Privacy Policy

As data controller under the Law No. 6698 on the Protection of Personal Data (“KVKK”), Neka Legal Attorneys at Law (the “Firm”) processes the personal data of visitors to nekalegal.com, of people who contact us through our communication channels, and of clients and prospective clients, within the framework set out below. This notice is provided to fulfill the duty to inform under Article 10 of the KVKK.

Data controller

Neka Legal Attorneys at Law – Att. Kaan Kaplan (Bursa Bar Association)
Konak Mah. 1. Badem Sok. No:26 Lotus Office B Blok K:6 No:72, 16110 Nilüfer/Bursa, Türkiye
Tel: +90 (224) 504 59 17 · Email: info@nekalegal.com

Personal data we process

Depending on the nature of our relationship with you, the following categories of data may be processed:

  • Identity and contact details: name, surname, telephone number, email address and postal address; where a power of attorney is granted, your Turkish identity number (or, for foreign nationals, passport or foreign identity number) and identity document details.
  • Request and message content: information and attachments about your legal matter sent via the contact form, email, telephone or WhatsApp.
  • Client matter data: documents submitted to us in litigation, enforcement, contract and advisory work and the information they contain; power of attorney, contract and financial transaction records.
  • Special categories of personal data: only to the extent required by the legal work (for example criminal records in criminal cases or health information in work accident cases) and only under the conditions in Article 6 of the KVKK.
  • Transaction security and site usage data: IP address, browser and device information, pages visited, date and duration of visit, and cookie records.

How data is collected and legal grounds

Your personal data is collected by automated or non-automated means through the website, the contact form, email, telephone, WhatsApp, face-to-face meetings, public authorities and judicial bodies, and publicly available sources. Data is processed on the following legal grounds set out in Articles 5 and 6 of the KVKK:

  • the conclusion and performance of the engagement agreement (KVKK Art. 5/2-c);
  • compliance with obligations under the Attorneyship Law No. 1136, the Code of Civil Procedure No. 6100, the Code of Criminal Procedure No. 5271, tax legislation and other laws (KVKK Art. 5/2-a and 5/2-ç);
  • the establishment, exercise or protection of a right (KVKK Art. 5/2-e);
  • the Firm’s legitimate interests, provided your fundamental rights and freedoms are not harmed — for example securing the website and measuring service quality (KVKK Art. 5/2-f);
  • your explicit consent, where none of the above grounds applies (KVKK Art. 5/1).

Purposes of processing

  • responding to your requests and questions, and handling initial consultations and appointments;
  • providing legal representation and legal advice; managing litigation, enforcement and contract matters;
  • handling powers of attorney, agreements, invoicing and collections;
  • meeting legal obligations and requests from competent authorities;
  • securing the website, fixing errors and analyzing usage statistics.

Transfers of personal data

Limited to the purposes above and in accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred to courts, enforcement offices, public prosecutors, notaries, mediation offices and other competent public authorities; where the matter requires, to lawyers, court-appointed experts and translators we work with; to financial advisers, banks and payment institutions; and to IT infrastructure providers. The servers of providers used for website hosting, email and analytics may be located abroad; in that case the transfer is carried out in accordance with the conditions in Article 9 of the KVKK. Information covered by the attorney’s duty of professional secrecy is not shared with any third party except where required by law.

Online consultations

Online legal consultations take place, as you prefer, on Zoom, Google Meet, Microsoft Teams or WhatsApp. The servers of the companies providing these services may be located abroad; during the call, your video, audio and connection data are processed on these providers’ infrastructure, and the transfer is carried out in accordance with the conditions in Article 9 of the KVKK. The Firm does not record consultations. Information and documents you send by email or WhatsApp before the consultation are processed only to assess your request and to provide the advisory service.

Cookies

In addition to the strictly necessary cookies required for the site to function, we use analytics cookies (Google Analytics) that measure visit statistics, subject to your explicit consent. You can set your cookie preferences through the cookie notice shown on your first visit and change them at any time using the cookie icon at the bottom left. If you block cookies entirely in your browser settings, some features of the site may not work. For details, see our Cookie Policy.

Retention period

Your personal data is kept for as long as the purpose of processing requires and, in any event, for the limitation and retention periods set by the relevant legislation (the Attorneyship Law, the Turkish Code of Obligations, tax legislation, etc.); at the end of that period it is deleted, destroyed or anonymized under Article 7 of the KVKK. Data relating to enquiries that do not lead to an engagement is deleted within two years of the last contact at the latest.

Data security

Under Article 12 of the KVKK, the Firm takes the necessary technical and organizational measures to prevent unlawful processing of and unauthorized access to your personal data and to ensure its safekeeping. The website is served encrypted with an SSL certificate, and files and correspondence are kept on systems with restricted access.

Your rights as a data subject

Under Article 11 of the KVKK, you have the right to: learn whether your personal data is processed; request information if it is; learn the purpose of processing and whether the data is used in line with that purpose; know the third parties in Türkiye or abroad to whom the data is transferred; request correction of incomplete or inaccurate data; request deletion or destruction of the data under the conditions in Article 7 of the KVKK; request that these actions be notified to the third parties to whom the data was transferred; object to a result against you arising exclusively from analysis by automated systems; and claim compensation if you suffer loss because of unlawful processing.

You can submit requests in writing to the address above, together with documents identifying you, or by email to info@nekalegal.com, in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller. Requests are concluded free of charge within thirty days at the latest; if the action involves an additional cost, the fee schedule set by the Personal Data Protection Board may apply.

Changes

This policy may be updated to reflect changes in legislation and in our services. The current text is always published on this page and applies from the date of publication.

Language

This English text is a translation provided for convenience. In the event of any inconsistency, the Turkish version of this policy (Gizlilik Politikası) prevails.

For the terms of use of this site, please see the Legal Notice. Last updated: 6 November 2026.

Scroll to Top