Under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), we would like to inform you, as data controller Av. Esra Ateş, about the personal data processed through avukatesraates.com.
1. Personal Data We Process
We process only the data you provide yourself and the data that is technically necessary:
| Where | Data processed |
|---|---|
| Contact form | Full name, e-mail address, telephone number, subject and message content |
| Blog comments | Name, e-mail address, comment text, rating, IP address and browser information (for spam prevention) |
| Online payment | Cardholder name, masked card number, transaction amount and date, order and bank reference numbers, IP address |
| Calculators | The values you enter are used only for that calculation and are not stored |
Your card details are not stored. Payments are processed through the infrastructure of our partner bank; our system keeps only the masked form of your card (for example 5218 ** ** 1234) and the result of the transaction. The full card number and the security code are never recorded by us at any stage.
2. Purposes of Processing
- To answer your enquiries and carry out the legal advisory process
- To publish and moderate blog comments and block spam attempts
- To complete payments and keep accounting records
- To keep the site secure and detect abuse
- To understand how the site is used and improve the content (statistical, de-identified)
3. Legal Bases
Your personal data is processed on the grounds listed in Article 5 of the KVKK:
- Your explicit consent — publishing comments, non-essential cookies
- Necessity for the conclusion or performance of a contract — advisory work and payments
- Compliance with a legal obligation — retention duties under the Attorneyship Act and tax legislation
- Legitimate interest — site security and spam prevention
4. Method of Collection
Data is collected electronically and by automated means through the forms on the website, cookies and server logs.
5. Transfers
Your personal data is never sold or transferred to third parties for marketing purposes. It is shared only with the following parties, and only where necessary to provide the service:
- Hosting and infrastructure providers — to run the website
- Cloudflare — content delivery and security; connection data may be processed on servers abroad
- Google (Analytics, reCAPTCHA, Fonts) — statistics, spam prevention and font delivery
- Partner bank / payment institution — payment transactions
- Competent public authorities — only where required by law
Because of the Google and Cloudflare services we use, your data may be transferred abroad. Such transfers are carried out within the scope of Article 9 of the KVKK.
6. Retention Periods
- Contact form records: a reasonable period after the enquiry is concluded
- Comments: for as long as they remain published; removed upon your deletion request
- Payment and accounting records: for the statutory retention period set by the applicable legislation
- Server and security logs: short term, only as long as technically necessary
7. Your Rights Under Article 11 of the KVKK
As a data subject you have the right to:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether the data is used in line with that purpose
- Know the third parties to whom the data is transferred, in Türkiye or abroad
- Request rectification if the data is incomplete or incorrect
- Request erasure or destruction under the conditions in Article 7 of the KVKK
- Request that rectification, erasure and destruction be notified to the third parties to whom the data was transferred
- Object to a result against you produced solely by automated analysis
- Claim compensation for damage suffered because of unlawful processing
8. How to Apply
To exercise your rights, send your request in writing through the contact channels below, together with information establishing your identity. Applications are concluded within thirty days at the latest. If your request is refused, you retain the right to lodge a complaint with the Turkish Personal Data Protection Board.
Data Controller and Contact
To exercise the rights described here, or with any questions, you may write to us.
- Data controller: Av. Esra Ateş — İstanbul Barosu · Sicil No: 61936
- Address: Hobyar Mahallesi Mimar Kemalettin Caddesi Konyalı Han No:1 D:405 Sirkeci - Fatih / İstanbul
- E-mail: [email protected]
- Phone: +90 530 547 64 82