ATABAY HUKUK GDPR INFORMATION NOTICE

1. Data Controller

Erzene Mahallesi, Gençlik Caddesi, No:11, Bornova, İzmir located Atabay Hukuk Office (“Atabay Hukuk”) is the Data Controller pursuant to the Personal Data Protection Law No. 6698 (“Law”). As the Data Controller, we process your personal data as listed below and within the limits prescribed by the legislation.

• To Whom and For What Purpose Personal Data May Be Transferred

Your personal data; may be transferred in a limited and proportionate manner, in connection with and limited to the fulfillment of the processing purposes stated below, due to our obligations under the legislation to which we are subject in order to carry out the services we provide to you as Atabay Hukuk.

Data is transferred to legally authorized public institutions and organizations and judicial and administrative authorities for the purposes of providing legal services, legal reporting, conducting quality audit systems, and carrying out regulatory and supervisory activities.

At the same time, due to the fact that the servers of the e-mail and information technology infrastructure providers we use (Microsoft etc.) are located abroad, your personal data may be transferred abroad in accordance with the procedures and principles set out in subparagraphs b) and c) of paragraph 6 of Article 9 of the Law and the Regulation on Procedures and Principles Regarding the Transfer of Personal Data Abroad.

• Which of Your Personal Data Will Be Processed

Your data processed within the scope of the services you have received from Atabay Hukuk;

1. In case the Contact Form is filled out, Identity Information (Name, Surname), Contact Information (E-mail, Phone number) and the information you include within the scope of your message,
2. In case the Career Application Form is filled out, Identity Information (Name, Surname), Contact Information (E-mail, Phone number) and Personnel Information (Curriculum Vitae).

While filling out our Contact and Career Forms, we kindly ask you to pay attention to the information you provide in the message section and not to share sensitive information through these channels.

In addition, when you visit our website, as explained in our Cookie Policy, your cookies are processed in order to ensure the healthy continuation of the services we provide through our website. You can access detailed information regarding your personal data processed through cookies via [Cookie Policy Hyper Link].

1. For What Purpose Your Personal Data Will Be Processed

Within this framework; (i) your personal data collected by filling out the Contact Form are processed for the purpose of responding to your messages and (ii) your personal data collected by filling out the Human Resources Application Form are processed for the purpose of evaluating job applications.

1. Method and Legal Basis of Personal Data Collection

Your personal data are collected through automatic methods via the website and stored in electronic environments.

Within this scope;

• Your personal data collected through the Contact Form are processed based on the legal ground set out in Article 5/2-f) of the Law, namely “Processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject”, and
• Your personal data collected through the Human Resources Application Form are processed based on the legal grounds set out in Article 5/2-c) of the Law, namely “Processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract” and Article 5/2-e), namely “Processing of data is mandatory for the establishment, exercise or protection of a right”

legal grounds.

In addition, as explained in our Cookie Policy, personal data collected through “mandatory cookies” in order to ensure the healthy continuation of the services we provide through our website are processed pursuant to Article 5/2-f of the Law, and as also explained in our Cookie Policy, personal data collected through “non-mandatory cookies” are processed pursuant to Article 5/1 (explicit consent) of the Law.

1. Your Rights Within the Scope of Article 11 of the Law as the Data Subject

At any time, by applying to Atabay Hukuk, you may;

1. Learn whether your personal data are processed, the purpose of processing and whether they are used in accordance with their purpose, and if processed, request information in this regard,
2. Learn the third parties to whom your data are transferred domestically and abroad in accordance with the Law,
3. Request correction if you think that your data have been processed incompletely or inaccurately,
4. Request the deletion or destruction of your data within the framework of the conditions set out in Article 7 of the Law,
5. Request notification of your requests specified in subparagraphs (c) and (d) to third parties to whom your data have been transferred and request them to perform the same actions,
6. Object to the occurrence of a result against you as a result of analysis by automated systems or, if you think that your data have been recorded or used unlawfully and you have suffered damage for this reason, request compensation for the damage.

If your application made for these purposes causes an additional cost, you may be required to pay the fee determined by the “Communiqué on the Procedures and Principles of Application to the Data Controller” issued by the Personal Data Protection Board. Your requests included in your application will be concluded as soon as possible and at the latest within 30 (thirty) days depending on the nature of the request. You may submit your applications by delivering a wet-signed copy in person or via a notary public to Erzene Mahallesi, Gençlik Caddesi, No:11, Bornova, İzmir.

In the application you will make in order to exercise your rights stated above as a personal data owner, the subject of the request must be clear and understandable, the requested issue must be related to you personally, or if you are acting on behalf of someone else, you must submit a notarized power of attorney.

In your applications, the presence of name-surname, signature, Turkish ID number, residence or workplace address, e-mail address, telephone and fax number, and the subject of the request is mandatory pursuant to the “Communiqué on the Procedures and Principles of Application to the Data Controller”. Applications that do not contain these elements will be rejected by Atabay Hukuk.

You can access the Atabay Hukuk Application Form [Application Form Hyper Link] here.

Atabay Hukuk reserves the right to make changes to this information notice at any time due to reasons arising from the Law, secondary regulations and Board decisions.