Personal Data Protection Notice (KVKK)

English translation of the Turkish notice.

Data controller and scope

This notice concerns the provision of this website and the handling of personal data requests relating to these activities. The data controller for these purposes is Attorney Adil Emre Cankul. Nart Hukuk & Danışmanlık is the office name used on this website.

Address for requests:
Beştepe Mahallesi, 32. Cadde Moment Beştepe No: 1/168 Yenimahalle / Ankara

Contact telephone: 0 (312) 439 73 83

This is an information notice under Article 10 of Turkish Personal Data Protection Law No. 6698 (KVKK); it is neither a legal services agreement nor an explicit consent form. Data processing relating to litigation, enforcement proceedings and legal advisory files is addressed in separate notices within the relevant service relationship.

Visiting the website or merely sending information or documents to the office does not, by itself, mean that a legal matter has been accepted or that responsibility for monitoring its deadlines has been assumed. The acceptance and scope of legal services are determined separately. Please do not share documents unrelated to your request, unnecessary information about third parties, or special categories of personal data that are not required for your request.

Information processed, purposes and collection methods

Website access: The IP address, request date and time, requested page and technical browser information sent by your browser are automatically transmitted to the hosting infrastructure over the internet. This information is processed to deliver pages, maintain access security and resolve technical errors.

KVKK requests: Identity, contact, request and, where applicable, representation information that you provide is processed to establish the applicant’s identity and the authority of any representative, examine and respond to the request, and document compliance with the obligations relating to it. Information is obtained through written documents or electronic communications, depending on the channel you choose. In this context, electronic data is collected by automated means; data in physical documents is collected by non-automated means as part of a data filing system.

The website has no visitor contact form, comments section, newsletter subscription or file upload facility. Article searches take place in your browser; the website does not send text entered into the search field to the server or retain it as a separate visitor record.

Legal grounds

Technical data processing necessary to provide the website securely and prevent unauthorised access is based on the legitimate interests condition in Article 5/2-f of the KVKK, provided that your fundamental rights and freedoms are not harmed. This ground is limited to processing that is necessary and proportionate to its purpose.

Examining and responding to KVKK requests, and documenting fulfilment of that obligation, are based on Article 5/2-ç in conjunction with Article 13 of the Law. Where records must be processed and retained to present a claim or defence in a dispute relating to a request, the condition concerning the establishment, exercise or protection of a right in Article 5/2-e applies.

Service providers and data transfers

OpenAI Sites and Cloudflare infrastructure is used to host the website, deliver its pages and maintain access security. Technical access information is processed by the relevant infrastructure providers in the course of providing these services. Where there is a legally valid request or reporting obligation, relevant records may be provided to competent public authorities and judicial bodies, limited to the subject of the request.

Where personal data is transferred abroad, the transfer conditions in Article 9 of the KVKK also apply. This notice does not, in itself, constitute a legal basis for a transfer abroad. Visiting the website or reading this notice is not treated as explicit consent.

Cookies and external links

No advertising, remarketing or visitor analytics tool has been added to the website. A short-lived security cookie helps the website operate securely. Its purpose, duration and what happens when you close the banner are explained in the Cookie Notice. The “Close” button does not constitute explicit consent. You can view, delete or block cookies in your browser settings.

The “Get directions” link in the contact section opens Google Maps on a separate page; no map is embedded in this website. External links are provided to make directions and sources easier to access. Information on the data processing activities carried out on those services’ own pages is provided by the relevant service provider. Providing a link does not mean that the office gives any additional guarantee concerning a third party’s privacy practices.

Retention and erasure

Personal data retention is determined by the periods prescribed by applicable legislation and the time necessary for the processing purpose. For technical access records, the purposes of service provision, security and error resolution are considered. For KVKK request records, the period necessary to conclude the request, fulfil legal obligations and protect a right is considered.

An erasure request does not automatically end the retention of records that must be kept to meet a statutory retention obligation or to establish, exercise or protect a right. Retention of such records is limited to the scope and period necessary for the relevant legal ground. Where an erasure request cannot be fulfilled because the processing conditions continue to apply, the reasons are communicated to the applicant within the statutory period.

When all grounds requiring processing cease to exist, the provisions on erasure, destruction or anonymisation apply in accordance with Article 7 of the KVKK and the procedures and periods prescribed by the relevant legislation.

Your rights and how to submit a request

Under Article 11 of the KVKK, you may learn whether your personal data is processed, request information if it has been processed, enquire about the processing purpose and whether the data is used in accordance with that purpose, and learn the recipients to whom it is transferred in Türkiye or abroad. You may request correction of incomplete or inaccurate records; erasure or destruction when the conditions in Article 7 of the Law are met; and notification of those actions to recipients of the data. You may object to an adverse result arising solely from automated analysis and seek compensation for damage caused by unlawful processing.

You may deliver a signed request addressed to Attorney Adil Emre Cankul to the office address above, in person or by post. Your request must include your first name, surname and Turkish identity number; if you are a foreign national, your nationality, passport number or identity number, if any; an address suitable for service of notices; and the subject of your request. Where applicable, also state the email address, telephone number and fax number you wish to use for the response. Attach information and documents relating to the request. Other submission methods provided in the Communiqué on the Principles and Procedures for Requests to the Data Controller remain available.

If a request is made through a representative, a document showing the authority to represent must also be provided. Where necessary to prevent disclosure of personal data to unauthorised persons and to assess the request correctly, additional information may be requested to verify identity or authority, or to clarify the request. Such information must be proportionate and limited to its purpose. This does not automatically extend the statutory response period.

Requests are answered as soon as possible according to their nature and within 30 days at the latest. If the process entails an additional cost, a fee may be charged only in accordance with the tariff set by the Personal Data Protection Board. You have the right to complain to the Board subject to the conditions laid down in the Law.

This notice does not create any independent guarantee or undertaking as to an outcome beyond the obligations imposed on the office by legislation. Statutory obligations, professional confidentiality duties and the legal rights of data subjects remain unaffected.