KVKK
Personal Data Protection Policy
Last updated: 18 October 2026
This policy explains the principles on which YAKA Law & Consultancy processes personal data under Law No. 6698 on the Protection of Personal Data (KVKK). Detailed information on data collected through this website is in the Disclosure Notice.
01.Data controller
The data controller is YAKA Law & Consultancy, located at Beştepe, Meriç Sk. No:54/A, Yenimahalle / Ankara. Contact: info@yakahukuk.com, +90 312 215 80 85.
02.Principles of processing
Personal data is processed lawfully and fairly, accurately and, where necessary, kept up to date, for specified, explicit and legitimate purposes, and in a manner that is relevant, limited and proportionate to those purposes. Data is retained for the period provided in the relevant legislation or required by the purpose of processing.
03.Legal grounds
Under Article 5/2 of the KVKK, personal data is processed on the grounds that processing is directly related to the establishment or performance of a contract, is necessary for the legitimate interests of the data controller, or is necessary for the establishment, exercise or protection of a right. Where a legal obligation is being fulfilled, the relevant statutory provision is the basis.
04.Lawyer-client relationship and professional secrecy
The lawyers working at the firm are bound by professional secrecy under the Attorneyship Law with regard to information disclosed to them. Information about client files is processed only to the extent required by the legal service and by authorised persons.
05.Rights of the data subject
Under Article 11 of the KVKK, everyone has the right to learn whether their personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred; to request correction if incomplete or inaccurate; to request erasure or destruction; to request that these actions be notified to third parties; to object to an adverse result arising from automated analysis; and to claim compensation if harmed by unlawful processing.
06.Applications
You can submit applications about these rights to the firm's address using the methods specified in the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications are concluded as soon as possible depending on the nature of the request and within thirty days at the latest.