ON THE PROCESSING OF PERSONAL DATA “PRIVACY NOTICE”
As a result of your use of our website, we, as the data controller, wish to inform you regarding the collection, storage, processing, transfer and other operations falling within the scope of the Law on the Protection of Personal Data No. 6698 (KVKK) and other applicable legislation, as well as the details and purposes of such operations.
General Information
In accordance with the relevant legislation, “personal data” refers to any information relating to an identified or identifiable natural person. “Special category personal data”, on the other hand, refers to data relating to a person’s race, ethnic origin, political opinions, philosophical beliefs, religion, denomination or other beliefs, dress and appearance, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data. In this Privacy Notice, the term “Personal Data” will be used to refer to all types of data, regardless of whether they are of a special or general nature; we wish to clarify that, where appropriate, special category personal data may also be included within the scope of this term. Furthermore, in order to provide you with a more effective service whilst you use our website, we may also use cookies, web beacons and similar technologies. You may disable the use of cookies at any time by changing your browser settings. Disabling cookies may limit the use of certain functions on our website.
Any operations carried out on personal data—including collection, recording, storage, retention, alteration, reorganisation, disclosure, transfer, classification or restriction of use—from the point of collection until the data is deleted, destroyed or anonymised are considered ‘processing of personal data’ under the Personal Data Protection Act (KVKK).
Should you share information that falls within the definition of personal data or special category personal data with us, Kulaçoğlu Law Firm (the Data Controller), we wish to inform you that by ticking the consent box, you are giving your explicit consent to the processing of this data.
Collection of Personal Data and Legal Grounds
Whilst using our website, we may request that you share certain personal data with us in our capacity as the Data Controller. This personal data may be collected physically, either verbally or in writing, as well as electronically. Furthermore, your personal data may be collected directly by us in our capacity as the Data Controller, or by natural or legal persons processing data on behalf of the Data Controller, or by national/international individuals and organisations, as well as other third parties, from whom we receive support as a necessity of the business and services we provide; this includes, but is not limited to, our website, blog posts, contact forms, job/internship and other application forms, information forms, audio and/or video recordings made during video conferences and/or online legal consultancy services, audio recordings made during telephone calls and/or teleconferences, text messages, WhatsApp, social media and other such channels, amongst others. This data may be obtained automatically using electronic or internet-based tools and other means, as well as through methods such as forms, contracts, notifications and decisions by judicial or administrative authorities that you provide to us.
Purpose of Processing and Transfer of Personal Data
Your personal data is processed in accordance with the relevant legislation in force, in compliance with the law, the principles of good faith and fairness, and is kept accurate and up-to-date. It is processed for specific, explicit and legitimate purposes, and in a manner that is relevant, limited and proportionate to those purposes. It is retained for the period prescribed by the relevant legislation and for as long as is necessary for the purposes for which it is processed.
In accordance with the Personal Data Protection Act (KVKK), the personal data you have shared with us as the Data Controller may be processed in a proportionate manner in connection with the purposes of all services and activities we carry out, as well as, where necessary, recruitment and work placement processes, to enable you to benefit from the said services, to protect your rights and interests, and for other purposes, in compliance with the KVKK and legal regulations; within the scope of our services and in accordance with relevant legislation, your personal data may be transferred to judicial, administrative and other institutions, and/or to persons or authorities authorised by them, including, in particular, the UYAP system; and, depending on the specific circumstances of the case, to relevant third parties and institutions, regardless of whether they are located abroad or not, and may be stored for the periods specified in the relevant legislation and subject to the necessary processing.
Web Server Log Data
As an inevitable consequence of your visit to our website, the data listed below, defined as log data, is automatically transmitted by your web browser to our web server and recorded in the log files without your consent:
- Date and time of access
- URL of the requesting website
- Files received
- Amount of data transferred
- Browser type and version
- Operating system
- IP address
- Domain name of your internet service provider
- The web log is used to provide statistical information to help make our website more user-friendly for you, and is subsequently deleted immediately.
Measures Taken to Ensure the Security of Personal Data
In accordance with the relevant article of the Personal Data Protection Act No. 6698, as the Data Controller, we take the necessary technical and administrative measures to ensure the security of your personal data, to prevent its unlawful processing and unauthorised access, and to ensure its protection.
Rights of Data Subjects
Data subjects have the following rights under the Personal Data Protection Act (GDPR):
- To find out whether their personal data has been processed and, if so, to request information regarding such processing;
- To find out the purpose of the processing of personal data and whether it is being used in accordance with that purpose;
- To know the third parties to whom personal data has been transferred, whether within or outside the country;
- To request the rectification of personal data where it has been processed incompletely or incorrectly, and to request that the third parties to whom the personal data has been transferred be notified of the rectification;
- To request the erasure or destruction of personal data where the grounds for its processing no longer apply, and to request that the action taken in this regard
- be notified to third parties to whom the personal data has been disclosed;
- To object to a decision being made solely through the automated processing of personal data that adversely affects the individual;
- To request compensation for any damage suffered as a result of the processing of personal data in breach of the Data Protection Act.
For further details regarding the exercise of the rights set out above or, more generally, regarding our Privacy Notice, you may contact us via the “Contact Form” available on our “Contact” page, or by sending a hand-signed letter to the address “Esentepe Mah. Eser İş Merkezi B Blok Kat:8 No:63 Şişli/İstanbul/Turkey”, or by emailing info@kulacoglu.av.tr, with the subject line “Personal Data Information Request”.
As data subjects, should you submit requests regarding your rights to Kulaçoğlu Law Firm in the manner described above, your request will be processed as promptly as possible, depending on its nature. Should the relevant process incur an additional cost, Kulaçoğlu Law Firm will collect the fee, as set out in the tariff determined by the Personal Data Protection Board, from you.