Turkish Personal Data Protection Law no. 6698

Personal Data Processing Notice

Mirhanogullari Law Firm (the “Law Firm”), acting as data controller, has prepared this notice to inform you about the processing of your personal data under Turkish Personal Data Protection Law no. 6698 (“KVKK”) and other applicable legislation.

1. Identity of the data controller

2. Personal data processed

The following categories of personal data may be processed in connection with the legal consultancy and attorney services provided by the Law Firm:

• Identity, contact, and address information
• Information about litigation and enforcement files and the parties
• Financial, bank account, and contract information
• UYAP records and land registry, trade registry, and other official records
• Audio-visual records where necessary
• Website usage information, IP addresses, and cookie records
• Contact-form contents
• Information and documents relating to a legal dispute

Depending on the nature of the matter, special categories of personal data under article 6 of KVKK may be processed only where the statutory conditions are met.

3. Purposes of processing

• Providing attorney and legal consultancy services
• Following litigation, enforcement, mediation, and other legal processes
• Preparing legal opinions
• Establishing and managing client relationships
• Preparing contracts
• Managing communications and appointments
• Managing accounting and financial operations
• Meeting legal obligations and responding to competent public authorities
• Exercising and protecting legal rights
• Maintaining information security and website operations
• Responding to requests and applications

4. Collection methods and legal grounds

Personal data may be collected wholly or partly by automated or non-automated means through in-person applications, telephone, email, the website, contact forms, written applications, notaries, courts, enforcement offices, mediation offices, UYAP, public bodies, competent authorities, land registry offices, trade registry records, and electronic communications.

Your personal data is processed on the legal grounds set out in articles 5 and 6 of KVKK.

5. Transfers of personal data

Subject to KVKK and appropriate security measures, personal data may be shared solely to meet legal obligations with courts, Public Prosecutor’s Offices, enforcement offices, mediators, notaries, law-enforcement authorities, competent public bodies, experts, opposing counsel where legally required, banks, financial advisers, and contracted information-technology service providers.

6. Retention period

Personal data is retained for the periods required by applicable legislation, including the Attorneyship Law, Tax Procedure Law, Turkish Code of Obligations, Turkish Commercial Code, KVKK, and other relevant rules. At the end of the retention period, data is deleted, destroyed, or anonymised.

7. Rights of data subjects

Under article 11 of KVKK, data subjects may:

• Learn whether their personal data is processed and request information where it is
• Learn the purpose of processing and whether data is used consistently with that purpose
• Learn the third parties to whom data is transferred in Türkiye or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction where the conditions under KVKK are met
• Request notification of correction, deletion, or destruction to third parties
• Object to an adverse result produced exclusively by automated analysis
• Claim compensation for damage caused by unlawful processing

8. How to apply

You may submit KVKK requests to Osmanağa Mahallesi, Şemşitap Sokak No: 5/8, Kadıköy, Istanbul, or by email to [email protected], as well as by other methods permitted under KVKK.

Applications will be concluded within 30 days at the latest under article 13 of KVKK.

9. Updates

Mirhanogullari Law Firm reserves the right to update this notice in line with changes in applicable legislation and its activities.