This notice has been prepared under Article 10 of Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, in order to inform you of the purposes for which and the legal bases on which your personal data are processed. This English version is provided for information; in case of any discrepancy, the Turkish version prevails.
Data controller
Your personal data are processed by Kanber Law Firm as data controller. Address: Nef, Merkez Mahallesi Ayazma Caddesi No:21 İç Kapı No:38, D:11 D Blok, 34406 Kağıthane/İstanbul. E-mail: info@kanberlaw.com.
Personal data processed
Depending on the nature of your relationship with our firm, the following personal data may be processed:
- Identity and contact data: name, surname, telephone number and e-mail address; in a client relationship, also identity number, address and power of attorney details
- Appointment data: the name, surname, e-mail, telephone, type of meeting, date and time, subject, name or trade name of the other party and short note you submit through the appointment form on our contact page
- Request and correspondence data: the content of messages you send through the contact form, by e-mail or by phone
- Legal transaction data: documents, contracts, correspondence and file information relating to the matter on which you receive our services
- Financial data: invoice and bank details relating to payments of fees and expenses
- Transaction security data: the IP address, browser information and access time recorded in server logs when you visit the website
Owing to the nature of legal services, special categories of personal data, such as health data or data on criminal convictions, may be processed in certain files. Such data are processed only to the extent required by the legal service and in accordance with the conditions in KVKK Art. 6.
Purposes of processing
- Responding to your meeting requests and questions, scheduling appointments and sending you notifications
- Carrying out a conflict-of-interest check before a meeting, as required by the professional rules for attorneys
- Providing legal services, conducting litigation and enforcement proceedings, and giving legal advice
- Concluding and performing the engagement agreement and invoicing fees and expenses
- Fulfilling legal obligations, including those arising from tax, accounting and professional rules
- Ensuring the security of the website and preventing misuse
Legal bases
Under KVKK Art. 5(2), your personal data are processed on the legal bases that processing is directly related to the conclusion or performance of a contract, is necessary for the data controller to comply with a legal obligation, is necessary for the establishment, exercise or protection of a right, and is necessary for the legitimate interests of the data controller, provided that your fundamental rights and freedoms are not harmed. Special categories of personal data are processed in the cases listed in KVKK Art. 6(3), in particular where processing is necessary for the establishment, exercise or protection of a right. Where none of these bases applies, your explicit consent is requested separately.
Method of collection
Your personal data are collected by automated or non-automated means through the forms on our website, e-mail, telephone, in-person or online meetings, documents you provide to us, and documents obtained from competent public authorities and judicial bodies in the course of the service.
Transfers
To the extent required by the service, your personal data may be transferred to courts, enforcement offices, notaries and other competent public authorities; to competent authorities under legal obligations; to persons whose support is needed to carry out the service, such as financial advisers, translators and court-appointed experts; and to the IT service providers from which we obtain website hosting and e-mail services. Where the servers of any IT service used are located abroad, the transfer is carried out in accordance with the procedures set out in KVKK Art. 9.
Retention period
Appointment records are deleted automatically when the period set by our firm (twelve months by default) has passed from the appointment date. Your personal data are kept for as long as the purpose of processing requires, and until the retention periods set by the relevant legislation and the limitation periods for potential disputes have expired. At the end of these periods, the data are deleted, destroyed or anonymised.
Your rights
Under KVKK Art. 11, you have the right to learn whether your personal data are processed; to request information if they have been processed; to learn the purpose of processing and whether the data are used in line with that purpose; to know the third parties in Türkiye or abroad to whom the data are transferred; to request correction if the data are incomplete or inaccurate; to request deletion or destruction under the conditions in KVKK Art. 7; to request that third parties to whom the data were transferred be notified of these actions; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage because of unlawful processing.
You may submit requests concerning these rights in writing to the address above, or from your e-mail address registered in our system to info@kanberlaw.com, in accordance with the Communiqué on the Procedures and Principles of Applications to the Data Controller. Requests are concluded as soon as possible depending on their nature, and within thirty days at the latest.
Because of attorneys’ duty of confidentiality, where information on a file is requested, the identity of the applicant must be verified and the request must be assessed in a way that does not infringe the rights of third parties or clients.