Privacy Policy

Effective Date: 25 January 2025

At Gedikbaş Law Office ("Gedikbaş," "we," or "our"), we are committed to protecting the privacy of your personal data and ensuring that it is processed in accordance with applicable legal standards, including the Turkish Personal Data Protection Law No. 6698 (KVKK). This Privacy Notice explains how we collect, use, share, and safeguard your personal data when you interact with us, access our website ("Website"), or engage with our legal services. By visiting our Website or engaging with our services, you acknowledge and accept the practices described in this Privacy Notice.

1 Collection of Personal Data

Pursuant to Article 5 and Article 6 of KVKK, we collect and process personal data to the extent necessary for the lawful provision of our services. Personal data may include (i) identification and contact details, such as your name, title, email address, postal address, and telephone number, (ii) case-specific information provided in connection with legal services, including contracts, correspondence, and financial information, (iii) technical data, such as your IP address and browsing behaviour, collected via cookies when you access our Website, and (iv) data related to employment applications, including CVs, qualifications, and references.

Sensitive personal data, as defined under Article 6 of KVKK, such as health or association membership information, may be processed only when explicitly required for legal services and based on your explicit consent. Data may be collected directly from you, through automated means when you interact with our Website, or from third parties, including publicly available sources or regulatory authorities.

2 Purposes of Processing Personal Data

In accordance with Articles 5 and 6 of KVKK, the processing of personal data by Gedikbaş is based on the following purposes: (i) providing legal services as required by our agreements with clients, including preparing and reviewing legal documents and representing clients in disputes, (ii) complying with statutory obligations, including those related to anti-money laundering (AML) and "Know Your Client" (KYC) procedures, (iii) managing administrative and operational matters, such as invoicing and client relationship management, (iv) enhancing the functionality and usability of our Website to improve user experience, (v) facilitating recruitment and evaluating applications for employment, and (vi) communicating updates, legal developments, or event invitations, where consent has been provided.

3 Legal Basis for Processing

Gedikbaş processes personal data in compliance with the conditions set forth under Articles 5 and 6 of KVKK. These include (i) the necessity of processing for the performance of a contract to which the data subject is a party, (ii) compliance with legal obligations to which Gedikbaş is subject, (iii) legitimate interests pursued by Gedikbaş or a third party, provided these interests do not override the fundamental rights and freedoms of the data subject, and (iv) explicit consent of the data subject, where required.

4 Sharing and Transfer of Personal Data

Personal data may be shared with third parties under the conditions specified in Article 8 and, where applicable, Article 9 of KVKK. Data may be shared with (i) service providers performing functions on our behalf, such as IT and administrative services, (ii) other legal professionals or consultants involved in your legal matters, subject to your approval, (iii) regulatory authorities, courts, or law enforcement agencies, as required by applicable law, and (iv) entities involved in potential mergers, acquisitions, or similar business transactions.

Where the transfer of personal data outside Türkiye is necessary, such transfers are conducted in accordance with Article 9 of KVKK, ensuring that adequate safeguards, including data transfer agreements, are in place to protect your personal data.

5 Data Retention

In compliance with Article 4(2)(e) of KVKK, your personal data will be retained only for the period necessary to fulfil the purposes for which it was collected or as required by law. Specifically, (i) data related to legal services is retained for the duration of the engagement and any applicable statutory retention period, and (ii) compliance-related data, such as AML and KYC records, is retained for the duration required under applicable regulatory frameworks.

6 Your Rights as a Data Subject

Under Articles 11 and 13 of KVKK, you have the right to (i) learn whether your personal data is being processed, (ii) request information about the purposes of processing, (iii) learn whether your personal data is being used in compliance with these purposes, (iv) know the third parties to whom your data is transferred domestically or internationally, (v) request correction of incomplete or inaccurate data, (vi) request the deletion or anonymisation of personal data under the conditions specified in KVKK, (vii) request notification of actions taken regarding correction or deletion to third parties to whom your data has been transferred, (viii) object to processing that results in a negative consequence for you based solely on automated decision-making, and (ix) seek compensation for damages resulting from unlawful processing of your personal data.

Requests regarding your rights may be submitted to Gedikbaş through the contact details provided below. Requests will be evaluated and responded to within thirty (30) days, in accordance with KVKK.

7 Security Measures

As required under Article 12 of KVKK, Gedikbaş implements appropriate technical and organisational measures to prevent unlawful access, loss, or misuse of personal data. Security practices include regular system audits, encryption protocols, and access control measures to safeguard your information.

8 Cookies and Website Usage

Our Website uses cookies and similar technologies to collect information about how users interact with our services. Cookies are small text files stored on your device that help improve functionality and user experience. For more information about cookies and how to manage them, please see our Cookies Policy.

9 Updates to the Privacy Notice

This Privacy Notice may be updated periodically to reflect changes in legal requirements or our data processing practices. Updates will be made available on our Website, with the revised effective date clearly indicated.

10 Contact Information

For questions, concerns, or requests regarding this Privacy Notice or your personal data, please contact us at: Gedikbaş Law Office
Tunus Caddesi No: 48/9-12-14, 06540 Kavaklıdere, ANKARA, TÜRKIYE
Phone: +90 (312) 427 6162
Fax: +90 (312) 427 6163
Email: [email protected]