KVKK Information Notice

This English version is provided for information only. The Turkish text is the legally authoritative version.

This notice has been prepared pursuant to Article 10 of the Personal Data Protection Law No. 6698 (the “KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, in order to inform relevant persons concerning the personal data processing activities of Kentkuran Hukuk.

1. Identity of the Data Controller

This notice has been prepared by Kentkuran Hukuk in its capacity as data controller. Contact details:

• Address: Koşuyolu Mah. Salih Omurtak Sok. No:42, Kadıköy / İstanbul
• Email (general): info@kentkuranhukuk.com
• Email (KVKK applications): info@kentkuranhukuk.com

2. Categories of Personal Data Processed

The personal data that may be processed by Kentkuran Hukuk through this Site is collected under the following headings:

• Identity information: First name, surname (in the consultation and job-application forms).
• Contact information: Email address, telephone number (where declared).
• Transaction and request content: Messages transmitted through the form, summary of the legal matter, CV content submitted in the context of a job application.
• Transaction security information: IP address, browser information, session and device information (visit records).

3. Purposes of Processing

The personal data collected is processed for the following purposes:

• Responding to requests and applications, scheduling preliminary meetings.
• Providing legal advisory and attorneyship services, conducting the attorney-client relationship.
• Evaluating job applications submitted for open positions.
• Technical maintenance of the website, ensuring its security and improving the quality of service.
• Fulfilling obligations stipulated by legislation (e.g., the Attorneyship Act, the Turkish Code of Obligations (TBK), the Tax Procedure Law).

4. Legal Basis and Method of Processing

Personal data is processed on the following legal bases within the framework of Article 5 of the KVKK:

• m.5/2-c: Being directly related to the establishment or performance of a contract (representation relationship, consultation meeting).
• m.5/2-ç: Necessity for the data controller to fulfil its legal obligation (record-keeping obligations under the Attorneyship Act).
• m.5/2-f: Necessity for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (request management, continuity of communication).
• Explicit consent (m.5/1): For processing operations that require explicit consent, the relevant person's consent provided via the website forms.

Data is collected by automated or partially automated means through the consultation and career forms on the website, email correspondence, and during office visits.

5. Transfers — Domestic and International

As a matter of principle, Kentkuran Hukuk does not transfer personal data to third parties. To the limited extent that the following technical infrastructure providers are used, transfers may take place:

• FormSubmit.co (United States): The consultation and career forms on the website are transmitted via this third-party infrastructure so that the form content reaches info@kentkuranhukuk.com. In this context, data in the form fields may be transferred to servers located in the United States.
• Google Maps (Google LLC): An embedded Google Maps map is used to display location information in the contact and footer sections. Technical data may be collected by Google when the user interacts with the map.

Links to Mevzuat.gov.tr and similar government sources are external links only and do not involve any data transfer.

6. Retention Periods

• Request data submitted through forms: Retained after the contact and client relationship has ended for a maximum of 5 years, in line with the limitation periods under the Attorneyship Act and the Turkish Code of Obligations (TBK).
• Job application data: Retained for a maximum of 1 year if the process is unsuccessful, or, if successful, in the personnel file for the periods stipulated by applicable legislation.
• Server access / log records: Retained for a maximum of 6 months.

7. Your Rights Under KVKK Article 11

Under Article 11 of the KVKK, each data subject is entitled to exercise the following rights by applying to the data controller:

• To learn whether his or her personal data is processed,
• To request information if such data has been processed,
• To learn the purpose of processing and whether the data is used for its intended purpose,
• To know the third parties to which the data is transferred domestically or abroad,
• To request correction of the data where it has been processed incompletely or inaccurately,
• To request deletion or destruction of the data within the framework of KVKK m.7,
• To request that correction or deletion operations be notified to the third parties to which the data has been transferred,
• To object to a result occurring to his or her detriment arising from the analysis of the data exclusively through automated systems,
• To claim compensation for damages suffered as a result of unlawful processing.

8. Method of Application

To exercise your rights under KVKK m.11, you may submit your application through the following channels, in accordance with the Communiqué on the Procedures and Principles for Application to the Data Controller:

• Email: info@kentkuranhukuk.com — you may send a written application containing your identity information and the subject of your request.
• In writing: A wet-signed petition may be sent to Koşuyolu Mah. Salih Omurtak Sok. No:42, Kadıköy / İstanbul.

Your application will be concluded within a maximum of 30 days, in accordance with the procedure laid down by the Personal Data Protection Board.

9. Relationship with Attorney-Client Privilege

In the protection of personal data, Kentkuran Hukuk is subject not only to the KVKK but also to the duty of client confidentiality regulated under Article 36 of the Attorneyship Act (Avukatlık Kanunu m.36). Information arising from the attorney-client relationship is additionally protected as professional secrecy; the two-tiered obligations under the KVKK and the Attorneyship Act apply concurrently.

10. Updates

This information notice may be updated in accordance with legislative and operational requirements. The current version is always accessible from this page. For related policies, you may also review the Privacy Policy and Cookie Policy pages.