Agreements

Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the data controller for personal data collected via the website https://celbekhukuk.com (the “Site”) is Celbek Law & Consultancy (the “Firm” or “Data Controller”). This notice is prepared to transparently inform visitors who fill out the contact form (the “Data Subject” or “User”) about the conditions under which their personal data is processed.

Only the personal data you voluntarily provide through the "Contact Form" is processed. This data includes:

Identity Data: Your name and surname.

Contact Data: Your email address and phone number.

Transaction Security Data: Your IP address and log records.

Request/Message Content: The content you write of your own will in the message box of the contact form.

Important Notice: The purpose of the contact form is solely to establish preliminary contact. Please do not share special categories of personal data (health data, criminal-conviction and security-measure data, biometric data, association/foundation/union membership, etc.) in the message content. Under the principle of proportionality, the Firm does not require such data at the contact stage.

Your personal data is processed in line with the principle of "specified, explicit and legitimate purposes" solely for the following:

a. Receiving and evaluating the legal advisory requests, questions or complaints you submit via the contact form,

b. Responding to you by email and carrying out communication activities,

c. Conducting pre-contractual discussion processes,

d. Fulfilling the Firm’s legal obligations and carrying out information-security processes.

Your personal data will under no circumstances be used for marketing, advertising, newsletters or profiling without your explicit consent.

Your personal data is processed based on the following legal grounds set out in Article 5/2 of the KVKK:

a. KVKK Art. 5/2-c: Processing being necessary, provided it is directly related to the conclusion or performance of a contract (conducting pre-contractual discussions upon your advisory request).

b. KVKK Art. 5/2-f: Processing being necessary for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject (responding to your requests and conducting our business processes).

This notice constitutes the fulfilment of an information obligation; where the above legal grounds exist, no separate "explicit consent" is required for communication activities.

As a rule, your personal data is not shared with third parties. However, on a limited basis, for carrying out communication activities and providing the technical infrastructure:

Domestic Transfer: It may be transferred to authorised public institutions and judicial authorities (under KVKK Art. 8/2-a) where required to resolve legal disputes or where a legal obligation arises.

Transfer Abroad: Because our Site infrastructure (Vercel, etc.) and email servers (Google Workspace, Microsoft 365, etc.) are hosted on cloud systems based abroad, the data you submit via the contact form is transferred to servers abroad — under KVKK Art. 9 — only where your explicit consent exists. Users who do not wish to consent to transfer abroad may contact us directly via our office phone instead of using the form. Receiving our services is not conditional on consenting to transfer abroad.

Your personal data is collected electronically by wholly or partly automated means, through your completion of the contact form on our Site and pressing the "Send" button.

The Firm takes all necessary technical and administrative measures under KVKK Art. 12 to prevent unlawful processing of, and unlawful access to, your personal data.

Internal authorisation matrices have been established; only authorised personnel can access your data.

Staff training has been completed and technical restrictions imposed to prevent inadvertent unauthorised disclosures during email transmission (CC/BCC errors, etc.).

Under our duty of confidentiality pursuant to the Attorneyship Law, all information you share is protected at the highest level within the framework of professional secrecy.

Your personal data is retained for as long as required by the purpose of processing. If an attorney-client relationship is not established as a result of the contact made via the form, the personal data you submitted will be automatically erased, destroyed or anonymised within at most 6 (six) months in accordance with our periodic destruction processes. Without prejudice to our statutory retention obligations, you may at any time exercise your "Right to Be Forgotten" and request the destruction of your data.

Under Article 11 of the KVKK, you may exercise the following rights by applying to the Data Controller:

a) To learn whether your personal data is processed,

b) To request information if it has been processed,

c) To learn the purpose of processing and whether it is used in accordance with that purpose,

d) To know the third parties to whom your data is transferred domestically or abroad,

e) To request correction of incomplete or inaccurate data,

f) To request erasure or destruction of your data within the conditions of KVKK Art. 7,

g) To request that operations under (e) and (f) be notified to third parties to whom the data was transferred,

h) To object to a result against you arising from analysis solely by automated systems,

i) To request compensation for damages arising from unlawful processing.

You may submit your requests regarding the exercise of the above rights to the Firm via the contact channels below, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller". Your requests will be concluded free of charge as soon as possible and within at most 30 (thirty) days, depending on their nature.

Data Controller: Celbek Law & Consultancy

Email: info@celbekhukuk.com

Address: Yeşilyurt Mahallesi, Sahilyolu Caddesi, No: 8, Bakırköy/İstanbul