Kentkuran Hukuk ve Arabuluculuk
Legal

KVKK Information Notice

This English version is provided for information only. The Turkish text is the legally authoritative version.

This notice has been prepared pursuant to Article 10 of the Personal Data Protection Law No. 6698 (the “KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, in order to inform relevant persons concerning the personal data processing activities of Kentkuran Hukuk ve Arabuluculuk.

1. Identity of the Data Controller

This notice has been prepared by Kentkuran Hukuk ve Arabuluculuk in its capacity as data controller. Contact details:

2. Categories of Personal Data Processed

The personal data that may be processed by Kentkuran Hukuk ve Arabuluculuk through this Site is collected under the following headings:

  • Identity information: First name, surname (in the consultation, contact and job-application forms).
  • Contact information: Telephone number and address (required in the consultation request forms); telephone number and email address (required in the job-application form); email address (optional in the consultation forms, collected in the contact form).
  • Transaction and request content: Messages transmitted through the form, summary of the legal matter, CV content submitted in the context of a job application.
  • Transaction security information: IP address, browser information, session and device information (visit records).

3. Purposes of Processing

The personal data collected is processed for the following purposes:

  • Responding to requests and applications, scheduling preliminary meetings.
  • Providing legal advisory and attorneyship services, conducting the attorney-client relationship.
  • Evaluating job applications submitted for open positions.
  • Technical maintenance of the website, ensuring its security and improving the quality of service.
  • Fulfilling obligations stipulated by legislation (e.g., the Attorneyship Act, the Turkish Code of Obligations (TBK), the Tax Procedure Law).

4. Legal Basis and Method of Processing

Personal data is processed on the following legal bases within the framework of Article 5 of the KVKK:

  • m.5/2-c: Processing the contracting parties’ personal data where necessary for, and directly related to, the establishment or performance of a contract (representation relationship, consultation meeting).
  • m.5/2-ç: Necessity for the data controller to fulfil its legal obligation (record-keeping obligations under the Attorneyship Act).
  • m.5/2-f: Necessity for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (request management, continuity of communication).
  • Explicit consent (art.5/1): Taken only where “Accept” is chosen in the cookie preference, for analytics measurement. The checkboxes in the forms are declarations of accuracy; they are not explicit consent. Job-application data is processed on the basis of steps taken before entering into a contract, and the other form data on legitimate interest and contractual preparation.

Data is collected by automated or partially automated means through the consultation and career forms on the website, email correspondence, and during office visits.

Where necessary for establishing, exercising or protecting a legal right, ordinary personal data may be processed under Article 5(2)(e), and special-category data under Article 6(3)(d), with the required safeguards. Please do not submit health records, criminal records or other sensitive details beyond what is necessary for the initial request.

5. Transfers — Domestic and International

The website uses hosting and email infrastructure to receive and deliver requests. Data is shared with the technical providers listed below to the extent required by those services. Transfers abroad are also subject to the separate conditions in KVKK Article 9; a cookie preference alone does not replace an appropriate transfer mechanism for regular transfers.

  • Google LLC (Google Workspace / Gmail, United States): Forms on the website are submitted to the site's own server and delivered from there using Google email infrastructure: consultation and initial-meeting requests go to the firm's corporate addresses, while general contact messages and job applications go to the Google account of the person handling correspondence for the firm. In this context, data in the form fields may be processed on servers located in the United States.
  • Google Maps (Google LLC): The contact page map connects to Google only after you select “Load Google map”. Google may then process your IP address and browser data abroad and set cookies. The footer contains an external link only. The map can be closed by leaving the page; changing the cookie preference to “Essential Only” also removes the loaded map.
  • Google LLC (Google Analytics): Used to measure visitor statistics; loaded only where the cookie preference allows all cookies. In that case the measurement data is transferred to Google's servers.

Links to Mevzuat.gov.tr and similar government sources are external links. Following one connects your browser to the destination site, where technical data may be processed under that site’s rules.

6. Retention Periods

  • Request data submitted through forms: Retained for as long as the request requires, with a policy maximum of five years for ordinary correspondence. Client files, accounting records and data required to establish or defend a legal claim are assessed separately under the relevant retention obligations; five years is not a universal statutory limitation period.
  • Job application data: Retained for a maximum of 1 year if the process is unsuccessful, or, if successful, in the personnel file for the periods stipulated by applicable legislation.
  • Server access / log records: Retained for a maximum of 6 months.

7. Your Rights Under KVKK Article 11

Under Article 11 of the KVKK, each data subject is entitled to exercise the following rights by applying to the data controller:

  • To learn whether his or her personal data is processed,
  • To request information if such data has been processed,
  • To learn the purpose of processing and whether the data is used for its intended purpose,
  • To know the third parties to which the data is transferred domestically or abroad,
  • To request correction of the data where it has been processed incompletely or inaccurately,
  • To request deletion or destruction of the data within the framework of KVKK m.7,
  • To request that correction or deletion operations be notified to the third parties to which the data has been transferred,
  • To object to a result occurring to his or her detriment arising from the analysis of the data exclusively through automated systems,
  • To claim compensation for damages suffered as a result of unlawful processing.

8. Method of Application

To exercise your rights under KVKK m.11, you may submit your application through the following channels, in accordance with the Communiqué on the Procedures and Principles for Application to the Data Controller:

  • Email: info@kentkuranhukuk.com — you may send a written application containing your identity information and the subject of your request.
  • In writing: A wet-signed petition may be sent to Koşuyolu Mah. Salih Omurtak Sok. No:42, Kadıköy / Istanbul.

Your application will be concluded within a maximum of 30 days, in accordance with the procedure laid down by the Personal Data Protection Board.

9. Relationship with Attorney-Client Privilege

In the protection of personal data, Kentkuran Hukuk ve Arabuluculuk is subject not only to the KVKK but also to the duty of client confidentiality regulated under Article 36 of the Attorneyship Act (Avukatlık Kanunu m.36). Information arising from the attorney-client relationship is additionally protected as professional secrecy; the two-tiered obligations under the KVKK and the Attorneyship Act apply concurrently.

10. Updates

This information notice may be updated in accordance with legislative and operational requirements. The current version is always accessible from this page. For related policies, you may also review the Privacy Policy and Cookie Policy pages.