MFDLAW OFFICE
EN

Information

Privacy Notice and Cookies

Last updated: 28 October 2026

This page is a translation of the Turkish texts published on this website (KVKK Aydınlatma Metni, Gizlilik Politikası, Çerez Politikası). In case of any discrepancy, the Turkish version prevails.

This notice has been prepared pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (the “Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to inform persons who visit the website mfdhukuk.com, use the contact form on the website or contact the office by e-mail through the website. Processing carried out within an attorney–client relationship falls outside the scope of this notice.

1. Data controller

Data controller
Av. Muhammet Fatih Demir, MFD Law Office (MFD Hukuk Bürosu)
Address
Balmumcu Mah. Barbaros Bulvarı No: 42, Kat: 2 Daire: 8, Beşiktaş / İstanbul
E-mail
[email protected]
Telephone
+90 542 642 51 56

2. Personal data processed and method of collection

Contact form and e-mail. Name and surname, e-mail address, telephone number (optional), the subject and content of the message and any other information you choose to share in the message. These data are obtained directly from you electronically when you fill in the form or send an e-mail.

Job applications. Identity, contact, education and professional experience information contained in the CV and cover letter sent to the e-mail address indicated on the careers page (in Turkish). These data are likewise obtained directly from you electronically.

Technical data relating to use of the website. IP address, browser and device information, the page visited, and the date and time of the visit. These data are obtained automatically through server logs and cookies when you visit the website. The cookies used on the website are listed in section 8 below.

We kindly ask you not to share special categories of personal data, such as data concerning health, criminal convictions or security measures, in your first message. If such information is needed for a legal assessment, it will be requested at the meeting stage.

3. Purposes and legal grounds

PurposeLegal ground
Assessing your enquiry, replying to you and arranging an appointmentFor requests aimed at establishing a mandate or advisory relationship, processing being directly related to the establishment of a contract (Law, art. 5/2-c); for other requests, the legitimate interest of the data controller (art. 5/2-f)
Assessing job applicationsProcessing being directly related to the establishment of a contract (art. 5/2-c)
Ensuring the secure and uninterrupted operation of the website, blocking automated and abusive traffic, remembering your display preferenceLegitimate interest of the data controller (art. 5/2-f)
Establishment, exercise or protection of rights in the event of a disputeNecessary for the establishment, exercise or protection of a right (art. 5/2-e)
Responding to requests for information and documents made by competent public authorities on a statutory basisCompliance with a legal obligation (art. 5/2-ç)

4. Transfers

Your personal data are not sold and are not shared with third parties for marketing purposes. Data may only be transferred to the following groups of recipients, limited to the stated purpose:

  • Hosting and infrastructure service providers: Cloudflare, for hosting the website, its security and the delivery of content; Cloudflare Turnstile, for automatically verifying that contact form submissions are made by a person (Turnstile Privacy Addendum).
  • E-mail service provider: Google, for forwarding contact form messages by e-mail and for hosting messages received at [email protected].
  • Font service: the fonts used on the website are loaded from Google Fonts; in the process your IP address is transmitted to Google.
  • Judicial authorities and competent public authorities: where necessary to fulfil a legal obligation or to protect a right, limited to what is requested and necessary.

As the servers of these service providers may be located abroad, use of these services results in personal data being transferred abroad. Such transfers are carried out in accordance with Article 9 of the Law.

Information communicated to the office is subject to the duty of professional secrecy under Article 36 of the Attorneyship Law No. 1136.

Messages sent through the contact form are not stored in the website database; they are forwarded directly by e-mail to [email protected]. The connection between you and the website is encrypted via HTTPS.

The website has no membership or user accounts and does not take payments. Automated submissions through the contact form are blocked with Cloudflare Turnstile. The website has no administration panel; its content is updated only by authorised persons.

5. Retention periods

  • Correspondence via the contact form and e-mail is kept for two years from the date of the last correspondence if no mandate or advisory relationship is established. If such a relationship is established, the retention periods applicable to the mandate apply.
  • Job applications are kept for one year from the date of application.
  • Technical data are kept for as long as they are held in the systems of the relevant service provider. Cookie durations are shown in section 8.

Data whose retention period has expired are deleted, destroyed or anonymised.

6. Your rights

Under Article 11 of the Law, by applying to the data controller you have the right to:

  • learn whether your personal data are processed,
  • request information if they have been processed,
  • learn the purpose of processing and whether they are used in accordance with that purpose,
  • know the third parties in Türkiye or abroad to whom they are transferred,
  • request rectification if they have been processed incompletely or inaccurately,
  • request erasure or destruction under the conditions set out in Article 7 of the Law,
  • request that rectification, erasure and destruction be notified to the third parties to whom the data have been transferred,
  • object to a result to your detriment arising from analysis exclusively by automated systems,
  • claim compensation for damage suffered as a result of unlawful processing.

7. Applications

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your requests in Turkish, in writing to the address above or by using a registered electronic mail (KEP) address, a secure electronic signature or a mobile signature. You may also apply to [email protected] from an e-mail address you have previously notified to the office and which is in our records.

The application must include your name and surname (signature for written applications), Turkish identity number (for foreigners, nationality and passport number, or identity number if any), residential or business address for notifications, e-mail address and telephone number for notifications if any, and the subject of the request.

Applications are concluded free of charge as soon as possible, depending on the nature of the request, and within thirty days at the latest. If the process requires an additional cost, the fee set out in Article 7 of the said Communiqué may be charged. If your application is rejected, the response is found insufficient or no response is given in time, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within thirty days of learning of the response and in any case within sixty days of the application date.

8. Cookies

A cookie is a small text file that a website stores in your browser. It is used for purposes such as the secure operation of the website or measuring visits. In this notice, records written to your browser’s local storage are treated in the same way as cookies.

Strictly necessary cookies and records

These are required for the website to operate securely or to remember the choices you make, and do not depend on your consent.

NameProviderPurposeDuration
__cf_bmCloudflareProtects the website against abuse by distinguishing automated (bot) traffic from real visitors.30 minutes
mfd_temaMFD Law OfficeIf you choose the night view, stores this choice in your browser’s local storage. It is deleted when you switch back to the day view and is never created if you do not choose the night view.Until you change it

The website does not use Google Analytics or any similar analytics tool, or any advertising, retargeting or social media cookies.

Google Fonts does not set cookies. The website contains links to other websites (for example the news links on the Press page and the map link on the Contact page); when you follow them, that website’s own privacy and cookie practices apply.

You can also delete or block cookies in your browser settings. If the strictly necessary cookie is blocked, an additional security check may be required when you access the website.

This notice is updated when necessary; the current version is published on this page together with the date of the last update.