Skip to content
Av. Çağatay KISALaw & Consultancy

Legal

Personal Data Protection Policy

As Avukat Çağatay KISA Hukuk Bürosu (the “Firm”), acting as data controller under Law No. 6698 on the Protection of Personal Data (“KVKK”), we take the utmost care to ensure that the personal data we process is kept secure and processed lawfully.

1. Data Controller

Data controller: Avukat Çağatay KISA Hukuk Bürosu — Cumhuriyet Mahallesi 1979. Sokak No:16 Önay Garden Residence Daire:244, Esenyurt/İstanbul. Contact: info@cagataykisa.av.tr

2. Personal Data Processed

  • Identity data (name, surname, Turkish ID number)
  • Contact data (phone, email, address)
  • Legal transaction data relating to client files
  • Transaction security data relating to website use (IP address, log records)

3. Purposes of Processing and Legal Bases

Your personal data is processed for the following purposes and on the following legal bases:

  • Provision of legal services (KVKK art. 5/2-c, e),
  • Fulfilment of obligations arising from the Attorneys' Act No. 1136 (art. 5/2-a, ç),
  • Responding to contact and appointment requests (art. 5/2-c),
  • Compliance with legal obligations and provision of information to competent authorities (art. 5/2-ç).

4. Transfer of Data

Your personal data is shared with judicial authorities, enforcement offices, mediation offices, notaries and the relevant public institutions only to the extent required by the service and within the framework of legal obligations. Your data is not transferred to third parties for commercial purposes.

5. Retention Periods

Data relating to client files is retained in accordance with the minimum retention periods set out in the Attorneys' Act and related legislation, starting from the conclusion of the engagement; contact form data is retained for a maximum of 2 years from the resolution of the request.

6. Your Rights under the KVKK

Under article 11 of the KVKK, you have the right to learn whether your data is being processed, to request information, to request rectification and erasure, to know the third parties to whom your data has been transferred, and to claim compensation for damages. You may submit your applications to info@cagataykisa.av.tr; applications are concluded free of charge within 30 days at the latest.

7. Data Security

The Firm implements the necessary technical and organizational measures — including encryption, access authorization and physical security — to prevent the unlawful processing of and access to personal data.