Information on the Personal Data Protection Law

Aydıner Avukatlık Ortaklığı takes the highest level of security measures to ensure the lawful collection, storage, and sharing of your personal data, as well as to protect your privacy.

Our aim is to provide you with transparent information, in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“Law”) and for your satisfaction, regarding the methods of obtaining personal data, the purposes of processing, the entities with whom it is shared, the legal grounds, and your rights.

Scope

This notification applies to our clients, visitors of our clients, visitors, prospective clients, website visitors, business partners, suppliers, employees, job applicants, and other third parties whose personal data is processed.

General Information About the Law

The Personal Data Protection Law No. 6698 was adopted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016.

The law was enacted to protect the fundamental rights and freedoms of individuals, particularly the right to privacy, in the collection, processing, and storage of personal data. It also establishes the obligations and principles to be followed by natural and legal persons who process personal data, as well as the rights of individuals whose personal data is processed.

Data Controller

Under the Personal Data Protection Law No. 6698, your personal data will be collected and processed by Aydıner Avukatlık Ortaklığı (“the COMPANY”) as the Data Controller within the scope outlined below.

Purposes of Processing Personal Data

Our COMPANY operates in the field of legal services. During the provision of services, personal data may be collected from clients, employees, prospective clients, job applicants, business partners, suppliers, visitors, and other third parties in categories such as identity information, contact information, customer information, transaction details, bank account information, transaction security details, legal compliance information, and marketing and sales information.

Collected personal data is processed for purposes including:

  • Ensuring service quality, fulfilling legal and financial obligations, and complying with local and international regulations regarding information retention, reporting, notification, taxation, and other obligations.
  • Offering proposals, managing contract processes, accepting orders, preparing delivery notes, invoices, and other documents, and maintaining communication for IT support and system requirements.
  • Conducting traffic measurement, statistical analyses, segmentation/profiling, and CRM activities for marketing and sales purposes.
  • Measuring and enhancing customer satisfaction, managing complaints, and addressing issues or error notifications.
  • Conducting personnel recruitment, payroll and compensation processes, and fulfilling obligations under labor law.
  • Complying with legal obligations outlined in contracts, official requests, and applicable legislation.
  • Monitoring trends through cookies placed on your device during website visits, analyzing behaviors, and improving services.

Personal data is processed within the conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law.

Transfer of Processed Personal Data

Your personal data may be shared, limited to and proportional to the purposes mentioned above, with:

  • The COMPANY’s affiliates, business partners, shareholders, and subsidiaries,
  • Relevant public institutions and organizations authorized by law, judicial authorities, and administrative bodies,
  • Third-party service providers, institutions for sending communications, and organizations involved in advertising and marketing activities.

Such data transfers comply with the conditions specified in Articles 8 and 9 of the Personal Data Protection Law.

Method and Legal Grounds for Collecting Personal Data

Personal data is collected through verbal, written, or electronic means from COMPANY offices, website applications, third-party services, and platforms such as social media and mobile apps. The collection of personal data is conducted within the legal framework and for the purposes outlined above.

Rights of the Data Subject

Under Article 11 of the Personal Data Protection Law No. 6698, data subjects have the right to:

  1. Learn whether their personal data is being processed.
  2. Request information about the processing of their personal data.
  3. Learn the purposes of processing and whether the data is used appropriately.
  4. Know the third parties to whom personal data is transferred, domestically or abroad.
  5. Request the correction of incomplete or inaccurate data and ensure third parties are informed of the corrections.
  6. Request the deletion or destruction of personal data under conditions set out in the law and ensure third parties are informed of such actions.
  7. Object to unfavorable results arising from the exclusive analysis of data through automated systems.
  8. Demand compensation for damages caused by unlawful processing.

Application Procedures

Requests regarding your rights may be submitted in Turkish, either in writing or via registered email (KEP), secure electronic signature, mobile signature, or an email address previously provided to the COMPANY. Applications must include:

  1. Your name, surname, and signature (if the application is written).
  2. Your national ID number (for Turkish citizens) or passport number (for non-citizens).
  3. Your address, email, phone number, and fax number, if applicable.
  4. Your request and relevant supporting information.

Applications may be submitted:

  • By post to Mecidiyeköy, Atakan Sokak, Meriç Lotus, No: 6-8, Kat:4, D.12 Şişli / Istanbul. 34387
  • By email to info@aydiner.av.tr

Depending on the complexity of your request, additional information or documents may be required. The COMPANY reserves the right to verify your identity before responding.