Privacy Policy and Protection of Personal Data

Information notice under the KVKK  ·  Effective date: 7 October 2026

This English version is provided for convenience. In case of any discrepancy, the Turkish version shall prevail.

Introduction

This notice has been prepared pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, in respect of the personal data processed by Akbulut Avukatlık Ortaklığı (the “Partnership”) as data controller. It covers:

• visitors to our website,
• persons who contact us by email, telephone or in person,
• our clients, prospective clients and their representatives and employees,
• persons supplying goods or services to the Partnership and their representatives.

In this notice, “personal data” means any information relating to an identified or identifiable natural person.

Data controller

Akbulut Avukatlık Ortaklığı
Arduman Business Center, 2nd Floor, No: 27, Ord. Prof. Dr. Fahrettin Kerim Gökay Street, Altunizade, 34662 Üsküdar, Istanbul, Türkiye
Email: info@akbulutpartners.com

Categories of personal data processed

Depending on the nature of your relationship with us, the following data may be processed:

• Identity data: name, surname, title; where necessary, Turkish ID number and identity document details.
• Contact data: email address, telephone number, postal address.
• Correspondence data: the content and attachments of emails and other correspondence.
• Legal transaction data: files, documents and information provided to us in the course of legal services.
• Financial data: invoice, payment and bank details relating to attorney fees and expenses.
• Special categories of personal data: only to the extent required by the service and provided by you; for example, a medical report or criminal record to be submitted as evidence in proceedings.
• Technical data: IP addresses and access logs kept for security purposes by the provider hosting the website.

Our website does not use cookies, does not track visitors or perform analytics, and does not collect data through forms.

Method of collection

Your personal data is collected directly from you, from our clients, from the records of judicial and public authorities and from publicly available sources, by email, telephone, in-person meetings and physical or electronic documents, through automated or partly automated means.

Purposes and legal grounds of processing

• Providing legal services: conducting litigation, enforcement proceedings, mediation, advisory and contractual work; on the grounds that processing is necessary for the conclusion or performance of a contract (KVKK Art. 5(2)(c)) and for the establishment, exercise or protection of a right (Art. 5(2)(e)).
• Responding to enquiries: assessing questions and requests addressed to us; on the grounds that processing is necessary prior to entering into a contract (Art. 5(2)(c)) and for our legitimate interests (Art. 5(2)(f)).
• Complying with legal obligations: record-keeping, retention and notification obligations under attorneyship, tax and other applicable legislation; on the grounds of a legal obligation (Art. 5(2)(ç)) and express provision by law (Art. 5(2)(a)).
• Invoicing and payments: on the grounds of performance of a contract (Art. 5(2)(c)) and a legal obligation (Art. 5(2)(ç)).
• Information security: ensuring the secure operation of the website and our information systems; on the ground of our legitimate interests (Art. 5(2)(f)).
• Special categories of personal data: processed only under the conditions set out in Article 6 of the KVKK, in particular where necessary for the establishment, exercise or protection of a right.

Transfer of personal data

• Judicial and public authorities: courts, enforcement offices, mediation and arbitration institutions and competent public authorities.
• Third parties required by the service: court-appointed experts, notaries, translators and, where necessary, collaborating attorneys.
• Service providers: providers of email, cloud storage and website hosting services; providers of accounting and financial advisory services.
• Financial institutions: banks, for the execution of payments.

Transfers are limited to and proportionate with the purposes set out above.

Transfers abroad

The servers of the providers from whom we obtain email, cloud storage and website hosting services may be located outside Türkiye. Accordingly, when you contact us by email or visit our website, the relevant personal data may be processed on servers located abroad. Such transfers are carried out in accordance with the conditions set out in Article 9 of the KVKK. If you do not wish your personal data to be transferred abroad, you may contact our office in person or by post.

Retention period

Your personal data is retained for as long as required by the purpose of processing, and until the end of the retention periods prescribed by applicable legislation and the limitation periods relevant to potential disputes. Upon expiry of these periods, the data is erased, destroyed or anonymised.

Data security

Appropriate technical and organisational measures are taken to prevent the unlawful processing of and unlawful access to personal data and to ensure its safekeeping. Our duty of professional secrecy under the Turkish Attorneyship Law forms the basis of these measures.

Your rights

Under Article 11 of the KVKK, you have the right to:

1. (a) learn whether your personal data is processed,
2. (b) request information if it has been processed,
3. (c) learn the purpose of processing and whether it is used in accordance with that purpose,
4. (d) know the third parties to whom it is transferred in Türkiye or abroad,
5. (e) request rectification if it is incomplete or inaccurate,
6. (f) request erasure or destruction under the conditions set out in Article 7 of the KVKK,
7. (g) request that the operations under (e) and (f) be notified to third parties to whom the data has been transferred,
8. (h) object to a result to your detriment arising from analysis exclusively by automated systems,
9. (i) claim compensation for damages arising from unlawful processing.

The exercise of these rights is assessed without prejudice to our duty of professional secrecy under the Turkish Attorneyship Law and the rights of our clients.

Applications

You may submit your requests in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing to the address above, or via registered electronic mail (KEP), secure electronic signature, mobile signature, or from an email address previously notified to us and registered in our systems, to info@akbulutpartners.com. Applications will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request; where the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged.

Other matters

Other websites. This notice applies only to akbulutpartners.com. We are not responsible for the privacy practices of third-party websites linked from our website; we recommend that you review their own notices.

Changes. This notice may be updated in line with changes in legislation and our practices. The current version is always published on this page, with its effective date stated at the top.

Contact us

Akbulut Avukatlık Ortaklığı (Akbulut Attorney Partnership)
Arduman Business Center, 2nd Floor
No: 27, Ord. Prof. Dr. Fahrettin Kerim Gökay Street, Altunizade
34662 Üsküdar, Istanbul, Türkiye
Email: info@akbulutpartners.com