Privacy Disclosure
Privacy Notice Regarding the Processing of Personal Data
This Privacy Notice has been prepared by Balioğlu Law Firm (Data Controller: Att. Dilek Balioğlu) for the purpose of informing individuals about the personal data processed in the context of legal consultancy and related services, and of fulfilling the disclosure obligation under the Personal Data Protection Law No. 6698 ("PDPL"). Your personal data is processed in accordance with the PDPL and applicable legislation.
1. Principles Governing the Processing of Personal Data
Your personal data is processed in accordance with the following principles set out in Article 4 of the Personal Data Protection Law No. 6698:
Compliance with law and rules of good faith
Personal data is processed in compliance with applicable legislation, the principle of good faith, and the fundamental principles of data protection law.
Accuracy and being up to date where necessary
The accuracy and currency of processed personal data is ensured; where necessary, data is updated in line with notifications from data subjects.
Being relevant, limited, and proportionate to the purposes for which they are processed
Personal data is processed only to the extent required by the purpose of processing and in connection with that purpose; unnecessary or excessive data processing is avoided.
Being processed for specified, explicit, and legitimate purposes
Personal data is processed for specified, explicit, and legitimate purposes, such as managing employee/intern applications, evaluations, recruitment, and human resources processes.
Retention for the period stipulated by relevant legislation or required for the purpose for which they are processed
Personal data is retained for the period prescribed by relevant legislation or as long as required for the purpose of processing; upon expiry of such period, data is deleted, destroyed, or anonymised.
2. Methods of Collecting Your Personal Data
Depending on your relationship with us, your personal data is collected through the following means:
— Submission of information and documents verbally, in physical form, or electronically during meetings or telephone calls,
— Obtaining publicly available information from authorised institutions and organisations,
— Transmission of information and documents within the scope of the legal consultancy service provided.
3. Your Personal Data Processed
| Data Category | Purpose of Processing | Legal Basis |
|---|---|---|
| Identity | Provision of Legal and Consultancy Services; Conducting Business Activities | Legitimate interest of the data controller (PDPL Art. 5/2-f) |
| Identity / Legal Transaction (Judicial authority correspondence, case file, power of attorney) | Conducting Activities in Compliance with Legislation; Monitoring and Management of Legal Matters; Provision of Legal and Consultancy Services | Directly related to the establishment of a contract (PDPL Art. 5/2-c); Legal obligation (PDPL Art. 5/2-e) |
| Communication | Conducting Communication Activities; Provision of Legal and Consultancy Services; Fulfilment of Disclosure Obligations | Legitimate interest of the data controller (PDPL Art. 5/2-f); Directly related to the establishment of a contract (PDPL Art. 5/2-c) |
| Financial | Provision of Legal and Consultancy Services; Conducting Financial and Accounting Transactions | Directly related to the establishment of a contract (PDPL Art. 5/2-c); Legal obligation (PDPL Art. 5/2-e) |
| Transaction Security (Website usage data) | Conducting Information Security Processes; Managing Access Authorisations | Legitimate interest of the data controller (PDPL Art. 5/2-f) |
4. Transfer of Your Personal Data
Your personal data may be transferred to domestic and international software/server service providers and IT companies for the purposes of operating information systems and providing technical support services; and to authorised public institutions and organisations for the purpose of conducting activities in compliance with applicable legislation.
5. Your Rights under the PDPL
Your rights under Article 11 of the Personal Data Protection Law No. 6698:
— To learn whether your personal data has been processed,
— To request information if it has been processed,
— To learn the purpose of processing and whether it is used in accordance with its purpose,
— To know the third parties to whom your data has been transferred, domestically or abroad,
— To request correction if data has been processed incompletely or inaccurately,
— To request deletion or destruction of your data,
— To request that correction and deletion be notified to third parties,
— To object to a result arising against you through analysis by automated systems,
— To demand compensation for damages arising from unlawful processing of your data.
You may submit your requests in writing or via your e-mail address registered in our system to the data controller.
Büyükdere Cad. Levent Loft No:201 K.2 D.45, 34394 Levent, Şişli, İstanbul
E-Mail: info@balioglu.av.tr
* You will be notified of the outcome of the evaluation within 30 days of your request reaching us. As a rule, your requests will be fulfilled free of charge; however, if the process entails an additional cost, a fee determined by the Personal Data Protection Authority may be charged to you.
Privacy Notice for the Website Contact Form
This Privacy Notice has been prepared by Balioğlu Law Firm (Data Controller: Att. Dilek Balioğlu) for the purpose of informing individuals about the processing of personal data submitted via the contact form on our website.
1. Principles Governing the Processing of Personal Data
Compliance with law and rules of good faith
Personal data is processed in compliance with applicable legislation, the principle of good faith, and the fundamental principles of data protection law.
Accuracy and being up to date where necessary
The accuracy and currency of processed personal data is ensured; where necessary, data is updated in line with notifications from data subjects.
Being relevant, limited, and proportionate to the purposes for which they are processed
Personal data is processed only to the extent required by the purpose of processing; unnecessary or excessive data processing is avoided.
Being processed for specified, explicit, and legitimate purposes
Personal data is processed for specified, explicit, and legitimate purposes, such as receiving, evaluating, and responding to the contact form.
Retention for the period stipulated by relevant legislation or required for the purpose for which they are processed
Personal data is retained for the period prescribed by relevant legislation or as long as required for the purpose of processing; upon expiry of such period, data is deleted, destroyed, or anonymised.
2. Methods of Collecting Your Personal Data
The personal data you submit to us is processed and stored by automated or non-automated means, in accordance with the PDPL No. 6698 and applicable legislation, in compliance with the law and the principle of good faith.
3. Your Personal Data Processed
| Data Category | Purpose of Processing | Legal Basis |
|---|---|---|
| Identity (Full Name) Communication (Phone, E-Mail) Other (Form Message Content) | Processed within the scope of Conducting Communication Activities and Handling Requests/Complaints; for the purposes of receiving the contact form, evaluating the message or request, providing a response, and concluding the request. | Legitimate interest of the data controller (PDPL Art. 5/2-f) |
4. Transfer of Your Personal Data
Your personal data may be transferred on a limited access basis to domestic and international software/server service providers and IT companies for the purposes of operating information systems and providing technical support services.
5. Your Rights under the PDPL
Your rights under Article 11 of the Personal Data Protection Law No. 6698:
— To learn whether your personal data has been processed,
— To request information if it has been processed,
— To learn the purpose of processing and whether it is used in accordance with its purpose,
— To know the third parties to whom your data has been transferred, domestically or abroad,
— To request correction if data has been processed incompletely or inaccurately,
— To request deletion or destruction of your data,
— To request that correction and deletion be notified to third parties,
— To object to a result arising against you through analysis by automated systems,
— To demand compensation for damages arising from unlawful processing of your data.
You may submit your requests in writing or via your e-mail address registered in our system to the data controller.
Büyükdere Cad. Levent Loft No:201 K.2 D.45, 34394 Levent, Şişli, İstanbul
E-Mail: info@balioglu.av.tr
* You will be notified of the outcome of the evaluation within 30 days of your request reaching us. As a rule, your requests will be fulfilled free of charge; however, if the process entails an additional cost, a fee determined by the Personal Data Protection Authority may be charged to you.
Privacy Notice for Employee / Intern Candidates
This Privacy Notice has been prepared by Balioğlu Law Firm (Data Controller: Att. Dilek Balioğlu) in accordance with the PDPL No. 6698 and applicable legislation, for the purpose of informing employee and intern candidates about the processing of personal data during job application processes.
1. Principles Governing the Processing of Personal Data
Compliance with law and rules of good faith
Personal data is processed in compliance with applicable legislation, the principle of good faith, and the fundamental principles of data protection law.
Accuracy and being up to date where necessary
The accuracy and currency of processed personal data is ensured; where necessary, data is updated in line with notifications from data subjects.
Being relevant, limited, and proportionate to the purposes for which they are processed
Personal data is processed only to the extent required by the purpose of processing; unnecessary or excessive data processing is avoided. CVs submitted during the application process should not include special categories of personal data unrelated to the position (such as health, religion, political opinion, or trade union membership).
Being processed for specified, explicit, and legitimate purposes
Personal data is processed for specified, explicit, and legitimate purposes, such as managing employee/intern applications, evaluations, and recruitment processes.
Retention for the period stipulated by relevant legislation or required for the purpose for which they are processed
Personal data is retained for the period prescribed by relevant legislation or as long as required for the purpose of processing; upon expiry of such period, data is deleted, destroyed, or anonymised.
2. Methods of Collecting Your Personal Data
Your personal data is collected during job application processes through the following means:
— Submission of CVs and documents via the LinkedIn platform,
— Submission of CVs and documents via e-mail or other communication channels.
3. Your Personal Data Processed
| Data Category | Purpose of Processing | Legal Basis |
|---|---|---|
| Identity (Full Name, Date of Birth) Communication (Phone, E-Mail, Address) Professional Experience (Diploma, Courses, Education, Certificates, Transcripts) Personnel (CV / Résumé) | Processed for the purpose of conducting employee/intern selection and placement processes; including receiving your application, evaluating your candidacy, conducting interview processes if deemed suitable, and communicating the outcome. | Directly related to the establishment of a contract (PDPL Art. 5/2-c) |
| Other (Reference)* | Legitimate interest of the data controller (PDPL Art. 5/2-f) |
4. Transfer of Your Personal Data
Your personal data may be transferred on a limited access basis to domestic and international software/server service providers and IT companies for the purposes of operating information systems and providing technical support services.
5. Your Rights under the PDPL
Your rights under Article 11 of the Personal Data Protection Law No. 6698:
— To learn whether your personal data has been processed,
— To request information if it has been processed,
— To learn the purpose of processing and whether it is used in accordance with its purpose,
— To know the third parties to whom your data has been transferred, domestically or abroad,
— To request correction if data has been processed incompletely or inaccurately,
— To request deletion or destruction of your data,
— To request that correction and deletion be notified to third parties,
— To object to a result arising against you through analysis by automated systems,
— To demand compensation for damages arising from unlawful processing of your data.
You may submit your requests in writing or via your e-mail address registered in our system to the data controller.
Büyükdere Cad. Levent Loft No:201 K.2 D.45, 34394 Levent, Şişli, İstanbul
E-Mail: info@balioglu.av.tr
* Reference information is not mandatory to share as part of the application; however, if shared, it will be processed. It is the candidate's responsibility to inform the individuals listed as references.
** You will be notified of the outcome of the evaluation within 30 days of your request reaching us. As a rule, your requests will be fulfilled free of charge; however, if the process entails an additional cost, a fee determined by the Personal Data Protection Authority may be charged to you.
