1. Data Controller
In accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”), Vensa Law (“Vensa Law” or the “Firm”), acting as the data controller, places the utmost importance on the security of the personal data of visitors to our website, vensalaw.com, as well as our clients and business partners. Your personal data is processed within the scope described below and in accordance with applicable legislation.
2. Personal Data We Process
In connection with activities carried out through our website, personal data in the following categories may be processed:
• Transaction Security Data: IP address, access logs, website entry and exit times, browser type and version, and operating system information (for all visitors).
• Identity Data: First name and surname (for people who complete the contact form).
• Contact Data: Email address and telephone number (for people who complete the contact form or use our WhatsApp line).
• Communication Content: The content of messages you send through the message field or by email, and details of your requests and complaints.
• Legal Transaction Data: Summaries of events, case file information and details of disputes you provide to us in connection with litigation or legal consultancy.
• Client Transaction Data: Appointment requests, billing information and payment records.
3. Purposes of Processing Personal Data
Your personal data is processed by the Firm solely for the following purposes:
• Compliance with Legal Obligations: Keeping and retaining traffic records as required by Law No. 5651 on the Regulation of Publications on the Internet.
• Managing Communications: Responding to requests, questions and appointment enquiries received through website contact forms, email or telephone.
• Managing Information Security Processes: Maintaining website security and detecting and preventing cyberattacks.
• Improving Service Quality: Improving the user experience through the anonymous analysis of website visitor statistics.
• Information Security: Maintaining the security of the website and the Firm’s office information systems.
• The Right to Establish Evidence: Using information as evidence in legal disputes that may arise in the future.
4. Methods of Collection and Legal Grounds
Your personal data is collected electronically through logs automatically recorded by our servers during your visit to the website, cookies and the contact forms you complete. These processing activities are based on the following legal grounds set out in Article 5 of the KVKK:
• Processing expressly provided for by law: The obligation to keep logs under Law No. 5651.
• Processing directly related to the establishment or performance of a contract: Evaluating your requests for legal consultancy.
• Processing necessary for the data controller to fulfil a legal obligation: The obligation to provide information to competent authorities.
• Processing necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not prejudiced: Maintaining website security and managing communications.
5. Transfer of Personal Data
In order to fulfil the purposes described above and in accordance with Articles 8 and 9 of the KVKK, the personal data we collect may be transferred to:
• Technical suppliers providing our IT infrastructure services, including server hosting and email service providers.
• Public institutions and organisations authorised by law, for example in response to requests from a public prosecutor’s office or a court.
6. Your Rights as a Data Subject
Under Article 11 of the KVKK, you may exercise the following rights by applying to the Firm:
• To learn whether your personal data is being processed.
• To request information if your personal data has been processed.
• To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose.
• To know the third parties to whom your personal data is transferred, in Türkiye or abroad.
• To request correction if your personal data has been processed incompletely or inaccurately.
• To request deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK.
• To request that correction, deletion or destruction be notified to third parties to whom your personal data has been transferred.
• To object to a result arising against you through the analysis of your processed data exclusively by automated systems.
• To seek compensation for loss suffered as a result of the unlawful processing of your personal data.
How to Apply: Requests concerning your rights should be prepared in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller. You may submit your request:
• In person or through a notary, with a petition bearing your handwritten signature, to the address stated in the website’s Contact section.
• From your registered electronic mail (KEP) address to [email protected].
• From the email address registered in our system to [email protected].
Response to Applications: Requests submitted to the Firm will be answered in writing or electronically as soon as possible, depending on their nature, and no later than thirty days, subject to the processing fee specified in Article 7 of the Communiqué on the Procedures and Principles for Applications to the Data Controller.
