Privacy Policy

1. Introduction

This Privacy Policy is prepared by Koru Legal Law and Advisory Firm ("Koru Legal") to inform you about the personal data processing activities carried out through our website at korulegal.com (the "Website"). This policy has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and with due regard to the EU General Data Protection Regulation ("GDPR").

Data Controller: Koru Legal Law and Advisory Firm
Address: Esentepe Mahallesi Talatpaşa Caddesi No: 5/1, 34394 Şişli/İstanbul, Turkey (Kolektif House Levent)
Email: info@korulegal.com

2. Personal data we collect

Our Website collects a minimal amount of personal data. No user data is stored on our servers. The data we collect is limited to two categories:

a) Contact Form Data

When you complete the contact form, the information you submit (name, surname, email address, phone number, message content) is collected. This data is not stored on our servers; it is transmitted directly to info@korulegal.com via the EmailJS service.

b) Analytics Data (Google Analytics)

Our Website uses Google Analytics 4 to analyse visitor traffic. No analytics cookies are placed without your explicit consent. With your consent, the following data is collected: anonymous user identifiers, geographic location (city-level), traffic source, page view and session data, device/browser information. Google Analytics 4 never logs or stores IP addresses.

3. Purposes of processing

• Contact form data: To respond to your inquiries and requests
• Analytics data: To evaluate Website performance and improve the Website

Your personal data is not used for marketing, advertising, retargeting, or profiling purposes.

4. Legal basis for processing

• Contact form data: KVKK Art. 5/2(c) — necessary for the conclusion or performance of a contract; KVKK Art. 5/2(f) — legitimate interest
• Analytics data: KVKK Art. 5/1 — your explicit consent (obtained through the cookie consent mechanism)

5. Third-party service providers

Google Analytics (Google LLC, USA)

Used for website traffic analysis. Google's privacy policy: policies.google.com/privacy. Data is transferred abroad (USA) under KVKK Art. 9.

EmailJS (EmailJS Pte. Ltd., Singapore)

Used to transmit your contact form data to our email address. EmailJS processes data on AWS servers and retains it for 30 days. It does not place any cookies on your browser.

6. Data retention

• Contact form data: Retained only in our email inbox. Inquiries that do not result in an attorney-client relationship are deleted after a reasonable period.
• Analytics data: Google Analytics data retention is configured at 14 months.

7. Your rights

For detailed information about your rights under KVKK Art. 11, please refer to our Data Protection (KVKK) Disclosure Text. You may submit requests to info@korulegal.com. Requests will be resolved free of charge within 30 days.

8. Contact

Koru Legal Law and Advisory Firm
Esentepe Mahallesi Talatpaşa Caddesi No: 5/1, 34394 Şişli/İstanbul, Turkey
info@korulegal.com