Gökkılıç Law Firm places great importance on the security of the personal data of its clients, business partners, employees, and all other third parties with whom it interacts. This includes ensuring the lawful processing of personal data and compliance with legislation related to the protection of personal data. In this regard, with this Privacy Notice, Gökkılıç is complying with its obligation to inform about personal data processed by Gökkılıç processes in situations where it acts as a “data controller” under the Law No. 6698 on the Protection of Personal Data (“KVKK”).

• Data Controller

The Data Controller is Gökkılıç Law Office / Attorney at Law Ekin Gökkılıç with its registered address located at Levent Mahallesi, Yapı Kredi Plaza C Blok Kat 17 Beşiktaş – Istanbul.

• Collection, Processing and Purposes of Processing

Gökkılıç provides legal consultancy and attorney services in accordance with the Attorneys’ Code. In this context, Gökkılıç processes personal data for the purposes of providing accurate and complete legal consultancy and attorney services, fulfilling legal obligations primarily under the Attorneys’ Code, executing contracts, establishing, exercising, and protecting the legal rights of Gökkılıç and its clients, following up on legal cases, conducting relevant business processes, providing legal information, and determining and implementing business strategies.

Personal data is processed in Gökkılıç’s online archive, in hardcopy/printed folders with limited access and within the email system, either by automatic or non-automatic means, in a manner appropriate to the nature of the personal data and the purpose of processing. The purpose of processing of personal data is limited to those described above and under Articles 5 and 6 of the KVKK.  Personal data is stored in compliance with legal retention periods.

• Types of Personal Data Processed

Types of personal data processed by Gökkılıç are identity (name, surname, national ID number, passport), contact (phone number, address, email), bank account details, identity information of family and relatives, educational background, and personal data related to estate/assets of individuals.

• Methods Utilized for Collecting Personal Data and Legal Basis

Gökkılıç collects personal data, in writing or verbally, during provision of attorney and legal consultancy services, in meetings or telephone conversations, via email and through documents conveyed to it in printed or digital form using the automated or non-automated methods as specified in KVKK.

• Transfer of Personal Data

Gökkılıç does not disclose or transfer personal data to third parties except in cases necessary for the execution of legal consultancy services or when requested by state authorities, governmental administrations or institutions or authorized court pursuant to the rights and obligations stated under relevant legislation and/or the Attorney’s Code. In this respect, personal data may be transferred to third parties in compliance with Article 8 of KVKK and the purposes of personal data processing explained in paragraph 2 above in cases, which include but is not limited, administration of operations (human resources policies), financial operations (accounting and payments), initiation and conduct of legal proceedings (submission of necessary personal data to courts as required by procedural laws).

• Exercise of Legal Rights by Data Subjects

As personal data subjects, you are entitled to the following rights:

– To learn whether your personal data is being processed,

– If your personal data has been processed, to request information on the matter,

– To learn the purpose of the processing of your personal data and whether your personal date is used in accordance with such purpose,

– To be informed about third parties in the country or abroad to whom personal data has been transferred,

– To request the correction of personal data that is incomplete or incorrectly processed, and to request notification of the correction to third parties to whom personal data has been transferred,

– Notwithstanding the processing of personal date in accordance with KVKK and related legislation, to request deletion or destruction of personal data in case the reasons necessitating its processing cease to exist and to request notification of the action to the third parties to whom personal data has been transferred,

– To object to any outcome that is to their detriment in cases where personal data is processed solely by automatic means,

– To request compensation for damages in case of harm due to unlawful processing of personal data.

In accordance with Article 13, paragraph 1 of the KVKK, you may submit your requests related to the exercise of the aforementioned rights to the following address: Levent Mahallesi, Yapı Kredi Plaza C Block, Floor 18, Beşiktaş – Istanbul, along with the necessary identification information and your explanations regarding which rights under Article 11 of KVKK you wish to exercise, either in writing or by other methods determined by the Personal Data Protection Board.