top of page

Information Notice Pursuant to the Law on the Protection of Personal Data

1. Data Controller
 

This information notice has been prepared by Yılmaz Derviş Law Firm, in its capacity as a Data Controller, in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”). We attach great importance to the security of your personal data, and we process this data in a lawful manner within the scope and conditions described below.
 

Data Controller : Yılmaz Derviş Law Firm
Address             : Osmanağa Mah. Süleymanpaşa Sok. 30/48 Kadıköy, İstanbul
Phone.               : +90 542 280 18 68
E-mail.              : ydervis@istanbulbarosu.org.tr
 

2. Purposes of Processing Personal Data
 

Your personal data is processed by Yılmaz Derviş Law Firm for the purposes stated below, in accordance with the personal data processing conditions specified in Articles 5 and 6 of the KVKK:
 

  • Conduct of Legal Activities: Providing legal consultancy and litigation services to our clients within the scope of the attorney-client relationship.

  • Conduct of Communication Activities: Responding to individuals who contact us via the website contact form, e-mail, or telephone, and managing appointment requests.

  • Execution of Contractual Processes: Preparing, concluding, and performing attorney service agreements and powers of attorney with our clients.

  • Fulfillment of Legal Obligations: Fulfilling our obligations arising from the Attorneys' Act No. 1136, financial legislation, and other legal regulations.

  • Conduct of Finance and Accounting Affairs: Issuing self-employment receipts, and managing collection and payment processes.

  • Providing Information to Authorized Persons, Institutions, and Organizations: Responding to legal requests from courts, public prosecutors' offices, enforcement offices, and other authorized authorities.

  • Improvement of Business Processes: Improving the quality of the services we provide and analyzing the performance of our website (www.yilmazdervis.av.tr).

  • Conduct of Information Security Processes: Ensuring the security of our website and our IT infrastructure.
     

3. Parties to Whom Processed Personal Data is Transferred and Purposes of Transfer
 

Your personal data may be transferred to the following persons and institutions located domestically and, where necessary, abroad, in accordance with Articles 8 and 9 of the KVKK, for the purposes of achieving the objectives stated above and fulfilling legal obligations:
 

  • Authorized Public Institutions and Organizations: Courts, enforcement offices, public prosecutors' offices, bar associations, and other judicial/administrative authorities, as required by a legal obligation.

  • Business Partners and Suppliers: Experts, financial advisors, translators, information technology (IT) service providers, and server/hosting companies from whom we receive support in litigation and consultancy processes.

  • Legally Authorized Private Persons: The opposing party in a lawsuit or legal process, their attorneys, or relevant third parties, to the extent required by the legal process.

  • Banks and Financial Institutions: For the purpose of carrying out financial transactions.
     

4. Method and Legal Basis of Personal Data Collection
 

Your personal data is collected by our firm in physical or electronic environments through various channels, such as the website contact form, e-mail, telephone, fax, mail, face-to-face meetings, and documents submitted during legal processes, by automatic or non-automatic means.
 

This data is processed based on the following legal grounds specified in Article 5 of the KVKK:
 

  • It is expressly provided for in the law (e.g., the Attorneys' Act),

  • It is necessary for the establishment or performance of a contract,

  • It is necessary for the data controller to fulfill its legal obligation,

  • Data processing is necessary for the establishment, exercise, or protection of a right,

  • Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

    For data processing activities that require explicit consent, the explicit consent of the data subject will be obtained separately.
     

5. Your Rights as a Personal Data Owner (Data Subject's Rights)
 

Pursuant to Article 11 of the KVKK, you have the following rights regarding your personal data:
 

  • To learn whether your personal data is processed or not,

  • To request information if your personal data has been processed,

  • To learn the purpose of processing your personal data and whether they are used in line with their purpose,

  • To know the third parties to whom your personal data is transferred, in the country or abroad,

  • To request the rectification of your personal data if it is incomplete or has been processed incorrectly,

  • To request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK,

  • To request notification of the operations carried out pursuant to subparagraphs (d) and (e) to third parties to whom your personal data has been transferred,

  • To object to the emergence of a result against you by analyzing your processed data exclusively through automated systems,

  • To request compensation for the damage in case you suffer damage due to the unlawful processing of your personal data.
     

6. Exercising Your Rights and Application
 

To exercise your rights mentioned above, you may submit your requests, along with documents verifying your identity:
 

  • In writing to our address at Osmanağa Mah. Süleymanpaşa Sok. 30/48 Kadıköy, İstanbul, with a wet signature,

  • Via the e-mail address you have previously notified to our Firm and which is registered in our system, to our address at ydervis@istanbulbarosu.org.tr.
     

Your application will be concluded free of charge as soon as possible and within thirty (30) days at the latest, depending on its nature. 

​

Yılmaz Derviş Law Firm

bottom of page