Personal Data Protection

Last updated:

Purpose of the Notice and Data Controller

The purpose of this personal data protection and processing notice is to inform you, pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), about the personal data processed by Umut Zorer ("Zorer Hukuk"), acting as the data controller.

This notice has been prepared to inform you about the personal data processed during your visit to our website or during the performance of legal advisory services we provide to you, or to the company of which you are an authorised signatory, employee, or representative.

Zorer Hukuk is the data controller responsible for determining the purposes and means of processing personal data concerning you, and for establishing and managing the data registry system.

Collection of Your Personal Data

Your personal data is collected through automated, partially automated, or non-automated means directly from you or from the legal entity of which you are an authorised representative.

Website Visits

During your visit to zorer.av.tr, traffic information such as your IP address and connection time is processed. This information is processed under Article 5/2(a) of the KVKK ("expressly provided for by law") for the purposes of conducting activities in compliance with legislation, creating and monitoring visitor records, executing information security processes, and carrying out archiving and retention activities.

Contact

When you submit our website's contact form, the following personal data is processed: identity (name, surname) and contact (phone number, email address, message). Processing is based on Article 5/2(f) of the KVKK ("legitimate interests of the data controller, provided that fundamental rights of the data subject are not prejudiced") for the purposes of conducting communication activities, managing client relationship processes, and carrying out retention activities.

Contract Formation Processes

During the procurement of legal advisory services from our office, the following data contained in the contract and its signature circular annex is processed:

  • Identity information: name, surname, signature, national ID number
  • Contact information: address, phone number, email address
  • Professional experience: company of which you are an authorised representative, title, role
  • Legal transaction information: contract name, contract date

Processing is carried out for the purposes of executing service sales and operations processes, contract processes, and the follow-up of legal affairs.

Legal Basis. Your personal data is processed under Article 5/2(c) of the KVKK (processing of personal data of parties to a contract is necessary, provided that it is directly related to the formation or performance of the contract). The same data is retained under Article 5/2(e) of the KVKK (processing is necessary for the establishment, exercise, or protection of a right) for the follow-up of legal affairs and the execution of retention and archiving activities.

Client Relations and Communication Processes

The following data processed in client relations management and communication processes:

  • Identity information: name, surname, signature, national ID number
  • Contact information: address, phone number, email address
  • Professional experience: company of which you are an authorised representative, title, role
  • Client transaction information: trade name, contract date, contract name, service contract details, tax office, tax ID number, current status, payment information, and tax liability information
  • Legal transaction information: contract signing details

Processing is carried out for the purposes of executing service operations, conducting communication activities, and providing contract and post-contract support services.

Legal Basis. Your personal data is processed under Article 5/2(c) of the KVKK (processing of personal data of parties to a contract is necessary, provided that it is directly related to the formation or performance of the contract). The same data is retained under Article 5/2(e) of the KVKK for the follow-up of legal affairs and the execution of retention and archiving activities.

Financial Processes

The following data processed in the context of invoices, accounting records, and financial processes:

  • Identity information: name, surname, signature, national ID number
  • Contact information: address, phone number, email address
  • Professional experience: company of which you are an authorised representative, title, role
  • Client transaction information: trade name, contract date, contract name, service contract details, fees, tax office, tax ID number, current status, payment information, and tax liability information

Processing is carried out for the purposes of conducting finance and accounting affairs and executing activities in compliance with legislation.

Legal Basis. Your personal data is processed and retained with our accounting service providers under Article 5/2(ç) of the KVKK (processing is necessary for compliance with a legal obligation of the data controller) for the purpose of conducting activities in compliance with legislation.

During payments, depending on the payment channel (bank receipt, etc.), identity and payment-related document information is processed under the right-protection basis for the purposes of executing finance and accounting processes and retention.

Processes Conducted on Behalf of Clients

For third-party personal data processed in the scope of work conducted on behalf of and representing the client, the Client is the data controller and the Lawyer acts solely as a data processor.

Transfer of Your Personal Data

Your personal data may be transferred to the relevant authorities without obligation of notice and without your explicit consent under Article 28/1 of the KVKK upon request.

Beyond this, in unforeseen circumstances, your personal data may be transferred to public institutions expressly specified in laws, within the purpose and limitations set out in the law, upon request.

Your personal data is transferred to our data retention providers for secure hosting and backup purposes, and to domestic and foreign providers of email communication tools for the purpose of conducting communication activities. In cases of transfer abroad, transfer is carried out based on the signed standard agreement, providing the appropriate safeguards set out in Article 9 of the KVKK. In addition, your financial process information is transferred to our e-SMM integrator, accounting management software, and financial advisor providers, as well as to the Revenue Administration, for the purpose of conducting activities in compliance with legislation.

Your Rights Regarding Your Personal Data

Under the Law, you have the following rights regarding the processing of your personal data. In this scope, concerning your personal data you may:

  • Learn whether personal data is being processed,
  • Request information about the processing if personal data has been processed,
  • Learn the purpose of processing and whether such data is being used in line with its purpose,
  • Know the third parties, domestic or abroad, to whom your personal data has been transferred,
  • Request correction of your personal data if it has been processed incompletely or incorrectly,
  • Request the erasure or destruction of your personal data if the reasons that necessitated its processing no longer exist,
  • Request that correction and erasure actions be notified to third parties to whom your personal data has been transferred,
  • Object to any result that arises against you through the analysis of your processed data exclusively by automated systems,
  • Request compensation for damages if you suffer loss due to the unlawful processing of your personal data.

You may exercise your rights by contacting us using the methods set out below.

Method of Application to the Data Controller

You may submit your application:

  • In writing to Hasanpaşa Mh. Kurbağalıdere Cd. No:43/4 Kadıköy, İstanbul,
  • To the registered email address umut.zorer@hs01.kep.tr using your own registered email address,
  • By sending an email to kvk@zorer.av.tr from your email address registered in our systems and verified by you.

In order to exercise your rights regarding the processing of your personal data, you must first apply to the data controller. If the application is rejected, the response is deemed insufficient, or no response is provided within the required period, you may file a complaint with the Board within thirty days of learning the response and in any event within sixty days of the date of application.

For more detailed information on the procedures and principles to be followed when submitting an application, please refer to the Communiqué on the Procedures and Principles of Application to the Data Controller published by the Personal Data Protection Authority.