Privacy Disclosure

Privacy Notice Regarding the Processing of Personal Data

This Privacy Notice has been prepared by Balioğlu Law Firm (Data Controller: Att. Dilek Balioğlu) for the purpose of informing individuals about the personal data processed in the context of legal consultancy and related services, and of fulfilling the disclosure obligation under the Personal Data Protection Law No. 6698 ("PDPL"). Your personal data is processed in accordance with the PDPL and applicable legislation.

1. Principles Governing the Processing of Personal Data

Your personal data is processed in accordance with the following principles set out in Article 4 of the Personal Data Protection Law No. 6698:

Compliance with law and rules of good faith

Personal data is processed in compliance with applicable legislation, the principle of good faith, and the fundamental principles of data protection law.

Accuracy and being up to date where necessary

The accuracy and currency of processed personal data is ensured; where necessary, data is updated in line with notifications from data subjects.

Being relevant, limited, and proportionate to the purposes for which they are processed

Personal data is processed only to the extent required by the purpose of processing and in connection with that purpose; unnecessary or excessive data processing is avoided.

Being processed for specified, explicit, and legitimate purposes

Personal data is processed for specified, explicit, and legitimate purposes, such as managing employee/intern applications, evaluations, recruitment, and human resources processes.

Retention for the period stipulated by relevant legislation or required for the purpose for which they are processed

Personal data is retained for the period prescribed by relevant legislation or as long as required for the purpose of processing; upon expiry of such period, data is deleted, destroyed, or anonymised.

2. Methods of Collecting Your Personal Data

Depending on your relationship with us, your personal data is collected through the following means:

— Submission of information and documents verbally, in physical form, or electronically during meetings or telephone calls,

— Obtaining publicly available information from authorised institutions and organisations,

— Transmission of information and documents within the scope of the legal consultancy service provided.

3. Your Personal Data Processed

Data CategoryPurpose of ProcessingLegal Basis
IdentityProvision of Legal and Consultancy Services; Conducting Business ActivitiesLegitimate interest of the data controller (PDPL Art. 5/2-f)
Identity / Legal Transaction
(Judicial authority correspondence, case file, power of attorney)
Conducting Activities in Compliance with Legislation; Monitoring and Management of Legal Matters; Provision of Legal and Consultancy ServicesDirectly related to the establishment of a contract (PDPL Art. 5/2-c); Legal obligation (PDPL Art. 5/2-e)
CommunicationConducting Communication Activities; Provision of Legal and Consultancy Services; Fulfilment of Disclosure ObligationsLegitimate interest of the data controller (PDPL Art. 5/2-f); Directly related to the establishment of a contract (PDPL Art. 5/2-c)
FinancialProvision of Legal and Consultancy Services; Conducting Financial and Accounting TransactionsDirectly related to the establishment of a contract (PDPL Art. 5/2-c); Legal obligation (PDPL Art. 5/2-e)
Transaction Security
(Website usage data)
Conducting Information Security Processes; Managing Access AuthorisationsLegitimate interest of the data controller (PDPL Art. 5/2-f)

4. Transfer of Your Personal Data

Your personal data may be transferred to domestic and international software/server service providers and IT companies for the purposes of operating information systems and providing technical support services; and to authorised public institutions and organisations for the purpose of conducting activities in compliance with applicable legislation.

5. Your Rights under the PDPL

Your rights under Article 11 of the Personal Data Protection Law No. 6698:

— To learn whether your personal data has been processed,

— To request information if it has been processed,

— To learn the purpose of processing and whether it is used in accordance with its purpose,

— To know the third parties to whom your data has been transferred, domestically or abroad,

— To request correction if data has been processed incompletely or inaccurately,

— To request deletion or destruction of your data,

— To request that correction and deletion be notified to third parties,

— To object to a result arising against you through analysis by automated systems,

— To demand compensation for damages arising from unlawful processing of your data.

You may submit your requests in writing or via your e-mail address registered in our system to the data controller.

Data Controller Att. Dilek Balioğlu (Balioğlu Law)
Büyükdere Cad. Levent Loft No:201 K.2 D.45, 34394 Levent, Şişli, İstanbul
E-Mail: info@balioglu.av.tr

* You will be notified of the outcome of the evaluation within 30 days of your request reaching us. As a rule, your requests will be fulfilled free of charge; however, if the process entails an additional cost, a fee determined by the Personal Data Protection Authority may be charged to you.