Privacy Policy
Related to Processing of Personal Data

ANKA Attorneys at Law (“ANKA Law” or “Data Controller”) as Data Controller is committed to protecting the confidentiality and security of the personal data of its clients, representatives/employees of corporate clients and client candidates, representatives/employees of corporate client candidates, attorneys, employees, trainees, business partners, suppliers, colleagues, and other relevant persons (“Data Subject”). This Privacy Policy (“Policy”) provides information on how ANKA Law collects, processes, and protects personal data, as well as the responsibilities of Data Subjects.

1. Collection Of Personal Data

The collection and processing of personal data are carried out in accordance with Article 5(2) of Law No. 6698 on the Protection of Personal Data (the “Law”) based on the following legal grounds: (i) necessity for the performance of a contract, (ii) necessity for compliance with a legal obligation or clear permission in applicable law, and (iii) necessity for the legitimate interests of the Data Controller, provided that the fundamental rights and freedoms of the Data Subject are not harmed. Where required, explicit consent is obtained. Where data processing is based on consent, the Data Subject has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

The types of personal data we may process include:

  • Identification Information: name, surname, ID number, etc.
  • Contact Details: mobile phone number, email address, address, etc.
  • Technical Data from Website Visitors: IP address (with masking/anonymization applied where possible, such as in Google Analytics 4), device and browser information, screen resolution, language preference, session/interaction data, referring URL, estimated geographical location (country/city), and custom parameters within the event/data layer.
  • Other Information: Any other relevant information for the provision of legal services.

 

Personal data is collected automatically (e.g., via website analytics) or manually from documents and information submitted electronically or physically. Collection methods include verbal, written, and electronic channels.

2. Purposes Of Processing Personal Data

Personal data is processed for the following purposes:

  • Clients and Corporate Representatives: To provide legal consultancy and litigation services, establish proxy relationships, execute service contracts, and fulfil contractual obligations (Article 5/2(c) of the Law). Additionally, personal data is processed for communication and to inform clients about legal developments based on the legitimate interests of ANKA Law (Article 5/2(f) of the Law).
  • Business Partners and Suppliers: To execute contracts and fulfil contractual obligations (Article 5/2(c) of the Law). Furthermore, data is processed for communication and legal updates in accordance with the legitimate interests of ANKA Law (Article 5/2(f) of the Law).
  • Potential Clients, Stakeholders, and Colleagues: To manage communications, maintain contact records, and provide updates on legal developments and events, ensuring alignment with legitimate interests (Article 5/2(f) of the Law).
  • Website Visitors and Security: To analyse visitor behaviour, measure site performance, improve content and user experience, detect technical errors, and for security purposes such as fraud prevention.
  • Legal Obligations and Rights: To comply with legal obligations (Article 5/2-ç of the Law) and establish or protect legal rights (Article 5/2-e of the Law).

3. Disclosure of Personal Data to Third Parties

3.1. In case it is necessary to fulfil the purposes mentioned above with respect to the processing of personal data, the information and personal data of the Data Subject may be disclosed to third parties from which we receive services/support/consultancy (such as IT and analytics service providers), as well as competent public institutions and organizations.

3.2.  When ANKA Law is asked to share a Data Subject’s information in order to fulfil legal obligations, the Data Subject’s information may also be shared with authorized persons, institutions and organizations.

3.3. Your personal data may be transferred abroad for purposes such as utilizing web analytics services (e.g., Google Analytics). Such transfers are conducted in accordance with Article 9 of the Law, where adequate protection exists or necessary safeguards (such as Standard Contractual Clauses and additional measures) are implemented in compliance with the decisions of the Personal Data Protection Board.

3.4. The information that the Data Subjects provide to ANKA Law shall not be shared with third parties, except for the purposes set out in this Policy and the situations required to provide the service.

4. Retention Of Personal Data

4.1. Personal data and other information are retained for the time required by ANKA Law’s purpose to collect information. If a special period is stipulated in the legislation for us to store your information, this period is respected. ANKA Law retains personal information collected from a Data Subject for as long as necessary for the purposes for which the information was collected, where ANKA Law has an ongoing legitimate business need to do so, or to comply with applicable legal, tax, or regulatory requirements.

4.2. When ANKA Law has no ongoing legitimate business need to process personal information, ANKA Law will either securely destroy, erase, delete or anonymize it, or if this is not possible (for example, because personal information has been stored in backup archives), then ANKA Law will securely store personal information and isolate it from any further processing until deletion is possible.

4.3. For security and operational reasons, personal data may be stored on servers or cloud systems located outside of Türkiye.

5. Data Security Measures

5.1. ANKA Law takes the necessary technical and organizational measures to protect the systems and information bases where your information is kept against information security threats. These measures include, but are not limited to, IP address masking, pseudonymization, access controls, logging, data minimization, and purpose limitation principles.

5.2. ANKA Law endeavours to protect all personal information using reasonable and appropriate physical, administrative, technical, and organizational measures, and in accordance with internal security procedures and applicable law.

5.3.  In the event of a data breach affecting you, ANKA Law will notify you and any relevant regulatory authorities as required by law.

6. Keeping Information Accurate and Up to Date

6.1. It is the Data Subject’s responsibility to keep the information provided to ANKA Law accurate and up to date. The information requested from the Data Subject must be conveyed accurately and updated if there is any change.

6.2. When a Data Subject provides information to ANKA Law on behalf of someone else, the Data Subject undertakes that they have the right to share this information with ANKA Law and that they are authorized to do so.

6.3. Failure to provide the requested personal data may prevent us from delivering services or fulfilling contractual obligations.

7. Changes to the Policy

ANKA Law reserves the right to make changes and updates to this Policy. The latest version will be made available to Data Subjects on our website.

8. Rights of Data Subjects

As the Data Subject, you have the following rights under Article 11 of the Law:

  • to learn whether your personal data is processed or not, and to request information about the processing thereof;
  • to learn the purpose of processing your personal data and whether relevant data is used in accordance with the intended purpose;
  • to know the third parties to whom your personal data is transferred/disclosed;
  • to request correction in cases where your personal data is processed erroneously or deficiently and, when you enforce this right, to request for the correction to be notified to third parties to whom your personal data is transferred;
  • to request the destruction or deletion of your personal data in the event the purposes for processing your personal data cease to exist and, when you enforce this right, to request for this to be notified to third parties to whom your personal data is transferred; and
  • to object to the outcome of the analysis of your collected information made by automatic systems and to claim for damages in case you suffer any loss.

9. Contact Information

As ANKA Law, we guarantee that you may use the rights specified above at any time. You may submit your requests via a formal application form or by contacting us through the information stated below:

E-mail: info@anka.law Address: Esentepe Mah. Büyükdere Cd. No:102 Maya Akar Center B Blok D:53 Şişli / İstanbul – Türkiye