Who is the data controller?
Your personal data is processed by Deli Law Office — Attorney Erol Deli (Zafer Mah. Çalışlar Sokak No: 3 Daire: 8, Bahçelievler/Istanbul) as data controller.
A separate duty of confidentiality arises under the Attorneyship Law No. 1136. It applies from the first meeting, whether or not an engagement follows, is not limited in time, and binds the office independently of data protection legislation.
What personal data is processed?
The data processed depends on how you contact us. A visitor who only browses the site and a client whose case we handle are not subject to the same processing.
The contact form collects only what you enter. You do not need to disclose the substance of your case in the form; a request for a meeting is enough.
| Category | Content | Method of collection |
|---|---|---|
| Identity | Name, surname | Contact form, telephone, e-mail or meeting |
| Contact | E-mail address, telephone number | Contact form, telephone, e-mail |
| Content of the request | Message text, subject, any case details you provide | Contact form, correspondence |
| Usage data | Anonymised measurement data on use of the site | Google Analytics (only where a measurement ID is configured) |
| Case data | Information and documents within the case file, where an engagement is entered into | Client statements, official authorities, case file copies |
For what purposes is your data processed?
Your data is processed only for the purposes set out below and no further. It is not processed for marketing or profiling, and it is not sold to third parties.
Purposes of processing
- Receiving and responding to requests for a meeting
- Providing legal advice and conducting proceedings
- Performing obligations arising from the engagement agreement
- Conducting matters before courts, prosecutors and administrative authorities
- Meeting retention and disclosure obligations imposed by law
- Measuring use of the site and improving its content
On what legal grounds is the data processed?
Processing is based on the conditions listed in Article 5 of the Law. Which condition applies depends on the context in which the data is processed.
Where data processed within an engagement includes special categories of data, such as health or criminal convictions, the conditions in Article 6 apply. Legal practice falls within the exception for processing that is necessary for the establishment, exercise or protection of a right.
| Activity | Legal ground |
|---|---|
| Submitting the contact form | Explicit consent — by sending the form you consent to your details being transmitted |
| Entering into and performing an engagement | Necessary for the conclusion or performance of a contract |
| Conducting proceedings and enforcement | Necessary for the establishment, exercise or protection of a right |
| Statutory obligations | Compliance with a legal obligation of the data controller |
| Site measurement | Legitimate interest, provided fundamental rights are not harmed |
To whom is your data transferred?
Your data is transferred only to the extent required by the purposes above and within the limits permitted by law. No data is transferred to third parties for marketing purposes.
Some services used on this site are provided by suppliers established abroad. Contact form submissions are delivered through EmailJS; Google Analytics is used where a measurement ID is configured; the map on the contact page is an embedded Google Maps view. Technical data such as your IP address may reach those providers when these services run.
The map and measurement services run when you view the page. If you do not wish them to run, you may use the blocking settings in your browser.
Parties to whom data may be transferred
- Courts, prosecutors, enforcement offices and administrative authorities, as the case requires
- Opposing counsel and court-appointed experts, where procedural law requires
- Accountants and parties within the scope of audit obligations
- EmailJS, for delivery of contact form submissions
- Google, within the scope of analytics and map services
How long is your data retained?
Your data is retained for as long as necessary for the purpose for which it was processed, taking into account the limitation periods laid down by law. Once that period expires, the data is deleted, destroyed or anonymised.
Records of meeting requests that do not lead to an engagement are deleted within a reasonable period after the request has been dealt with. For files where an engagement is entered into, the retention obligation under the Attorneyship Law and the applicable limitation periods govern.
What are your rights?
Under Article 11 of the Law you may apply to the data controller and make the following requests.
Rights under Article 11
- To learn whether your personal data is processed
- To request information if it has been processed
- To learn the purpose of processing and whether it is used accordingly
- To know the third parties to whom it is transferred, in Turkey or abroad
- To request correction where it is incomplete or inaccurate
- To request erasure or destruction within the conditions of the Law
- To request that correction, erasure or destruction be notified to third parties
- To object to a result adverse to you arising solely from automated analysis
- To claim compensation for damage suffered through unlawful processing
How can you make an application?
You may submit your requests by the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application must clearly state your name, surname, signature, Turkish identity number for Turkish citizens, an address for service, and the subject of the request.
Applications may be sent in writing by post to the office or by e-mail to delihukukburosu@gmail.com. Your request will be concluded free of charge as soon as possible and in any event within thirty days of receipt. Where the process entails an additional cost, the fee set by the Board may be charged.
If your application is refused, the response is inadequate, or no response is given within the period, you may complain to the Personal Data Protection Board within thirty days of learning of the response and in any event within sixty days of the date of application.
Can this notice change?
This notice may be amended over time following changes in legislation or in the way the office processes data. The current version is always published on this page, with the date of the last update shown below.
Last updated: 21 August 2026