Privacy Notice
Pursuant to the Turkish Personal Data Protection Law No. 6698 (the “Law”), your personal data may be processed by YılmazÜlker Attorney Partnership (“YılmazÜlker”), acting as the data controller, within the scope set out below.
Method Of Collection Of Personal Data
Your personal data may be collected depending on the nature of your existing or prospective communication and/or relationship with YılmazÜlker, either directly from you or through clients, business partners, suppliers, service providers, authorized public institutions and authorities, or publicly available sources.
Your personal data may also be collected where you apply for employment or an internship with YılmazÜlker and submit your curriculum vitae (CV) or other application documents; request information or a proposal in relation to our legal services or receive a proposal from us; attend our events; communicate with us through our website or other communication channels; or receive our newsletters, announcements and other publications concerning legal developments.
Depending on the nature of the relevant relationship, the following categories of personal data may be collected:
- Identity data
- Contact data
- Professional experience, education and CV data
- Legal services data
- Data relating to proposal and business development processes
- Newsletter, announcement, event and subscription data
- Data relating to the use of our website and electronic communication channels
Purposes And Legal Grounds For Processing Personal Data
Your personal data is processed by YılmazÜlker for the purposes and on the legal grounds set out below, in accordance with the personal data processing conditions stipulated under Articles 5 and 6 of the Law.
On the legal grounds that the processing of personal data belonging to the parties to a contract is necessary, provided that such processing is directly related to the establishment or performance of the contract; that processing is necessary for the establishment, exercise or protection of a right; and that processing is necessary for the legitimate interests of YılmazÜlker, provided that such processing does not prejudice the fundamental rights and freedoms of the data subject:
Identity data, contact data and legal services data are processed for the purposes of:
- Registering you or the natural or legal person you represent as a client
- Establishing and managing the legal services relationship
- Providing legal advisory and representation services in accordance with instructions
- Conducting and monitoring litigation, enforcement, arbitration, mediation and other dispute resolution proceedings
- Conducting necessary communications with clients, counterparties, legal representatives, courts, arbitral tribunals, mediators, experts, public institutions and authorities, and other relevant persons
- Preparing and providing legal analyses, research, opinions and assessments
- Managing fee arrangements, invoicing and payment processes
On the legal ground that processing is necessary for the legitimate interests of YılmazÜlker, provided that such processing does not prejudice the fundamental rights and freedoms of the data subject:
Identity data and contact data are processed for the purposes of:
- Managing and developing client and business relationships
- Preparing and submitting proposals and managing proposal processes
- Ensuring and monitoring compliance with internal policies, information security requirements and professional standards
- Ensuring the secure and effective operation of the website and information technology infrastructure
- Preventing and detecting security breaches, fraudulent activities and other unlawful conduct
On the basis of your explicit consent:
Identity data, contact data and subscription data are processed for the purposes of:
- Sending you newsletters, announcements and similar content concerning legal, regulatory and practical developments
- Providing information and sending invitations regarding events, seminars, webinars and similar activities organized or attended by YılmazÜlker
On the legal grounds that processing is expressly provided for by law and is necessary for YılmazÜlker to comply with its legal obligations:
Identity data, contact data and legal services data are processed for the purposes of:
- Fulfilling YılmazÜlker’s applicable obligations relating to the prevention of money laundering and the financing of terrorism
- Responding to lawful requests for information and documents from authorized public institutions and authorities
- Fulfilling record-keeping, document retention and reporting obligations arising under applicable legislation
- Fulfilling obligations arising under tax and other financial legislation
On the legal ground that processing is necessary for the legitimate interests of YılmazÜlker, provided that such processing does not prejudice the fundamental rights and freedoms of the data subject:
Identity data, contact data, education, professional experience and CV data are processed for the purposes of:
- Receiving and evaluating employment and internship applications
- Planning and conducting recruitment and internship admission processes
- Communicating with candidates in connection with application and evaluation processes
Special categories of personal data obtained in connection with the provision of legal services are processed, to the extent necessary, in accordance with the processing conditions stipulated under Article 6 of the Law, for the purposes of providing the legal services described above and establishing, exercising or protecting a right.
Recipients Of Personal Data And Purposes Of Transfer
Your personal data may be transferred, in accordance with the requirements governing the transfer of personal data under Articles 8 and 9 of the Law and only to the extent necessary, to courts, enforcement offices, mediators, arbitral tribunals, notaries public, experts, authorized public institutions and authorities, and other relevant competent authorities for the purposes of providing legal services, conducting legal proceedings, establishing, exercising or protecting a right, and fulfilling YılmazÜlker’s legal obligations; and to suppliers and service providers providing information technology, electronic mail, data storage, cloud computing and similar services for the purpose of receiving such services. Except as set out above, your personal data will not be transferred to third parties unless a legal ground stipulated under the Law applies.
Rights Of Data Subjects Under Article 11 Of The Law
Pursuant to Article 11 of the Law, data subjects have the right to:
- Learn whether their personal data is being processed
- Request information if their personal data has been processed
- Learn the purpose of the processing of their personal data and whether such data is being used in accordance with that purpose
- Know the third parties to whom their personal data has been transferred, whether in Türkiye or abroad
- Request the rectification of personal data that has been processed incompletely or inaccurately and request that such rectification be notified to third parties to whom the personal data has been transferred
- Request the deletion or destruction of personal data where the reasons requiring its processing no longer exist, notwithstanding that it has been processed in accordance with the Law and other applicable legislation, and request that such action be notified to third parties to whom the personal data has been transferred
- Object to any adverse consequence arising against them as a result of the analysis of processed personal data exclusively through automated systems
- Claim compensation for damages suffered as a result of the unlawful processing of personal data
You may submit requests relating to the above rights to YılmazÜlker at info@yilmazulker.com. Your application will be concluded as soon as possible depending on the nature of the request and, in any event, within 30 (thirty) days of its receipt by YılmazÜlker. Applications will, as a rule, be processed free of charge; however, where processing the application entails an additional cost, a fee may be charged in accordance with the tariff determined by the Turkish Personal Data Protection Board.
Last updated: 14/08/2026