Notice on the Protection of Personal Data

This English text is a translation provided for information purposes. In the event of any discrepancy between the translation and the Turkish text, the Turkish text shall prevail.

Introduction

This notice has been prepared pursuant to Article 10 of 6698 sayılı Kişisel Verilerin Korunması Kanunu (Law No. 6698 on the Protection of Personal Data, "KVKK"; the "Law") and Aydınlatma Yükümlülüğünün Yerine Getirilmesinde Uyulacak Usul ve Esaslar Hakkında Tebliğ (Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform), in order to inform persons who visit the website ozenlegal.com.tr (the "Site") and who contact the office through the contact form on the Site.

1.Data Controller

Your personal data are processed by Attorney Leo İbrahim ÖZEN (Özen Legal) in the capacity of data controller.

• Address: Altındağ Mah. 168. Sok. No: 11/5 Muratpaşa / ANTALYA
• Antalya Bar Association · Registration No: 5251

2.Personal Data Processed

If you complete the contact form, the following data are processed:

• Identity information: first name, surname
• Contact information: e-mail address, telephone number
• Request information: the subject of the message and the information you share of your own accord in the content of the message
• Transaction security information: the date and time at which the form was submitted, and the IP address

We kindly ask you not to enter in the message field your special categories of personal data, such as data concerning health, criminal convictions and security measures, or the personal data of third parties. Where necessary, such information is obtained separately, in a face-to-face meeting and in accordance with the Law.

3.Purposes of Processing Personal Data

Your personal data are processed solely for the following purposes:

• Assessing and replying to the message you send through the contact form,
• Contacting you and arranging an appointment in line with your request,
• Carrying out a preliminary assessment concerning the legal service you request,
• Ensuring the security of the Site and of the communication channels,
• Fulfilling legal obligations and providing information to the competent authorities as required by legislation.

4.Method of Collection and Legal Grounds

Your personal data are collected electronically and by partly automated means when you complete and submit the contact form on the Site. Your data are processed on the basis of the following legal grounds set out in Article 5 of the Law:

• Processing of personal data belonging to the parties to a contract being necessary, provided that it is directly related to the establishment or performance of that contract (Art. 5/2-c): assessing your request for legal services and arranging a meeting,
• Processing being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f): replying to messages and ensuring the security of the Site,
• Processing being mandatory for the data controller to fulfil its legal obligation (Art. 5/2-ç): obligations arising from legislation,
• Processing being mandatory for the establishment, exercise or protection of a right (Art. 5/2-e): evidence in possible disputes.

Data collected through the contact form are not processed on the basis of your explicit consent; the checkbox on the form indicates only that you have read this notice.

5.Transfer of Personal Data

Limited to the purposes stated above and in accordance with Articles 8 and 9 of the Law, your personal data may be transferred to:

• the information technology service providers engaged for the hosting of the Site and the provision of e-mail services,
• the competent public institutions and organisations and the judicial authorities, where so requested as required by legislation.

Apart from these, your data are not shared with third parties and are not used for commercial purposes. The attorney's duty of confidentiality is reserved.

6.Retention Period

Personal data submitted through the contact form are retained for the period required to conclude your request and, in any event, for no longer than [retention period]. If your request develops into an attorney–client relationship, your data are kept for the retention and limitation periods prescribed by the relevant legislation. At the end of the period, your data are erased, destroyed or anonymised.

7.Your Rights under Article 11 of the Law

By applying to the data controller, you have the right, in relation to yourself, to:

• learn whether your personal data are processed,
• request information on the processing if your personal data have been processed,
• learn the purpose of the processing of your personal data and whether they are used in accordance with that purpose,
• know the third parties, in Türkiye or abroad, to whom your personal data are transferred,
• request the rectification of your personal data if they have been processed incompletely or inaccurately,
• request the erasure or destruction of your personal data under the conditions laid down in Article 7 of the Law,
• request that the rectification, erasure and destruction operations be notified to the third parties to whom your personal data have been transferred,
• object to any result to your detriment arising from the analysis of the processed data exclusively by automated systems,
• claim compensation for the damage you suffer as a result of the unlawful processing of your personal data.

8.Method of Application

You may submit your requests concerning your rights, in accordance with Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ (Communiqué on the Procedures and Principles of Application to the Data Controller):

• in writing and signed, together with documents evidencing your identity, by hand or by post to the address "Altındağ Mah. 168. Sok. No: 11/5 Muratpaşa / ANTALYA",
• by sending an e-mail to [e-mail address] using a secure electronic signature or a mobile signature, or from the e-mail address that you have previously notified to the office and that is held in its records.

Your application must contain your first name and surname, your signature if the application is in writing, your Republic of Türkiye identity number (for foreign nationals: nationality and passport or identity number), your residential or business address for service of notices, your e-mail address for notifications if any, your telephone number and the subject of your request.

Your application will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. If the operation entails an additional cost, the fee set out in the tariff determined by Kişisel Verileri Koruma Kurulu (the Personal Data Protection Board) may be charged. If your application is rejected, if you find the reply insufficient or if no reply is given within the time limit, you may lodge a complaint with the Personal Data Protection Board pursuant to Article 14 of the Law.

9.Amendments

This notice may be updated in line with changes in legislation and in data processing activities. The current text is published on the Site.