Personal Data Protection (KVKK) Disclosure Statement

Arel Hukuk Bürosu Danışmanlık Ofisi > Personal Data Protection (KVKK) Disclosure Statement

AREL LAW

Personal Data Protection Disclosure Statement

Pursuant to Article 10 titled “Data Controller’s Obligation to Inform” of the Personal Data Protection Law No. 6698 (“KVKK”), published in the Official Gazette No. 29677 on April 7, 2016, which aims to protect individuals’ fundamental rights and freedoms, particularly the privacy of private life, in the processing of personal data, and in accordance with the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, published in the Official Gazette No. 30356 on March 10, 2018, this Information Notice aims to inform you, as the data subject, about the personal data processed by AREL HUKUK in its capacity as the data controller.

  1. PROCESSED PERSONAL DATA
  • Your Identification Information: Your name and surname, identity card, Turkish Citizenship Number (TCKN), date/place of birth, tax identification number,
  • Your Contact Information: your address, email, mobile phone number, and residence information,
  • Your Bank Account Information: bank account number, invoice/debt information, IBAN, and credit card details,
  • Data Related to the Security of Our Company Campus: CCTV recordings, visitor logs, and card-based entry and exit records;
  • Your Visual and Audio Recording Data: your photograph,
  • Your Family and Close Relatives’ Data: their names and surnames
  • Your Demographic Data: education level, income level, and similar profile information

  1. PURPOSE OF PROCESSING PERSONAL DATA

Your personal data obtained within the scope of your relationship with AREL HUKUK are processed for the purposes stated below;

  • Conducting the proposal collection process,
  • Managing the appointment, request, and complaint process,
  • Collecting the information necessary within the scope of services to be provided to clients,
  • Conducting promotion, investment, marketing, and communication activities,
  • Carrying out activities related to the monitoring of payments,
  • Managing the contract execution process,
  • Responding to requests from official institutions,
  • Monitoring and conducting legal affairs,
  • Fulfilling legal obligations,
  • Conducting finance and accounting operations,

 

  1. TRANSFER OF PROCESSED PERSONAL DATA

Your personal data may be transferred, within the scope of the provisions of the Law regarding the transfer of personal data, for the purposes stated in Article 2 of this Information Notice, to domestic public institutions and organizations, our business partners, service provider companies and their authorized personnel, banks, and third parties.

 

  1. METHODS OF COLLECTING PERSONAL DATA AND LEGAL GROUNDS

Your personal data are collected verbally, in writing, or electronically from you, third parties, and legal authorities during the establishment and continuation of your legal relationship with our law firm, through tools such as the website, various contracts, mobile applications, email, and application forms, as well as via written or verbal communication channels with our law firm. Accordingly, the collected personal data are processed based on the lawful grounds specified in Articles 5, 6, and 8 of the KVKK, as outlined below.

  • Obtaining your explicit consent,
  • Being explicitly stipulated in the legislation applicable to our law firm, including the Tax Procedure Law, the Turkish Code of Obligations, and the Turkish Commercial Code,
  • Complying with national and international principles and standards for client identification, and fulfilling information retention, reporting, and notification obligations as required by legislation and official authorities,
  • The necessity of processing personal data of the parties to a contract directly related to the establishment or performance of a contract, in order to provide the requested products and services and to fulfill the obligations of the contracts you have entered into,
  • Being mandatory for the fulfillment of a legal obligation,
  • Being publicly disclosed by the data subject themselves,
  • The necessity of processing data for the establishment, exercise, or protection of a right,
  • The necessity of processing data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

 

If your personal data are of a special nature, they are collected, stored, and processed based on the following lawful grounds:

  • Obtaining your explicit consent,
  • Personal data other than health-related data may be processed without obtaining explicit consent in cases stipulated by law,
  • Health-related personal data, however, may only be processed without the explicit consent of the data subject for the purposes of protecting public health, preventive medicine, conducting medical diagnosis, treatment and care services, planning and managing health services and their financing, by persons or authorized institutions and organizations who are under a confidentiality obligation.

 

  1. RIGHTS OF THE DATA SUBJECT WHOSE PERSONAL DATA IS PROCESSED

Your rights regarding your personal data are defined under the provisions of Article 11 of the Law.

Pursuant to Article 11 of the KVKK, your rights are as follows; by applying to our law firm, you may request that your personal data be:

  1. To learn whether your personal data is being processed,
  2. To request information if your personal data has been processed,
  3. To learn the purpose of processing and whether your personal data is being used in accordance with that purpose,
  4. To know the third parties to whom your personal data has been transferred, domestically or abroad,
  5. To request the correction of your personal data if it is incomplete or inaccurate,
  6. To request the deletion or destruction of your personal data in accordance with the conditions stipulated in Article 7 of the KVKK,
  7. To request the notification of the actions taken in accordance with items (e) and (f) above to the third parties to whom your data has been transferred,
  8. To object to the emergence of a result against you due to analysis conducted exclusively through automated systems,
  9. You have the right to request compensation for any damage suffered due to the unlawful processing of your personal data.

Pursuant to Article 13, paragraph 1 of the KVKK, you may submit your request to exercise the rights mentioned above to our law firm in writing or through other methods determined by the Personal Data Protection Board.

  1. IF YOU WISH TO CONTACT US TO EXERCISE YOUR RIGHTS AND MAKE REQUESTS

In accordance with the legal rights provided under the relevant law and other applicable legislation, you may submit your requests in writing either in person to the following address: Küçükbakkalköy Mahallesi Kocasinan Caddesi Selvili Sokak No:4 Kat:3 D:15 Canan Business 34750 Ataşehir – ISTANBUL, or via a notary. In addition, pursuant to Article 5 of the “Communiqué on the Procedures and Principles for Application to the Data Controller,” you may also submit your requests via the registered electronic mail (KEP) address, secure electronic signature, mobile signature, or using the email address previously provided to and registered in our systems, by sending them to info@arelhukuk.com.

Applications made within this scope will be accepted following identity verification by us, and your requests will be processed as soon as possible, and no later than 30 days, depending on the nature of the request. No fee will be charged for responses provided in writing; however, if the response is delivered on a recording medium such as a CD or flash drive, a fee corresponding to the cost of the recording medium may be charged.