Privacy Statement

This privacy statement is prepared pursuant to Article 10 of the Personal Data Protection Law No. 6698 (the “PDPL”) and its secondary legislation to inform the concerned persons about how and for what purposes the personal data of the persons listed below are processed by Çakmak Attorney Partnership located at the address Levazım Mah. Koru Sok. No: 2 Zorlu Center TD Lobisi T3 Katı D:356 Beşiktaş (“Çakmak”):  

Online Visitors: Persons who visit our website and our other online pages (e.g., our social media accounts);  

Clients: Our existing clients, potential clients, and their contact persons and officials.  

Suppliers: Our suppliers from whom we receive goods and services and our other business partners, as well as their contact persons and officials;  

Office Visitors: Persons contacted for the visits to our office (e.g., university visits) and other events, and persons participating in these events.   

The real persons listed above will hereinafter be referred to as “Person(s).”   

    1.DATA CONTROLLER   

Personal data of the Persons may be processed, recorded, retained, classified, updated and transferred to third parties by Çakmak, in its capacity as the data controller, in accordance with and limited to the purposes outlined below and, in a manner, consistent with the law and principles of honesty and fairness.  

    2.PERSONAL DATA SUBJECT TO PROCESSING, PURPOSE AND LEGAL GROUNDS FOR THE PROCESING OF PERSONAL DATA   

The following personal data of the Persons are processed by Çakmak in accordance with the basic principles stipulated in the PDPL:  

• Identity data (name-surname, place of birth, date of birth, Turkish ID number, (foreign) ID number, identity card serial number, passport number, marital status information)    
• Contact data (residence address, (if any) foreign residence address, e-mail, registered electronic mail address, telephone number) 
• Legal proceedings data (criminal records, information in correspondence with judicial authorities, lawsuit, and execution file information)  
• Physical location data (security camera recordings)  
• Transaction security data (IP address information, website login-exit information, username and password information, log records)   
• Financial data (balance sheet information, financial performance information, credit and risk information, asset information, bank, and account information)  
• Data on visual and audio recordings (photographs, videos)  

For each group of individuals, the types of personal data processed, the purposes for which they are processed, and the third parties to whom they are transferred are explained below. The said personal data is stored in physical or electronic environments for appropriate periods according to the type of data, for the purpose of processing.   

    2.1 Online Visitors  

Data related to transaction security are processed for the purpose of executing information security processes, enhancing the user experience during visits to our website, conducting analysis studies, executing storage and archive activities, ensuring the security of our operations, and providing information to authorized individuals, institutions, and organizations based on the legal ground that the processing of data is mandatory for the legitimate interests of Çakmak, provided that it does not harm the fundamental rights and freedoms of the visitors.  

If you fill in the contact form on our website, by providing your name, surname, and email address and clicking the “Send” button, you consent to the processing of your foregoing personal data for the purpose of conducting communication activities, based on your explicit consent.  

Additionally, personal data is collected and processed through the use of cookies on our website. For more information on this matter, you can review our Cookie Policy located in the bottom left corner of our website.  

    2.2 Clients   

Identity data, contact data, legal transaction data, physical location data, financial data, and data related to visual and auditory recordings are processed for the provision of legal consultancy and related ancillary services, ensuring compliance of activities with regulations, execution of financial and accounting tasks, execution of appointment processes, tracking and execution of legal affairs, execution of communication activities, execution and supervision of business activities, execution of business development and client communication processes, receiving and evaluating suggestions for improving business processes, organization and event management, ensuring business continuity, execution of procurement processes for goods and services, execution of storage and archive activities, execution of contract processes, and provision of information to authorized individuals, institutions, and organizations on the legal grounds that the processing of data is mandatory for Çakmak’s compliance with its legal obligations, the processing of personal data belonging to the parties of a contract is necessary provided that it directly relates to the establishment or performance of a contract, data has been made public by the data subject and the processing of data is mandatory for the legitimate interests of Çakmak, provided that it does not harm the fundamental rights and freedoms of the data subject.  

    3.3 Suppliers  

Identity data, contact data, physical location data and financial data are processed for the   
execution of financial and accounting tasks, execution of communication activities, provision of physical space security, ensuring compliance with regulations in activities, ensuring business continuity, execution and supervision of business activities, execution of contract processes, execution of logistics and supply activities, execution of procurement processes for goods/services, organization and event management, execution of risk management processes, execution of storage and archive activities, execution of social responsibility and civil society activities, provision of operation security, provision of information to authorized individuals, institutions, and organizations, and execution of management activities based on the legal grounds that the processing of data is mandatory for Çakmak’s compliance with its legal obligations, the processing of personal data belonging to the parties of a contract is necessary provided that it directly relates to the establishment or performance of a contract, data has been made public by the data subject and the processing of data is mandatory for the legitimate interests of Çakmak, provided that it does not harm the fundamental rights and freedoms of the data subject.  

    2.4 Office Visitors   

Identity data, contact data, physical location data, and visual and auditory recordings are processed for the management of emergency processes, provision of physical space security, execution of communication activities, organization and event management, execution of storage and archive activities, provision of operation security, and providing information to authorized individuals, institutions, and organizations based on the legal grounds that the processing of data is mandatory for Çakmak’s compliance with its legal obligations, data has been made public by the data subject and the processing of data is mandatory for the legitimate interests of Çakmak, provided that it does not harm the fundamental rights and freedoms of the data subject.    

3. TRANSFER OF PERSONAL DATA 

In accordance with Article 8 and Article 9 of PDPL and in line with the purposes listed above, personal data of the Persons may be transferred in and outside Türkiye to Çakmak Attorney Partnership located at the address Levazım Mah. Koru Sok. No: 2 Zorlu Center TD Lobisi T3 Katı D:356 Beşiktaş, our business partners, external service providers, consultants, banks for the fulfillment of financial transactions, to relevant organizational companies for event planning and authorized public institutions and organizations.  

    4.METHOD OF COLLECTING PERSONAL DATA   

Personal data are collected and processed automatically or manually from the respective Person himself/ herself, third parties, public platforms (e.g., trade registry or chamber of commerce records) or the press by electronic methods (through cookies on our website, via LinkedIn or by sending e-mails to Çakmak) and non-electronic methods.    

    5.YOUR RIGHTS UNDER ARTICLE 11 OF THE PDPL  

The Persons can exercise below listed rights, which are stipulated under Article 11 of the PDPL, by contacting Çakmak through the communication channel provided in section 7 below and through the method indicated thereunder:  

• to learn whether their personal data are processed by Çakmak or not,  
• to request information if their personal data are processed,  
• to learn the purpose of processing their personal data and whether this data is used for intended purpose,  
• to know the third parties to whom their personal data is transferred domestically or abroad,  
• to request correction if the personal data is incomplete or inaccurately processed,  
• to request deletion or destruction of their personal data pursuant to the conditions stipulated under Article 7 of the PDPL,  
• to request notification of the operations conducted as per subparagraphs (d) and (e) of Article 11 of the PDPL to third parties to whom personal data has been transferred,   
• if the analysis of personal data solely through automated systems results in an adverse outcome, to object to this,  
• to request indemnification for the damage incurred, if any, due to unlawful processing of their personal data.  
  
  

6. REQUEST TO UPDATE INFORMATION 

It is of significance that the personal data processed by Çakmak are accurate and up to date. Therefore, should there be any change in the Persons’s personal data, we kindly request such Person to inform the administrative unit of Çakmak via the communication channel provided below.  

7. CONTACT 

The Persons may forward their questions, requests and complaints regarding the processing of their personal data to Çakmak by sending an e-mail to [email protected] with a petition prepared in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.