Personal Data

Privacy Notice

Contact form and website visits

Data controller: Att. Kadirhan TUTOĞLU – Tutoğlu Law Office, Panayır Mah. İstanbul Yolu Cad. 1. Mesken Sk. No:1, Okumuşlar Plaza B Blok Floor 15 No 74, 16250 Osmangazi / Bursa, Türkiye · info@tutoglu.av.tr · +90 530 324 61 16

Under art. 10 of the Personal Data Protection Law (KVKK), we inform you about the personal data you send through the contact form on www.tutoglu.av.tr and about your visit to the website. The Turkish version of this notice (KVKK Aydınlatma Metni) prevails in case of any discrepancy.

1. Data processed

The full name, email address, phone number, subject and message you share in the form, and the date and time the form was sent. During a visit to the website, technical data such as IP address and browser information may be kept for a short time in the server logs of the hosting provider. The website does not use cookies or visitor tracking tools.

Please do not write special categories of personal data, such as health information or criminal convictions, in the message field; such information is collected only during a meeting and only to the extent necessary.

2. Purposes of processing

To reply to your request or question, schedule an appointment, assess your request for legal services, conduct pre-contractual discussions if your request leads to an engagement, and keep the website secure.

3. Legal basis and method of collection

Your data is collected electronically and automatically through the form on the website. The legal bases are that processing is directly related to the formation of a contract (KVKK art. 5(2)(c)) and our legitimate interest in responding to your request and keeping the website secure, provided this does not harm your fundamental rights and freedoms (KVKK art. 5(2)(f)).

4. Transfers

Your data is not sold to third parties or shared for marketing purposes. The website is hosted on the infrastructure of Cloudflare, Inc.; form data is not stored on the website but only forwarded to the office’s email address. The servers of the server-log and email service providers (Cloudflare, Inc. and Microsoft Corporation) may be located abroad; such transfers are made in line with the safeguards in KVKK art. 9. Where required by law, your data may be shared with competent public authorities.

5. Retention period

If your request does not lead to an engagement, your data is deleted one year after the last correspondence. If an engagement is formed, your data is kept in the client file for the periods required by the Attorneys’ Act and other applicable legislation.

6. Your rights

Under KVKK art. 11 you have the right to learn whether your data is processed; to request information if it is; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred; to request correction if it is incomplete or inaccurate; to request deletion or destruction within the framework of KVKK art. 7; to request that these actions be notified to third parties to whom the data was transferred; to object to a result against you arising exclusively from automated analysis; and to claim compensation for damage caused by unlawful processing.

You may send your requests in writing to the email address or office address above; your request will be concluded free of charge within 30 days at the latest.