1. Introduction

Durukan Fadıllıoğlu Attorney Partnership ("Our Office" and/or "Durukan+Partners") attaches importance to the protection of your personal data. In this context, this clarification text informs you that your personal data may be processed in accordance with the Law No. 6698 on the Protection of Personal Data ("Law") and explains the rights you have. This clarification text explains how the personal data of the persons listed below are collected, how they are used, to which transfers they may be subject, and how they are processed in other ways:

• Contact persons of our Clients ("Our Clients") and/or potential Clients;
• Persons who have applied for a job at our Office or contacted our Office for any reason;
• Persons visiting our website and other online services; and
• Persons providing goods and services to our Office.

2. Data Controller

Our Office acts as a data controller within the scope of the Law in a limited manner, such as managing recruitment processes based on job applications and sending informational and congratulatory messages electronically. As a data controller, our Office will process your personal data within the scope described below and within the limits prescribed by the relevant legislation.

Our Office, within the scope of the Attorneyship Law No. 1136, in its capacity as a law firm, may carry out data processing activities as a data processor based on the instructions and/or requests of our Clients regarding legal services. Regarding these activities, the data controller notifications and other obligations are fulfilled directly by our Clients who have the status of data controller.

Our Office may make changes to this clarification text from time to time. In case of any changes to this clarification text you will be informed by updating the date of the current clarification text. Therefore, we recommend that you review this clarification text available on our website again in every case where our Office acts as data controller in its relationship with you.

3. Personal Data We Process and Methods of Personal Data Collection

We process your personal data, which we have obtained either through the information you provide to us, through automated or non-automated means, or from third parties, and which we have grouped as follows.

• Technical device data collected when you visit our website and other online services: Internet Protocol (IP) address, login data, browser type and version, time zone settings and location, browser plugin types and versions, operating system and platform, and other technologies on the devices used to access this website, as well as information about how you use our website, etc.
• Identity and contact data: Your name and surname, phone number and e-mail address and other contact information. This information is necessary to identify you when you use any of our services.
• Sensitive personal data: Your sensitive personal data may only be stored or processed by our Office in limited cases where it is necessary for the provision of the service we provide to you or for us to fulfill our legal obligations, and only if directly shared by you with us.
• Registration and notification data: Your personal data may be processed during notification requests regarding legislative changes, and during event, webinar, conference, and seminar notifications and registrations.
• Data related to services provided to our Clients: Personal data, payment details, and feedback data of Client customers, employees, or other persons related to the Client collected in connection with the services provided to our Clients.
• Data related to recruitment processes: Personal data collected in relation to job candidates or job opportunities.
• Other data: Personal data on identity cards, passports, and other identity documents shared by you with us.

Your personal data will be stored in accordance with the periods specified in the relevant legislation.

In cases where we process your personal data by sending you informational and/or congratulatory messages on behalf of our Office, you may opt out of receiving such informational and/or congratulatory messages at any time by contacting our Office via the email address provided in the relevant message or as specified below.

4. Purpose of Processing Your Personal Data

The personal data collected will be processed in accordance with the basic principles set forth in the Law, for the purposes listed below ("Purposes") and within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law:

• Providing legal consultancy services, conducting business activities, and managing the business relationship with our Clients.
• Ensuring safer, more effective, and efficient use of our website and other online accounts where we provide services.
• Providing informational services: Conducting corporate communication activities including informing our Clients and potential Clients about various legal developments, legislation and sector updates, developments related to our Office, and our services, as well as sending congratulatory messages for specific occasions.
• Providing registration services: Managing registration processes for our events, conferences, and webinars.
• Processing data for verifying the identities of our Clients and potential Clients, identifying any conflicts of interest, and fulfilling other legal obligations.
• Conducting recruitment processes.
• Fulfilling obligations arising from legislation.
• Providing information and documents to authorized public institutions and organizations, private persons, judicial and law enforcement authorities, and fulfilling other legal obligations.

5. Persons to Whom We Transfer Your Personal Data and Purposes of Transfer

We may transfer the personal data we collect to our suppliers, contracted courier companies, payment providers, banks, consultants, and authorized public institutions in accordance with the conditions set forth in Articles 8 and 9 of the Law. Transfers of data to persons outside the Republic of Türkiye are carried out by fulfilling the conditions within the framework of the Law and other relevant legislation. Transfers may also be made within the scope of relevant legislation to fulfill our obligations towards public authorities. With your consent, we may share your personal data with other third parties in compliance with the provisions and conditions of the Law.

In all cases, we require that all third parties evaluate your personal data in accordance with the legislation and respect the security of your data. We do not allow third-party service providers to use your personal data for their own purposes; we only permit them to process your data for the purposes specified by us, within the framework of our instructions.

6. Legal Grounds for the Processing of Your Personal Data

Your personal data are processed by our Office in accordance with Article 5 of the Law. Your personal data may be processed by our Office based on the legal grounds of the necessity of processing data for the legitimate interests of our Office, provided that it is directly related to the establishment or performance of a contract, based on the legal ground of the necessity of processing personal data belonging to the parties of the contract, based on the legal ground of our Office's legal obligation, or based on your explicit consent.

7. Your Rights as a Data Owner

As a data owner, if you submit your requests regarding your rights through the methods outlined below, we will respond to your request as quickly as possible and no later than 30 (thirty) days, free of charge, depending on the nature of your request. However, if the process requires an additional cost, the fee specified in the tariff determined by the Personal Data Protection Board will be applied. In this context, under Article 11 of the Law, as a data owner, you have the right to;

• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request correction of your personal data in case of incomplete or incorrect processing,
• To request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the Law,
• To request notification of the transactions made pursuant to the previous two subparagraphs to third parties to whom your personal data have been transferred,
• To object to the emergence of a result against you by analysing your processed data exclusively through automated systems,
• To request compensation if you suffer damage due to the unlawful processing of your personal data.

In accordance with Article 13 of the Law, in order to exercise the above-mentioned rights, you may submit your request in writing, including your name, surname, Turkish Republic identity number for Turkish citizens; nationality, passport number, or identification number, if any for foreign nationals; address, email address, phone and fax numbers, and the subject of your request, via the methods listed below, or you may contact us through our telephone number:

Postal Address:	Bestekar Hacı Faik Bey Sok. No:6 34349 Balmumcu, Beşiktaş İstanbul, Türkiye
E-mail Address:	info@durukanpartners.com
Fax:	+90 212 266 66 94
Tel:	+90 212 266 66 93

8. Other

The provisions contained in this clarification text apply solely to our website and other online channels belonging to our Office. Our Office bears no responsibility regarding the privacy practices or content of other websites. If you have linked to or visited another website by any means, we recommend that you review the privacy notice and Law texts of the relevant website.