BAĞ&GÜNEN LAW FIRM

PRIVACY NOTICE

Data Controller

Bağ&Günen Law Firm (“Att. Ece Nihan Günen and/or Att. Gökçe Bağ”); has the title of data controller in terms of protection of personal data together with ensuring data privacy and security of their clients, business partners and other third partners that they are related, this Privacy Notice is provided in order to inform the persons whose personal data are processed.

This Privacy Notice has been prepared in order to fulfill the data controller’s obligation to inform with regards to personal data processed in the processes of providing legal consultancy and/or advocacy services upon an application to the data controller, whilst receiving offers in this scope, establishing a contract for the performance of these services and/or enforcing an existing contract, processing personal data obtained during the advocacy activities as per the Article 10 of the Law.

Purposes of Processing Personal Data

Your personal data and special categories of personal data that may be required depending on the nature of advocacy or legal consultancy services that will be provided by the data controller (“personal data” and “special categories of personal data” shall be referred to as personal data) shall be processed by the data controller and its authorized data processors as pert the Article 20 of the Constitution and the Article 5 and 6 of the Law:

• Providing the legal services required by the client,
• Executing and enforcing advocacy and/or legal consultancy contracts between client and data controller,
• Representation and protection of the client before private law entities and public institutions and organizations,
• Fulfilling the responsibilities of data controller as per the Law on Attorneys and the related legislation,
• Execution of contract processes and determination and control of signing powers,
• Representation and protection of the client’s rights before judicial and administrative judicial authorities,
• Providing the necessary information and documents to judicial and administrative judicial authorities for the performance of legal obligations and/or establishment of a right,
• Issuing attorney invoice and other necessary documents,
• Obtaining information and documents from private law entities and public institutions and organizations and judicial and administrative judicial authorities as per the Law on Attorneys, Right to Information and related legislation.

Parties to which Personal Data are Transferred and Transfer Purposes

As per the Article 8 of the Law and to achieve the purposes of processing described above personal data may be transferred to business partners in Turkey which are operating in the field of finance, IT, etc., attorneys and judicial and administrative judicial authorities together with public institutions and organizations. In addition for and within the scope of the purposes of processing described above and as per the Article 9 of the Law, personal data may be transferred to business partners and third parties (including cloud service providers)  that provide or that are planned to provide consultancy, support or legal services or to legally authorized institutions and organizations, judicial authorities.

Method of Obtaining Data

Personal data are gathered as written, oral, etc. in electronic and / or non-electronic methods when you contact data controller via engblaw.com website, by using the email, phone number provided within the website or when you physically or electronically apply to data controller personally or via your representatives, attorneys and during the data controller’s representation of its clients and fulfilling its liabilities as per the Law on  Attorneys and related legislation.

Legal Grounds of Obtaining Data

Personal data processed as per the reasons defined above shall be processed with your explicit consent or in the following cases without your explicit consent:

1. It is expressly provided for by the laws.
2. Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract.
3. It is necessary for compliance with a legal obligation to which the data controller is subject.
4. Personal data have been made public by the data subject himself/herself.
5. Data processing is necessary for the establishment, exercise or protection of any right.
6. Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.

The data controller abides by the principles set out under Article 4 of the Law which are (i) lawfulness and fairness, (ii) being accurate and kept up to date where necessary, (iii) being processed for specified, explicit and legitimate purposes, (iv) being relevant, limited and proportionate to the purposes for which they are processed, (v) being stored for the period laid down by relevant legislation or the period required for the purpose for which the personal data are processed and takes all necessary technical and organizational measures to provide an appropriate level of security for the purposes of protecting personal data.

Data Subject’s Rights

Each person has the right to request to the data controller about him/her;

1. to learn whether his/her personal data are processed or not,
2. to demand for information as to if his/her personal data have been processed,
3. to learn the purpose of the processing of his/her personal data and whether these personaldata are used in compliance with the purpose,
4. to know the third parties to whom his personal data are transferred in country or abroad,
5. to request the rectification of the incomplete or inaccurate data, if any,
6. to request the erasure or destruction of his/her personal data under the conditions referred to in Article 7,
7. to request reporting of the operations carried out pursuant to sub-paragraphs (e) and (f) to third parties to whom his/her personal data have been transferred,
8. to object to the occurrence of a result against the person himself/herself by analyzing the data processed solely through automated systems,
9. to claim compensation for the damage arising from the unlawful processing of his/her personal data.

You may send your application to info@engblaw.com or Cevizli Mah. Zuhal Cad Ritim İstanbul No:46F A6 Blok D:64 34846 Maltepe/İstanbul address in writing. The application should include (i) name, surname and signature if it is a written application, (ii) TR Identity No. for Turkish citizens and passport number or if available ID number for foreigners together with nationality, (iii) place of residence or business address that can be used for sending notification, (iv) if available email address, phone number and fax number that can be used for sending notification, (v) subject of application. It is important to submit accurate and updated information to determine your relationship with the data controller and to provide a reply.