Personal Data Protection Policy

Günay Erdoğan Attorneys-at-Law has prepared this Privacy Notice to inform individuals regarding the processing of their personal data by Günay Erdoğan Attorneys-at-Law and the purposes of processing, methods, and legal grounds for data collection, categories of recipients to whom personal data may be transferred, and the rights of individuals under the Law on the Protection of Personal Data numbered 6698 (“LPPD”). This Privacy Notice applies to personal data of individuals and shall not apply in cases where Günay Erdoğan Attorneys-at-Law acts as the “data processor”.

Günay Erdoğan Attorneys-at-Law prioritizes transparency and accountability with respect to data processing activities and processes, and processes personal data in accordance with the relevant legislation, only for the purposes and limitations defined below, and takes the necessary and appropriate technical and organizational measures.

Günay Erdoğan Attorneys-at-Law’s relevant business processes and data processing processes are carried out in accordance with pre-determined corporate policies and procedures that have been prepared in conformity with applicable legislationGünay Erdoğan’s personal data processing processes are carried out as explained under this Privacy Notice in conformity with our policies and procedures regarding the processing, retention and disposal of personal data and the relevant legislation.

Personal data may be collected through the information and documents that individuals have produced or shared with Günay&Erdoğan prior to, during, or after any relationship or through other similar relations; transactions, stakeholders, publicly available resources and platforms (such as media records, the trade registry, and the chamber of commerce); communications, research, meetings, interviews, and correspondences that Günay&Erdoğan has made with individuals and through other channels, including our website and social media, via oral, written, and electronic platforms, and are processed through automatic (electronic systems and programs that we use) and non-automatic (physical files and physical record keeping activities) means for the purposes explained in this Privacy Notice.

Personal data will be retained within Turkey for the legal retention periods, if any, and/or for the period necessary for the purposes of processing. Personal data will be erased, destroyed, or anonymized at the end of the retention period necessary for the purposes of processing in accordance with the legislation and relevant policies and procedures of Günay&Erdoğan Attorneys-at-Law.

Personal Data Processing in our Main Activities

Personal data may be processed within the scope of the services provided to our customers as well as the administration, management, and financial operations of Günay Erdoğan Attorneys-at-Law, for the purposes described below to the extent necessary, on the legal grounds that processing personal data is necessary for the enactment or fulfilment of the contract as indicated under Article 5(2)(c) of the LPPD or is mandatory for the legitimate interests of Günay&Erdoğan Attorneys-at-Law as per Article 5(2)(f) of the LPPD. Personal data may also be processed for the purposes of pursuing or defending against legal proceedings on the legal grounds that processing is mandatory for the establishment, exercise, or protection of rights as indicated under Article 5(2)(e) of the LPPD or for the purposes of fulfilling our legal obligations and complying with the information and documentation requests of the competent authorities on the legal grounds that processing is necessary for compliance with our legal obligations as per Article 5.

Your rights under the LPPD are important to us. You have the right to:

• Be informed about whether your personal data has been processed or to request information about whether your personal data has been processed
• Be informed of the purposes of the data processing and whether your personal data has been used for the intended purposes
• Be informed of the third parties to whom your personal data has been transferred either domestically or abroad
• Request the rectification of incomplete or inaccurate data, if any; request the erasure or destruction of your personal data under the conditions laid down in the LPPD legislation; or request a notification from the third parties to whom your personal data has been transferred regarding the operations carried out with respect to your aforementioned request
• Object to the processing of your personal data collected exclusively by automatic means that has led to an unfavorable consequence for you
• Request compensation for any damages arising from the unlawful processing of your personal data

If you have any queries or requests regarding your personal data, you may submit a written request to our address at “Kızılırmak Mah. Muhsin Yazıcıoğlu Cad. Protokol Plaza No:39/112 Kat:18 Çankaya – Ankara” to the attention of Günay&Erdoğan Attorneys-at-Law, through mail or by sending an e-mail to our e-mail address at info@gunayerdogan.com.tr.

Please note that your request should concern your own data, or if you are acting on behalf of another person, you must provide us with a special power of attorney covering the request. As per the regulations, your request should include your name, surname, Turkish ID number (for foreigners, nationality information and passport number), proof of identity, and the contact information for where our response to your request should be sent.

We may update this Privacy Notice from time to time, to reflect changes in applicable laws, regulations, or our practices. We will notify you of any material changes to this Privacy Notice by posting the updated version on our website, and we encourage you to check our website periodically to review the latest version of this Privacy Notice.