Privacy Notice

This is an English translation of the Turkish original, provided for information. In the event of any inconsistency, the Turkish version prevails. The application form referred to below is available in Turkish only.

The lawyers practising within Manyas Hukuk Bürosu (Manyas & Partners) (the “Firm”) act as data controller under the Personal Data Protection Law No. 6698 (“KVKK”) in respect of the personal data they process in the course of their activities.

Purposes of Processing Personal Data

Personal data processed within the Firm may be processed, in a limited and proportionate manner and subject to technical and administrative data security measures, for the following purposes:

• conducting, improving, developing and diversifying our legal services and activities, developing alternatives, and keeping informed the clients for whom we act under a power of attorney;
• carrying out the Firm’s emergency management processes;
• carrying out the Firm’s information security processes;
• managing the application process for candidates who have applied for a position with the Firm;
• carrying out employee satisfaction and engagement processes;
• fulfilling obligations towards our employees arising from employment contracts and legislation;
• managing fringe benefits and other employee benefits for our employees;
• fulfilling our legal obligations, in particular carrying out audit and ethics activities required by other legislation;
• carrying out training activities for the Firm’s employees;
• conducting our activities in compliance with legislation;
• carrying out finance and accounting work;
• monitoring and conducting legal matters;
• carrying out communication activities;
• carrying out occupational health and safety activities;
• obtaining and assessing suggestions for improving business processes;
• carrying out business continuity activities;
• carrying out client relationship management processes;
• carrying out client satisfaction activities;
• organisation and event management;
• carrying out performance appraisal processes;
• carrying out storage and archiving activities;
• performing our contractual obligations fully and completely;
• carrying out strategic planning activities;
• following up requests and complaints addressed to the Firm;
• ensuring the security of movable property and resources;
• implementing the remuneration policy;
• providing information to authorised persons, institutions and organisations;
• carrying out management activities;
• carrying out information activities.

Transfer of Personal Data

Personal data processed within the Firm may be transferred to the persons and organisations listed below in order to achieve the purposes of processing:

• to state institutions and organisations of every kind, in particular courts, enforcement offices and notaries, and to banks, natural persons and legal entities, so that we can carry out our legal activities and services;
• to our suppliers, banks, tax offices and other public institutions and organisations concerned with the supervision of payment processes, for the purpose of carrying out our payment processes and banking and financial transactions;
• to judicial bodies, judicial authorities, law enforcement agencies and other legally authorised public institutions and organisations, in response to requests from various public institutions and organisations;
• to insurance companies and banks, for the purpose of carrying out insurance and private pension processes;
• to courier companies and PTT (the Turkish postal service), for the purpose of carrying out communication and delivery processes;
• to software companies, our suppliers operating in this field and the company providing our cloud services, in connection with the operating systems, computer programs, software and cloud services we use within the Firm and their maintenance and repair;
• to third parties who request a reference on a valid legal ground;
• to third parties named as referees by a member of staff, a candidate or a business partner, for the purpose of establishing that person’s competence;
• to healthcare institutions, hospitals, legally authorised third parties and the relevant public institutions and organisations, for the purpose of emergency medical intervention and fulfilling our obligations under occupational health and safety legislation;
• to the company providing our cloud services, for the storage and backup of information and documents held within the Firm;
• to the company providing our CRM (customer relationship management) services, for the purpose of managing client relationships and communication data;
• to our email service provider, for the purpose of conducting internal and external correspondence;
• to the training company and trainers engaged by us, so that we can carry out training activities for the Firm’s employees.

Method and Legal Basis of Collecting Personal Data

Personal data held within the Firm is collected by any oral, written or electronic means, having regard to the processing conditions laid down in the KVKK, and in particular through the following methods:

• social media applications;
• applications and meetings made to the Firm in person, by telephone, by post, by email, through the website or by other electronic means;
• contracts and proposals;
• face-to-face meetings;
• voice recordings made during telephone calls;
• information received through our business and solution partners;
• persons named as referees by the individual concerned;
• information provided by our clients;
• official correspondence from public institutions and organisations.

Retention and Destruction of Personal Data

Personal data held within the Firm is retained for a period and in a manner proportionate to the purpose of processing. In retaining personal data, priority is given to the purpose of processing and to statutory retention and limitation periods. Where the purpose of processing no longer exists, or the statutory retention and limitation periods have expired, the personal data held within the Firm is destroyed. The methods of destruction used are deletion, destruction or anonymisation.

Rights of Data Subjects under Law No. 6698

Anyone whose personal data is processed within the Firm, or who believes that their personal data is being processed, may apply to the Firm using the contact details above, in person, through a notary, by registered post with acknowledgement of receipt or by email, and has the following rights in respect of that data:

• to learn whether personal data has been processed;
• where personal data has been processed, to request information about it;
• to learn the purpose of the processing and whether the personal data is being used in accordance with that purpose;
• to know the third parties, in Turkey or abroad, to whom the personal data has been transferred;
• where the personal data has been processed incompletely or inaccurately, to request its rectification, and to request that any action taken in this respect be notified to the third parties to whom the personal data has been transferred;
• where the reasons requiring the processing no longer exist, even though the personal data has been processed in accordance with the KVKK and other applicable laws, to request its erasure or destruction, and to request that any action taken in this respect be notified to the third parties to whom the personal data has been transferred;
• to object to any outcome to their detriment arising from the analysis of the processed data exclusively by automated systems;
• where they suffer loss as a result of the unlawful processing of personal data, to claim compensation for that loss.

Application form (in Turkish): Veri Sorumlusuna Başvuru Formu (Data Controller Application Form, .docx)