Personal Data Protection Notice (KVKK)

1. Data Controller and Scope

This notice covers the data of visitors to constantinople.av.tr and persons contacting us through forms, email, telephone, WhatsApp and an initial meeting. If a client relationship is established, a separate notice is provided for processing specific to the litigation, enforcement or advisory file.

2. Data and Collection Methods

• Enquiry information: Full name, email, telephone if provided, subject, brief description, opposing party's name and any critical date reported.
• Communication and transaction information: Your question, correspondence, enquiry and response dates, appointment and proposal information, and any records concerning delivery of the notice and preferences.
• Technical information: IP address, browser and device information, request time, page visited, referring address and security records generated by the service used. Analytics data are considered separately alongside cookie preferences.

Information is collected electronically by wholly or partly automated means through your direct submission or the technical operation of the website and communication services. Notes and physical documents received at an initial meeting are processed by non-automated means insofar as they form part of a data filing system.

The case-review quotation form on the contact page requires full name, email, subject and a brief description. Telephone, opposing party and critical date are optional. The general-question form requires a question or suggestion; email is optional. Both forms also record acknowledgement of reading the notice. This acknowledgement is not explicit consent. Neither form has a file-upload field.

The message field on the home page opens a draft in your selected WhatsApp or email application. Opening the WhatsApp link transmits the draft text to that service. You complete sending the message in the application that opens.

3. Purposes and Legal Bases

Initial Enquiry, Scope and Fee Proposal

Assessing your request, communicating with you and defining the terms of the service requested. KVKK Article 5/2-c applies to party data directly related to and necessary for establishing a contract.

Assessing General Questions and Content Suggestions

Assessing incoming communications and providing a response where applicable. KVKK Article 5/2-f applies to the legitimate interest in managing communications, provided your fundamental rights and freedoms are not harmed. If a topic is addressed in an article, information making you or your case identifiable is not used.

Professional Suitability and Conflict-of-Interest Checks

KVKK Article 5/2-ç applies to data necessary to fulfil engagement-acceptance and confidentiality duties under the Attorneyship Law. The assessment is limited to relevant and necessary information.

Security of Communication Infrastructure and the Website

Preventing unwanted submissions, misuse and unauthorised access. KVKK Article 5/2-f applies to the legitimate interest in providing secure services, provided your fundamental rights and freedoms are not harmed.

Responding to Applications and Competent Authorities' Requests

Legal obligation in relation to data necessary to respond to KVKK applications and legally binding requests: KVKK Article 5/2-ç.

Protecting Rights and Resolving Disputes

KVKK Article 5/2-e applies to the portion of enquiry, proposal and communication records necessary to assert or defend a right.

Optional Visit Analytics

Explicit consent is the legal basis for processing visit and interaction data with Google Analytics 4 to analyse use: KVKK Article 5/1. This activity is separate from necessary security records and enquiry assessment.

4. Recipients and International Connections

• Tilda: Processes visit and technical transaction data for website publication, hosting, content distribution and technical security.
• Formspree: Receives contact-page form submissions, stores them within its service and forwards email notifications. Technical data such as IP and browser information may also be processed alongside submitted fields.
• Email and telecommunications service providers: Process data necessary to transmit and retain messages or calls through your chosen communication channel.
• WhatsApp / Meta: If you choose to write through WhatsApp, your number and message are transmitted through that service's infrastructure. The provider's processing of account and technical data is governed by its own service terms.
• Google: Is a recipient for analysis of visit and interaction data through Google Analytics 4. Enquiry-form content is not collected for transmission to this analytics service.
• Competent public institutions and judicial authorities: May receive relevant records to the extent necessary to fulfil a legal obligation or protect a right.

Services with International Connections

Formspree states in its service documentation that it processes data in the United States; Tilda states that it uses infrastructure connected with the European Union and United States. Google and WhatsApp services may also involve processing abroad or access from abroad. These channels should therefore not be used on the assumption that data are processed exclusively in Turkey.

In addition to a data-processing condition, international transfers require an adequacy decision or appropriate safeguards under KVKK Article 9; exceptional cases require the statutory conditions for occasional transfers. Reading this notice, submitting a form or selecting a cookie preference alone is not a legal safeguard for continuing international transfers.

5. Special Categories of Data

Do not include special-category information such as health, criminal convictions, religion or beliefs or sex life, copies of identity documents, passwords or detailed case documents in initial enquiry forms. Do not share unnecessary personal information about third parties either.

If special-category data are needed at the legal-service stage, a suitable document-transmission method and activity-specific notice are defined separately. KVKK Article 6/3-d and adequate measures determined by the Board are considered for processing necessary to establish, exercise or protect a right. This explanation does not mean that such data are requested in the initial enquiry form.

6. Retention and Confidentiality

Enquiry and communication records are retained only as long as necessary to assess the request and conduct communications. If retention is necessary for a legal obligation or protection of a specific right, applicable legislation, limitation periods and forfeiture periods are considered. No single fixed retention period applies to every enquiry record.

When all processing conditions cease to exist, personal data are deleted, destroyed or anonymised in accordance with legislation. Cookie lifetimes are assessed separately according to the cookie and preference.

The confidentiality duty under Article 36 of the Attorneyship Law remains applicable. Contact through the website or an initial enquiry channel alone does not establish an attorney-client engagement.

7. Cookies and Preferences

Necessary technologies for website delivery, security and remembering preferences are considered separately from optional analytics technologies. Consent to optional analytics can be withdrawn later; withdrawal does not retrospectively affect earlier lawful processing.

You can access the cookie-preference panel through the link below or the 'Cookie Preferences' link in the footer. This notice does not replace a request for explicit consent to cookies.

8. Your Rights

By applying to the data controller under KVKK Article 11, you may:

• Learn whether your personal data are processed and request information if they have been processed.
• Learn the purpose of processing and whether data are used consistently with that purpose.
• Learn the third parties to whom your data are transferred in Turkey or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction when the conditions in KVKK Article 7 are met.
• Request notification of correction, deletion or destruction to third parties receiving the data.
• Object to an adverse outcome resulting solely from analysis of your data through automated systems.
• Claim compensation if you suffer loss through unlawful processing.

9. How to Apply

You may send a request concerning your rights from an email address you previously provided and which is registered in our system to info@constantinople.av.tr . Your rights to use other application methods under the Communiqué on the Procedures and Principles for Applications to the Data Controller remain reserved.

Your application must include full name; signature if in writing; Turkish identity number for Turkish citizens, or nationality and passport number or identity number, if any, for foreign nationals; residential or business address for service; email, telephone and fax details for notification, if any; and the request's subject. You may attach relevant information and documents. A copy of an identity document is not a routine application requirement.

Applications are concluded as soon as possible, depending on their nature, and within 30 days at the latest; the response is given in writing or electronically. Processing is generally free, but where additional cost is required the Board's tariff may apply. If the request is rejected, reasons are given.

If your application is rejected, the response is inadequate or no response is given on time, you may complain to the Personal Data Protection Board subject to the periods and conditions in KVKK Article 14.