Privacy notice under the Turkish KVKK

Data controller of this privacy notice

• Name: Av. Egemen Yasin Şahalioğlu, Egemen Global Law Office (Egemen Global Hukuk Bürosu)
• Bar association: Istanbul (İstanbul Barosu), registration number 66465
• Address: Skyland İstanbul, Huzur, Azerbaycan Cd. No:4 A Blok Kat:26 No:580, 34773 Sarıyer/İstanbul
• Email: lawyer@egemenyasinsahalioglu.av.tr
• Phone: +90 532 276 80 85

This notice applies to visitors to this website, to people who make contact by phone, WhatsApp or email, and to clients.

What data is processed

• Identity: name, nationality, passport and ID details, foreigner identification number, date of birth
• Contact: phone, WhatsApp number, email, address
• Enquiry and mandate: the facts you describe, documents, decisions, contracts, powers of attorney, case data
• Financial: invoicing and bank details for fees and expenses; title deed, payment and investment documents where the mandate requires them
• Technical data: IP address, date and time, browser details

Purposes of processing

• Receiving, reviewing and answering initial enquiries, including conflict-of-interest checks
• Concluding and performing the engagement agreement
• Conducting court, enforcement and administrative proceedings
• Matters before courts, notaries, land registry offices, the migration authority and other authorities
• Meeting obligations under the law on advocacy, tax law and bookkeeping rules
• Security and technical operation of the website

Legal bases under Article 5(2) KVKK

• Item (c): conclusion or performance of a contract (answering enquiries, the mandate)
• Item (ç): legal obligation (advocacy, tax and bookkeeping law)
• Item (e): establishment, exercise or protection of a right (lawsuits, enforcement, administrative proceedings)
• Item (f): legitimate interest (website security, records of communication)

For processing outside these bases, separate explicit consent is obtained. Consent is not a condition for accepting a mandate and can be withdrawn at any time with effect for the future.

Special categories of personal data

Depending on the mandate, health data, information on criminal convictions and security measures, religion, biometric data or family circumstances may be involved. Under Article 6 KVKK they are processed only where the case requires it, in particular to establish, exercise or protect a right, and with the additional measures set by the Personal Data Protection Authority.

How the data is collected

• Contact form: stores nothing on the web server; when you submit it, WhatsApp or your email program opens and you send the message yourself.
• Phone, WhatsApp and email: information you send directly
• Meetings and documents: at the office or by video call
• Official systems: UYAP, e-Devlet, the land registry system and others, within the scope of the mandate
• Automatically: cookies and server logs, see the cookie policy

Recipients

• Courts, enforcement offices, public prosecutors, notaries, land registry offices, the migration authority, the Ministry of Labour and other competent bodies
• Where necessary: sworn translators, court-appointed assessors, mediators, valuation companies
• Lawyers or representatives appointed by you, and cooperating lawyers
• Tax advisers and accounting service providers
• Hosting, email and communication service providers

Data is not sold and is not passed on to third parties for advertising purposes.

Transfers abroad

The servers of some services (WhatsApp, email, maps) may be located outside Türkiye. Transfers are made under Article 9 KVKK as amended by Law No. 7499, based on appropriate safeguards or the exceptions for occasional transfers. In proceedings with a foreign element, such as recognition of a foreign judgment or service abroad, only the necessary data is transferred.

If you live in the EU, the GDPR may apply alongside the KVKK; your rights under the GDPR remain unaffected.

Retention periods

• Enquiries without a mandate: up to 1 year after the enquiry is closed
• Case files and correspondence: 10 years after the end of the mandate (general limitation period)
• Invoices and accounting records: for the periods set by the Tax Procedure Law and the Turkish Commercial Code
• Server logs: for the period required by law

After that, the data is erased, destroyed or anonymised. Where a dispute is ongoing or a legal obligation applies, it is kept until that ends.

Security and confidentiality

Lawyers are bound by professional secrecy under Article 36 of Attorneyship Law No. 1136. Under Article 12 KVKK, technical and organisational measures are taken: encryption, access restriction, secure storage, regular backups and confidentiality undertakings. In the event of a data breach, the Personal Data Protection Authority and the persons concerned are informed within the statutory period.

Your rights under Article 11 KVKK

• To learn whether your data is processed and to request information about it
• To learn the purpose of processing and whether data is used in line with that purpose
• To know the recipients in Türkiye and abroad
• To request correction of incomplete or inaccurate data
• To request erasure or destruction under the conditions of Article 7 KVKK
• To request that recipients be notified of correction or erasure
• To object to an adverse result arising solely from automated analysis
• To claim compensation for damage caused by unlawful processing

How to make a request

1. In writing, in Turkish

   Under the regulation of the Personal Data Protection Authority, the request must be submitted in writing and in Turkish. We can help with questions about its content in English.

2. Required details

   Name, signature, nationality, T.C. or passport number, address, email or phone, and the subject of the request.

3. Submission

   In person or through a notary to the office address, or by secure e-signature, mobile signature or from a registered email address to lawyer@egemenyasinsahalioglu.av.tr.

4. Reply within 30 days

   The reply is in principle free of charge (Article 13 KVKK). If the request is refused, or the reply is insufficient or not given, you can complain to the Personal Data Protection Board (KVKK Kurulu) (Article 14 KVKK).

Legal basis of this privacy notice

• Law No. 6698 on the Protection of Personal Data
• Turkish Personal Data Protection Authority (KVKK)
• Attorneyship Law No. 1136

The official Turkish text prevails: KVKK Aydınlatma Metni.