top of page

KVKK

 

Privacy Notice on the Processing of Personal Data

Last updated: 13 November 2026

 

1. Data controller

This notice is given under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") by Av. Sevgi Erarslan (Erarslan Law Firm, Istanbul Bar) as data controller. Contact: info@erarslanhukuk.com · KEP (registered electronic mail): sevgi.erarslan@hs01.kep.tr

 

2. What personal data we process, why, and on what legal basis

a) Clients and prospective clients

  • Data: identity and contact details, information and documents relating to the matter, invoicing and payment details and, where the matter requires it, special categories of data such as criminal convictions or health data.

  • Purposes: providing legal advice and representation, handling powers of attorney and engagement terms, conducting proceedings, and meeting obligations under the Attorneys' Act and tax law.

  • Legal bases: KVKK Art. 5(2)(c) formation or performance of a contract, (ç) compliance with a legal obligation, and (e) establishment, exercise or protection of a right. For special categories of data, the grounds in KVKK Art. 6(3), in particular where processing is expressly provided for by law or is necessary to establish, exercise or protect a right.

b) Third parties named in a matter (opposing parties, witnesses, counsel)

  • Data: identity, contact and matter-related information, to the extent the matter requires.

  • Purpose and legal basis: establishing, exercising or protecting the client's rights (KVKK Art. 5(2)(e)) and compliance with legal obligations (Art. 5(2)(ç)).

c) Website visitors and users of the contact form

  • Data: the name, email address, subject and message you send through the contact form or by email, and technical data processed through cookies that the site needs in order to work (IP address, browser and session data).

  • Purposes: replying to your request and arranging an appointment; keeping the site secure and working properly.

  • Legal bases: KVKK Art. 5(2)(c) steps towards entering into a contract, and (f) legitimate interest. The site does not use analytics, advertising or marketing cookies; it uses only the technical cookies it needs in order to work.

  • Please do not send case documents or special categories of personal data through the contact form or by email.

 

3. How we collect data

We collect personal data through meetings, email, telephone, the contact form, the records of courts and public authorities and documents provided by clients, by automated and non-automated means.

 

4. Who we share data with, and why

Subject to the duty of confidentiality in Article 36 of the Attorneys' Act, personal data may be shared only with:

  • Courts, enforcement offices, prosecutors, law enforcement and other competent authorities: to conduct the matter and meet legal obligations (KVKK Art. 8 and Art. 5(2)(ç), (e)).

  • Mediators, court-appointed experts, notaries, translators and lawyers working on the same matter: on the client's instructions and only as the matter requires.

  • Our accountant: invoicing data only, for tax purposes.

  • Service providers (data processors): companies providing website hosting and email infrastructure, only to provide those services.

 

5. How long we keep data

Client files are kept after a matter closes for the retention and limitation periods set by law. Enquiries that do not lead to an engagement are deleted after 1 year. When the period ends, data is deleted, destroyed or anonymised.

 

6. Your rights

Under KVKK Art. 11 you have the right to:

  • learn whether your personal data is processed and, if so, request information about it;

  • learn the purpose of the processing and whether the data is used for that purpose;

  • know the third parties, in Türkiye or abroad, to whom it is transferred;

  • ask for incorrect or incomplete data to be corrected and, where the conditions are met, for data to be deleted or destroyed, and for these steps to be notified to recipients;

  • object to a decision against you that results solely from automated processing;

  • claim compensation for damage caused by unlawful processing.

 

7. How to apply

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can apply:

Applications are answered free of charge within 30 days at the latest. If the request involves an additional cost, the fee set by the KVKK Board may be charged.

 

8. Cookie Policy

A cookie is a small text file that your browser stores on your device when you visit a website.

Cookies we use. This site runs on the Wix.com platform. It uses only cookies that are strictly necessary for the site to work securely and properly: managing your session, keeping the site secure and preventing misuse, loading pages quickly and remembering your cookie choice. Some of these cookies are deleted when your session ends; others are kept for up to 12 months. The site does not use cookies for advertising, marketing or profiling.

Legal basis. Strictly necessary cookies are used on the basis of legitimate interest under Article 5(2)(f) KVKK and do not depend on your consent. If a non-essential cookie (for example, an analytics cookie) is ever used, it will be activated only if you give your explicit consent through the cookie banner.

Managing your choices. You can change your cookie choice or withdraw your consent at any time using the cookie settings icon at the bottom left of the page. You can also delete or block cookies in your browser settings; blocking strictly necessary cookies may stop parts of the site from working.

Your rights. You can exercise your rights regarding data processed through cookies as described in sections 6 and 7.

bottom of page