Law on the Protection of Personal Data

As Celep Law & Consultancy Office, we attach great importance to the confidentiality and security of your personal data.

In this context, it is our priority to ensure that all kinds of personal data belonging to all individuals associated with Celep Law & Consultancy Office, including our customers and business contacts who benefit from our products and services, are processed and stored in accordance with the Personal Data Protection Law No. 6698 (“KVKK”). As a "Data Controller" under the KVKK and with full awareness of this responsibility, we would like to inform you as follows about the purposes of processing your personal data, the methods and reasons for collecting your data, your rights regarding the processing of your personal data, and the procedures and principles for exercising these rights.

a. What is Personal Data? Which Personal Data Do We Collect?

Personal data refers to any information that can identify you, such as personal information (name, surname, Turkish ID number, etc.), address and telephone information, vehicle and license plate information, family status information, IP address, bank account information, and any other information that can be associated with you (“Personal Data”). A special category of personal data, called Special Categories of Personal Data, includes sensitive information such as race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, association, foundation or trade union membership, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data (“Special Categories of Personal Data”). The explanations we provide on this page for your Personal Data also cover your Special Categories of Personal Data.

In this context, as Celep Law & Consultancy Office, where necessary and in accordance with the KVKK, we collect Personal Data belonging to our customers, business contacts, employees, job applicants, platform (our internet/mobile sites and applications) users, visitors, subcontractors, and similar business relationship institutions’ authorized persons and employees. We can detail the Personal Data we collect as follows:

• Identity Data: Data such as name, surname, Turkish ID number, ID photocopy, etc., collected from our customers, business contacts, employees, job applicants, platform (internet/mobile sites and applications) users, visitors, subcontractors, and similar business relationship institutions’ authorized persons and employees.
• Contact Data: Data such as phone number, address, e-mail address, IP address, etc., collected from our customers, business contacts, employees, job applicants, platform (internet/mobile sites and applications) users, visitors, subcontractors, and similar business relationship institutions’ authorized persons and employees.
• Family Member Data: Data about family members and relatives collected from our employees, job applicants, and subcontractors or similar business relationship institutions’ authorized persons and employees, as required by law and/or to protect the legal and other interests of our Company or the relevant person.
• Financial Data: Data such as salary information, bank account information, etc., collected from our employees, job applicants, customers, business contacts, subcontractors, and similar business relationship institutions’ authorized persons and employees, depending on the legal relationship established with the data subject.
• Employment Data: Any personal data that forms the basis for the creation of employment rights, collected from our employees, job applicants, and subcontractors or similar business relationship institutions’ employees.
• Physical Space Security Data: Personal data such as security and camera recordings taken during entry to and stay in a physical location, collected from our customers, business contacts, employees, job applicants, visitors, subcontractors, and similar business relationship institutions’ authorized persons and employees.
• Communication and Complaint Management Data: Personal data obtained from our customers, business contacts, platform (internet/mobile sites and applications) users, visitors, subcontractors, and similar business relationship institutions’ authorized persons and employees during the processes of receiving and evaluating any requests or complaints addressed to our Company.
• Special Categories of Personal Data: Data such as health information, biometric data (voice and video recordings), religion, and association/trade union membership information, collected from our customers, business contacts, employees, job applicants, visitors, subcontractors, and similar business relationship institutions’ authorized persons and employees, as specified in Article 6 of the KVKK.
• Other Data: Data processed for technical transaction security, purchase information, cookies, and other data collected by automatic means, obtained from our customers, business contacts, employees, job applicants, platform (internet/mobile sites and applications) users, subcontractors, and similar business relationship institutions’ authorized persons and employees.

b. By Which Methods and Legal Grounds Do We Collect/Process Your Personal Data?

We collect your Personal Data mainly for the purposes and by the methods stated below, and through other channels that may be added in the future, either automatically or non-automatically, in verbal, written, or electronic form.

We collect your Personal Data through our internet and mobile platforms (internet/mobile sites and applications), various social media accounts operated in the name of Celep Law & Consultancy Office, via our call center managed by Celep Law & Consultancy Office, through communication methods including e-mail, SMS or MMS, through contracts signed with you or your company, commercial offers provided, printed and electronic forms, business cards and other documents you provide during our customer visits, through third parties such as Celep Law & Consultancy Office group companies, business contacts, dealers and sales channels, manufacturers, or service/product providers, as well as sources such as trade registry records. Data is collected in verbal, written, or electronic form, partially or fully automated, or by non-automated methods that are part of a data recording system.

The Personal Data we collect through the above methods is processed based on one or more of the following legal grounds:

• Having your explicit consent,
• Processing being permitted by the laws and regulations in force in the Republic of Turkey,
• Being necessary for the protection of your or another person’s life or bodily integrity when you are unable to express your consent due to actual impossibility,
• Being necessary for the performance of a contract signed with you or your company,
• Being necessary to fulfill our legal obligations,
• Your Personal Data having been made public by you,
• Being necessary for the use or protection of our legal or contractual rights as Celep Law & Consultancy Office,
• Being necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms.

As Celep Law & Consultancy Office, we store all Personal Data we process in compliance with the periods required by the KVKK and other relevant legislation, and in any case, as long as the legitimate purposes stated above remain valid, by taking all necessary administrative and technical measures.

c. For What Purposes Do We Process Your Personal Data?

We process the Personal Data we collect, according to its nature, for the following general purposes:

1. Fulfillment of contracts signed by Celep Law & Consultancy Office, provision, production, sale, delivery, and installation of products and services, development of products and services, conducting necessary studies and evaluations to enable you to benefit from them, and performing after-sales maintenance and repair operations
2. Following and fulfilling obligations arising from consumer legislation and responding to consumer applications
3. Tracking, evaluating, and providing support services for requests and complaints from customers and consumers, managing customer satisfaction, and carrying out planning, statistics, and satisfaction surveys within this scope
4. Conducting quality assessment and improvement activities to provide better and more reliable products and services and to ensure sustainability, and auditing suppliers, subcontractors, and similar business partners
5. Carrying out advertising and marketing activities for the products and services offered by Celep Law & Consultancy Office, providing information about promotions, campaigns, offers, events, and similar matters, as well as new products and services, and conducting corporate communication activities
6. Conducting marketing and CRM (Customer Relationship Management) activities
7. Organizing corporate communication activities, events, and invitations, and providing related information, as well as conducting market research studies
8. Improving digital platforms offered to our customers, consumers, and business contacts, producing statistics on the number, type, frequency of visits, behaviors, geographic locations, and similar data of users, and offering personalized content, campaigns, and advertisements based on the interests and needs of platform users, including the use of cookies for this purpose
9. Ensuring the legal and commercial security of persons in business relations with Celep Law & Consultancy Office (such as planning administrative operations related to communication, ensuring and auditing the physical security of company locations, evaluating and auditing business partner/customer/supplier processes, and ensuring legal compliance)
10. Using legal rights and, after the termination of the legal relationship, using transaction history as evidence in case of disputes
11. Determining and implementing the commercial, legal, and business strategies of Celep Law & Consultancy Office
12. Managing Celep Law & Consultancy Office human resources and accounting/finance policies
13. Planning, auditing, and executing information security processes
14. Complying with domestic and international regulations, providing information requested by public institutions and organizations, and fulfilling reporting obligations.

d. Transfer of Personal Data and Processing of Personal Data by Third Parties

The Company may transfer personal data to a third natural or legal person in accordance with KVKK regulations. In such cases, the Company ensures that the third parties to whom the data is transferred also comply with this Policy. Within this scope, necessary protective provisions are included in the contracts signed with the third party.

• Transfer of personal data to third parties located in Turkey; Personal Data may be transferred by the Company to third parties located in Turkey without seeking explicit consent in exceptional cases specified in Articles 5.2 and 6.3 of the KVKK, or in other cases, by obtaining the explicit consent of the Data Subject (Articles 5.1 and 6.2 of the KVKK).
• Transfer of personal data to third parties abroad; Personal Data may be transferred by the Company to third parties located abroad without seeking explicit consent in exceptional cases specified in Articles 5.2 and 6.3 of the KVKK, or in other cases, by obtaining the explicit consent of the Data Subject (Articles 5.1 and 6.2 of the KVKK). However, one of the following conditions must be met for the foreign country to which the data will be transferred.
• The foreign country to which personal data is transferred must be among those deemed to have adequate protection by the Board.
• If the foreign country to which the transfer will take place is not on the Board’s list of safe countries, the Company and the Data Controllers in the relevant foreign country must provide a written undertaking that adequate protection will be ensured and obtain permission from the Board.

e. Your Rights and Application Procedure

e.1. Your Rights Regarding Your Personal Data

We would like to state that you have the following rights regarding your data processed within Celep Law & Consultancy Office and its affiliates:

1. To learn whether your personal data is being processed,
2. If your personal data is being processed, to request information regarding this,
3. To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
4. If any, to know the third parties in Turkey or abroad to whom personal data has been transferred and what data has been transferred,
5. To request the correction of your personal data if it is incomplete or inaccurate,
6. To request that, in case of correction, deletion, or destruction of your personal data, these processes be notified to the third parties to whom your personal data has been transferred,
7. To request the deletion or destruction of your processed personal data if the reasons requiring their processing cease to exist or if your personal data has lost its currency,
8. To object to the occurrence of a result against you by analyzing your processed personal data exclusively through automated systems,
9. To request compensation in case you suffer damage due to the unlawful processing of your personal data.

e.2. Application

You can submit your requests regarding your personal data by filling out the application form provided at the link below:

1. By delivering it to the reception office at the address of our company indicated in the Data Controller Identity Information section, or by sending a notification via Notary to the same address,
2. Via registered electronic mail.

Celep Law & Consultancy Office will conclude the requests addressed to it, depending on the nature of the request, as soon as possible and within no later than 30 (thirty) days, free of charge. In case the fulfillment of your requests results in a cost, we may request only the fees in the tariff determined by the Personal Data Protection Board.

As a result of the requests addressed to Celep Law & Consultancy Office, we may accept the requests or reject them by explaining the reason, and we may communicate this response in writing or electronically to the applicant. In case of acceptance of the request, Celep Law & Consultancy Office is obliged to immediately fulfill the requirement of the request.

e.3. Complaint

If the requests you have addressed to Celep Law & Consultancy Office are rejected, if you are not satisfied with the response given by Celep Law & Consultancy Office, or if no response is provided, you may file a complaint with the Personal Data Protection Board within 30 (thirty) days from the date you are notified of the response, or within 30 (thirty) days from the end of the 30-day period if no response is given.

f. Data Controller Identity Information

The term Celep Law & Consultancy Office used in this text refers to the Celep Law & Consultancy Office entity established in Turkey, whose details are provided below, and has been prepared for the data subjects whose data is controlled by the company specified below:

Celep Law & Consultancy Office

Address: Soğanlık Yeni Mah. Aliağa Sk. No:8 Bumerang Kartal Residence K:22 D:112 Kartal/İstanbul

Phone: 0216 514 94 77

Phone:  0539 675 05 38

E-Mail: info@celephukuk.com

Application Form under KVKK

Under Article 11 of the Personal Data Protection Law No. 6698 (“KVK Law”), individuals defined as data subjects (“hereinafter referred to as the “Applicant”) are granted the right to make certain requests regarding the processing of their personal data. Pursuant to Article 13(1) of the KVK Law, applications to be made to our Company, which is the data controller, regarding these rights must be submitted in person, in Turkish, in writing, and through the methods determined by the Personal Data Protection Board (“Board”) as listed below.

Below are the details on how written applications can be delivered to us.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller (Official Gazette dated 10/03/2018, no. 30356), applications must include the following information:

Information to be Provided in the Application:

• Name, surname, and signature if the application is in writing,
• For Turkish citizens, Turkish ID number; for foreigners, nationality, passport number, or identity number if available,
• Residential or workplace address for notification,
• If available, the electronic mail address, telephone, and fax number for notification,
• Subject of the request

Additionally, information and documents related to the subject must be attached to the application.

If you wish to make an application regarding your personal data, the application form below must be filled out completely. This application form has been prepared to determine your relationship with our Company, to identify your personal data processed by our Company, and to respond to your application accurately and within the legal timeframe. In order to eliminate any legal risks that may arise from unlawful and unfair data sharing, and especially to ensure the security of your personal data, our Company reserves the right to request additional documents and information (such as a copy of your identity card or driver’s license) for identity and authority verification. If the information you provide regarding your requests is not accurate and up-to-date, or if an unauthorized application is made, our Company does not accept any liability for claims arising from such incorrect information or unauthorized applications.

Your applications submitted to us will be answered in writing free of charge within thirty days at the latest from the date your request reaches us, pursuant to Article 13(2) of the KVK Law, depending on the nature of the request.