Prepared under article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Disclosure Obligation.
Last updated:
1. Identity of the controller
Your personal data is processed by the following, acting as controller:
DLC Law Firm
Address: Windowist Tower, Eski Büyükdere Caddesi No:26/157 Kat:19, 34467 Maslak-Sarıyer, İstanbul
Phone: +90 212 332 0 352
E-mail: info@dlc.law
2. Personal data processed
| Category | Data |
|---|---|
| Identity | Name, surname |
| Contact | E-mail address, phone number |
| Request / application | Subject of your request, message text; position applied for in a career application |
| Transaction security | IP address, time of submission, address of the page submitted from, server access logs |
Please do not include special categories of personal data (health, criminal convictions, membership information and the like) or third parties’ data in the message field; such data is not requested for an initial enquiry.
3. Purposes of processing
- Conducting communication activities and following up requests,
- Initial assessment of legal advice requests and conflict-of-interest checks,
- Carrying out processes relating to the formation and performance of an engagement agreement,
- Evaluating job applications and running human resources processes,
- Conducting information security processes and preventing misuse,
- Conducting activities in compliance with legislation and the Attorneys’ Act.
4. Legal grounds
Your data is processed under article 5/2 of the KVKK on the following grounds:
- art. 5/2-c — Directly related to the formation or performance of a contract (pre-engagement discussions),
- art. 5/2-ç — Compliance with the controller’s legal obligations (record-keeping and retention duties under the Attorneys’ Act),
- art. 5/2-e — Necessary for the establishment, exercise or protection of a right,
- art. 5/2-f — The controller’s legitimate interests, provided this does not harm your fundamental rights and freedoms (information security, prevention of misuse).
As the site sets no non-essential cookies, there is no processing here that would require separate explicit consent for cookies.
5. Method of collection
Your personal data is collected electronically when you complete the contact or career form on dlc.law; server access logs are collected automatically during your visit.
6. Transfers
In accordance with articles 8 and 9 of the KVKK, your personal data may be transferred to:
- our attorneys and relevant staff who will assess your request,
- our e-mail and hosting service providers,
- judicial and administrative authorities empowered by law.
As our corporate e-mail infrastructure may process data in data centres outside Türkiye, the conditions for cross-border transfer set out in article 9 of the KVKK apply. The attorney’s duty of secrecy is reserved in all cases.
7. Retention period
Records of initial enquiries that do not proceed are kept for 2 years, career applications for 1 year, and server access logs for no more than 12 months. For matters that become engagements, the periods required by article 39 of the Attorneys’ Act and related legislation apply. Once the period expires, data is erased, destroyed or anonymised.
8. Your rights as a data subject
Under article 11 of the KVKK, by applying to the controller you have the right to:
- learn whether your personal data is processed and, if so, request information about it,
- learn the purpose of processing and whether the data is used accordingly,
- know the third parties to whom it is transferred, in Türkiye or abroad,
- request rectification if it is incomplete or inaccurate,
- request erasure or destruction under the conditions in article 7,
- request that these actions be notified to third parties to whom the data was transferred,
- object to an adverse outcome arising from analysis carried out exclusively by automated systems,
- claim compensation for damage suffered due to unlawful processing.
9. How to apply
In line with the Communiqué on the Procedures and Principles of Application to the Controller, you may submit your requests:
- by a signed written petition, together with documents evidencing your identity, to Windowist Tower, Eski Büyükdere Caddesi No:26/157 Kat:19, 34467 Maslak-Sarıyer, İstanbul,
- from your registered electronic mail (KEP) address or from the e-mail address you have previously notified to us and that is registered in our systems, to info@dlc.law.
Your application is concluded free of charge within 30 days at the latest; where the process entails an additional cost, the fee in the tariff set by the Board may be charged. If your application is rejected or left unanswered within the period, you may lodge a complaint with the Personal Data Protection Board.