Last Update Date: 15.06.2026
This Privacy Policy has been prepared by Egemenoğlu Law Firm ("Office"), acting as the data controller within the scope of the Personal Data Protection Law No. 6698 ("KVKK") and related legislation. Our office operates in the field of legal consultancy and advocacy services and is committed to fully complying with the principles regarding the protection of personal data.
Information on the Data Controller:
Office Title: Egemenoğlu Law Firm
Address: Vadistanbul Bulvar Ayazağa Mah. Azerbaijan Cad. 1 B Blok No:109 B Office No:56 Kat 25 34418 Sarıyer / Istanbul
Email: [email protected]
Website: www.egemenoglu.av.tr
This Privacy Policy has been prepared to explain the purposes, legal bases, and methods for processing the personal data of individuals who visit our website at www.egemenoglu.av.tr (the "Site"), the third parties to whom such data may be transferred, the applicable retention periods, and the rights of data subjects.
This Policy covers only the personal data processing activities carried out by our Office through its website. Data relating to legal representation and consultancy services provided to clients under the attorneyship relationship is protected by the confidentiality obligations under the Attorneyship Law No. 1136 and applicable professional rules , and is governed by a separate data processing policy — it falls outside the scope of this Policy.
In line with Article 4 of the KVKK, our Office adheres to the principles of lawfulness and good faith, accuracy and being up-to-date, processing for specific and legitimate purposes, and proportionality. Personal data is retained only for the period prescribed by applicable legislation or required by the purpose of processing.
Our office processes personal data only in the categories specified below and for the specified purposes through its website. In accordance with the principle of data minimization, data is collected only to the extent required by the purpose.
When you fill out the contact form on our site, the following personal data is processed:
Identity data: Name, surname
Contact data: Email address, phone number (optional)
Communication content: Subject and message content
This data is processed on the basis of Article 5/2-(c) of the KVKK (necessity for the performance of a contract) in order to respond to your enquiries and evaluate your legal consultancy requests. Where the subject matter of a request concerns legal proceedings, processing is additionally based on Article 5/2-(e) of the KVKK (necessity for the establishment, exercise, or protection of a right).
Important: Please refrain from sharing sensitive personal data — such as information relating to race, ethnicity, political opinion, religion, health, sexual life, criminal convictions, or security measures — through the contact form. Should you include such data in your message, it will be processed on the basis of your explicit consent in accordance with Article 6 of the KVKK, and you will be informed accordingly.
The following technical data is automatically transmitted to our servers every time you access the site:
Connection data: IP address, date and time of access
Technical data: Browser type and version, operating system
Navigation data: Page URLs visited, visit duration, referring URL (referrer)
This data is processed on the basis of Article 5/2-(f) of the KVKK (legitimate interest) to ensure the secure and uninterrupted operation of the Site, to detect and prevent cyber attacks and malicious bot traffic, and to resolve technical issues. Log files are retained for a maximum of 90 days for security purposes.
When you want to subscribe to our newsletter, the following personal data is processed:
Identity data: First name, last name
Contact data: Email address
This data is processed solely on the basis of your explicit consent (KVKK art. 5/1) for the purpose of sending newsletters containing legal updates, articles, and Office announcements. You may unsubscribe at any time via the "unsubscribe" link in any newsletter email or by contacting our Office directly. Upon withdrawal of consent, your data will be removed from active subscription records and retained in the archive for three (3) months for compliance purposes.
Our site uses cookies and similar tracking technologies to improve service quality. The main data processed in this context are as follows:
Technical data: IP address, browser type, operating system
Usage data: Pages visited, session duration, click data
Preference data: Language selection, cookie consent preferences
| Type of Cookie | Purpose | Legal Basis | Duration |
| Essential Cookies | Required for the technical operation of the site. Consent is not required. | KVKK art. 5/2-(f) legitimate interest | Session duration |
| Analytics / Performance Cookies | Measuring visitor behaviour and site traffic (e.g., Google Analytics). Used to improve the services of the Office. | KVKK art. 5/1 explicit consent | Max. 2 years |
| Functional Cookies | Used to remember personalisation preferences such as language preference and interface settings. | KVKK art. 5/1 explicit consent | Max. 1 year |
| Marketing / Advertising Cookies | Used to measure the effectiveness of digital campaigns promoting the Office's legal services, only in the event of an active campaign. | KVKK art. 5/1 explicit consent | Max. 2 years |
Cookies other than essential cookies are managed through the cookie consent banner displayed upon your first visit to the Site. You may update your cookie preferences at any time. For further details, please refer to our Office's separate Cookie Policy.
Social media sharing buttons (LinkedIn, X/Twitter, Instagram, etc.) may be available on our Site. Clicking these buttons may result in data being shared with the relevant social media platform in accordance with that platform's own privacy policy. Our Office has no control over, and bears no responsibility for, the data processing practices of those platforms. We recommend reviewing each platform's privacy policy before use.
Under the KVKK, personal data may only be processed where one of the following legal bases applies. Our Office links every data processing activity to the relevant legal basis:
| Processing Activity | Legal Basis | KVKK Article |
| Contact form requests | Being directly related to the establishment of the contract and/or establishing, exercising or protecting the right | Art. 5/2-(c) and/or Art. 5/2-(e) |
| Website log/technical data | Legitimate interest (safe and uninterrupted operation of the site) | Art. 5/2-(f) |
| Newsletter subscription | Explicit consent | Art. 5/1 |
| Essential cookies | Legitimate interest (technical operation of the site) | Art. 5/2-(f) |
| Analytical, functional, and marketing cookies | Explicit consent | Art. 5/1 |
| Legal notification and reporting obligations | Legal liability | Art. 5/2-(ç) |
| Legal dispute and rights protection | Necessity for the establishment, exercise or protection of a right | Art. 5/2-(e) |
Where processing is based on explicit consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
Our Office shares your personal data with third parties only in the following circumstances, in accordance with Article 8 of the KVKK:
Technical service providers: Website hosting, e-mail delivery services and analytical tools providers — only to the extent necessary and on behalf of our Firm, within the framework of the data processing agreement. These providers only process your personal data in accordance with the instructions of our Office and without using it for their own business purposes.
Legal obligations: Authorized public institutions and organizations in accordance with a court decision, prosecutor's request or applicable legislation (KVKK art. 5/2-(ç)).
Protection of rights: In case of a legal dispute, for the purpose of establishing, exercising or protecting the right and only to the extent of necessity (KVKK art. 5/2-(e)).
Under no circumstances does our office sell or rent your personal data to third parties for commercial purposes.
Some third-party tools used in the technical infrastructure of the site (e.g., Google Analytics, cloud-based email services) may transfer data to servers located abroad. These transfers are carried out based on one of the following guarantees within the framework of Article 9 of the KVKK and the decisions of the Personal Data Protection Board:
Transfer to countries that the Board determines to have adequate protection,
Undertaking and standard contract provisions concluded between data controllers,
Explicit consent obtained to cover international transfer (KVKK art. 9/1).
For detailed information about the tools and services involved in international transfers, the destination countries, and the applicable safeguards, please contact our Office.
Your personal data is retained for the period required by the purpose of processing and in accordance with any mandatory retention obligations under applicable legislation:
| Data Category | Storage Period | Basis |
| Contact form data | 10 years from the conclusion of the request | Turkish Code of Obligations art. 146 (general statute of limitations) |
| Website log and technical data | Up to 90 days (for security purposes) | KVKK art. 5/2-(f) legitimate interest |
| Newsletter subscription data | 3 months from the date of subscription cancellation | KVKK art. 5/1 explicit consent (withdrawal record) |
| Cookie and analytical data | Depending on the lifetime of the relevant cookie (see Cookie Policy) | KVKK art. 5/1 / art. 5/2-(f) |
| Explicit consent records (for proof purposes) | 3 years from the end of consent | KVKK art. 5/2-(e) protection of rights |
Data for which the retention period has expired is securely deleted, destroyed, or anonymised in accordance with Article 7 of the KVKK and the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.
In accordance with Article 12 of the KVKK, our Office implements the following technical and administrative security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure:
Technical precautions:
Secure connection (HTTPS) with SSL/TLS encryption protocols,
Firewall and intrusion detection systems,
Regular vulnerability scans and software updates,
Access authorization and authentication controls,
Keeping server access logs.
Administrative measures:
Concluding data processing agreements with service providers,
Working with personnel within the scope of confidentiality obligation,
Establishing and implementing a data breach response procedure.
In the event of a data breach, and in accordance with Article 12 of the KVKK, high-risk breaches will be reported to the Personal Data Protection Authority within 72 hours and to affected individuals as soon as reasonably possible.
However, no data transmission over the internet or method of electronic storage can be guaranteed to be completely secure. Our Office takes all reasonable technical and administrative measures; however, absolute security cannot be guaranteed.
Pursuant to Article 11 of the KVKK, you have the following rights regarding your personal data:
To learn whether your personal data is processed or not,
If your personal data has been processed, to request information about it,
To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
To know the third parties to whom your personal data is transferred at home or abroad,
To request correction of your personal data in case of incomplete or incorrect processing and to request that this correction be notified to third parties to whom this correction is made,
To request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK and to request that the deletion or destruction be notified to third parties to whom the transfer is made,
To object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
To request compensation for the damage in case you suffer damage due to unlawful processing of your personal data.
You have the right to withdraw your consent at any time for data processing activities that rely on your explicit consent. Withdrawal of your consent does not affect the legal validity of processing activities carried out prior to the date of withdrawal.
Application method:
To exercise these rights, you can apply through the following channels with documents confirming your identity:
KEP (Registered Electronic Mail): Application with secure electronic signature to [email protected],
Wet-ink signed request (by post or hand delivery): Vadistanbul Bulvar Ayazağa Mah. Azerbaijan Cad. 1 B Blok No: 109 B Office No: 56 Kat 25 34418 Sarıyer / Istanbul,
Email: [email protected] address (must include proof of identity).
Your applications will be responded to free of charge within thirty (30) days, in accordance with Article 13 of the KVKK. Where a request entails additional cost, the fee schedule set by the Board will apply. If your application is rejected, if you consider the response inadequate, or no response is received within the time limit, you have the right to lodge a complaint with the Personal Data Protection Authority.
Our Site may contain links to third-party websites (professional organisations, legal databases, news sources, social media platforms, etc.). If you follow such links, the privacy policy of the relevant site will apply. Our Office accepts no responsibility for the content or privacy practices of third-party sites. We recommend reviewing the privacy policy of any external site before visiting it.
Our Site is not directed at individuals under the age of 18 and does not knowingly collect their personal data. If you become aware that a minor's personal data has been submitted through our Site, please contact our Office and the relevant data will be deleted as soon as possible.
Our Office may update this Privacy Policy from time to time to reflect changes in the KVKK and related legislation or updates to our website operations. The current version will always be published on this page, with the date indicated in the "Last Updated Date" field.
Where changes materially affect how your personal data is processed, a prominent notice will be published on the Site and/or notification will be provided by e-mail prior to the change taking effect. We encourage you to review this Policy periodically.
For questions regarding this Privacy Policy or requests concerning the processing of your personal data, please contact our Office through the following channels:
Egemenoğlu Law Firm
Address: Vadistanbul Bulvar Ayazağa Mah. Azerbaijan Cad. 1 B Blok No:109 B Office No:56 Kat 25 34418 Sarıyer / Istanbul
E-mail: [email protected]
KEP Address: [email protected]
This policy entered into force on 15.06.2026.
