This privacy notice is intended to inform visitors of the website regarding the processing, storage, and transfer of visitors’ personal data, within the framework of the activities originates from the Personal Data Protection Law No. 6698 (“PDPL”) and related legislation.

Detailed information regarding the processing personal data of associates, interns, and visitors of Orak Çelikboya Law Firm made available to them at our office.

Detailed information regarding the processing personal data of other person groups in categories are stated below.

The Scope of Data Processing:

Possible Employees/Associates

Personal data of employee candidates are being processed due to legitimate interests pursued by the data controller for the purposes of carrying out applicants’ selection, placement, and application processes, planning human resources processes, conducting a search about reference, provided that this processing shall not violate the fundamental rights and freedoms of the data subject as per Article 5 paragraph 2/f of PDPL. For more detailed information on the processing of personal data of our employee candidates, please click here.

Applicants for Internship

Personal data of internship candidates are being processed due to legitimate interests pursued by the data controller for the purposes of carrying out applicants’ selection, placement, and application processes, planning human resources processes, conducting a search about reference, provided that this processing shall not violate the fundamental rights and freedoms of the data subject as per Article 5 paragraph 2/f of PDPL. For more detailed information on the processing of personal data of applicants for internships, please click here.

Clients

In cases where processing data is necessary, personal data of our clients and their representatives, officers and/or employees are being processed for the purposes of providing legal consultancy services by establishing a representation relationship with our clients, following up the legal process, concluding a legal service / engagement contract and performing undertakings from such contracts, managing our business relations with our clients and communicating with them, provided that it is related to the establishment or performance of the contract as regulated in Article 5 paragraph 2/c of PDPL.

Furthermore, upon request in accordance with the relevant legislation, personal data of our clients are being processed for the purposes of giving information to authorized persons, institutions and organizations and execution of legal affairs, within the scope of processing of personal data necessary for the establishment, exercise, or protection of a right as per Article 5 paragraph 2/e of PDPL.

Personal data of our clients, and the representatives, officers and employees of our corporate clients are being processed for the purposes of keeping them informed about legal developments by communicating with them, within the scope of processing data necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject as foreseen under Article 5 paragraph 2/f of PDPL.

Client Candidates

Personal data of the representatives, officers and employees of corporate client candidates, and that of real person client candidates requesting an offer to receive services from us, are being processed for the purposes of conducting relevant negotiations and communicating within the scope of the offer, within the scope of processing data necessary, provided that it is directly related to the establishment or performance of the contract in Article 5 paragraph 2/c of PDPL.

Business Partners / Suppliers

Personal data of our business partners/suppliers and the representatives, officers and employees of our corporate business partners or suppliers are being processed for the purposes of conducting processes of goods/service procurement and contract processes within this scope and conducting finance and accounting activities, within the scope of processing data necessary, provided that it is directly related to the establishment or performance of the contract in Article 5 paragraph 2/c of PDPL.

Website Visitors

Personal data of our website visitors are being processed for the purposes of conducting processes of information security and carrying out activities in accordance with the legislation, within the scope of processing of personal data necessary for the data controller to fulfill its legal obligation in the second paragraph of Article 5 of PDPL.

You can find the detailed information about the cookies used on our website in our Cookie Policy.

What are the Methods of Collecting Your Personal Data?

Your personal data mentioned above in categories, are being collected electronically and physically through contracts, resume, e-mail, invoice, information systems, business card, references and the documents declared or submitted physically, electronically, verbally and/or in writing by Data Subject.

Do We Transfer Your Personal Data to a Third Party?

Your personal data may be transferred to:

• Authorized Public Institutions and Organizations, for the purposes of carrying out activities in accordance with the legislation, monitoring and execution of legal affairs, giving information to the authorized persons, institutions and organizations, within the scope of processing of personal data necessary for the data controller to fulfill its legal obligation,
• Cloud Service Providers located abroad for the purposes of conducting occupational activities, providing document management, storage and archive activities, ensuring information security, within the scope of your explicit consent,
• Third Party Companies from which we receive service / support / consultancy, for the purposes of executing service procurement processes and contract processes within this scope, within the scope of that it is directly related to the establishment or performance of the contract.

What Are Your Rights With Respect to Your Personal Data?

Regarding your personal data, under the PDPL you have the right:

• To learn whether your personal data were processed or not,
• Should your personal data have been processed, to request information about it,
• To learn the purpose of processing your personal data and whether such data was used in compliance with the purpose,
• To know the third parties to whom your personal data were transferred in Türkiye or abroad,
• To request the rectification of the incomplete or inaccurate data, if any,
• To request the erasure or destruction of your personal data under the conditions referred to in the PDPL,
• If you demand for the correction of missing or incorrect data and deletion or destruction of your personal data, to request reporting of the operations carried out pursuant to these situations to the third parties to whom your personal data have been transferred,
• To request compensation for the damage arising from the unlawful processing of your personal data.

 How Can You Exercise Your Rights?

If you wish you can deliver your personal data applications and requests through the Data Subject Application Form,

• By directly applying to Orak Çelikboya Law Firm in person with a valid identity card,
• By sending the original signed form to ‘Orak Çelikboya, Plaza Cubes- İçerenköy, Umut Sk. No:10 D:12- Kat 16, 34752 Ataşehir/İstanbul‘ address together with ID photocopy,
• By sending the e-signed form to [email protected] together with scanned copy of the ID.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the name, surname, signature if the application is in written, Turkish Republic ID number (passport number in case the applicant is foreigner), address of the place of residence which is base for notification or workplace/business address, if available electronic mail address base for notification, telephone number and fax number, and information about the request must be provided in the application.

The data subject should express in a clear and understandable way what is requested in the application, which of the above-mentioned rights will the data subject exercise, together with explanations. Information and documents related to the application should be attached.

Although the subject of the request should be related to the applicant in person, if the person is acting on behalf of someone else, the applicant must be specifically authorized in this matter and this authorization must be documented (special power of attorney). In addition, the application must include the identity and address information and the identity documents must be attached to the application. Requests made by unauthorized third parties on behalf of someone else will be disregarded.

How Long Will It Take to Answer Your Requests Regarding the Processing of Your Personal Data?

Your demands for rights on your personal data are evaluated and answered within 30 days from the date we receive it. In case your application is evaluated negatively, the reasons for rejection are sent to the address you specified in the application particularly by e-mail or mail, or by one of the means chosen in the Data Subject Application Form.