1. Identity of the Data Controller

Data Controller	Deniz Bersu Mert Attorney Partnership
Telephone	+90 (539) 423 08 46
E-mail	info@dbmhukuk.com
Website	www.dbmhukuk.av.tr/
Address	Sahrayıcedit Mah. Atatürk Cd., Mesa Koz No:69 D:50, Kadıköy/İstanbul

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person,

Processing of Personal Data: Any operation performed on personal data such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use thereof, whether fully or partially by automatic means or by non-automatic means provided that it forms part of a data recording system,

Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller,

Data Recording System: The recording system in which personal data are processed by being structured according to specific criteria,

Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system,

Law / KVKK: The Personal Data Protection Law No. 6698 published in the Official Gazette dated 7 April 2016 and numbered 29677,

Authority: The Personal Data Protection Authority,

Board: The Personal Data Protection Board.

3. Your Processed Personal Data, the Purposes of Processing and the Legal Grounds

3.1. Our Website Visitors

We process the IP addresses of visitors who visit our website in order to classify and evaluate user data, for website analytics and improvements, and to understand how the features and functions of the website are used in order to improve user experience, based on the legal ground set forth in Article 5/2 (f) of the Law: “Processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.”

If you create a newsletter subscription through our website, your e-mail address within the category of Contact Information will be processed for the purpose of sending legal updates, legislative amendments, announcements, articles and informative content and informing you about developments regarding the services provided by our office, based on your explicit consent provided that you have given commercial electronic communication approval within the scope of the Law No. 6563 on the Regulation of Electronic Commerce.

Through e-mails you send to our e-mail address info@dbmhukuk.com available on our website, your name, surname, e-mail information and personal data contained in your e-mail are processed for the purpose of handling and responding to your requests and questions, based on the legal grounds regulated under Article 5/2(d) of the Law: “It has been made public by the data subject himself/herself.” and Article 5/2(f): “Processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.”

Links to our social media accounts are available on our website. When you click these links, you may be redirected to the relevant social media platforms. Such platforms may collect and process your personal data in accordance with their own policies; we do not have control over these processes. Therefore, we recommend that you review the privacy and terms of use of the relevant platforms before accessing our social media accounts.

As DBM Attorney Partnership; in order to ensure that you have an effective visitor experience regarding Site usage, we use cookies on the Site. For detailed information regarding cookies, you may access at any time the “Personal Data Protection Disclosure Text Regarding Cookies” available at /Home/CookiePolicy.

3.2. Our Clients

The personal data of our clients or the representatives, authorized persons and employees of our corporate clients are processed for the purposes of providing our consultancy services, conducting litigation and dispute processes and representing clients. Within this scope, personal data are processed based on the legal ground of “being directly related to the establishment or performance of a contract” pursuant to Article 5/2(c) of the Law for the purpose of establishing a power of attorney relationship with our clients or executing a service contract and fulfilling contractual obligations.

The personal data of our clients and representatives/authorized persons/employees of corporate clients are also processed for the purposes of conducting the business relationship, ensuring communication and informing clients about legal developments. Within this scope, the processed data are processed based on the legal ground set forth in Article 5/2(f) of the Law: “Processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.”

3.3. Our Prospective Clients

The personal data of prospective clients requesting a proposal for services from us; representatives, authorized persons or employees of corporate prospective clients; or persons we meet at various organizations or obtain lawfully from publicly available sources are processed for the purpose of establishing communication and informing such persons about legal developments, innovations and events. Within this scope, personal data are processed based on the legal ground set forth in Article 5/2(f) of the Law: “Processing is necessary for the protection of our legitimate interests, provided that it does not harm your fundamental rights and freedoms.”

4. To Whom and For What Purpose the Processed Personal Data May Be Transferred

In the event that your IP information, which is declared and undertaken to be processed by DBM Attorney Partnership in accordance with the “General Principles” set forth in Article 4 of Law No. 6698, is requested, it may be transferred to official institutions and organizations such as the Information and Communication Technologies Authority and the Chief Public Prosecutor’s Office, based on the legal ground of “being mandatory for the data controller to fulfill its legal obligation.”

Your personal data may be transferred to authorized authorities without your explicit consent if requested by official authorities in accordance with the relevant legislation or if there is an obligation to disclose in accordance with mandatory provisions in force. In addition, in the event of a legal dispute affecting DBM Attorney Partnership, your data may be shared with courts and other authorized institutions and organizations to the extent necessary. Within this scope, your personal data may be transferred based on the legal grounds set forth in Article 5/2(ç) of the Law: “Being mandatory for the data controller to fulfill its legal obligation” and Article 5/2(e): “Processing is mandatory for the establishment, exercise or protection of a right.”

Since our information processing systems and infrastructure are located in Türkiye, your personal data are, as a rule, not transferred abroad.

5. Method of Collecting Your Personal Data

Your personal data are collected verbally, in writing or electronically, by automatic or non-automatic methods, through documents and information you transmit to us physically or electronically.

6. Your Rights Within the Scope of Article 11 of the KVKK

As DBM Attorney Partnership, we inform you that within the scope of Article 11 of the KVKK, you have the following rights:

1. To learn whether personal data are processed,
2. To request information if personal data have been processed,
3. To learn the purpose of processing of personal data and whether they are used in accordance with their purpose,
4. To know the third parties to whom personal data are transferred domestically or abroad,
5. To request correction of personal data if processed incompletely or incorrectly and, within the framework of Article 7 of the KVKK, to request deletion, destruction or anonymization of personal data if the reasons requiring processing cease to exist,
6. To request notification of the transactions carried out regarding the correction, deletion, destruction or anonymization of personal data to third parties to whom personal data have been transferred,
7. To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
8. To request compensation for the damage in case of suffering damage due to unlawful processing of personal data.

7. Application Procedure

You may submit your requests within the scope of Article 11 of the Personal Data Protection Law by filling out the “Data Subject Application Form” accessible here in accordance with Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller dated 10 March 2018;

• • You may personally deliver the application form signed with a wet signature together with documents identifying your identity to Sahrayıcedit Mah., Atatürk Cd., Mesa Koz No:69 D:50, Kadıköy/İstanbul, or send it to the specified address by registered mail with return receipt or via notary public,
• • By signing this Application Form with a “secure electronic signature” defined in the Electronic Signature Law No. 5070 and sending it to info@dbmhukuk.com,
• • By filling out and signing this Application Form, scanning the wet-signed form and sending it via e-mail to info@dbmhukuk.com (in case this method is preferred, a document verifying identity must also be attached to the e-mail),
• • By signing with a “secure electronic signature” defined in the Electronic Signature Law No. 5070 and sending it via the KEP system to mert.metin.1@hs01.kep.tr.

In applications to be made, it is mandatory that the request be made in Turkish; that it be written clearly so that it can be understood without hesitation which of the rights listed above and in Article 11 of the KVKK the request is based on; and that identity information and documents and information related to the subject be attached to the application. In applications to be made on behalf of third parties, a power of attorney suitable to represent the relevant person must be available.

Applications made within this scope will be concluded free of charge as soon as possible and at the latest within 30 days. However, if the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be requested from you.

If the information and documents submitted are incomplete, this period starts from the date on which the information and documents are fully submitted. Our Company has the right to verify your identity before responding to you.

Responses may be sent in writing to the applicant’s address by any type of mail or to the KEP/e-mail address you have notified, at the discretion of DBM Attorney Partnership.

DBM Attorney Partnership reserves the right to amend this disclosure text due to possible amendments in the KVKK and methods to be determined by the Personal Data Protection Board.