This notice is provided under Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, to people who contact us through the form on this website.
1. Data controller
The data controller is KATIRCI Law Office. The personal data of people who use the contact form on this website (www.katirci.com) is processed by our office as data controller under the KVKK.
2. Personal data processed
The data you enter in the contact form: your name, email address, phone number (optional), the subject you choose (optional) and the content of your message. To prevent abuse of the form, a one-way hashed value derived from your IP address is kept for one hour; it cannot be used to identify you. Please do not share special categories of personal data (such as health data or criminal convictions) or confidential information through this form.
3. Purposes
To receive, assess and reply to your enquiry, to determine whether an attorney–client relationship can be established, and to protect the form against abuse. Your data is not used for any other purpose.
4. Legal grounds
Your data is processed on the basis of Article 5(2)(c) of the KVKK (processing is necessary for taking steps directly related to the conclusion of a contract) and Article 5(2)(f) (processing is necessary for the legitimate interests of the data controller, provided that your fundamental rights and freedoms are not harmed). The box you tick in the form confirms that you have been informed; it is not a consent to processing.
5. Method of collection
Your data is collected automatically, in electronic form, when you submit the contact form on this website.
6. Recipients and transfers abroad
Your enquiry is delivered to the office by email and stored on the website’s server. Your data is not shared with third parties except where public authorities are legally entitled to request it. The website is hosted by Hetzner Online GmbH in Germany and email is provided by Google Workspace. These providers act on behalf of the office as data processors, so your data may be hosted and processed outside Türkiye. Any such transfer is carried out in accordance with Article 9 of the KVKK and the related regulation, with the required safeguards.
7. Security
Data is transmitted over an encrypted connection (HTTPS), access is limited to authorised persons, and reasonable technical and organisational measures are taken under Article 12 of the KVKK. As lawyers, we are also bound by professional secrecy under the Attorneys’ Act and the rules of the profession.
8. Retention
Enquiries are kept for up to two years from the date of receipt and are then deleted, unless a longer period is required by law or an attorney–client relationship is established.
9. Cookies
This website does not use analytics, advertising or tracking cookies, and does not load third-party fonts or tracking services.
10. Your rights
Under Article 11 of the KVKK, as the data subject you may apply to the data controller to:
- learn whether your personal data is processed and request information about it;
- learn the purpose of processing and whether it is used accordingly;
- learn the third parties to whom your data is transferred in Türkiye or abroad;
- request correction of incomplete or inaccurate data and request that this be notified to the third parties to whom the data has been transferred;
- request deletion or destruction of your data under the conditions set out in the KVKK, and that this be notified to the third parties to whom the data has been transferred;
- object to a result against you arising from the analysis of the data exclusively by automated systems;
- request compensation for damage arising from unlawful processing.
11. How to apply
You can send your requests through the contact form on this website, stating “KVKK application” as the subject. We may ask for additional information or documents to verify your identity. You may also apply by the other methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller; you can ask us about these through the contact form. Applications are concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request; if the process requires a separate cost, the fee in the tariff set by the Personal Data Protection Board may be charged. If you find our reply insufficient, or if we do not reply in time, you may complain to the Personal Data Protection Board within thirty days of learning of our reply and in any case within sixty days of your application.