Personal Data Protection Law (KVKK) Information Text
1. Data Controller
Helin Menteşe Mızrakoğlu International Law and Consultancy Office is the data controller under the Law No. 6698 on the Protection of Personal Data ("KVKK").
2. Scope of Lighting
This text describes personal data processing activities related to online appointments, payments, billing, consultations, requests/complaints, and website usage. The obligation to inform is not subject to any consent; reading this text does not constitute explicit consent.
3. Categories of Data Processed
4. Processing Purposes
- Scheduling, confirming, reminding, modifying, and managing appointments.
- Preparing and delivering legal advice services; fulfilling professional diligence and confidentiality obligations.
- Conducting conflict of interest/professional disqualification checks where necessary.
- Managing order, collection, return, accounting, tax, and billing processes.
- Processing the client's requests, complaints, cancellations, and postponement applications.
- Information security, fraud/abuse prevention, and ensuring system and process security.
- The fulfillment of legal obligations and the establishment, exercise, or protection of a right.
- Online legal consultation sessions will be scheduled and conducted via WhatsApp, Zoom, or Google Meet, as communicated to the client and agreed upon by both parties.
5. Legal Reasons
Personal data may be processed based on the processing conditions stipulated in Article 5 of the KVKK (Law on Protection of Personal Data), such as being necessary for the establishment or performance of a contract, the legal obligation of the data controller, the establishment/exercise/protection of a right, and legitimate interest provided that it does not harm fundamental rights, depending on the specific activity.
With regard to special categories of personal data, the processing conditions of Article 6 of the KVKK (Law on Protection of Personal Data), as amended in 2024, which are appropriate to the specific case, shall be taken as the basis, and the adequate measures foreseen by the Board shall be implemented. Explicit consent shall only be requested if the activity is genuinely based on consent.
6. Collection Methods
Personal data may be collected automatically, partially automatically, or through non-automatic methods as part of a data recording system, via the Amelia appointment form, WooCommerce order and payment fields, Moka payment infrastructure, corporate email, telephone, Google Meet, Zoom and WhatsApp communication, information provided by the client during the consultation, and the website's technical records. Google Maps and Google reCAPTCHA services may be enabled according to the user's cookie preferences.
7. Transmission and Service Providers
8. Transferring Abroad
If online meetings are conducted via Google Meet, Zoom, or WhatsApp, and Google Maps or Google reCAPTCHA services are used on the website, personal data such as name, phone number, email address, profile and meeting information, messages or content necessary for the meeting, IP address, device, browser, connection, and interaction information may be processed and transferred abroad by the servers, affiliates, or sub-service providers of the relevant service providers located abroad. The meeting platform to be used will be communicated to the relevant person before the meeting. Non-mandatory third-party services such as Google Maps and Google reCAPTCHA are enabled in accordance with the user's cookie preferences. Meetings are not recorded by the Office in audio or video format. The transfer of personal data abroad is carried out based on one of the conditions stipulated in Article 9 of the KVKK (Personal Data Protection Law), such as a decision of adequacy suitable for concrete transfer, appropriate assurance, or incidental transfer as foreseen in the law. The current disclosure text published by Moka United states that personal data is not transferred abroad.
9. Card Data
Payment data such as card number, expiration date, and CVC is transmitted to Moka for the purpose of processing the payment. This data is not intended to be permanently stored in the Office's order records, emails, or client profiles. Clients should not send their card information via email or messaging channels.
10. Interview Content and Recording
The office does not record audio or video of video calls. Legal information voluntarily shared by the client during the call is handled within the framework of attorney-client confidentiality and data minimization principles. The processing of traffic/account/technical data by the calling platforms is also subject to the policies of the respective provider.
11. Storage
Personal data is stored for the period stipulated in the relevant legislation or for the period necessary for the purpose for which it is processed. Upon expiration of the storage period, it is deleted, destroyed, or anonymized.
12. Data Security
The office implements necessary administrative measures in proportion to the risk, including access authorization, strong authentication, update/patch management, HTTPS/TLS, backup, logging, and security controls. Furthermore, the appropriate measures mandated by the Personal Data Protection Board are complied with regarding sensitive personal data.
13. Rights under Article 11 of the Personal Data Protection Law (KVKK)
Data subjects may exercise their rights under Article 11 of the KVKK (Personal Data Protection Law). Applications, including identity information and details suitable for verifying the request, can be submitted in writing to the address Güzeltepe, Özvatan Sokağı Alper Sitesi D:22/2, 06510 Çankaya/Ankara, or via methods permitted in the Communiqué, such as an e-mail address previously registered in the system. danismanlik@helinmentese.com It can be sent to this address.
Applications are generally processed as quickly as possible, and no later than 30 days.
Last updated: September 10, 2026