Privacy Notice
Last updated:
This notice has been prepared in the capacity of data controller to inform you how your personal data is processed within the framework of Law No. 6698 on the Protection of Personal Data (below, the Law) and related legislation.
This is a translation prepared for information purposes. In the event of any discrepancy, the Turkish text prevails.
1. Data controller
| Data controller | Av. Nur Gülmez | LL.M. |
| Bar | Antalya Bar Association · Registration No 5306 |
| Address | Güzeloba Mah. Rauf Denktaş Cad. No: 56/102, Muratpaşa / Antalya, Türkiye |
| Telephone | 0541 503 09 94 |
| office@nur.av.tr | |
| UETS | 16743-47984-90507 |
2. Scope of this notice
This notice covers the personal data of visitors to the website, persons submitting an enquiry, clients and representatives of institutional clients, business partners and service providers, and colleagues and members of the academic community.
Where a retainer relationship is established, a further notice may be provided according to the nature of the matter.
3. Processing by category of data subject
3.1 Website visitors
When you visit the site, the hosting server records your IP address, the date and time of access, the address requested, the response code and browser information as a natural consequence of its technical operation.
This data is processed solely to maintain the security of the site, to prevent misuse and to remedy technical faults; it is not used for statistical or analytical purposes. The legal basis is the legitimate interest set out in Article 5/2 (f) of the Law.
On this site:
- No visitor analytics are performed. No measurement tool, counter or tracking script is used, and visitor behaviour is not monitored.
- No cookies are used other than strictly necessary ones. For details see the Cookie Policy.
- There are no third-party components. All resources, including fonts and images, are served from our own server; there are no embedded videos, maps or social media widgets. Your data is therefore not transferred to third parties during your visit.
- No visitor profiling is carried out, and no data is collected for advertising or targeting purposes.
The site contains a link to a social media account. This is a link only; as it is not an embedded component, no data is sent to the relevant provider unless you click it. If you follow the link, the social network concerned processes your personal data independently and on its own responsibility, over which we have no control. We therefore recommend that you review that provider’s privacy notice.
3.2 Persons submitting an enquiry and prospective clients
If you complete the enquiry form on the site, your name, organisation, email address, telephone number and the explanations you write regarding your enquiry are processed.
The purpose is to assess the enquiry submitted and to respond to you. The legal basis is the explicit consent you give on the form; you may withdraw your consent at any time.
Data submitted through the form is not stored on the website server; it is forwarded directly to the email address above and retained in the mailbox.
Where you contact us directly by email or telephone, the information you provide through those channels is processed for the same purpose.
3.3 Clients and representatives of institutional clients
The personal data of clients and — in the case of institutional clients — of their representatives, officers or employees is processed for the purposes of providing the service and conducting the representation within the scope of the advisory services and proceedings carried out.
The legal basis is that the processing is directly related to the establishment or performance of the retainer relationship or service agreement, under Article 5/2 (c) of the Law.
Data relating to the same persons may also be processed for the purposes of managing the working relationship and maintaining communication, on the legal basis of legitimate interest under Article 5/2 (f) of the Law.
Under the Attorneys’ Act and professional rules, information learned in this context constitutes professional secrecy.
3.4 Business partners and service providers
The personal data of business partners and service providers and — where they are corporate entities — of their representatives, officers or employees is processed for the purposes of the conclusion and performance of agreements under Article 5/2 (c) of the Law.
Processing carried out for the purposes of managing the relationship and maintaining communication is based on Article 5/2 (f) of the Law.
3.5 Colleagues, the academic community and stakeholders
The personal data of colleagues, academics and stakeholders met at events or lawfully obtained from publicly available sources may be processed for the purposes of managing contact lists, maintaining communication and providing notice of legal developments and publications.
The legal basis is legitimate interest under Article 5/2 (f) of the Law. You may notify us at any time that you do not wish to receive such communications.
4. Requests from official authorities and legal disputes
Personal data belonging to all of the groups listed above may be disclosed to the relevant authorities without seeking explicit consent where it is lawfully requested by official authorities and where disclosure is mandatory under imperative provisions. The legal basis is the fulfilment of a legal obligation under Article 5/2 (ç) of the Law.
In connection with an existing or potential legal dispute, data may be used to the extent necessary and shared with courts and competent authorities. The legal basis is the establishment, exercise or protection of a right under Article 5/2 (e) of the Law.
5. Transfers
Your personal data may be transferred, only to the extent necessary to achieve the purposes set out above, to the hosting and email service provider established in Türkiye and to authorised public institutions and organisations. The service provider acts in the capacity of data processor.
No personal data is transferred abroad. According to the written statement of the hosting service provider, the servers and backups are held in data centres located in Türkiye.
6. Method of collection
Your personal data is collected through the website form, email, telephone, documents transmitted in physical or electronic form and face-to-face meetings, by automated and non-automated means.
7. Retention periods
| Data | Period |
|---|---|
| Content of an enquiry | Up to one year following conclusion of the enquiry |
| File data within the scope of a retainer relationship | The period prescribed by the Attorneys’ Act and related legislation |
| Data relating to a contractual relationship | For the limitation period following the end of the relationship |
| Server logs | 365 days; retained in backups for at most a further two weeks after deletion |
Upon expiry of the period, the data is deleted, destroyed or anonymised.
8. Your rights under Article 11 of the Law
- To learn whether your personal data is being processed and, if so, to request information in that regard
- To learn the purpose of processing and whether the data is used in accordance with that purpose
- To know the third parties to whom the data is transferred, in Türkiye or abroad
- To request rectification where the data has been processed incompletely or inaccurately, and to request that this be notified to third parties to whom the data has been transferred
- To request erasure or destruction where the grounds requiring processing have ceased to exist, and to request that this be notified to third parties to whom the data has been transferred
- To object to an adverse outcome arising from analysis carried out exclusively by automated systems
- To claim compensation where you suffer loss as a result of unlawful processing
Subject to obligations arising from legislation, you may exercise these rights at any time.
9. Applications and contact
To exercise your rights, you may submit your requests in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application will be concluded within thirty days at the latest.
| Channel | Details |
|---|---|
| Written application (wet signature) | Güzeloba Mah. Rauf Denktaş Cad. No: 56/102, Muratpaşa / Antalya |
| office@nur.av.tr | |
| Secure electronic signature or mobile signature | office@nur.av.tr |
| Telephone | 0541 503 09 94 |
| UETS | 16743-47984-90507 |
A form prepared to assist your application: Data Subject Request Form
10. Updates
This notice is updated where there is a change in data processing activities. The current version is published on this page.