Information Text on the Protection of Personal Data

CORPORATE

Information Text on the Protection of Personal Data

As Atty. Erhan Özkan, Atty. Hakan Özkan we take care to ensure the security of your personal data. For this reason, we attach great importance to processing all kinds of personal data belonging to all persons related to our office, including those who benefit from our legal consultancy services, in accordance with the Personal Data Protection Law No. 6698 ("KVKK") and other relevant legislation. With the awareness of this responsibility, as the Data Controller, we process your personal data as described below and within the limits stipulated by the legislation.

With this Information Text on the Protection of Personal Data, as the Data Controller, we aim to inform you about our activities regarding the processing and protection of personal data in accordance with the KVKK, the decisions of the Personal Data Protection Board, and the relevant secondary legislation.

1. PURPOSES OF PROCESSING PERSONAL DATA

As Atty. Erhan Özkan, Atty. Hakan Özkan, we process your personal data in accordance with Article 4 of the KVKK, in a lawful and fair manner, accurately and up-to-date, for specific, clear and legitimate purposes, and limited to and proportionate to these purposes. In addition, we keep your personal data for the period stipulated in the KVKK and relevant legislation and as long as it is necessary for the purpose for which they are processed.

Your personal data will be processed in accordance with the following purposes and within the scope of the personal data processing conditions specified in Articles 5 and 6 of the KVKK:

1. FOR VISITORS, CURRENT AND POTENTIAL CLIENTS, AND BUSINESS PARTNERS
2. Provision of Legal/Legal Consultancy Services: Your data is processed by us for the performance of all kinds of legal and legal consultancy activities and the provision of additional/complementary services (e.g., translation, notary, etc.) related to these activities.
3. Administration, Management and Development of Activities and Services: In this context, your personal data is processed by us for the following purposes:

(i) carrying out the financial and accounting affairs of our office;

(ii) providing information to authorized persons, institutions and/or authorities for reasons arising from legislation;

(iii) use and updating of information technology systems (including the provision of information technology (IT) services, storage, hosting, maintenance, support, use of the central server system); and,

(iv) ensuring that the data is accurate and up-to-date.

1. Providing Information on Legislation and Sector Updates: In cases where explicit consent is obtained from the relevant data subject, the contact information provided by the data subjects is processed by us to send electronic communications (e.g., weekly newsletters, informative e-mails, or training booklets) about legal developments and the sector.
2. Ensuring Compliance with the Lawyers' Act and other Professional Regulations: As a law firm, Özkan Legal is subject to various professional obligations. It is necessary to keep certain records, including some personal data, to ensure that the services comply with these obligations.
3. Taking Security Measures: Atty. Erhan Özkan, Atty. Hakan Özkan takes some measures to ensure the security of information belonging to itself and you (including personal data). In this context, your personal data is processed as part of these security measures in the following ways;

(i) performing automatic scans to detect harmful e-mails, etc.;

(ii) recording images and keeping records through security cameras located in and around the office to ensure building security; and

(iii) monitoring the behavior and network traffic of all visitors to our office on the wireless internet network, which can be connected with a password, limited to the source and destination addresses they connect to, in order to detect unauthorized access and actions contrary to legislation and to take necessary measures against them.

1. FOR EMPLOYEE AND INTERN CANDIDATES

Atty. Erhan Özkan, Atty. Hakan Özkan processes your personal data for the following purposes within the scope of candidate selection and execution of the recruitment process;

(i) verifying your identity information when necessary;

(ii) making suitability and competency assessments for relevant positions;

(iii) sending e-mail notifications and other announcements to the candidate, requesting additional information, communicating regarding the candidacy status, or making a job offer.

In the event that personal data in the nature of contact information (e.g., name, e-mail, telephone number) belonging to third parties indicated by the candidate as references is obtained through the candidate's resume, Atty. Erhan Özkan, Atty. Hakan Özkan may process such personal data for the purpose of obtaining information about the candidate by contacting the relevant person.

Your health data may be processed by Atty. Erhan Özkan, Atty. Hakan Özkan with your explicit consent in cases stipulated by legislation (e.g., for medical checks that must be carried out before recruitment) to fulfill a legal obligation.

1. TRANSFER OF PERSONAL DATA

Your personal data will not be used for purposes other than those specified above and will not be shared with third parties or transferred to third parties without your explicit consent, except within the scope of legal obligations and authorized official institutions/organizations.

Your personal data processed by us may be transferred domestically and internationally to private persons and organizations that are necessary and legally authorized to fulfill the processing purposes explained above, within the framework of the personal data processing conditions stipulated in Articles 5, 6, 8 and 9 of the KVKK, without seeking your explicit consent in this regard.

III. METHOD AND LEGAL BASIS OF COLLECTING PERSONAL DATA

Your personal data is collected by Atty. Erhan Özkan, Atty. Hakan Özkan in a manner compliant with legislation; through non-automated means (verbal communication, e-mail, telephone, written, via the website, etc.) within the scope of security measures. Your personal data collected through the specified methods is processed in accordance with the fundamental principles stipulated by the KVKK, pursuant to Articles 5 and 6 of the KVKK:

(i) it is explicitly stipulated in the laws;

(ii) it is necessary to protect the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not deemed legally valid, or someone else's life or physical integrity;  

(iii) it is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract;  

(iv) it is necessary for the data controller to fulfill its legal obligation;

(v) it has been made public by the relevant person himself/herself;

(vi) data processing is mandatory for the establishment, exercise, or protection of a right;

(vii) data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person; and  

(viii) in cases stipulated by law, special categories of personal data may be processed without the explicit consent of the relevant person.

Your special categories of personal data, other than health and sexual life, may be processed without seeking your explicit consent by taking adequate measures in the cases stipulated in Article 6/3 of the Personal Data Protection Law.

1. RIGHTS TO ACCESS AND CORRECT PERSONAL DATA

Pursuant to Article 11 of the KVKK, personal data subjects have the right to:

(i) learn whether their personal data is processed and request information if it is;

(ii) learn the purpose of processing personal data and whether it is used appropriately for this purpose;

(iii) know the third parties to whom personal data is transferred domestically or abroad;

(iv) request correction of personal data if it is processed incompletely or inaccurately, and request notification of the transaction made in this context to third parties to whom the personal data is transferred;

(v) request deletion or destruction of personal data if the reasons requiring its processing cease to exist, and request notification of the transaction made in this context to third parties to whom the personal data is transferred;

(vi) object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems; and  

(vii) demand compensation for the damage suffered due to processing of personal data in violation of the KVKK.

You can submit your requests regarding the exercise of the aforementioned rights with your petition containing your identity information proving that you are the data subject or with the form you can access here [link to form], with your wet signature, by hand delivery or registered mail to "Barbaros Mahallesi, Mor Menekşe Sokak, Deluxia Suites, No:3A, Kat, 13, Daire, 167, Ataşehir, Istanbul" or by using a secure electronic signature, mobile signature, or your e-mail address that you have previously notified us and is included in our records, to the e-mail address info@ozkanlegal.com with the phrase "Personal Data Information Request" in the subject line.

If you, as personal data subjects, submit your requests regarding your rights to Atty. Erhan Özkan, Atty. Hakan Özkan in the manner described above, Atty. Erhan Özkan, Atty. Hakan Özkan will finalize the request free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be collected from you by Atty. Erhan Özkan, Atty. Hakan Özkan.