Privacy Policy
Our privacy notice and data protection policy under Turkish Personal Data Protection Law No. 6698 (KVKK).
01 Data Controller
Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by the data controller whose details are set out below.
- Title
- Bilkay Legal — Att. Mahmut Mert Bilkay
- Address
- Kadikoy, Istanbul
- avmertbilkay@gmail.com
- Phone
- 0543 931 2012
This notice has been prepared to inform you about how the personal data you share with our office through the contact form, the blog comment form and other channels is collected, processed and protected.
02 Personal Data Processed
The table below summarizes which personal data is collected and for what purpose.
| Data Category | Data Collected | Purpose of Processing |
|---|---|---|
| Identity | First name, last name | Matching the application to its owner, communication |
| Contact | Email address, phone number | Responding, appointment coordination |
| Transaction | Message content, subject of service, comment text | Evaluating legal requests, service delivery |
| Technical | IP address, browser type, time of visit | Site security, spam and abuse prevention |
Special categories of personal data (health, religion, political opinion, etc.) are not requested through the contact forms. If you share such information in your message, it is used solely for legal evaluation and additional security measures are applied.
03 Legal Basis
Your personal data is processed on the following legal bases (KVKK Art. 5):
- Explicit Consent (Art. 5/1): Your data is processed on the basis of the explicit consent you provide via the consent checkbox in the contact and comment forms.
- Legal Obligation (Art. 5/2-c): To fulfill our obligations arising from the Attorneyship Law, the Turkish Commercial Code and other legislation.
- Legitimate Interest (Art. 5/2-f): To ensure the security of our office, improve service quality and protect our legal rights against unjustified claims.
04 Retention Period and Security
Your personal data is retained for as long as the purpose of processing requires and within the scope of legal retention obligations:
- Contact forms: Up to 2 years from the date of application. If a legal service relationship is established, up to 10 years taking professional liability periods into account.
- Blog comments: Up to 1 year from the date of approval, or until you request deletion.
- Legal requirement: Retention periods prescribed by the relevant legislation apply with priority.
Your data is protected with technical and administrative security measures designed to prevent unauthorized access, disclosure and destruction. Once the periods expire, your data is securely deleted or anonymized.
05 Transfers to Third Parties
As a rule, your personal data is not transferred to third parties. Transfers may occur in the following exceptional cases:
- Legal requirement: Sharing with authorized public institutions under a court order, prosecutor request or relevant legal regulations.
- Service providers: Technical infrastructure providers used solely for message transmission, such as the email delivery service (Formsubmit.co). These providers cannot process your data for any independent purpose.
- Your explicit consent: Only within the scope of transfer purposes about which you have been informed and have approved in advance.
Your personal data is not transferred abroad.
06 Your Rights and How to Apply
Under Article 11 of the KVKK, you have the following rights regarding your personal data:
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether the data is used for that purpose
- To know the third parties to whom the data is transferred, domestically or abroad
- To request correction of incomplete or inaccurately processed data
- To request deletion or destruction of the data where the legal conditions are met
- To request that correction and deletion operations be notified to the third parties to whom the data was transferred
- To object to an outcome against you arising from analysis solely through automated systems
- To claim compensation for damage you suffer due to unlawful processing
How to Apply
To exercise your rights, you can contact us through the channels below. Your applications are concluded free of charge within at most 30 days in accordance with Article 13 of the KVKK.
- avmertbilkay@gmail.com
- Phone
- 0543 931 2012
- Address
- Kadikoy, Istanbul
In your application, please clearly state your name, surname, contact details and the right you wish to exercise. Additional information may be requested to verify your identity.
If you find the response to your application insufficient, you reserve the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK). You can find the Authority's contact details at kvkk.gov.tr.
Reach Us for Your Data Rights
For your requests under the KVKK, you can contact us by email or phone.
Contact Page