Privacy Notice

At Tepretoğulları Law Firm (“Attorney Tolga Tepret”), we attach utmost importance to the security of your personal data. With this awareness, we place great emphasis on processing and storing all personal data provided to us in accordance with Law No. 6698 on the Protection of Personal Data (“KVK Law”).

1. Categories of Processed Personal Data

The categories of personal data and special categories of personal data processed by Tepretoğulları Law Firm are listed below, along with the relevant groups of data subjects:

• Identity (job applicant, employee, intern, shareholder/partner, client, potential client, supplier, visitor)
• Contact (job applicant, employee, intern, shareholder/partner, client, potential client, supplier)
• Personnel (employee)
• Legal Transactions (employee, intern, shareholder/partner, client, supplier)
• Physical Security (employee, intern, visitor)
• Operational Security (employee, intern, visitor)
• Risk Management (employee, intern, client, potential client, supplier, shareholder/partner)
• Finance (employee, intern, shareholder/partner, supplier, client)
• Professional Experience (employee, intern, job applicant, shareholder/partner)
• Health Information (employee)

2. Collection, Processing, and Purposes of Personal Data

From time to time, your personal data, including special categories of personal data, will be collected and used by Tepretoğulları Law Firm for purposes such as the recruitment process, management and administration of employment, the establishment of a legal representation relationship between you and Tepretoğulları Law Firm, and the fulfillment of the Firm’s obligations within the scope of this relationship. This also includes compliance with contractual obligations, legal obligations, and the execution of administrative and organizational processes.

3. Recipients of Processed Personal Data and the Purpose of Transfer

The personal data collected may be transferred by Tepretoğulları Law Firm to business partners, suppliers, service providers, legally authorized public institutions, and private individuals located domestically and/or abroad, for purposes such as the management and administration of employment, fulfillment of contractual and legal obligations, and execution of administrative and organizational processes, in accordance with the personal data processing conditions set out in Articles 8 and 9 of the KVKK Law. In addition, your personal data may be transferred to servers located within the country.

4. Methods of Personal Data Collection and Legal Basis

Your personal data is collected through all kinds of verbal, written, or electronic means. In line with the purposes stated above, your personal data may be processed and transferred for the following legal reasons: to enable Tepretoğulları Law Firm to fully and accurately fulfill its contractual and legal responsibilities, for the establishment, protection, or exercise of a right, and for the legitimate interests of Tepretoğulları Law Firm, provided that the fundamental rights and freedoms of the data subjects are not harmed. This processing and transfer are conducted within the framework of the personal data processing conditions and purposes set out in Articles 5 and 6 of the KVKK Law, and for the purposes specified in Sections (1) and (2) of this notice.

5. Data Security

Tepretoğulları Law Firm protects your personal data in full compliance with all reasonable technical and administrative security measures required by information security standards and procedures, ensuring an appropriate level of protection against potential risks.

6. Rights of the Data Subject under Article 11 of the KVKK Law

As data subjects, if you submit your requests regarding your rights to Tepretoğulları Law Firm in accordance with the legislation, the Firm will respond to your request free of charge within 30 days, depending on the nature of the request.

Within this scope, data subjects have the right to:

• Learn whether personal data is being processed,
• Request information if personal data has been processed,
• Learn the purpose of processing personal data and whether it is being used in accordance with its purpose,
• Know the third parties to whom personal data has been transferred, domestically or abroad,
• Request correction of personal data if it has been processed incompletely or inaccurately, and request that this correction be communicated to third parties to whom the data has been transferred,
• Request deletion or destruction of personal data if the reasons requiring its processing no longer exist, even if it has been processed in compliance with the KVKK Law and other relevant legislation, and request that this action be communicated to third parties to whom the data has been transferred,
• Object to outcomes arising against them as a result of the analysis of personal data exclusively through automated systems,
• Request compensation for any damages suffered due to unlawful processing of personal data.

To exercise your rights, you may submit a written notification to Atatürk Mah. Ekincioğlu Sok. No:25/1 Ataşehir/Istanbul or send an email to info@tepretogullari.com.