Bu metin İngilizce olarak yayımlanmıştır. Türkçe sürümü için bizimle iletişime geçebilirsiniz.
Clarification Text on the Processing of Personal Data under Article 10 of the Law on the Protection of Personal Data No. 6698
Last updated: 10 August 2026
This Privacy Notice is provided by Lokmanhekim Law Firm ("the Firm"), acting as data controller within the meaning of the Turkish Law on the Protection of Personal Data No. 6698 ("KVKK" or "the Law"), in order to inform visitors of this website ("the Site") in accordance with the Firm's obligation to inform under Article 10 of the KVKK and the Communiqué on the Procedures and Principles of Compliance with the Obligation to Inform.
This Notice covers personal data processed in connection with your visit to the Site and your use of the contact form and the online appointment booking feature. Where the Firm processes personal data in the course of providing legal services to a client, a separate, engagement-specific clarification text is provided.
1. Data Controller
Lokmanhekim Law Firm
Attorney Berke Lokmanhekim, member of the Istanbul Bar Association
Bar registry no: 69475
Address: Caferağa Mah. Şifa Sk. No: 19, 34710 Kadıköy / Istanbul
Telephone: +90 850 242 42 89
E-mail: info@lthukuk.com
2. Personal Data We Process
Depending on how you interact with the Site, the Firm processes the following categories of personal data:
- Identity data: name and surname provided through the contact form or the appointment booking feature.
- Contact data: e-mail address and telephone number you provide.
- Request and appointment data: the content of the message you submit, the general subject matter of the consultation you select, and the appointment date and time.
- Transaction security and technical data: IP address, browser type and version, device information, access dates and times, and cookie records generated automatically when you visit the Site. Details on cookies are set out in the Cookie Policy.
You are requested not to include special categories of personal data within the meaning of Article 6 of the KVKK (such as data relating to health, criminal convictions, religion, or trade union membership) or confidential details of any legal matter in the free-text fields of the contact form or the booking feature. Such details can be shared, where necessary, after the Firm confirms the engagement and provides the appropriate clarification text.
3. Purposes of Processing
Your personal data is processed for the following purposes:
- receiving, evaluating, and responding to your requests and inquiries submitted through the Site,
- scheduling, confirming, rescheduling, and managing consultation appointments,
- carrying out the steps necessary for the establishment and, where an engagement is concluded, the performance of a legal services agreement,
- conducting communication activities relating to the above,
- ensuring the operation, security, and improvement of the Site and preventing misuse,
- complying with the Firm's obligations under applicable legislation, including the Attorneyship Law No. 1136 and Law No. 5651, and
- establishing, exercising, or protecting legal rights where necessary.
4. Legal Grounds for Processing
Your personal data is processed on the basis of the following legal grounds set out in Article 5 of the KVKK:
- Article 5/2(c): processing is necessary for the establishment or performance of a contract to which you are a party, including steps taken at your request prior to an engagement (contact requests and appointment bookings),
- Article 5/2(ç): processing is necessary for the Firm to comply with its legal obligations,
- Article 5/2(e): processing is necessary for the establishment, exercise, or protection of a right,
- Article 5/2(f): processing is necessary for the legitimate interests of the Firm, such as maintaining the security and functionality of the Site and keeping records of correspondence, provided that your fundamental rights and freedoms are not harmed, and
- Article 5/1 (explicit consent): only for cookies that are not strictly necessary, as explained in the Cookie Policy, and in any other case where none of the above grounds applies.
5. Method of Collection
Your personal data is collected by electronic means, in full or partial automated ways, through the forms you complete on the Site, the online appointment booking feature, cookies and similar technologies used on the Site, and the e-mail and telephone communications you initiate using the contact details published on the Site.
6. Transfer of Personal Data
Your personal data is not sold and is not shared with third parties for marketing purposes. It may be transferred only:
- to authorized public institutions and organizations, courts, and enforcement authorities where required by law or by a lawful request,
- to the Firm's suppliers of information technology, hosting, and infrastructure services, to the extent necessary for the operation of the Site, and
- to professional advisers (such as an independent accountant) to the extent required for the Firm's statutory compliance.
The Site is built and hosted on the Wix platform operated by Wix.com Ltd. For this reason, data collected through the Site (including form submissions, booking records, and technical data) may be stored on servers located outside Türkiye. Such cross-border transfers are carried out in accordance with Article 9 of the KVKK, as amended by Law No. 7499, on the basis of an adequacy decision where available, appropriate safeguards such as the standard contract announced by the Personal Data Protection Board, or, in their absence, the conditions for occasional transfers set out in Article 9/6, including your explicit consent after being informed of the possible risks.
7. Retention
Your personal data is retained only for as long as required by the purposes stated above and by applicable statutory retention and limitation periods. Upon the expiry of these periods, your personal data is erased, destroyed, or anonymized in accordance with Article 7 of the KVKK and the Regulation on the Erasure, Destruction or Anonymization of Personal Data.
8. Your Rights under Article 11 of the KVKK
Under Article 11 of the KVKK, you have the right to apply to the Firm and:
- to learn whether your personal data is being processed,
- to request information if your personal data has been processed,
- to learn the purpose of the processing and whether your data is used in accordance with that purpose,
- to know the third parties, in Türkiye or abroad, to whom your personal data has been transferred,
- to request the rectification of your personal data if it is incomplete or inaccurate,
- to request the erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
- to request that any rectification, erasure, or destruction carried out upon your request be notified to the third parties to whom your personal data has been transferred,
- to object to a result arising to your detriment through the analysis of your processed data exclusively by automated systems, and
- to claim compensation for damages if you suffer damage due to the unlawful processing of your personal data.
9. How to Exercise Your Rights
You may submit your requests concerning the rights listed above, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:
- in writing, with your wet-ink signature, delivered to Caferağa Mah. Şifa Sk. No: 19, 34710 Kadıköy / Istanbul in person or through a notary public, or
- with your secure electronic signature or mobile signature, or from an e-mail address previously notified to the Firm and registered in the Firm's records, to info@lthukuk.com.
Your application must include your name, surname, signature (for written applications), Turkish ID number (or nationality and passport number for foreign nationals), notification address, and the subject of your request. The Firm will conclude your application free of charge and in any event within thirty days at the latest. If the response involves an additional cost, fees determined by the Personal Data Protection Board may be charged. If your application is rejected, or you consider the response insufficient, or the application is not answered in time, you may lodge a complaint with the Personal Data Protection Board under Articles 13 to 15 of the KVKK.