KVKK Disclosure

Last updated: October 3, 2025

Personal Data Protection and Processing Disclosure

In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), this disclosure explains how we process your personal data.

1. Data Controller

Data Controller: Oğuz Sami Sarıkaya - Attorney at Law

As the data controller, we are responsible for determining the purposes and means of processing your personal data.

2. Personal Data We Collect

We may collect the following categories of personal data:

  • Identity Information: Name, surname, Turkish ID number
  • Contact Information: Address, email, phone number
  • Legal Information: Case details, legal documents, correspondence
  • Financial Information: Payment information, invoicing details
  • Technical Data: IP address, browser information, visit logs

3. Purposes of Data Processing

Your personal data is processed for the following purposes:

  • Providing legal services and consultancy
  • Fulfilling contractual obligations
  • Complying with legal and regulatory requirements
  • Maintaining client relationships and communication
  • Managing appointments and schedules
  • Processing payments and issuing invoices
  • Improving our services and website

4. Legal Basis for Processing

We process your personal data based on:

  • Your explicit consent
  • Necessity for the performance of a contract
  • Compliance with legal obligations
  • Our legitimate interests

5. Data Sharing and Transfer

Your personal data may be shared with:

  • Courts, prosecution offices, and other legal authorities
  • Bar associations and regulatory bodies
  • Expert witnesses and consultants (when necessary for your case)
  • Service providers (IT, payment processing, etc.)
  • Opposing parties and their legal representatives (as required by law)

6. Data Retention

Your personal data is retained for the period required by:

  • Turkish Bar Association regulations (minimum 10 years for case files)
  • Tax legislation (10 years for financial records)
  • KVKK and other applicable laws

7. Your Rights Under KVKK

You have the right to:

  • Learn whether your personal data is being processed
  • Request information about the processing if data is processed
  • Learn the purpose of processing and whether it is used accordingly
  • Know the third parties to whom data is transferred
  • Request correction of incomplete or inaccurate data
  • Request deletion or destruction of data under certain conditions
  • Request notification of corrections, deletions, or destructions to third parties
  • Object to negative results arising from automated processing
  • Claim compensation for damages arising from unlawful processing

8. Exercising Your Rights

To exercise your rights, you may submit a written application:

  • In person to our office
  • By registered mail
  • Via email with a secure electronic signature

We will respond to your application within 30 days, free of charge.

9. Data Security

We implement technical and administrative measures to protect your personal data, including:

  • Encryption of sensitive data
  • Access controls and authentication
  • Regular security audits
  • Employee training on data protection
  • Secure data storage and backup systems

10. Contact

For questions about this disclosure or to exercise your rights, please contact us through the information provided on our website.