Privacy Notice
Last updated:
Contents
This notice is issued under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and explains how personal data collected through this site is processed.
Data controller
The data controller is Esra Ateş, an attorney registered with the Istanbul Bar Association.
- Address: Hobyar Mahallesi, Mimar Kemalettin Caddesi, Konyalı Han No: 1 D: 405, Sirkeci, Fatih / Istanbul, Türkiye
- E-mail: [email protected]
- Telephone: +90 530 547 64 82
What we process
Contact form
When you complete the form we record your name, your e-mail address, your telephone number if you enter one, the practice area your message relates to, and the text of your message. These data are processed only to assess your request and to reply to you.
Your IP address and browser details are not written to the message record. Misuse of the form is prevented by a rate limit and a bot check applied at the moment of the request; neither leaves a stored record behind.
Application to join the team
The application form processes your name, e-mail address, telephone number, the city you work in, the bar association you are registered with, your bar registration number, your Union of Turkish Bar Associations registration number if you enter one, the year you were called to the bar, the university you graduated from, the languages you speak, your practice areas, your covering letter, your CV file and your LinkedIn address if you enter one.
Your CV is stored in an area that cannot be reached from the internet, under a randomly generated file name rather than its original one. Only an authorised panel user can download it.
The form has two separate boxes. The first concerns the processing of your data within the scope of this notice and is required in order to apply. The second is explicit consent and is optional: your application is received and assessed whether or not you tick it. It covers keeping your application on file for future openings.
You may withdraw your explicit consent at any time; when you do, your application record and your CV file are deleted.
Purposes and legal grounds
- Replying to your request: Article 5/2-(c) and Article 5/2-(f) of Law No. 6698.
- Assessing your application: Article 5/2-(c).
- Keeping your application on file for future openings: Article 5/1, on the basis of your explicit consent.
- Securing the site and its forms: Article 5/2-(f).
Completing a form does not create a lawyer-client relationship; how that relationship arises is explained on the Legal Disclaimer page. Once it does arise, information relating to your file is processed under the duty of professional secrecy in Article 36 of the Attorneys' Act No. 1136.
Who receives the data
Your data is never transferred or sold for marketing purposes. Data is shared only to the extent necessary for the service to operate:
- Hostinger — the hosting service on which the site, the database and the CV files are held, and the e-mail service through which notifications are sent,
- the bot verification service that protects the forms against automated submissions,
- the analytics service that measures visit statistics, only if you have consented to cookies.
The servers of these providers are located outside Türkiye, so to that extent your data is transferred abroad within the meaning of Article 9 of Law No. 6698. The analytics service runs only with your consent, and advertising and remarketing signals remain permanently disabled even when consent is given.
How long we keep it
- Contact messages: 24 months from the date they are sent. The record is permanently deleted once the period expires.
- Applications submitted without explicit consent: if the application is rejected, 6 months from the date of rejection. The application record and the CV file are deleted together once the period expires.
- Applications submitted with explicit consent: until consent is withdrawn. The record is kept for future openings and is deleted when you withdraw your consent.
- Applications still open or accepted: for as long as the process continues.
Deletion is carried out by a scheduled task rather than by hand. If the periods change, this page is updated as well.
Your rights
Under Article 11 of Law No. 6698 you may apply to the data controller and:
- learn whether your personal data is being processed and, if so, request information about it,
- learn the purpose of the processing and whether the data is used in line with that purpose,
- know the third parties to whom the data is transferred, in Türkiye or abroad,
- request correction where the data is incomplete or inaccurate,
- request erasure or destruction within the conditions set out in the Law,
- request that correction, erasure and destruction be notified to the third parties to whom the data was transferred,
- object to a result reached against you through analysis carried out solely by automated systems,
- claim compensation if you suffer loss because the data was processed unlawfully.
Send your request, together with information identifying you, in writing to the address above or by e-mail from the address registered in our system to [email protected]. Your request is answered within 30 days at the latest. If it is refused or left unanswered within that period, you may lodge a complaint with the Turkish Personal Data Protection Board.
Cookies
The cookies used on this site, their lifetimes and the scope of your consent are set out on a separate page: Cookie Policy.