KVKK Disclosure
Last updated: October 3, 2025
Personal Data Protection and Processing Disclosure
In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), this disclosure explains how we process your personal data.
1. Data Controller
Data Controller: Oğuz Sami Sarıkaya - Attorney at Law
As the data controller, we are responsible for determining the purposes and means of processing your personal data.
2. Personal Data We Collect
We may collect the following categories of personal data:
- Identity Information: Name, surname, Turkish ID number
- Contact Information: Address, email, phone number
- Legal Information: Case details, legal documents, correspondence
- Financial Information: Payment information, invoicing details
- Technical Data: IP address, browser information, visit logs
3. Purposes of Data Processing
Your personal data is processed for the following purposes:
- Providing legal services and consultancy
- Fulfilling contractual obligations
- Complying with legal and regulatory requirements
- Maintaining client relationships and communication
- Managing appointments and schedules
- Processing payments and issuing invoices
- Improving our services and website
4. Legal Basis for Processing
We process your personal data based on:
- Your explicit consent
- Necessity for the performance of a contract
- Compliance with legal obligations
- Our legitimate interests
5. Data Sharing and Transfer
Your personal data may be shared with:
- Courts, prosecution offices, and other legal authorities
- Bar associations and regulatory bodies
- Expert witnesses and consultants (when necessary for your case)
- Service providers (IT, payment processing, etc.)
- Opposing parties and their legal representatives (as required by law)
6. Data Retention
Your personal data is retained for the period required by:
- Turkish Bar Association regulations (minimum 10 years for case files)
- Tax legislation (10 years for financial records)
- KVKK and other applicable laws
7. Your Rights Under KVKK
You have the right to:
- Learn whether your personal data is being processed
- Request information about the processing if data is processed
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom data is transferred
- Request correction of incomplete or inaccurate data
- Request deletion or destruction of data under certain conditions
- Request notification of corrections, deletions, or destructions to third parties
- Object to negative results arising from automated processing
- Claim compensation for damages arising from unlawful processing
8. Exercising Your Rights
To exercise your rights, you may submit a written application:
- In person to our office
- By registered mail
- Via email with a secure electronic signature
We will respond to your application within 30 days, free of charge.
9. Data Security
We implement technical and administrative measures to protect your personal data, including:
- Encryption of sensitive data
- Access controls and authentication
- Regular security audits
- Employee training on data protection
- Secure data storage and backup systems
10. Contact
For questions about this disclosure or to exercise your rights, please contact us through the information provided on our website.