Legal information
Privacy Notice (KVKK)
Home / Privacy Notice (KVKK)
Every case
matters to us.
This notice has been prepared under Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform. It explains for what purpose, on what legal basis and how we process your personal data when you write to us, call us, become our client, are the opposing party or another person involved in a matter we handle, or visit this website.
Data controller
Data controller: Att. Taha Hüseyin Çebi (Çebi Hukuk & Danışmanlık)
Address: Yeşilköy Mah. Atatürk Cad. No: 5/4, 3. Hol, İFM Ofisler, İç Kapı No: 12, 34149 Bakırköy / İstanbul
Email: info@cebilaw.com
Phone: +90 533 493 00 39
What data we collect and how
We collect your data through electronic channels such as email, telephone, WhatsApp and this website, and through physical means such as face-to-face meetings at our office and printed documents. Depending on the channel, we process the following data:
Email: Your full name or company name, your email address, the content of the correspondence, a summary of the facts and any documents you attach.
Phone and WhatsApp: Your phone number, the name and photo shown on your WhatsApp profile, the content of messages and voice messages, the documents you send, and our notes of the calls.
Meetings and representation: Your identity details, including your Turkish national ID number, your address and contact details, the power of attorney and the attorney engagement agreement, documents relating to the matter, records in court and enforcement files, and our meeting notes.
Payments: For bank transfers (havale and EFT), the sender's full name or trade name, bank and account details, the amount, date and description. For card payments, the phone number or email address to which we send the payment link, the payer's name (client or debtor), the amount and the result of the transaction. Card details are entered on Moka United's payment page; the full card number is not transmitted to us and is not stored by us.
Website: When you visit the site, your IP address, browser and device information, the page you visit and the time of your visit are recorded in the server logs of the provider that hosts our website. The site has no forms; we do not collect your name or email address through the site. For cookies, please see the Cookie Policy page.
Museum of the Legal Profession: When you write to us about the Museum, your name, your contact details and any documents or photographs you share.
Data of third parties: When handling a matter, we obtain data on the opposing party, debtors, witnesses and other persons concerned from our client, from those persons themselves, from court and enforcement files, from public authorities or from publicly available sources. When we arrange repairs and maintenance of a property as part of property management, we obtain the names or trade names and contact details of the individuals and companies doing the work, and the scope and cost of the work, from them or from our client. We process all of this data only to the extent the matter requires.
Special categories of personal data
The documents you send may contain special categories of personal data, such as data on health, criminal convictions, religion or membership of associations. We process such data only where this is necessary for the establishment, exercise or protection of a right, or where it is expressly provided for by law (KVKK Art. 6/3-b and d). When processing such data, we take the adequate measures determined by the Personal Data Protection Board (KVKK Art. 6/4).
Please send us only documents relevant to the matter.
Purposes of processing and legal bases
We process your data for the following purposes, on the legal bases shown next to each:
Responding to your inquiry and carrying out a preliminary review of the matter: direct relation to the conclusion of a contract (Art. 5/2-c) and our legitimate interest in responding to your request (Art. 5/2-f).
Concluding and performing the attorney engagement agreement; handling lawsuits, enforcement proceedings and advisory work; representing you before judicial authorities and public bodies: conclusion and performance of a contract (Art. 5/2-c), establishment, exercise or protection of a right (Art. 5/2-e) and express provision by law (Art. 5/2-a). For special categories of data, Art. 6/3-b and d.
Processing data of the opposing party, debtors and other third parties: establishment, exercise or protection of a right (Art. 5/2-e; for special categories of data, Art. 6/3-d).
Arranging repairs and maintenance of the property for our client as part of property management, communicating with the individuals and companies doing the work, and claiming from the tenant the cost of damage for which the tenant is responsible: conclusion and performance of a contract (Art. 5/2-c), and, for claims against the tenant, establishment, exercise or protection of a right (Art. 5/2-e).
Receiving payments of fees and expenses, and debt payments we collect on behalf of our client; matching each payment to its file, issuing receipts and keeping accounting records: performance of a contract (Art. 5/2-c), exercise of a right in the case of payments by debtors (Art. 5/2-e) and our legal obligation under tax legislation (Art. 5/2-ç).
Fulfilling our obligations under the legislation governing the legal profession; retaining files and checking for conflicts of interest before accepting a matter: legal obligation (Art. 5/2-ç; Attorneyship Law Art. 38 and Art. 39).
Protecting our rights in a possible dispute: establishment, exercise or protection of a right (Art. 5/2-e).
Responding to requests for information and documents made by competent authorities under the law: legal obligation (Art. 5/2-ç).
Providing a secure, working website: our legitimate interest (Art. 5/2-f).
Handling correspondence about the Museum of the Legal Profession: our legitimate interest (Art. 5/2-f).
Explicit consent
We do not rely on your explicit consent for the processing activities listed in this notice. If a situation arises that requires explicit consent, we will ask for your consent separately from this notice, after informing you in advance.
Who we transfer data to
We transfer your data only to the following recipients, for the stated purpose and to the extent necessary, in accordance with Articles 8 and 9 of the KVKK:
Judicial authorities and public bodies: Courts, enforcement offices, notaries, land registry and trade registry offices, mediation offices, court-appointed assessors and other competent public authorities; for handling the matter and meeting our legal obligations.
The opposing party and their attorneys: To the extent required by procedural rules, for example for the service of pleadings and documents.
Bank and payment institution: Türkiye Vakıflar Bankası T.A.O., through which we receive payments, and Moka United Ödeme Hizmetleri ve Elektronik Para Kuruluşu A.Ş., which provides the card payment infrastructure; for receiving and matching payments.
Revenue Administration (Gelir İdaresi Başkanlığı): For our obligations under tax legislation.
Service providers: Google for our email service, WhatsApp (Meta) for WhatsApp messages, Hostinger for hosting the website, and Google for the map on the Contact page; for communication and the operation of the website.
Persons and companies carrying out repairs and maintenance: The address of the property, the name and contact details of the person to be contacted, and our client's identity and tax details; to have repairs and maintenance carried out, to arrange access to the property and to have the invoice issued in our client's name.
Supervisory authorities: The Personal Data Protection Board, the bar association, the Union of Turkish Bar Associations and other competent authorities; upon their request, within the scope of our legal obligation.
Transfers abroad
The servers of Google, which provides our email service; Meta, which provides WhatsApp; and Hostinger, which hosts our website, may be located abroad. Correspondence and documents you send us through these channels are transferred to these servers.
The map on the Contact page comes from Google Maps. In the process, your IP address and browser information are transmitted to Google.
Under Article 9 of the KVKK, as amended in 2024, a transfer abroad first requires one of the processing conditions in Article 5 or 6. In addition:
If the Board has issued an adequacy decision for the country to which the data are transferred, we rely on that decision.
If there is no adequacy decision, we rely on one of the appropriate safeguards, such as the standard contract published by the Board.
If neither is available, and only for incidental transfers, we rely on one of the cases set out in the sixth paragraph of Article 9; for example, where the transfer is necessary for the performance of the contract between you and us, or for the establishment, exercise or protection of a right.
Retention periods
Files and correspondence relating to the mandate: For as long as the mandate continues; after it ends, for the five-year period provided for payment and compensation claims that may arise from the mandate agreement (Turkish Code of Obligations Art. 147; Attorneyship Law Art. 40). If a dispute arises within this period, until the dispute is resolved.
Documents you hand over to us: At least three years from the end of the mandate (Attorneyship Law Art. 39). If we notify you in writing to collect your documents, this obligation ends three months after the notice.
Payment, receipt and accounting records: Five years from the start of the calendar year following the year to which they relate (Tax Procedure Law Art. 253).
Inquiries that do not lead to a mandate: A record of the inquiry (name, contact details and subject) is kept for conflict-of-interest checks. Documents you send us are deleted once your inquiry has been concluded and they are no longer needed.
Technical logs relating to the website: For the log retention period of our hosting provider.
Deletion and confidentiality
When the retention period expires or the reason for processing no longer exists, we delete, destroy or anonymize the data (KVKK Art. 7). If you request deletion while our retention obligation still applies, we will inform you why we cannot meet your request, which retention obligation we rely on and how much longer the data will be kept.
Attorneys may not disclose matters entrusted to them or learned in the course of their professional duties (Attorneyship Law Art. 36). We also treat as confidential any information we learn through inquiries from people whose cases we do not take on (Professional Rules of the Union of Turkish Bar Associations [TBB], Art. 37). This obligation has no time limit; it continues even after the retention period ends. We take measures to ensure that our assistants and employees also observe professional secrecy.
We take the necessary technical and administrative measures to protect your data against unlawful processing and unlawful access (KVKK Art. 12).
Your rights
Under Article 11 of the KVKK, you may exercise the following rights by applying to us:
To learn whether your personal data are processed
To request information about the processing if your data have been processed
To learn the purpose of processing and whether the data are used in line with that purpose
To know the third parties in Türkiye or abroad to whom your data are transferred
To request rectification if your data have been processed incompletely or inaccurately
To request deletion or destruction of your data under the conditions set out in KVKK Art. 7
To request that rectification, deletion and destruction be notified to the third parties to whom the data have been transferred
To object to an outcome against you that results from the analysis of your data exclusively by automated systems
To claim compensation if you have suffered damage due to unlawful processing
How to apply
In accordance with the Communiqué on the Procedures and Principles of Applications to the Data Controller, you may submit your application in one of the following ways:
By delivering your application with your handwritten signature in person or by mail to Yeşilköy Mah. Atatürk Cad. No: 5/4, 3. Hol, İFM Ofisler, İç Kapı No: 12, 34149 Bakırköy / İstanbul
By writing to info@cebilaw.com from the email address you previously provided to us and that is in our records
By sending your application signed with a secure electronic signature or a mobile signature to info@cebilaw.com
Content and outcome of the application
Your application must include your first name and surname; your signature, for written applications; your Turkish national ID number (for foreign nationals, your nationality and passport or identity card number); your address for service; your email address and telephone number, if any; and the subject of your request. Also attach any information and documents relating to your request.
We conclude your application as soon as possible, depending on the nature of the request, and within thirty days at the latest. We either accept your request or reject it with reasons, and notify you of our response in writing or electronically. As a rule, no fee is charged; if the process involves an additional cost, the fee in the tariff set by the Board may be charged (KVKK Art. 13).
If your application is rejected, you find the response insufficient, or no response is given in time, you may file a complaint with the Personal Data Protection Board within thirty days of learning of the response and, in any event, within sixty days of the application date (KVKK Art. 14). The Board's website: kvkk.gov.tr
Changes
We update this notice when our data processing activities change. The version published on this page is the current version.