Data Protection Disclosure Text

Pursuant to the Turkish Personal Data Protection Law No. 6698 (KVKK) · Effective Date: January 1, 2024

This Disclosure Text is prepared by Koru Legal Law and Advisory Firm, in its capacity as data controller, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK").

1. Identity of the Data Controller

Koru Legal Law and Advisory Firm
Address: Esentepe Mahallesi Talatpaşa Caddesi No: 5/1, 34394 Şişli/İstanbul, Turkey (Kolektif House Levent)
Email: info@korulegal.com · Website: korulegal.com

2. Personal Data Processed, Collection Method, and Legal Basis

Data Category	Data Processed	Purpose	Legal Basis (KVKK Art. 5)	Collection Method
Identity and Contact	Name, surname, email, phone, message content	Responding to contact inquiries	Art. 5/2(c) — Contractual necessity; Art. 5/2(f) — Legitimate interest	Contact form (via EmailJS)
Digital/Analytics Data	Anonymous user ID, session data, geographic location (city), traffic source, device/browser	Website performance analysis	Art. 5/1 — Explicit consent	Cookies (Google Analytics 4)

3. Recipients of Personal Data

Recipient	Purpose	Transfer Location
Google LLC	Website traffic analysis (Google Analytics 4)	Abroad (USA) — KVKK Art. 9
EmailJS Pte. Ltd.	Transmission of contact form data	Abroad (USA/Singapore) — KVKK Art. 9
Authorised public authorities	Requests pursuant to applicable legislation	Domestic — KVKK Art. 8

4. Data Retention Periods

Contact form data: Retained only in our email inbox. Deleted when the processing purpose ceases.
Analytics data: Retained for 14 months in Google Analytics.

5. Rights of the Data Subject (KVKK Article 11)

Under Article 11 of the KVKK, you have the right to:

Learn whether your personal data is being processed
Request information about the processing if your data has been processed
Learn the purpose of processing and whether your data is used in accordance with its purpose
Know the third parties to whom your data has been transferred domestically or abroad
Request rectification of incomplete or inaccurate data
Request deletion or destruction of your data under the conditions set forth in KVKK Art. 7
Request that rectification and deletion operations be notified to third parties
Object to a result arising against you through the exclusive analysis of your data by automated systems
Claim compensation for damages arising from the unlawful processing of your data

Visitors from the European Economic Area additionally hold the rights to data portability (GDPR Art. 20), restriction of processing (GDPR Art. 18), and to lodge a complaint with a supervisory authority (GDPR Art. 77).

6. How to Exercise Your Rights

You may submit requests through the following methods in accordance with KVKK Art. 13:

Written application: To Esentepe Mahallesi Talatpaşa Caddesi No: 5/1, 34394 Şişli/İstanbul with identity verification
Email: info@korulegal.com (from a registered email address or with a secure electronic signature)

Your application will be resolved free of charge within 30 days.