may exercise the following rights:
- To learn whether your personal data is being processed.
- To request information if it has been processed.
- To learn the purpose of processing and whether the data is used in line with that purpose.
- To know the third parties to whom the data is transferred, in Türkiye or abroad.
- To request rectification where the data is incomplete or inaccurate.
- To request erasure or destruction under the conditions in Article 7 of the KVKK.
- To request that rectification, erasure and destruction be notified to third parties to whom the data was transferred.
- To object to a result to your detriment arising from analysis carried out solely by automated systems.
- To claim compensation where you suffer damage due to unlawful processing.
9.How to apply
You may submit your application in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller: in writing to our office address, via a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the email address you have previously notified to us and which is registered in our system.
Your application should state your full name, your signature if made in writing, your Turkish ID number (nationality and passport number for foreign nationals), your address for service, your email address and telephone number if any, and the subject of your request.
Your request will be concluded within thirty days at the latest. No fee is charged unless the process entails an additional cost; where it does, the tariff set by the Personal Data Protection Board applies. If your application is rejected or you find the response insufficient, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning of the response and, in any event, within sixty days of the date of application.
11.Changes to this notice
This notice may be updated in light of legislative developments or changes in how the website operates. The current version is always published on this page, and the effective date is stated at the top.
