Privacy Policy

Last updated: 12 March 2026

1. Data Controller

Topluyıldız Legal Co. (the "Firm") is committed to protecting your personal data in accordance with Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), the UK General Data Protection Regulation ("UK GDPR"), and other applicable data protection legislation. This Privacy Policy explains how your personal data is collected, processed, and protected when you visit our website.

Data Controller: Topluyıldız Legal Co.
Address: Sinanpasa Mah. Suleyman Seba Cad. No 6/4, Besiktas, Istanbul, Turkiye
Email: info@topluyildiz.av.tr

2. Personal Data We Collect

The following personal data may be processed through our website:

Identity Data: Name, surname (via contact form)
Contact Data: Email address, phone number (via contact form)
Technical Data: IP address, browser information, pages visited, access dates
Cookie Data: Data collected through cookies relating to your use of our website

3. Purposes of Processing

Your personal data is processed for the following purposes:

Responding to your enquiries and contact requests
Providing information about our legal advisory services
Ensuring website security and resolving technical issues
Fulfilling legal obligations
Analysing website usage statistics to improve our services

4. Legal Basis for Processing

Your personal data is processed on the following legal bases:

Your explicit consent (for cookie usage)
Performance of a contract or pre-contractual steps (consultation requests)
Compliance with legal obligations
Legitimate interests of the data controller, provided that your fundamental rights and freedoms are not prejudiced

5. Data Transfers

Your personal data may be transferred to the following parties, limited to the purposes set out above and in compliance with applicable data protection legislation:

Competent public authorities where required by law
Website hosting service providers (for server hosting services)
Email service providers (for the purpose of delivering your contact requests)

6. Data Retention

Your personal data is retained for as long as necessary for the purposes for which it was processed and for the limitation periods prescribed by applicable legislation. Upon expiry of the retention period, your personal data will be deleted, destroyed, or anonymised.

7. Data Security

The Firm implements all appropriate technical and organisational measures to prevent unlawful processing of, and unauthorised access to, your personal data:

SSL/TLS encryption protocols
Access authorisation and control mechanisms
Regular security assessments

8. Your Rights

Under applicable data protection legislation, you have the right to:

Request information on whether your personal data is being processed
Request details of the processing if your personal data has been processed
Know the purpose of processing and whether data is used in accordance with that purpose
Know the third parties to whom your personal data is transferred
Request rectification of incomplete or inaccurate personal data
Request deletion or destruction of your personal data under the conditions prescribed by law
Request notification of rectification and deletion operations to third parties to whom your data has been transferred
Object to the occurrence of a result against you through exclusive analysis of processed data via automated systems
Claim compensation for damage arising from unlawful processing of your personal data

9. How to Exercise Your Rights

To exercise any of the rights set out above, you may contact us:

Email: info@topluyildiz.av.tr (please include "Data Protection Request" in the subject line)
Post: Sinanpasa Mah. Suleyman Seba Cad. No 6/4, Besiktas, Istanbul, Turkiye

Your request will be processed free of charge within 30 (thirty) days at the latest.

10. Changes to This Policy

This Privacy Policy may be updated in line with changes in legislation or our practices. The updated policy takes effect on the date of its publication.