Privacy Policy

Last updated: September 2026


1. Data Controller

The data controller in respect of personal data collected through turak.av.tr is:

Turak Law Office
Attorney Abdulsamed Burak Turak
Esentepe Mah. Talatpaşa Cad. No:5/1 Şişli / İstanbul
E-mail: info@turak.av.tr | Telephone: +90 536 746 22 00

This policy describes the personal data processed through the public pages of the turak.av.tr website, the contact form and the online consultation flow. Data processed in the client portal is governed by the information notice and the consent text presented at the portal login.

2. Personal Data Processed

When you use the contact form, the following personal data is processed: your full name, nationality, e-mail address, the application pathway you indicate, the message you write in the free-text field, and the language in which you submit the form.

When you visit the site, your IP address, your browser information, the address of the page you request and the cookies sent by your browser are processed in the server logs of the hosting layer through which the site is served. On submission of the contact form, your IP address is held briefly in server memory in order to prevent more than one submission per minute from the same address; it is not written to the database.

When you contact us of your own choice by WhatsApp or e-mail, the identifying details of the account you use (telephone number or e-mail address, together with the profile name) and the content you send reach the office. The contact form does not ask for your telephone number; your telephone number reaches the office by this route only.

When you use the online consultation flow, the following personal data is processed: your full name, e-mail address, telephone number, country of residence, nationality, preferred language, time zone, the purpose of your consultation, how you heard of us, the related parties you name, and your answers to the preliminary questionnaire.

No special categories of personal data are requested through this site. In the contact form, we ask you not to share special categories of personal data that are not necessary for the initial assessment of your request.

3. Purposes of Processing and Legal Grounds

Your personal data is processed for the purposes set out below, on the legal grounds shown against each purpose.

  • Recording, assessing and responding to a consultation request: the carrying out of steps, at your request, towards the conclusion of a contract; Article 5(2)(c) of Law No. 6698 on the Protection of Personal Data.
  • Following up the request and scheduling the consultation: processing directly related to the conclusion of a contract; sub-paragraph (c) of the same paragraph.
  • Fulfilment of obligations arising from legislation: the fulfilment of legal obligations arising from the Attorneyship Law No. 1136; sub-paragraph (ç) of the same paragraph.
  • The establishment, exercise or protection of a right through the retention of request and correspondence records: sub-paragraph (e) of the same paragraph.

Explicit consent is sought only where, in respect of the processing activity concerned, none of the other conditions laid down in the Law is present and consent is the appropriate legal ground. Responding to your consultation request is not made conditional on explicit consent.

4. Retention Periods

Your personal data is retained for the period prescribed by the relevant legislation or required for the purpose for which it is processed. At the end of the retention period, personal data is deleted, destroyed or anonymised in accordance with Article 7 of Law No. 6698 on the Protection of Personal Data and the provisions of the relevant regulation.

5. Transfers

Your personal data is not sold and is not shared for advertising purposes. Your data is transferred only to the following groups of recipients, for the purpose stated against each:

  • For the purpose of serving the site and processing your requests, to the provider that hosts the site and provides the server service (Vercel).
  • For the purpose of recording and following up your request, to the provider of the database service in which request records are kept (Supabase).
  • For the purpose of forwarding your request to the office, to the provider of the e-mail delivery service that sends the internal notification e-mail (Resend) and to the provider that hosts the office's e-mail mailbox.
  • When you contact us of your own choice through WhatsApp, your message and your account details pass through the infrastructure of the provider of that service (Meta); when you choose to be directed to WhatsApp with the details you entered in the contact form, those details are transferred to your own WhatsApp application as a draft message, and the message is sent by you.

6. Transfer Abroad

The site is served from server infrastructure located outside Türkiye, and contact-form and online-consultation-flow submissions are processed on that infrastructure. For this reason, the personal data processed during your visit to the site, through the contact form and in the online consultation flow is transferred abroad. Transfer abroad is governed by Article 9 of Law No. 6698 on the Protection of Personal Data. To obtain information about the recipients to which your data is transferred, you may use the application route described in section 7.

7. Rights of the Data Subject

Under Article 11 of Law No. 6698 on the Protection of Personal Data, you have the right to: learn whether your personal data is being processed; request information in that regard if it has been processed; learn the purpose of the processing and whether the data is used in keeping with that purpose; know the third parties to whom your personal data is transferred, within Türkiye or abroad; request the correction of personal data that has been processed incompletely or inaccurately; request the deletion or destruction of your personal data under the conditions set out in Article 7 of the same Law; request that these operations be notified to the third parties to whom the data has been transferred; object to a result arising against you through the analysis of the processed data exclusively by automated systems; and claim compensation for damage suffered as a result of unlawful processing.

You may submit your applications in writing, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, to the address given above or to the e-mail address info@turak.av.tr. Applications are concluded within thirty days at the latest, in accordance with Article 13 of the same Law.

8. Cookies and Site Measurement

On the public site, a language cookie (NEXT_LOCALE) with a lifetime of one year is used to remember the language you have chosen; this cookie is necessary for the operation of the site and reaches the hosting layer only. The client portal uses session and refresh cookies to maintain your session, a temporary cookie with a lifetime of ten minutes during login verification, and a portal language cookie. In the online consultation flow, session cookies with a lifetime of one hour are used. Your cookie preference is stored not as a cookie but in your browser's local storage. While a page loads, no request is sent to any third party other than for analytics measurement; no third-party advertising cookies and no behavioural tracking cookies are used.

Google Analytics infrastructure may be used to obtain limited statistical information about the use of the site. Analytics measurement runs only if you expressly allow analytics cookies. Declining analytics cookies does not affect the essential functions of the site.

9. Changes

This policy is updated as necessary; material changes are announced on this page. The "Last updated" line above shows the date of the most recent revision.

10. Contact

For questions concerning privacy: info@turak.av.tr