IŞIK ATTORNEYS - Privacy Notice on the Protection of Personal Data

Data Controller (6698 Sayılı Kişisel Verileri Koruma Kanunu)

Your personal data is processed by IŞIK ATTORNEYS in the capacity of data controller, within the scope outlined below.

Purposes of Processing Personal Data

At IŞIK ATTORNEYS, your personal data is processed for the following purposes:

  • Provision of legal consultancy and representation services,
  • Fulfillment of international and domestic legal obligations,
  • Management of litigation and enforcement proceedings,
  • Administration of contractual processes,
  • Offering solutions in compliance with legislation in relevant jurisdictions,
  • Execution of internal and external office operations,
  • Effective management of communication processes,
  • Evaluation of job applications and execution of human resources processes,
  • Improvement of user experience on websites and digital platforms,
  • Management of security processes (e.g., CCTV recordings),
  • Sharing of information and management of consultancy and representation services for domestic and international clients.

Personal data is processed in accordance with the conditions set out in Articles 5 and 6 of the KVKK.

Categories of Personal Data Processed

Depending on the nature of the service relationship, the following categories of personal data may be processed:

  • Identity Information (Name, surname, nationality, passport/Turkish ID details),
  • Contact Information (Phone number, email, address),
  • Financial Information (Bank details, invoice/payment records),
  • Professional and Educational Background,
  • Legal Transaction Information (Case files, correspondence, documents),
  • Visual and Audio Data (CCTV footage within the office),
  • Special categories of personal data (e.g., court decisions, health data only processed with explicit consent).

Methods of Collecting Personal Data

Your personal data may be collected through:

  • In person meetings,
  • Documents and forms submitted electronically,
  • Website, email, and other digital channels,
  • Contracts, forms, documents received from judicial or official authorities,
  • Information obtained from domestic and international partners,

using automated or non automated means.

Transfer of Personal Data

Your personal data may be transferred to the following recipients, limited to the purposes stated above and in compliance with Articles 8 and 9 of the KVKK:

  • Domestic and international partners and consultants,
  • Courts, enforcement offices, notaries, and other official authorities,
  • Financial advisors, banks, and financial institutions,
  • IT service providers with appropriate security measures in place,
  • International clients and partner law firms.

Transfer of Personal Data Abroad

Given the international nature of our operations, your personal data may be transferred abroad, either with your explicit consent or under the necessary security precautions and in compliance with applicable legal provisions, to the following entities:

  • Our international law firm partners,
  • Our clients abroad,
  • Technology infrastructure providers (e.g., email servers, cloud service providers).

Retention Period of Personal Data

Your personal data is retained for the period required by KVKK and other relevant legislation, or for the duration necessary to fulfill the purposes of processing. Upon expiration of the retention period, your personal data will be destroyed.

Rights of the Data Subject

Pursuant to Article 11 of the KVKK, you have the right to:

  • Learn whether your personal data is being processed,
  • Request information if your data has been processed,
  • Learn the purpose of processing and whether it is being used accordingly,
  • Know the third parties to whom your personal data is transferred domestically or abroad,
  • Request correction of incomplete or inaccurate data,
  • Request deletion or destruction of your personal data within the scope of KVKK,
  • Object to any result arising against you through the exclusive analysis of your data by automated systems,
  • Request compensation in case of damage due to unlawful processing.

How to Apply

To exercise the rights mentioned above, you may contact us through the following channels:

‘’ Trust our expert team to manage your complex legal issues with accuracy and confidence ‘’

en