Information Notice under the Personal Data Protection Act
As Şükrü Köse Law Office, we show the utmost sensitivity to the security of your personal data. Your personal data is processed and kept in accordance with the Personal Data Protection Act no. 6698 (“KVKK”).
- Information in the capacity of data controller
As Şükrü Köse Law Office, whose detailed corporate information is published below, under the KVKK no. 6698 and in the capacity of Data Controller, your personal data will, within the framework explained on this page, be recorded, stored, updated, disclosed to / transferred to third parties in the cases permitted by legislation, classified and processed in the ways set out in the KVKK.
- How Your Personal Data May Be Processed
Under the KVKK no. 6698, the personal data you share with Şükrü Köse Law Office may be processed by us wholly or in part, automatically or, provided that it forms part of a data recording system, by non-automated means, by being obtained, recorded, stored, altered, rearranged — in short, by being subject to every kind of operation carried out on data. Under the KVKK, every kind of operation carried out on data is regarded as “the processing of personal data”.
- The Purposes and Legal Grounds for Processing Your Personal Data
The personal data you share will be processed in accordance with the KVKK no. 6698 and the relevant secondary legislation,
- In order to carry out the requirements of the services we provide to our clients in a manner appropriate to the requirements of the contract and of technology, and to develop the products and services we offer;
- In order to record identity, address and other necessary information to establish the details of the person carrying out the transaction, within the scope of the Act no. 6563 on the Regulation of Electronic Commerce, the Act no. 6502 on Consumer Protection, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette no. 29457 of 26.08.2015 and the Distance Contracts Regulation published in the Official Gazette no. 29188 of 27.11.2014, which were prepared on the basis of those provisions, and other relevant legislation;
- In order to draw up all records and documents that will form the basis of payment systems that are compulsory in the field of banking and electronic payment, of electronic contracts or of transactions in paper form; and to comply with the obligations of data retention, reporting and notification required by legislation and envisaged by other authorities;
- In order to be able to give information, upon request and as required by legislation, to public prosecutors’ offices, courts and the relevant public officials on matters concerning public safety and in legal disputes;
- In order to be able to offer our members a wide range of opportunities, or to share these within the legal framework with persons or institutions that can offer such opportunities.
- Information about the Third Persons or Organisations to Which Your Personal Data May Be Transferred
For the purposes stated above, the persons / organisations to which the personal data you share with Şükrü Köse Law Office may be transferred are: our principal shareholders, our shareholders, our direct or indirect domestic / foreign affiliates; in particular the Member firms using the infrastructure of Şükrü Köse Law Office and, without being limited to these, the persons and organisations connected with the service provided, as well as partner organisations from which we receive services or with which we cooperate in the capacity of Data Processor in order to carry out our activities, domestic / foreign organisations and other third persons and organisations.
- How Your Personal Data Is Collected
Your personal data may be processed and collected,
- Through the forms on the Şükrü Köse Law Office website and mobile applications, in the form of information such as name, surname, Turkish identity number, address, telephone, business or private e-mail address; together with preferences on the pages entered using a user name and password, the IP records of the transactions carried out, cookie data collected by the browser, data containing browsing time and details, and location data;
- Orally, in writing or through electronic media, by means of our channels such as conferences and our training and consultancy services, our sales and marketing department staff, our agencies, our dealers, forms on paper, business cards, digital marketing and the call centre;
- From persons who share their personal data by means of business cards, curricula vitae (CVs), the submission of offers and other means, for purposes such as establishing a commercial relationship with Şükrü Köse Law Office, making a job application or submitting an offer, in a physical or virtual environment, face to face or at a distance, orally or in writing or through electronic media;
- In addition, from data obtained indirectly through different channels: from the website, blog, (micro) websites used for competitions, questionnaires, games, campaigns and similar purposes, and from social media; from e-bulletin reading or clicking actions; from data offered by publicly accessible databases; and from profiles and data open to sharing on social sharing sites such as social media platforms (Facebook, Twitter, Google, Instagram, Snapchat and so on).
- Your Personal Data Obtained Before the KVKK Entered into Force
Your personal data lawfully obtained before 7 April 2016, the date on which the KVKK entered into force, through membership, consent to electronic messages, the purchase of products / services and in other ways, is also processed and kept in accordance with the terms and conditions set out in this document.
- Transfer of Your Personal Data
Your personal data collected by any of the methods listed above, whether processed in Türkiye or processed and kept outside Türkiye, may also be transferred, provided that it remains within the scope of the KVKK and in accordance with the purposes of the contract, to service intermediaries located abroad (to countries accredited by the Personal Data Protection Board and in which adequate protection exists as regards the protection of personal data).
Your personal data may be transferred;
- To our business partners with whom we cooperate and/or from whom we receive services for the provision and promotion of products and services, to supplier firms, and to banks, financial institutions, the Risk Centre of the Banks Association of Türkiye (TBB) and other real or legal persons,
- To the competent authorities that will determine your location in the event of an emergency call,
- To lawyers, auditors, consultants and other third persons from whom services are received,
- To the attorneys and representatives you have authorised,
- To regulatory and supervisory institutions and to other official bodies such as courts and enforcement offices, and to other public institutions or organisations authorised to request your personal data,
- To legal persons that are in a commercial relationship with Şükrü Köse Law Office or that hold your telephone number,
- To banks and similar financial institutions, in the form of information such as a SIM card change or the telephone number through which you are connected to the mobile internet, for the purpose of ensuring the security of your transactions and information and of identity verification during your banking and similar financial transactions carried out through your mobile lines,
- Where you hold a verified account at Şükrü Köse Law Office, your telephone number may be transferred to financial institutions, telecommunications institutions, law offices, municipalities and similar legal persons that hold various items of your information, so that they can give you critical notifications and reach you for purposes such as promotion and marketing.
- Storage and Protection of Personal Data
Şükrü Köse Law Office is obliged, under article 12 of the KVKK, to prevent the unlawful processing of personal data and to prevent access by unauthorised persons to the systems and databases in which your personal data is held; and, in order to ensure their safekeeping, to take software measures such as hashing, encryption, transaction logging and access management, as well as physical security measures. If it becomes known that personal data has been obtained by others through unlawful means, the situation will be notified immediately to the Personal Data Protection Board in writing and in accordance with the legal provisions.
- Keeping Personal Data Current and Accurate
Under article 4 of the KVKK, Şükrü Köse Law Office is under an obligation to keep your personal data accurate and up to date. In this context, in order for Şükrü Köse Law Office to fulfil its obligations arising from the legislation in force, our Clients must share accurate and up-to-date data or update it through the website / mobile application.
- The Rights of the Personal Data Subject under the KVKK no. 6698
Article 11 of the KVKK no. 6698 entered into force on 07 October 2016, and under that article the rights of the Personal Data Subject after that date are as follows:
By applying to Şükrü Köse Law Office (the data controller), the Personal Data Subject has the right, in relation to themselves;
- To learn whether personal data is being processed,
- To request information about it if personal data has been processed,
- To learn the purpose of the processing of personal data and whether it is used in accordance with that purpose,
- To know the third persons to whom personal data is transferred within the country or abroad,
- To request the correction of personal data where it has been processed incompletely or incorrectly,
- To request the erasure or destruction of personal data within the framework of the conditions envisaged in article 7 of the KVKK,
- To request that the correction, erasure or destruction of personal data be notified to the third persons to whom the personal data has been transferred,
- To object to a result arising against the person themselves through the analysis of the processed data exclusively by means of automated systems,
- To claim compensation for the loss where they suffer loss because of the unlawful processing of personal data.
- Contact and Method of Application
Şükrü Köse Law Office is the Data Controller within the scope of the KVKK. The Data Controller Representative to be appointed by Şükrü Köse Law Office will be announced in the Data Controllers Registry and at the internet address where this document is located once the legal infrastructure is provided.
Personal Data Subjects may direct their questions, views or requests to any of the following contact channels:
E-mail: [email protected]
Şükrü Köse Law Office may give its positive or negative reply to the requests submitted, in writing or through digital media, provided that the reply is reasoned and given within 30 days. As a rule, the necessary procedures relating to requests are free of charge. However, where the procedures require a cost, Şükrü Köse Law Office reserves the right to request a fee. These fees are determined on the basis of the tariff set by the Personal Data Protection Board under article 13 of the Personal Data Protection Act.
By sharing your personal data on our web page, in our applications and through our other channels, you declare that you accept, with explicit consent — defined in the KVKK as being of great importance, relating to a particular matter, based on being informed and expressed with free will — the terms of our Personal Data Policy and of the processing, methods of processing, transfer and sale of data and other related matters contained in our policy; the use, on the web page, in the applications and on social media channels, of the data shared with Şükrü Köse Law Office, which is a social media application; the making of notifications and recommendations; that data may be shared in a commercial sense with third persons provided that it is for the benefit of members; and that you will apply to Şükrü Köse Law Office before exercising your legal rights.
Measurement and Cookies
On our website, Google Analytics 4 and Google Tag Manager are used in order to understand visitor behaviour and to improve the site experience. These services place cookies only where your explicit consent exists; if you do not give consent, no measurement cookie is used and no information identifying you is transmitted. By the nature of the service, measurement data is processed on Google’s servers abroad, and this transfer is based on your explicit consent. For the list of cookies used, their purposes and durations you may review our Cookie Policy page, and you may change your preference at any time.