As Yasaman Law Firm, we attach great importance to the personal data of our clients, employees, and all institutions and organizations we cooperate with, and we commit to take care of their security. This Personal Data Protection Policy has been prepared pursuant to the clarification obligation under the Personal Data Protection Law numbered 6698 (“PDPL”) regarding the personal data obtained within the scope of Yasaman Law Firm’s activities.
The Purpose of Processing Personal Data
Personal data can only be processed in accordance with the procedures and principles stipulated in the PDPL and other relevant legislations. Personal data refers to any information relating to an identified or identifiable natural person. Processing of personal data refers to operations that are carried out on personal data such as collection, recording, storage, retention, alteration, re-organization, disclosure, transferring, taking over, making retrievable, classification or preventing the use of thereof, fully or partially through automatic or non-automatic means.
Personal data processing is possible with the explicit consent of the data subject. In accordance with Article 5/2 of the PDPL, the processing of personal data by Yasaman Law Firm without the explicit consent of the data subject is possible under the following circumstances:
- When it is explicitly provided for by the laws,
- When it is mandatory for the protection of life or to prevent the physical injury of a person, in cases where that person cannot express consent or whose consent is legally invalid due to physical disability,
- When processing personal data of the parties of a contract is necessary, provided that it is directly related to the conclusion or fulfillment of that contract,
- When it is mandatory for Yasaman Law Firm to fulfill its legal obligations,
- When the data is made manifestly public by the data subject,
- When data processing is mandatory for the establishment, exercise or protection of any right,
- When it is mandatory for the legitimate interests of Yasaman Law Firm, provided that such processing shall not violate the fundamental rights and freedoms of the data subjects.
Personal data relating to the race, ethnic origin, political opinion, philosophical belief, religion, sect or other belief, clothing, membership of associations, foundations or trade-unions, information relating to health, sexual life, convictions and security measures, and the biometric and genetic data are deemed to be sensitive data. Sensitive personal data can only be processed with the explicit consent of data subject. Personal data other than the data relating to health and sexual life can be processed without explicit consent of the data subject in the conditions set out by the Law (PDPL art.6/1-2-3)
In this context, as Yasaman Law Firm, we undertake to process your personal data in accordance with the Law. Your personal data is processed by Yasaman Law Firm for the purpose of sending the publications and contents subscribed to the website www.yasaman.av.tr, informing you about our new publications, articles, and activities, and evaluating your questions and requests. In addition to these, your personal data can also be processed in one of the situations regulated in the above-mentioned art.5 / 2 of PDPL.
Data Transfer to Third Parties
Personal data cannot be transferred without the explicit consent of the data subject. However, personal data can be transferred without the consent of the relevant person in the presence of one of the conditions specified in art. 5/2 and art.6/3 provided that sufficient measures are taken.
Your personal data may be transferred to third parties by Yasaman Law Firm in accordance with the legislation within the scope of articles 8 and 9 of the PDPL for the purposes stated above.
Personal Data Collection Means and Legal Grounds
As Yasaman Law Firm, we collect your personal data through verbal, written or electronic media by automatic or non-automatic methods within the framework of art.5 of the PDPL.
Your Rights as Data Subject
Pursuant to art.11 of the PDPL, data subjects are entitled to use the following rights by applying to Yasaman Law Firm:
- Learn whether or not your personal data is being processed,
- Request further information if your personal data has been processed,
- Learn the purpose of personal data processing and whether these are used used within the purpose,
- Identify third parties in the country or abroad to whom personal data is transferred,
- Request rectification of personal data if the data had been processed incompletely or inaccurately,
- Request the deletion or destruction of personal data within the framework of the conditions stipulated under art. 7 of the PDPL,
- Request notification of rectification, deletion and destruction to third parties to whom personal data have been transferred,
- To object to the processing, exclusively by automatic means of personal data, which leads to an unfavorable consequence for the data subject,
- To request compensation of the damage due to the unlawful processing of personal data.
Pursuant to art. 5 of the Communiqué on the Procedure and Principles for the Application to the Data Controller, data subjects, for the exercise of the above-mentioned rights, are required to send their request in written or through registered electronic mail address, secured electronic signature, mobile signature or through the electronic mail address that is previously notified by the data subject to Yasaman Law Firm and registered in the Yasaman Law Firm’s system, or by means of a software or application developed for the purpose of application to info@yasaman.av.tr, which is the electronic address of Yasaman Law Firm, or to the postal address of Yasaman Law Firm, Kuruçeşme Caddesi No.57/4 Beşiştaş, İstanbul / Turkey.
Data subjects are required to include following information into their applications: name, surname, signature (if the application is written); identity number for Turkish Republic citizens; nationality, passport number or identity number for foreigners; place of residence or workplace for notification; e-mail address for notification; telephone and fax number, and the subject of the request. Information and documents on the subject are attached to the application.