Privacy policy

Introduction

Law Istanbul attaches great importance to protecting your personal data. In this privacy policy we explain which personal data we process, for what purposes, on what legal basis, and what rights you have under the General Data Protection Regulation (GDPR) and, where relevant, the Turkish Personal Data Protection Law (KVKK).

Data controller

Law Istanbul is the data controller for processing personal data as described in this privacy policy. For questions or requests you can contact us via:

• Email: info@lawistanbul.nl
• Phone: +31 6 31221780
• Address: Meander 825, 6825 MH Arnhem

Which personal data we process

Law Istanbul processes only personal data necessary for providing legal services. This includes:

• Identification data (name, address, date of birth, phone number, email)
• Passport or ID data (if required for Turkish procedures)
• Financial data (bank account number, payment information)
• Legal file information (documents, statements, evidence)
• Communication data (emails, correspondence, notes)
• Data of third parties relevant to the case

Where necessary for legal procedures, special categories of personal data may be processed, such as data on family relationships, court judgments or criminal information. This occurs only when strictly necessary for the engagement.

Purposes of processing

Law Istanbul processes personal data for the following purposes:

• Performance of legal engagements and procedures
• Drafting legal documents and court filings
• Communication with clients, authorities and third parties
• Compliance with legal obligations in the Netherlands and Turkey
• Administrative purposes (invoicing, file management)
• Security and quality assurance of services

Personal data is not used for commercial purposes and is never sold to third parties.

Legal basis

Law Istanbul processes personal data on the basis of:

• Performance of a contract
• Legal obligation
• Legitimate interest
• Consent (where expressly required)

Disclosure to third parties

Law Istanbul discloses personal data to third parties only when necessary for performance of the engagement or when legally required. This may relate to:

• Turkish lawyers and legal authorities
• Notaries, sworn translators and experts
• Courts and government bodies
• Financial service providers (bank, accountant)

These third parties process data under their own responsibility and according to their own professional rules.

Retention periods

Law Istanbul retains personal data no longer than necessary for the purposes for which it was collected, unless a statutory retention period requires otherwise. Legal files are usually kept for at least 5 years, or longer if the nature of the case requires it.

Security

Law Istanbul takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or disclosure. This includes secure storage, encrypted communication and restricted access to files.

Rights of data subjects

Under the GDPR you have the following rights:

• Right of access
• Right to rectification
• Right to erasure (insofar as compatible with statutory retention obligations)
• Right to restriction of processing
• Right to data portability
• Right to object

Requests can be submitted via the contact details under Data controller. Law Istanbul assesses each request within the statutory period.

International data processing (Turkey)

Because Law Istanbul provides legal services under Turkish law, it may be necessary to share personal data with authorities or lawyers in Turkey. Law Istanbul ensures that this processing complies with KVKK legislation and appropriate security measures.

Changes

Law Istanbul reserves the right to amend this privacy policy. The most current version is always published on the website.

Contact

For questions, requests or complaints regarding privacy you can contact us via:

• Email: info@lawistanbul.nl
• Phone: +31 6 31221780
• Address: Meander 825, 6825 MH Arnhem

If you believe your privacy rights are being violated, you may file a complaint with the Dutch Data Protection Authority or, where applicable, the KVKK authority in Turkey.