1. Data controller and contact details
For the purposes of the Turkish Personal Data Protection Law No. 6698 (“KVKK”), Mertcan Turan, Attorney at Law, is the data controller for this website and initial contact with the office.
- Address
- Erzene Mahallesi, Kazım Karabekir Caddesi, Asil Öztürk İş Merkezi No:5/1, Kat:7, Daire:701, Bornova, İzmir, Türkiye
- Telephone
- +90 530 117 28 77
- Bar registration
- İzmir Bar Association · 17004
This notice covers only the digital interactions described below. If the office accepts a legal matter, further information appropriate to the specific data flow may be required for the client, opposing party, witnesses, employees or other people concerned.
2. What happens in your browser and what happens through an external channel?
Search and browsing
Search terms and filters work within the page. Google Analytics loads only after you allow analytics. No advertising cookie is used. The hosting and security layer may process essential technical logs, such as IP address, request time, browser and security events, to deliver pages, prevent misuse and investigate errors.
Document and calculation tools
The application code does not send text entered in these forms to a server or write it to persistent browser storage. A draft is processed in this tab's temporary memory; a downloaded file remains on your device.
Contact forms
The meeting, company counsel and site issue forms do not send data to a website server. They only prepare an email or WhatsApp draft. The site does not send it automatically. Review the draft and send it yourself in the chosen application. Documents cannot be uploaded.
Telephone, email and WhatsApp
If you choose one of these channels, that service processes data under its own terms. Please describe only the general issue. Do not send unnecessary identity, health, criminal, financial or opposing-party information.
Please note: Initial contact does not mean that a legal matter has been accepted or that an attorney-client relationship has begun. If a deadline applies, do not wait for a website response or appointment confirmation.
3. Categories of data that may be processed
| Interaction | Possible data | Source or method | Website handling |
|---|---|---|---|
| Website access | IP address, device and browser, request time, security and error logs | Automatically through hosting, CDN and security services | May be processed to provide the technical service |
| Search and tools | Search term, calculation input, document draft | Your browser | Not sent to the application server or stored persistently |
| Initial contact | Name, contact details, preferences, general subject and the message you send | Email, WhatsApp or telephone | A draft is prepared in the browser; you complete sending in an external application |
| Checks before accepting a matter | Parties and roles, conflict information, authority and identity verification details | Directly from the person concerned or an authorised representative | Requested separately through a suitable channel if needed |
| Sensitive content | Health, criminal conviction or security-measure, biometric or genetic data, and other special-category data | Only where a specific legal need and appropriate legal conditions exist | Not requested in the first message; should not be sent through an open channel |
The site does not use membership accounts, payments, document uploads or advertising profiles. Google Analytics runs only after analytics permission.
4. Purposes and legal grounds
Providing and protecting the site
Technical logs may be processed to deliver pages, resolve errors, prevent misuse and maintain information security where the conditions for legal obligation or legitimate interests under KVKK Article 5(2) apply, provided the fundamental rights of the person concerned are not harmed.
Understanding an enquiry and considering whether to accept it
Contact details and the general enquiry may be processed to respond, assess conflicts of interest and the possibility of representation, and take steps directly related to establishing a contract or to establishing, exercising or protecting a right, where the conditions in KVKK Article 5(2)(c), (ç), (e) or (f) apply.
Legal assistance and legal obligations
If a matter is accepted, data needed for identity and authority checks, file management, professional duties, accounting and disputes may be processed on the relevant legal grounds. The scope depends on the accepted matter and applicable law and is determined separately.
Special-category personal data
These data are not requested at first contact. If they become necessary for a particular matter, an applicable current processing condition under KVKK Article 6, additional technical and administrative safeguards, and data minimisation will be applied. Simply visiting the site is not explicit consent.
If a separate activity requires explicit consent, a specific, withdrawable consent process will be provided separately from this notice. The service is not made conditional on consent that is not legally required.
5. Communication services and data transfers
Contact drafts are prepared on your device. They do not reach the office until you press Send in WhatsApp or your email application. Email drafts are addressed to mertcanturantr@gmail.com and, once sent, may be processed through Google Gmail. The site does not send form data to FormSubmit.
Document, search and calculation inputs are not sent to the website server. When you open an external application, the draft may be transferred to the service you choose; the message reaches the office when you complete sending there. Include only the contact details and general subject needed.
When you access the site, OpenAI Sites and the Cloudflare hosting and security infrastructure it uses may process technical data such as IP address, request time, browser and security events. Google Analytics loads only after your analytics permission. Opening YouTube or Instagram content may connect to Google or Meta services; external media are designed not to make unnecessary connections before you interact with them.
Communication channels: Email drafts prepared by forms are addressed to Google Gmail; other business email uses Kolan Bilişim, and WhatsApp uses Meta infrastructure. METUnic is used only for domain management.
Assessment of transfers abroad: Processing or transfer abroad may arise through Google Gmail, OpenAI Sites, Cloudflare, permitted Google Analytics or Meta infrastructure. The legal transfer mechanism and provider terms are assessed under KVKK Article 9. Do not include unnecessary or special-category data in an initial message.
This notice concerns the site and initial contact. Necessary processing and sharing for an accepted legal matter are explained separately. Using the site is not blanket permission to share your data with every organisation or adviser.
6. Retention, deletion and security
- Local tool inputs: Not stored on the server; temporary memory is cleared when the tab is refreshed or closed. You manage any downloaded copy.
- Technical security logs: May be retained within OpenAI Sites and Cloudflare infrastructure for the provider's applicable retention period for security, misuse prevention and error investigation. The office does not have unrestricted access to those infrastructure logs or create a separate visitor profile on the site.
- Initial enquiries that do not become a matter: Kept only as long as needed to assess and answer the enquiry and to establish, exercise or protect a right in a possible dispute; placed in the applicable disposal process when that purpose ends.
- Accepted matters: Subject to a separate retention plan that considers legal and professional duties for the type of file, limitation or forfeiture periods, archives and accountability.
Instead of applying one unverified retention period to all categories, a periodic retention and disposal plan is based on category, purpose and legal obligation. Unnecessary copies, publicly accessible links and transmission of sensitive documents at first contact are avoided; access control, updates, backup, incident management and provider oversight are applied.
7. Rights under KVKK Article 11 and applications
The person concerned may ask whether their data have been processed; request information if so; learn the purpose and whether use is consistent with it; learn recipients in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where conditions are met and notification to recipients; object to a result against them based solely on automated analysis; and seek compensation for harm caused by unlawful processing.
Send an application to the controller with enough information to verify your identity and request, its subject, your preferred reply channel and any supporting documents. You may write to the office address above or, from an email address you have previously notified to the controller and that is registered in its system, email mertcanturantr@gmail.com. If using another electronic method accepted by law, confirm the relevant address and verification requirements separately. Do not send unnecessary identity-document copies; proportionate verification will be explained if needed.
Applications are resolved as soon as possible according to their nature and within 30 days at the latest. If handling requires a separate cost, only a fee consistent with the Board's tariff may be charged. Complaint routes under KVKK remain available if an application is refused, inadequately answered or not answered on time.
9. Updates and official sources
This notice is updated if the data flow, provider, purpose or law changes. Material changes are announced by an appropriate method before they take effect. The date of this notice does not retroactively change the legal basis for past processing.
- Law No. 6698 · Turkish Legislation Information System
- KVKK · Duty to inform
- KVKK · Rights of the person concerned
- KVKK · Responding to applications
- KVKK · Guide to transfers abroad
This notice is not an explicit-consent statement, cookie consent, a legal services agreement or acceptance of a legal matter.