PRIVACY NOTICE

As Yılmazlar Law Firm (“YHB“), we attach great importance to the protection of your personal data and attorney-client confidentiality, which we process in the capacity of “data controller” in accordance with KVKK, Attorneyship Law No. 1136 and relevant legislation. In this context, we would like to inform you about your personal data that may be processed by Yılmazlar Law Firm, the purposes of their processing, the legal reason and method of collecting personal data, the recipient groups to whom your personal data can be transferred, and your rights under the Personal Data Protection Law No. 6698 (“KVKK“). This Privacy Notice (“Privacy Notice”) covers the personal data of real persons, and the data processing activities we carry out as data processors in line with the instructions and/or requests of our clients are outside the scope of this Privacy Notice. Necessary notifications regarding these activities are carried out by our relevant clients acting as data controllers.

Your personal data may be collected from the information and documents you create or share, transactions, stakeholders, publicly available sources and platforms (such as press, trade registry and chamber of commerce records), YHB’s communication with you and through other channels, meetings,   It is collected verbally, in writing and electronically through interviews and correspondence, our website or social media, and can be processed by automatic (electronic systems and programs we use) and non-automatic (physical file and record keeping) methods for the purposes described in this Privay Notice.

Your personal data is stored in Turkey for the period stipulated in the relevant legislation for the storage of this data and/or for the period required for the purpose for which they are processed, and abroad if the necessary security measures are taken (for detailed explanation , see Article 2. Title.) At the end of the relevant periods, your personal data will be deleted, destroyed or anonymized in accordance with the legislation and the relevant policies and procedures of YHB.

1. Personal Data

The following Personal Data may be processed by obtaining it directly from various sources, including you, our clients, suppliers, official institutions and publicly available sources, by automatic methods such as our servers and electronic devices, and by non-automatic methods such as our document archives but which are part of a data recording system:

Identity Data	Name, surname, Turkish ID, passport and/or other identity data, date of birth, Place of birth
Citizenship/Residency Data	All your personal data required for citizenship and residency (marriage certificate, land registry records, bank statements, birth certificates, etc.)
Contact Data	Phone Number, Mailing Address, Residence Information, email address and other contact details provided by the data subject
Sensitive personal data	In limited circumstances, to the extent necessary for a specific service we provide to you or necessary to meet our legal obligations, information that can be identified as sensitive data under applicable legislation (e.g., membership of an association, medical certificate for a will, etc.).
Client service/file data	Personal Data obtained from clients in relation to their customers, employees, or individuals known to the client, billing details, payment history, and client feedback.
Device data	Computer Internet Protocol (IP) address, single device identifier (UDID), other data linked to a device, and other data about the use of the Site.
Registration data	Newsletter requests, event, conference, webinar and seminar registrations. These records may include your visual and audio data.

2. Purposes and Legal Reasons for Processing Personal Data

Within the scope of Legal Consultancy and Advocacy Services; personal data related to clients, project stakeholders, suppliers from whom consultancy/support is received related to their main field of activity, experts from whom opinions are obtained, persons who are the subject or party to the relevant consultancy or advocacy service or dispute and their representatives and employees, and third parties such as judges, prosecutors, party attorneys, experts, notaries can be processed. In this context, the purposes and legal reasons for processing are as follows:

Your personal data is directly related to the establishment or performance of a contract stipulated in Article 5/2(c) of the KVKK, the fulfillment of legal obligations in accordance with Article 5/2(ç), the personal data has been made public by you within the scope of Article 5/2(d), data processing is mandatory for the establishment, exercise or protection of a right within the scope of Article 5/2(e) of the KVKK, or the processing of data for the legitimate interests of the data controller YHB in accordance with Article 5/2(f) of the KVKK. For the legal reasons that it is mandatory, it is processed within the scope of the following data processing purposes without your explicit consent:

• Providing legal consultancy and advocacy services to clients and fulfilling and reporting our other contractual obligations;
• Communications with clients, their stakeholders and third parties on behalf of clients within the scope of services provided to clients;
• Informing clients about developments in legislation and other issues;
• In connection with the legal consultancy and advocacy services provided to the clients, obtaining expert, expert opinions and opinions by the YHB, procuring products/services from third parties and carrying out the relevant processes;
• Issuance of self-employment receipts, execution of payment, accounting and reconciliation processes;
• Execution of internal processes such as finance, IT, HR, office management, secretariat, correspondence, archive, etc.
• Ensuring the security of our assets and information;
• Execution of YHB internal reporting activities, auditing, business development, etc., contract management, legal and accounting processes, and fulfilment of YHB’s internal rules and policies;
• Submitting the necessary information and documents to judicial and administrative authorities, including enforcement offices and law enforcement officers, in line with the requests that may come in accordance with the relevant legislation;
• Fulfilling the obligations of the YHB under the legislation, especially the Attorneyship Law No. 1136.

Your personal data is processed within the scope of KVKK 5/1, in the presence of your explicit consent, for the following purposes:

• Conducting our corporate communication processes and strengthening client relations and communication;
• Organization and announcement of events organized by YHB or in which YHB participates/is a part.

Within the scope of Business Development and Newsletter Publications and Subscriptions, personal data related to the clients to whom we provide legal consultancy and advocacy services, project stakeholders, suppliers from whom consultancy/support is received in relation to their main field of activity, experts from whom opinions are obtained and their representatives and employees, and persons interested in our services and publications can be processed. In this context, the purposes and legal reasons for processing are as follows:

To the extent of the requirements of the legal consultancy/attorneyship relationship, your personal data is processed within the scope of the following data processing purposes without your explicit consent for the legal reasons stipulated in Article 5/2(c) of the KVKK, which are directly related to the establishment or performance of a contract, the fulfillment of legal obligations in accordance with Article 5/2(ç), and the necessity of data processing for the legitimate interests of the data controller YHB in accordance with Article 5/2(f):

• Carrying out business development processes and improving services,
• Fulfilling and reporting our legal consultancy and advocacy services and other contractual obligations provided to clients;
• Execution of YHB internal reporting activities, auditing, business development, etc., contract management, legal and accounting processes, and fulfillment of YHB’s internal rules and policies;
• Execution of internal processes such as finance, IT, HR, office management, secretariat, correspondence, archive, etc.;
• Ensuring the security of our assets and information;
• Submitting the necessary information and documents to judicial and administrative authorities, including enforcement offices and law enforcement officers, in line with the requests that may come in accordance with the relevant legislation, and fulfilling the obligations of the YHB within the scope of the legislation, especially the Attorneyship Law No. 1136,

Your personal data is processed within the scope of KVKK 5/1, in the presence of your explicit consent, for the following purposes:

• Carrying out our corporate communication processes and strengthening client relations and communication;
• Sharing our publications and studies such as bulletins, articles, developments in the field of law, etc. with our current and potential clients and other 3rd parties interested in our publications and studies by means of mail and e-mail;
• Organization and announcement of events organized by YHB or in which YHB participates/is a part.

If you are interested in our services, publications and events and have requested to be included in our submission lists, your personal data will be processed in the presence of explicit consent within the scope of 5/1 for the purpose of making our submissions regarding developments in the field of law. If you want to unsubscribe from YHB’s sending list,  you can send an e-mail to info@yilmazlar.av.tr.

Within the scope of Goods/Services Supply Processes Outside the Main Field of Activity; Personal data regarding suppliers from whom consultancy/support is received, third parties with whom rent, purchase and similar relationships are established, and their representatives and employees may be processed in the procurement of goods/services outside the main field of activity of YHB. In this context, the purposes and legal reasons for processing are as follows:

Your personal data is processed within the scope of the following data processing purposes without your explicit consent, for the legal reasons stipulated in Article 5/2(c) of the KVKK, which are directly related to the establishment or performance of a contract, the fulfillment of legal obligations in accordance with Article 5/2(ç) of the KVKK, or the necessity of data processing for the legitimate interests of the data controller YHB in accordance with Article 5/2(f) of the KVKK:

• Carrying out the product/service procurement and purchasing processes necessary to meet the needs of our office, fulfilling our contractual obligations within the framework of the product/service relationship and providing the necessary communication;
• Execution of invoicing, payment, accounting and reconciliation processes;
• Execution of internal processes such as finance, IT, HR, office management, secretariat, correspondence, archive, etc.;
• Ensuring the security of our assets and information;
• Execution of YHB internal reporting activities, auditing, business development, etc., contract management, legal and accounting processes, and fulfillment of YHB’s internal rules and policies;
• Submitting the necessary information and documents to judicial and administrative authorities, including enforcement offices and law enforcement officers, in line with the requests that may come in accordance with the relevant legislation;
• Fulfilling the obligations of the YHB under the legislation, especially the Attorneyship Law No. 1136.
  2. Transfer of Your Personal Data

Within the framework of YHB’s standard processes, the main situations in which your personal data may be shared with third parties for the above-mentioned purposes and in accordance with the legislation to the extent necessary and relevant for such purposes are as follows:

Your personal data may be processed in accordance with the basic principles stipulated by the KVKK and within the scope of the data processing purposes listed among the cases of Article 5/1 of the KVKK above, and in accordance with Article 8/1 of the KVKK, in the presence of your explicit consent, within the scope of the data processing purposes and scope listed among the cases of Article 5/2 of the KVKK and without your explicit consent in accordance with Article 8/2 of the KVKK, when necessary for the provision of our legal consultancy and advocacy services,   with third parties such as relevant project stakeholders, experts and consultants from whom opinions are obtained, courts, notaries and relevant institutions and organizations; with platforms that compile professional experience information in the country with the approval of client reference persons within the framework of business development processes; with banks for the realization of payments; with people such as organization company, event venue, etc. for event organizations; With our suppliers and consultants from whom we receive services in the fields of IT, HR, finance, accounting, design, cargo, etc.; It may be shared with the competent authorities within the scope of requests from the authorities authorized to request your information within the framework of our legal obligations or legislation or in case of disputes. In addition, your personal data may be processed in accordance with Article 9 of the KVKK. Provided that the necessary security measures are taken, it is stored on the Microsoft 365 platform by Microsoft in data centers located in the European geographical region. This retention is carried out in accordance with Data Residency policies and Microsoft’s EU Data Boundary commitment, and when necessary for the provision of our legal consultancy and advocacy services, with third parties such as clients residing abroad, relevant project stakeholders, experts and consultants from whom opinions are obtained, courts, notaries and relevant institutions and organizations; with platforms that compile professional experience information abroad with the approval of client reference persons within the framework of business development processes; It may be shared with the competent authorities within the scope of requests from the authorities authorized to request your information within the framework of our legal obligations or legislation or in case of disputes.

3. Website Usage

We use device data so that people who visit our website at https://yilmazlar.av.tr/anasayfa/ can use our website effectively and make it more useful. Where data processing is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms, we monitor how our Site is used to help us improve the existing order and information on our Site and to provide a better service to our Site users. We use basic data, registration data, transaction data, and device data to ensure the security and effective operation of our sites and information technology systems. We monitor how our Sites are used to detect and prevent fraud, other crimes and abuse on our Sites where it is necessary to comply with our legal obligations and where processing is necessary for our legitimate interests, provided that it does not prejudice your fundamental rights and freedoms. Through this processing, we ensure that you can use our Sites safely.

4. Your Rights and Contact

As a personal data owner, we inform you that you have the following rights in accordance with Article 11 of the Law:

• To learn whether your personal data is processed or not,
• If your personal data has been processed, to request information about it,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred at home or abroad,
• To request correction of your personal data in case of incomplete or incorrect processing and to request notification of the transaction made in this context to third parties to whom your personal data has been transferred,
• To request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, although it has been processed in accordance with the Law and other relevant law provisions, and to request that the transaction made in this context be notified to third parties to whom your personal data has been transferred,
• To object to the fact that a result against you arises by analyzing the processed data exclusively through automated systems,
• To request compensation for the damage in case you suffer damage due to unlawful processing of your personal data.

If you have any questions or requests regarding your personal data, you can apply in writing to the address “Acıbadem Mah. Derin Sok, No: 8/A, Akasya Kent Etabı, Kule A1 Kat:17 D:48 34660 Üsküdar/Istanbul“ or to info@yilmazlar.av.tr.

In order to respond to your application in a healthy way, your request must be specific, clear and understandable, the subject you request must be related to you or if you are acting on behalf of someone else, you must be specially authorized in this regard and your authority must be documented, and in accordance with the legislation, your application must include your name, surname, Turkish ID number (nationality and passport number for foreigners), address information to which we can send our response, and documents proving your identity.

YHB reserves the right to make changes to this Privacy Notice from time to time. Review the Privacy Notice frequently and especially before providing personal data through the website. Any changes made in the Privacy Notice will be announced in a way that you can access with a link on the home page of the website.

Effective date: August 2017

Last updated: August 12, 2025