KP LAW PRIVACY STATEMENT RELATING TO THE PROTECTION AND PROCESSING OF PERSONAL DATA
KP Hukuk (Av. Onur Küçük) (“KP Law”), aims to process personal data of clients and website visitors in accordance with the provisions of the Law on the Protection of Personal Data No. 6698 (“PDP Law”) and other related legislations.
Your personal data, which you provided/will provide to KP Law in any external way, may be processed by KP Law as “Data Controller”,
- In the context of the objective of processing your personal data and in connection with this purpose, in a limited and measured manner,
- By maintaining the accuracy and the most up-to-date version of the personal data as reported or notified to KP Law,
- May be recorded, stored, preserved, reorganized, and be transferred to the institutions authorized to request such personal data by law and shall be transferred, shared with and classified to third parties within the country or abroad under the conditions stipulated by PDP Law, that they may be processed in other ways listed under PDP Law and that they be subject to other procedures referred to in PDP Law.
This Privacy Statement is adopted for the continuance and improvement of the activities carried out by KP Law in line with the principles set forth in the PDP Law.
2. Collection of Personal Data and Method
KP Law may process your personal data for the purposes specified in this Privacy Statement.
The personal data of clients and web-site users collected and used by KP Law are as follows:
- Name-surname, T.R. Identity number, tax identification number, nationality information, mother's name, father's name, place of birth, date of birth, address, personal data to be found on ID card including special categories of personal data, contact information, gender, signature, tax information, check/promissory note information, litigation information, billing information, company information, education information, legal transaction information, information of the device accessing our website (IP and UDID).
Your personal data is collected through physical or electronic means, for the reasons stipulated in the laws, through all kinds of information and documents that you have submitted to KP Law and obtained from third parties, authorized public institutions and organizations, systems used within KP Law and related departments.
3. Purposes of Personal Data Processing and Legal Basis
Your personal data is processed by automatic or non-automatic methods, in accordance with the provisions of Articles 5 and 6 of the PDP Law, in cases where you provide us with your explicit consent, in case it is clearly stipulated by any law, in case processing of personal data of the parties of a contract is necessary provided that it is directly related to the establishment or performance of the contract, in case it is necessary for KP Law to fulfil its legal obligations and in case it is necessary for the legitimate interests of KP Law provided that the fundamental rights and freedoms of the data subject are not harmed.
The purposes of processing personal data are as follows and may be updated in line with our policies and in accordance with our obligations arising from legislation;
- Providing legal services to our clients,
- Registering the authorized/contact employee information of the clients in the system,
- Execution of information security processes,
- Making our website more user-friendly,
- Execution and control of our business activities,
- Making mandatory notifications and reports to authorized public institutions and organizations,
- Execution of client service evaluation and follow-up processes,
- Carrying out client portfolio work,
- It is processed in order to meet the questions and requests you send to us through the website.
Your personal data will be kept for a reasonable period of time specified in the relevant legislation or until the purpose of processing no longer exists, and in case for the legal statute of limitations.
4. Transfer of Personal Data to Third Parties
The procedures and principles to be applied in personal data transfer are regulated in Articles 8 and 9 of the PDP Law and the personal data and special categories of personal data of the data subject can be transferred to third parties abroad and within the country.
Your personal data will be transferred to third parties from whom KP Law receives services and to the servers located abroad by KP Law for the purposes of performing the services and meeting the requests you have sent to us and Law and other legislation and other regulations pertaining to laws, the regulations of supervisory and regulatory institutions and organizations and the requirements by public authorities.
5. Rights of the Data Subject
Pursuant to Article 11 of PDP Law, you can make the following requests regarding your personal data by applying to KP Law,
- Learn whether or not her/his personal data have been processed;
- Request information as to processing if her/his data have been processed;
- Learn the purpose of processing of the personal data and whether data are used in accordance with their purpose;
- Know the third parties in the country or abroad to whom personal data have been transferred;
- Request rectification in case personal data are processed incompletely or inaccurately and request notification under these rectifications to third parties whom personal data have been transferred;
- Request deletion, destruction or anonymization of personal data within the framework when the purpose of processing data cease to exist and request notification under these rectifications to third parties whom personal data have been transferred;
- Object to the occurrence of a result against the data owner by analyzing the processed personal data exclusively through automated systems;
- Request compensation for the damages in case the person incurs damages due to unlawful processing of personal data.
You can send your requests arising from the PDP Law to İş Kuleler, Kule 3, Kat3, Levent, İstanbul, Turkey by post or to firstname.lastname@example.org by e-mail. KP Law will finalize your application requests free of charge within 30 (thirty) days at the latest according to the nature of the request. In case the request is rejected, the reason or reasons of the rejection will be notified written or electronically with its justification.