This page summarises the main privacy principles applied by Akkaya & Partners in connection with website use, communications, and legal services.

Scope. This Privacy Policy applies to website visitors, clients and prospective clients, business partners, suppliers, service providers, job applicants, and other individuals whose personal data we process. “Personal data” means any information relating to an identified or identifiable natural person.

Data Controller. Akkaya & Partners acts as the data controller in respect of personal data processed under this Privacy Policy in accordance with Law No. 6698 on the Protection of Personal Data (KVKK) and, where relevant, applicable international data protection laws including GDPR.

Personal Data We Collect. We may collect contact and identity data, professional and client data, compliance data, communication data, technical data, recruitment data, and, where necessary and permitted by law, special categories of personal data strictly in connection with legal services.

How We Collect Personal Data. We may collect personal data directly from you, from clients and business partners, from publicly available sources, through our website and communications, and from third parties where required for legal or compliance purposes. Where personal data is provided by clients, they are responsible for ensuring that the data is shared lawfully.

How We Use Personal Data. We process personal data to provide legal advice and services, manage client and business relationships, communicate with you, comply with legal and regulatory obligations, conduct due diligence and compliance checks, manage recruitment processes, improve our website and services, and send updates, invitations, and legal insights where appropriate.

Legal Basis for Processing. We process personal data in accordance with applicable laws, including Articles 5 and 6 of KVKK, where processing is necessary for the performance of a contract, compliance with legal obligations, the establishment, exercise, or protection of a legal right, our legitimate interests, or your explicit consent where required. Special categories of personal data are processed only where permitted by law and necessary for legal services.

Sharing of Personal Data. We may share personal data with business partners and international law firms, consultants and professional advisors, service providers such as IT systems, and analytics providers, financial institutions, regulatory authorities and courts where required, and third parties involved in transactions, restructuring, or legal proceedings. All such parties must process personal data in accordance with applicable laws and confidentiality obligations.

International Data Transfers. Personal data may be transferred outside Türkiye where necessary for cross-border legal services, collaboration with international advisors, and business operations. Such transfers are carried out in accordance with KVKK requirements and applicable safeguards, including explicit consent or other lawful transfer mechanisms where required.

Data Retention. We retain personal data for as long as necessary to provide legal services, comply with legal and regulatory obligations, and establish, exercise, or defend legal claims. Retention periods are determined in accordance with applicable laws and internal retention policies.

Data Security. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

Your Rights. Under applicable data protection laws, including KVKK, you may have the right to access your personal data, request correction, request deletion or destruction, request restriction of processing, object to processing, request portability where applicable, and withdraw consent where processing is based on consent. In accordance with Article 11 of KVKK, you may also request information about processing, learn the purpose of processing, know the third parties to whom data is transferred, request notification of corrections or deletions, object to adverse automated decisions, and request compensation for unlawful processing.

Marketing and Communications. Where we send legal updates, invitations, or other communications, you may opt out at any time by using the unsubscribe option or contacting us directly.

Third-Party Links. Our website may contain links to third-party websites. Akkaya & Partners are not responsible for the privacy practices of such websites.

Changes to This Policy. We may update this Privacy Policy from time to time, and the updated version will be published on our website with the effective date.

Contact. For any questions regarding this Privacy Policy, the processing of personal data, or the exercise of your rights under KVKK, please contact Akkaya & Partners at info@akkayapartners.com.