1. IDENTITY OF THE DATA CONTROLLER
This Personal Data Protection and Processing Policy (“PDPL Disclosure Text”) is issued in accordance with the Personal Data Protection Law No. 6698 (“PDPL”) by the data controller:
Data Controller:
Thomas Andreas Di Constantinople
Muğla Bar Association Registration No.: 1704
Address:
Taşyaka Mah. 179 Sok. No:41A/6
Fethiye, Muğla, Turkey
Contact:
Email: thomas.andreas.di.constantinople@gmail.com
Phone: +90 532 522 55 30

2. PURPOSES OF PROCESSING PERSONAL DATA
Your personal data is processed for the following purposes, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the PDPL:
2.1. Provision of Legal Advisory Services

• Establishment and management of the client-lawyer relationship
• Preparing and executing legal advisory and power of attorney agreements
• Conducting litigation, legal process management, and representation activities
• Evaluating and responding to client requests

2.2. Communication and Information: Receiving and responding to communication requests

• Managing appointment requests
• Sharing legal information and regulatory updates
• Measuring client satisfaction

2.3. Fulfilling Legal Obligations: Complying with the provisions of the Attorney Law No. 1136 and related legislation

• Compliance with the regulations of the Turkish Bar Association and the Muğla Bar Association
• Compliance with tax legislation and financial obligations
• Fulfilling audit and reporting obligations

2.4. Security and Archiving: Ensuring the security of the law firm

• Archiving in accordance with legal retention periods
• Ensuring compliance with ethical rules
• Protection of professional secrecy

3. METHODS OF COLLECTING PERSONAL DATA
Your personal data is collected using the following methods:
3.1. Direct Collection

• Website contact forms
• Email correspondence
• Telephone conversations
• Face-to-face meetings and client meetings
• Power of attorney and consultancy agreements

3.2. Indirect Collection

• Court files and official documents
• Legal documents received from third parties
• References and referrals
• Public records and registers

4. CATEGORIES OF PERSONAL DATA PROCESSED
4.1. Identity Information
First name, last name, Turkish ID number, date of birth, nationality, passport/ID card photocopy
4.2. Contact Information
Address, phone number, email address, KEP address
4.3. Client Transaction Information
Power of attorney agreement information, case file numbers, court information, and legal process records
4.4. Financial Information
Bank account information (IBAN), fee payments, and invoice information
4.5. Visual and Audio Records
Office security camera recordings, meeting notes
4.6. Special Category Personal Data
Health data (within the scope of health law cases), criminal conviction information (within the scope of relevant legal proceedings)

IMPORTANT NOTE: Special category personal data is processed only with your explicit consent or in cases provided for by law and to the extent necessary.

5. TRANSFER OF PERSONAL DATA
Your personal data may be transferred to the following parties within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL:
5.1. Domestic Transfer
Judicial Authorities: Courts, public prosecutors' offices, enforcement offices
Bar Associations: Turkish Bar Association, Muğla Bar Association
Public Institutions: Land registry offices, population offices, tax offices
Collaborating Lawyers: Lawyers collaborating within the scope of the power of attorney
IT Service Providers: Web hosting, email server, cloud storage services
Financial Advisors: Accounting and tax advisory services
5.2. International Transfer
International Courts: Within the scope of European Court of Human Rights applications
Foreign Law Firms: For files requiring cooperation with foreign lawyers
Consulates: For diplomatic processes and notary certification procedures
The necessary measures are taken in accordance with Article 9 of the PDPL for international transfers.

6. RIGHTS OF THE DATA SUBJECT
Pursuant to Article 11 of the PDPL, as a personal data subject, you have the following rights:
6.1. Fundamental Rights

• To learn whether your personal data has been processed
• To request information about the processing of your personal data
• To learn the purpose of the processing of personal data and whether it is used for its intended purpose
• To know the third parties to whom your personal data has been transferred within or outside the country

6.2. Rights to Rectification and Erasure

• To request the rectification of your personal data if it has been processed incompletely or incorrectly
• To request the erasure or destruction of your personal data within the framework of the conditions outlined in Article 7 of the PDPL
• Requesting that third parties to whom personal data has been transferred be notified of the rectification, erasure, or destruction

6.3. Rights to Object and Compensation
Objecting to a result that is detrimental to you arising from the analysis of processed data exclusively through automated systems
Requesting compensation for damages incurred due to the unlawful processing of personal data

7. RETENTION PERIOD OF PERSONAL DATA
Your personal data is stored for the period required for the processing purpose and within the framework of the retention periods stipulated in the relevant legislation:

Your personal data will be deleted, destroyed, or anonymized upon the expiration of the retention period or the cessation of the processing purpose.

8. YOUR RIGHTS AND APPLICATION METHOD
In accordance with Article 13 of the PDPL, you may submit your application using the following methods to exercise your rights:
8.1. Application Channels
Written Application:
Thomas Andreas Di Constantinople Taşyaka Mah. 179 Sok. No:41A/6 Fethiye, Muğla, Turkey
8.2. Information Required for the Application

• First name, last name, and signature if the application is in writing
• Turkish ID number
• Residence or workplace address for notification purposes
• If available, email address, telephone, and fax number for notification purposes
• Subject of the request

8.3. Evaluation of the Application
Your application will be processed free of charge within a maximum of 30 (thirty) days, depending on the nature of the request. If the application incurs additional costs, a fee may be charged in accordance with the rates determined by the Personal Data Protection Board.

9. SECURITY OF PERSONAL DATA
Our law firm takes the following technical and administrative measures to ensure the security of your personal data in accordance with Article 12 of the PDPL:
9.1. Technical Measures

• SSL certificate with an encrypted website
• Strong password policy and multi-factor authentication
• Regular data backup and disaster recovery plan
• Antivirus and firewall systems
• Up-to-date software and security patches

9.2. Administrative Measures

• Employee confidentiality agreements
• Personal data processing inventory
• Data access authorization system
• Compliance with professional secrecy and ethical rules
• Regular security audits

10. COOKIE POLICY
Cookies are used on our website to improve the user experience. For detailed information, please see our [Cookie Policy] page.

11. PROFESSIONAL SECRECY AND CONFIDENTIALITY
Pursuant to Article 36 of the Attorney Law No. 1136, attorneys are obligated to comply with professional secrecy. All communication and information between the client and the attorney is kept confidential and is not shared with third parties under any circumstances.
Exception: Information may be shared only when legally required (court order, legal obligation, etc.) and to the extent necessary.

12. LEGAL NOTICE
Use of this website does not create an attorney-client relationship. The information on this website is for general informational purposes only and does not constitute legal advice. Please get in touch with us directly for legal advice.

13. POLICY UPDATES
This PDPL Disclosure Statement may be updated in line with legal regulations and changes in law firm practices. Updates shall enter into force on the date they are published on our website.

14. CONTACT
For questions and requests regarding the PDPL and your personal data:
Email: thomas.andreas.di.constantinople@gmail.com
Phone: +90 532 522 55 30
Address: Taşyaka Mah. 179 Sok. No:41A/6 Fethiye Muğla Turkey

15. PERSONAL DATA PROTECTION BOARD
If your request is rejected, the response is deemed insufficient, or no response is provided within the specified timeframe, you may file a complaint with the Personal Data Protection Board:

Personal Data Protection Authority
Address: Nasuh Akar Mah. Ziyabey Cad. 1407. Sok. No: 4 06520 Balgat-Çankaya/Ankara
Website: www.kvkk.gov.tr
Email: kvkk@kvkk.gov.tr

Last Updated: November 27, 2024
Effective Date: November 27, 2024

© 2024 Thomas Andreas Di Constantinople - All rights reserved.

This disclosure statement has been prepared in accordance with the Personal Data Protection Law No. 6698 and related legislation.