Privacy Notice on the Protection of Personal Data

As Kumkumoğlu Ergün Cin Özdoğan Avukatlık Ortaklığı (“KECO”), we have drawn up this privacy notice to inform you about the processing, storage, and transfer of your personal data within the framework of our activities, under the Personal Data Protection Law numbered 6698 (“PDPL”) and related legislation and legal regulations.

Detailed information regarding the processing of personal data of our employees, interns, and visitors has been published at KECO in a way that they can access. You can read the detailed information regarding the processing of personal data of other person groups in the categories below.

Which Personal Data are Being Processed and What are The Purposes of Processing Your Personal Data?

Employee Candidates

The personal data of employee candidates have been processed in accordance with Article 5(2)(f) of the PDPL, “Processing data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject”, for the purposes of carrying out selection and placement processes of employee candidates, carrying out application process of employee candidates, planning human resources processes, making a search about reference. For detailed information on the processing of personal data of our employee candidates, please see.

Intern Candidates

The personal data of intern candidates have been processed in accordance with Article 5(2)(f) of the PDPL, “Processing data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject”, for the purposes of carrying out selection and placement processes of intern candidates, carrying out application process of intern candidates, planning human resources processes, making a search about reference. For detailed information on the processing of personal data of our intern candidates, see.

Clients

The personal data of our clients and representatives/officers/employees of our clients have been processed in accordance with Article 5(2)(c) of the PDPL, “Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract”, for the purposes of providing legal consultancy services by power of attorney, following up the litigation processes, concluding an attorney service contract and performing the works within this scope, managing our business relations with our clients and communicating with them.

Besides, if requested in accordance with the relevant legislation, the personal data of our clients have been processed per Article 5(2)(e) of the PDPL “Processing of personal data is necessary for the establishment, exercise, or protection of a right”, for the purposes of giving information to authorized persons, institutions, and organizations and execution of legal affairs.

The personal data of our clients and our corporate clients’ representatives/officers/employees have been processed in accordance with Article 5(2)(f) of the PDPL, “Processing data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject”, for the purposes of informing them about legal developments and innovations by communicating with them.

Client Candidates

The personal data of our client candidates and our corporate client candidates’ representatives/officers/employees requesting an offer to receive services from us have been processed in accordance with Article 5(2)(c) of the PDPL, “Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract”, for the purposes of conducting relevant negotiations and communicating with them.

Business Partners / Suppliers

The personal data of our business partners/suppliers and our corporate business partners or our suppliers’ representatives/officers/employees have been processed in accordance with Article 5(2)(c) of the PDPL, “Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract”, for the purposes of conducting processes of goods/service procurement and contract processes, and carrying out financial and accounting affairs.

Website Visitors

The personal data of our website visitors have been processed in accordance with Article 5(2)(ç) of the PDPL, “Processing of personal data is necessary for the data controller to fulfill its legal obligation”, for the purposes of conducting processes of information security and carrying out activities under the legislation.

You can find the detailed information about the cookies used on our website in our Cookie Policy.

The personal data of our website visitors who subscribe to our newsletter have been processed in accordance with Article 5(1) of the PDPL, “explicit consent”, for the purposes of informing them about legal developments and innovations.

What are the Methods of Collecting Your Personal Data?

The personal data mentioned above in categories have been collected electronically and physically through contracts, resumes, e-mail, invoices, information systems, business cards, references, and the documents declared verbally or in writing by Data Subject.

Do We Transfer Your Personal Data to a Third Party?

Your personal data may be transferred to

Authorized Public Institutions and Organizations for the purposes of carrying out activities under the legislation, follow-up and execution of legal affairs, giving information to the authorized persons, institutions, and organizations, in accordance with Article 5(2)(ç), “Processing of personal data is necessary for the data controller to fulfill its legal obligation”,
Cloud Service Providers located abroad for the purposes of carrying out information and document management, storage and achieving activities, and information security, and sending newsletters within the scope of your explicit consent under Article 9,
Third Party Companies from which we receive service/support/consultancy, for the purposes of executing service procurement processes and performing contracts within this scope, in accordance with Article 5(2)(c) “Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract”.

What Are Your Rights With respect to Your Personal Data?

Regarding your personal data you have the rights;

To learn whether your personal data were processed or not,
If your personal data have been processed, to request information about it,
To learn the purpose of processing your personal data and whether these data was used in compliance with the purpose,.
To know the third parties to whom your personal data were transferred in country or abroad,
To request the rectification of the incomplete or inaccurate data, if any,
To request the erasure or destruction of your personal data under the conditions referred to in the PDPL,
If you demand for the correction of missing or incorrect data and deletion or destruction of your personal data, to request reporting of the operations carried out pursuant to these situations to the third parties to whom your personal data have been transferred,
To request compensation for the damage arising from the unlawful processing of your personal data.

How Can You Use Your Rights?

If you wish you can deliver your personal data applications and requests through the Data Subject Application Form,

By applying to KECO with a valid identity card directly,
By sending to ‘Levent , Levent Cad., Yeni Sülün Sk., No: 14/2, 34330 Beşiktaş/Istanbul” address together with wet signature and ID photocopy,
By sending via kvkk@kecolegal.com e-mail address belongs to KECO with the petition signed by secure e-signature or mobile signature.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the name, surname, signature if the application is in written, R.T. ID number (passport number in case the applicant is foreigner), address of the place of residence which is base for notification or workplace/business address, if available electronic mail address base for notification, telephone If you wish you can deliver your personal data applications and requests through the Data Subject Application Form;

By applying to KECO with a valid identity card directly,
By sending to ‘Levent Yeni Sülün Sok. No: 14/2 34330 Beşiktaş Istanbul” address together with wet signature and ID photocopy,
By sending via kvkk@kecolegal.com e-mail address belongs to KECO with the petition signed by secure e-signature or mobile signature.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, it is necessary to include in the application while the Data Subject delivers a personal data application and request: the name, surname, and signature -if the application is in writing-, R.T. ID number (passport number in case the applicant is a foreigner), address of the place of residence which is base for notification or workplace/business address, -if available- electronic mail address base for notification, telephone number.

The Data Subject should clearly and comprehensibly state the matter requested in the application to be made in order to exercise the above-mentioned rights and contain explanations regarding the right requested to be exercised. Relevant information and documents should be attached to the application.

Although the subject of the request should be related to the applicant in person, if the person is acting on behalf of someone else, the applicant should be specifically authorized in this matter and this authorization must be documented (special power of attorney). In addition, the application should include the ID number and address, and the identity documents should be attached to the application. Requests made by unauthorized third parties on behalf of someone else shall not be considered.

How Long Will It Take to Answer Your Requests Regarding the Processing of Your Personal Data?

Your demand for rights on your personal data is evaluated and replied within 30 days from the date we receive it. In case your application is evaluated negatively, the reasons for rejection are sent to the address you specified in the application particularly by e-mail or mail, or by one of the means chosen in the Data Subject Application Form.