Datenschutzerklärung

Personal Data Processing and Privacy Notice – CEKA Law & Consultancy Office

This Notice has been prepared to inform you about the personal data that may be processed by CEKA Law & Consultancy Office, the purposes of processing, the legal basis and method of collecting personal data, the recipient groups to which your personal data may be transferred, and your rights under Law No. 6698 on the Protection of Personal Data (“KVKK”). This Notice applies to natural persons’ personal data and does not cover situations where CEKA Law & Consultancy Office acts solely as a “data processor.”

As one of Turkey’s leading law firms, we give great importance to the protection of personal data we process in our capacity as a “data controller” in accordance with KVKK, Law No. 1136 on Attorneys, and relevant legislation, as well as to attorney-client confidentiality. We prioritize transparency and accountability in our personal data processing activities and related processes. We process personal data in compliance with the legislation, within the purposes and limits described below, and take all necessary administrative and technical measures to ensure its security.

Within the framework of our certified infrastructure under ISO 27001:2013 Information Security Management System, ISO 22301 Business Continuity Management System, and ISO 9001:2015 Quality Management System, our business processes, including personal data processing, are carried out in compliance with predetermined corporate policies and procedures. Personal data processing within CEKA Law & Consultancy Office is carried out in accordance with its policies and procedures for the processing, storage, and destruction of personal data and as described in this Notice.

Your personal data may be collected before, during, or after receiving services from CEKA Law & Consultancy Office or in the context of product/service relationships or similar interactions. This may include information and documents you provide or share, operations, stakeholders, publicly available sources and platforms (press, trade registry, and chamber records), communications and research conducted by CEKA Law & Consultancy Office, meetings, interviews, correspondence, or through our website or social media, and may be processed automatically (via electronic systems and programs) or non-automatically (via physical files and records) for the purposes explained in this Notice.

Your personal data will be stored in Turkey for as long as required under relevant legislation or for the period necessary for the purposes of processing. At the end of the retention period, your personal data will be deleted, destroyed, or anonymized in accordance with applicable legislation and CEKA Law & Consultancy Office policies and procedures.

Personal Data Processing in Main Activities

Legal Basis for Processing Personal Data

Your personal data may be processed within the scope of our legal consultancy/attorney services, business development and procurement processes, as well as the administration, management, and financial operations of CEKA Law & Consultancy Office, to the extent necessary for the purposes described below. The processing is based on the legal grounds set forth in KVKK Article 5/2(c) (directly related to the establishment or performance of a contract), Article 5/2(d) (data publicly disclosed by the data subject), Article 5/2(e) (processing required for the establishment, exercise, or protection of a right), Article 5/2(f) (processing required for the legitimate interests of the data controller), or with your explicit consent when required.

Additionally, personal data may be processed for the fulfillment of legal obligations under KVKK Article 5/2(e) and Article 5/2(f), including obligations under Law No. 1136 on Attorneys, and for compliance with requests from competent authorities under KVKK Article 5/2(ç).

Personal data collected for updates on legislation, legal developments, bulletins, publications, and events may be processed based on CEKA Law & Consultancy Office’s legitimate interests under KVKK Article 5/2(f) or, where applicable, with your explicit consent.

1. Legal Consultancy and Attorney Services

1.1 Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

• Providing legal consultancy and attorney services to clients, fulfilling other contractual obligations, and reporting;

• Communicating with clients, their stakeholders, and third parties on behalf of clients;

• Informing clients about legal and regulatory developments;

• Obtaining expert, consultant, or advisory opinions, procuring products/services from third parties, and managing related processes;

• Issuing invoices, handling payments, accounting, and reconciliation;

• Managing corporate communication processes and strengthening client relations;

• Organizing or promoting events organized or attended by CEKA Law & Consultancy Office;

• Managing internal operations including finance, IT, HR, office administration, secretariat, correspondence, and archiving;

• Ensuring the security of assets and information;

• Corporate management and governance, internal reporting, audits, business development, contract management, legal and accounting processes, and compliance with internal rules and policies;

• Providing necessary information to judicial and administrative authorities, including enforcement offices and law enforcement, as required by law;

• Compliance with obligations under Law No. 1136 on Attorneys and other applicable legislation.

1.2 Transfer of Personal Data

Within standard processes, personal data may be shared with third parties when necessary for the above purposes, including:

• Clients, project stakeholders, experts and consultants, courts, notaries, and relevant institutions;

• Banks for payment purposes;

• Event organizers and venues;

• Suppliers and consultants providing IT, HR, finance, accounting, auditing, design, cargo, mass communication, and related services;

• Competent authorities with the legal right to request such information, and in case of disputes, with relevant authorities.

2. Business Development and Newsletter Communications

2.1 Purposes of Processing Personal Data

Your personal data may be processed for:

• Fulfilling legal consultancy/attorney services and other contractual obligations;

• Conducting business development processes and improving our services;

• Managing corporate communications and strengthening client relationships;

• Sending newsletters, publications, legal updates, and other content via mail or email to current/potential clients and interested parties;

• Organizing or promoting events organized or attended by CEKA Law & Consultancy Office;

• Internal operations including finance, IT, HR, office administration, secretariat, correspondence, and archiving;

• Ensuring security of assets and information;

• Corporate management, internal reporting, audits, business development, contract management, legal and accounting processes, and compliance with internal policies;

• Providing information to judicial and administrative authorities as required by law;

• Compliance with obligations under Law No. 1136 on Attorneys and other applicable legislation.

2.2 Transfer of Personal Data

Personal data may be shared with:

• Event organizers and venues;

• Domestic and international professional platforms with client consent;

• Suppliers and consultants in IT, HR, finance, accounting, auditing, design, cargo, mass communication;

• Competent authorities and relevant parties in case of disputes.

3. Procurement Processes Outside Main Activities

3.1 Purposes of Processing Personal Data

Personal data may be processed to:

• Conduct procurement and purchasing for office needs;

• Fulfill contractual obligations in product/service relationships;

• Manage invoicing, payments, accounting, and reconciliation;

• Internal operations including finance, IT, HR, office administration, secretariat, correspondence, and archiving;

• Ensure security of assets and information;

• Corporate management, internal reporting, audits, business development, contract management, legal and accounting processes, and compliance with internal rules and policies;

• Provide information to judicial and administrative authorities;

• Comply with obligations under Law No. 1136 on Attorneys.

3.2 Transfer of Personal Data

Personal data may be shared with:

• CEKA Law & Consultancy Office partnership, banks for payment processing;

• Relevant suppliers;

• Clients or third parties when required;

• Competent authorities and relevant parties in case of disputes.

4. Website Usage

Visitors to our website http://www.deneme.kozmosbilisim.com/ may be subject to temporary cookies to ensure the site functions properly. Cookies are automatically deleted at the end of the session.

Personal data collected via website usage may be shared with service providers, competent authorities, and relevant parties in case of disputes.

5. Other Incidental Data Processing

If personal data needs to be processed outside the main activities, processing will be based on:

• Explicit consent;

• Legal requirements;

• Protection of life or physical integrity when consent cannot be obtained;

• Directly related to the establishment or performance of a contract;

• Compliance with CEKA Law & Consultancy Office’s legal obligations;

• Public disclosure by the data subject;

• Necessary for establishing, using, or protecting a right;

• Legitimate interests of CEKA Law & Consultancy Office without harming fundamental rights and freedoms.

6. Your Rights and Contact

Under KVKK, you have the right to:

• Learn whether your personal data is being processed and request information;

• Know the purpose of processing and whether your data is used accordingly;

• Know domestic or international third-party recipients;

• Request correction, deletion, or anonymization of inaccurate or incomplete data, and notification of third parties;

• Object to automated processing that produces adverse outcomes;

• Claim compensation for damages due to unlawful processing.

You can submit your requests in writing to:
Prizma Plaza, Adalet, 1586/3. Sk. No:24 K:1 D:2, 35370 Bayraklı/İzmir, Turkey
or via email from your registered address: info@deneme.kozmosbilisim.com.

To ensure proper handling, requests must be clear, specific, related to you or, if acting on behalf of another, authorized with proof, and include personal identification information (name, surname, Turkish ID number or passport number for foreigners) and contact information for response.