Law on The Protection of Personal Data Acknowledgement

As K&A Law Firm, we show maximum sensitivity to the safety of your personal data. In line with this; In terms of all kinds of personal data belonging to our clients, prospective clients, employees, business partners, website visitors and employee candidates who apply to our office, we attach importance to processing and storing these data in accordance with the Law on the Protection of Personal Data No. 6698 (“PPDL”).

Within the scope of our obligation of clarification; With this clarification text, we would like to give you information about the subjects such as for purposes of processing your personal data, purposes of transferring them, the parties to whom they will be transferred, the methods of collecting them, the relevant legal reasons and your relevant rights.

Definitions in PPDL (Law on Protection of Personal Data) No. 6698:

• Explicit Consent: Refers to the consent related to a specific matter, based upon notification, and expressed in free will,
• - Anonymization: Refers to making the personal data immune from being associated with a real person (whose identity is known or can be revealed) by any means, even by means of matching them with other data,
• Chairman: Refers to the Chairman of the Personal Data Protection Authority,
• Related person: Refers to a real person whose personal data is processed,
• Personal data: Any kind of information related to the real person whose identity is known or can be revealed,
• Processing of Personal Data: Refers to all kinds of transactions performed on personal data in either automatic manner or non-automatic manner (by being part of a data registration system) such as obtaining them, recording them, storing them, retaining them, changing them, re-arranging them, disclosing them, transferring them, acquiring them, making them obtainable, classifying them or preventing them from being used, partially or completely,
• Board: Refers to the Personal Data Protection Board;
• Authority: Refers to the Personal Data Protection Authority;
• Data Processor: Refers to a real person or legal entity who processes personal data on the behalf of the data controller, based on the authority granted by the data controller,
• Data recording system: Refers to the recording system in which the personal data is processed by being configured according to certain criteria,
• Data controller: Refers to the real person or legal entity who is responsible for designating the purposes and instruments of personal data processing, as well as for the installation and management of the data recording system.

Data Controller

In accordance with PPDL, your personal data; is collected and processed by “K&A Law Firm” (as the data controller) within the scope described below.

Purpose of Data Processing

Your personal data are processed in accordance with the personal data processing conditions specified in articles 5 and 6 of PPDL for the purposes of; Performing all kinds of legal services and consultancy activities within the scope of the Attorneys Act; Giving information to authorized persons, institutions and organizations for the reasons arising from the legislation; Carrying out human resources processes, Fulfilling the obligations arising from the labor contract and obligations related to occupational health and safety; Performing the financial and accounting operations; Ensuring the accuracy and actuality of the data; Executing systemic and physical security procedures and making copies/backups in order to prevent the data loss.

The Purposes and Recipients of Personal Data Transfers

Your personal data can be transferred within the framework of the personal data processing conditions and purposes specified in articles 8 and 9 of PPDL; to official public institutions and organizations, most notably courts and enforcement offices, such as notaries, land registry offices, tax offices; to the banks we work with, in order to transfer to the bank account you notified us the benefits we collect within the scope of the legal service we provide; to the company from which we get financial and accounting services, in order to fulfill our tax obligations;

To the authorized persons, public institutions and organizations, for reasons arising from the legislation, and in order to fulfill our obligation to inform the authorized persons, public institutions and organizations;

To the Social Security Institution, the company from which we get financial and accounting services and the banks we work with, in order to carry out the human resources processes and in order fulfill the obligations arising from the labor contract and the obligations related to occupational health and safety;

To the company from which we get technical IT services, in accordance with the information processing support services we get from them and in order to execute the systemic and physical security procedures and make copies/backups for preventing data loss.

The Legal Reason for Collecting Personal Data and the Methods of It

Your personal data is collected and processed; In physical manner or by phone during the meetings and interviews made with you; In verbal, written or electronic form through the information and documents which you will submit to us physically or which you shall send us by e-mail or fax over the electronic environment.

In line with this, your personal data is processed within the scope of legal reasons which can be listed as; Fulfilling the obligations arising from the Attorneys Act and other related legislation, in order to fulfill all kinds of legal services and counseling activities; Such action being mandatory pursuant to PPDL article 5/2 paragraph (ç) for the data controller to fulfill its legal obligations; Such action being mandatory pursuant to article 5/2 paragraph (e) of the same law, for the establishment, exercise and protection of a right; Such action being mandatory pursuant to article 5/2 (f) for meeting the legitimate interests of the data controller, on condition that the fundamental rights and freedoms of the relevant person are not damaged.

Being processed in order to share information with authorized persons, institutions and corporations for the reasons arising from the legislations, your personal data are processed within the scope of the legal reasons which can be listed as; Such action being explicitly stipulated by the laws pursuant to the relevant code which regulates the obligation of information sharing and pursuant to PPDL article 5/2 paragraph (a); Such action being mandatory pursuant to article 5/2 paragraph (ç) of the same law for the fulfillment of the obligations by the data controller.

Being processed for executing human resources processes, for ensuring the accuracy and actuality of the data, for making copies/backups in order to prevent data loss and for executing systemic and physical security procedures, your personal data is processed pursuant to the legal reason of; Such action being mandatory pursuant to PPDL article 5/2 (f) in order to meet the legitimate interests of the data controller, on condition that the fundamental rights and freedoms of the relevant person are not damaged.

Being processed for the fulfillment of the obligations arising from the labor contract and the obligations of occupational health and safety, your personal data are processed based on the legal reasons which can be listed as; Such action being explicitly stipulated by the laws pursuant to the Labor Law, Social Security and General Health Insurance regulations and related legislation and article 5/2 paragraph (a) of the PPDL; Such action being mandatory pursuant to article 5/2 paragraph (ç) for the fulfillment of the legal obligations by the data controller; Such action being mandatory pursuant to article 5/2 paragraph (e) of the same article, for the establishment, exercise and protection of a right.

Your Rights Listed in Article 11 of the PPDL

As the relevant person within the scope of PPDL;

• You are entitled to learn whether your personal data is being processed or not,
• To request information regarding  the processing of your personal data if this was carried out,
• To learn about the purpose of processing your personal data and whether these were used in line with the purposes or not;
• To have the knowledge of the third parties to whom the personal data is transferred domestically or overseas,
• To request correction of personal data in case they are processed incompletely or incorrectly, and to request for notification of the relevant correction transaction to the third parties who receive the personal data,
• To request the deletion or destruction of your personal data within the framework of the conditions (excluding the legal constraints) stipulated in Article 7 of the Law,
• To make an objection to the emergence of a disadvantageous outcome against you which is caused by the exclusive analysis of your processed data with the use of automatic systems.
• To request compensation for the damages in case you incur damages due to unlawful processing of your personal data.

How to Use Your Right of Petition

You can submit your request regarding the exercise of your above-mentioned rights, either in written form in accordance with the PPDL and the Communiqué on Application Procedures and Principles to the Data Controller, or by using the e-mail address which were previously notified to K&A Law Firm and which are registered in our system. Before responding, K&A Law Firm reserves the right to request additional documents from the petitioner, in order to determine whether that person is the owner of the personal data.

Your petition should include;

Your name, surname, and if the petition is in written form, your signature,

Your Republic of Turkey Identification Number if you are a citizen of the Republic of Turkey, or your nationality, passport number or identification number if you are a foreigner,

The address of your residence or your workplace registered for notifications,

Your e-mail address, phone number and fax number registered for notifications, if any,

and the subject of your request. Any available information and documents related to the subject must be attached to the petition.

By attaching the necessary documents, you must deliver your written petitions by hand to “Cevizli Mah. Zuhal Cad. No:46 Ritim Istanbul Rezidans A-3 Blok K:9 D:47 34846 Maltepe/ISTANBUL”.  For the petitions you want to send by e-mail, you can use the e-mail address “info@karacam.av.tr”.

In case of the emergence of additional costs required for concluding the related requests, the fee listed in the tariff determined by the Board will be collected from the petitioner.