Personal Data Protection

As Köksal & Partners, we highly value the protection of your personal data. This Privacy Notice has been prepared to inform you about the personal data processed by Köksal & Partners in the capacity of data controller, in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“Law” or “PDPL”) and the Communiqué on Principles and Procedures to be Followed in Fulfillment of the Obligation to Inform.

We provide detailed information about the processed personal data of our employees and interns in a way that only the data subjects can access. If you are a former employee or intern of Köksal & Partners, you can exercise your rights regulated in the Law regarding your personal data processed by one of the application methods in this Privacy Notice.

As Köksal & Partners, within the scope of job and internship application processes, we obtain your personal data through the applications published on the LinkedIn platform and the resumes you share with us through electronic forms and e-mails submitted to you on our website and during the KPO intern evaluation process. Personal data of our employee and intern candidates, including identity (name, surname), contact (e-mail address, mobile phone number, address information), personnel (resume information), and professional experience (educational background and professional competency information) data categories, will be collected through electronic forms, e-mails, phone calls, and career platforms. Your personal data will be processed limitedly for the purposes of conducting employee/intern/student selection and placement processes, managing candidate application processes, planning human resources processes, and carrying out communication activities in accordance with the legal basis of ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.’ as regulated in Article 5 (2) of the PDPL.

Your personal data included in the categories of identity (name, surname, T.R. ID number, signature), contact (e-mail address, phone number, workplace name/title), personnel (position/title), finance (invoice and payment information), and legal transaction (information in litigation and enforcement files, details included in correspondence with judicial and administrative authorities), as well as the information contained in power of attorney documents, will be collected through electronic/printed documents, e-mails, phone calls, and contracts within the scope of legal consultancy services, and will be processed limitedly for the purposes of carrying out financial and accounting transactions, conducting communication activities, managing and supervising business operations, executing goods/services sales processes, administering contract processes, carrying out client consultancy services, and ensuring business continuity according to the ‘‘It is necessary to process personal data of the parties to a contract, provided that it is directly related to the conclusion or performance of the contract.’ and ‘‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.’’ legal bases regulated in Article 5 (2) of the PDPL. The personal data we process belonging to our clients may be transferred to our business partners residing in the country in accordance with Article 8 of the PDPL and by taking the necessary technical and administrative measures for the purposes listed above. Additionally, if necessary, it may be transferred to authorized public institutions and organizations in compliance with legal regulations and legislation in order to fulfill our legal obligations.

Personal data belonging to individual client candidates and corporate client candidate company representatives/employees, including identity (name, surname), contact (e-mail address, phone number, workplace name/title), and personnel (position/title) data categories, will be collected through electronic/printed documents, e-mails, and phone calls during the consultation process in order to provide our consultancy services, and will be processed limitedly for the purposes of conducting communication activities, managing and supervising business operations, and executing goods/services sales processes in accordance with the legal basis of ‘‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.’’ as regulated under Article 5 (2) of the PDPL.

Personal data belonging to the representatives/employees of our business partners, including identity (name, surname), contact (e-mail address, phone number, workplace name/title), and personnel (position/title) data categories, will be collected through electronic/printed documents, e-mails, and contracts, and will be processed limitedly for the purposes of conducting communication activities, managing and supervising business operations, and executing contract processes in accordance with the legal bases of ‘‘It is necessary to process personal data of the parties to a contract, provided that it is directly related to the conclusion or performance of the contract.’’ and ‘‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.’’ for the purpose of ensuring business continuity, as regulated under Article 5 (2) of the PDPL.

Personal data belonging to the representatives/employees of our suppliers, including identity (name, surname, signature), contact (e-mail address, phone number, workplace name/title), personnel (position/title), and finance (invoice information) data categories, will be collected through electronic/printed documents/forms, e-mails, and contracts, and will be processed limitedly for the purposes of carrying out financial and accounting transactions, conducting communication activities, managing and supervising business operations, executing goods/services procurement processes, and administering contract processes in accordance with the legal bases of ‘‘It is necessary to process personal data of the parties to a contract, provided that it is directly related to the conclusion or performance of the contract.’’ and ‘‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.’’ for the purpose of ensuring business continuity, as regulated under Article 5 (2) of the PDPL.

Personal data related to identity (name, surname) and contact (e-mail address) data categories, as well as request, suggestion, and complaint details, and message content shared through our communication channels, including Köksal & Partners' info@koksalpartners.com e-mail address, 530 725 18 33 phone number, and the contact form on our website, will be processed limitedly for the purposes of conducting communication activities, tracking requests/complaints, conducting necessary research/investigations regarding the subject of the request to provide support services, and delivering information and support services to you. These data will be processed in accordance with the legal basis of ‘‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.’’ as regulated under Article 5 (2) of the PDPL. Your personal data may be transferred to authorized public institutions, if necessary, under legal regulations in order to fulfill our legal obligations in accordance with Article 8 of the PDPL. Additionally, your personal data is transferred to our infrastructure provider located abroad for the purposes of storage and archiving activities, in accordance with Article 9 of the PDPL.

In the event of legal processes, your personal data, which is collected during Köksal & Partners’ operations, will be processed limitedly for the purposes of conducting activities in compliance with legislation, following up and conducting legal transactions, and informing authorized institutions, according to the ''It is obligatory for compliance with a legal obligation to which the data controller is subject'' and ''Data processing is obligatory for the establishment, exercise or protection of any right'' legal basis regulated in Article 5 (2) of the PDPL. Your personal data may be transferred to authorized public institutions under legal regulations in order to fulfill our legal obligations.

You have the rights to request regulated in Article 11 of the PDPL: - to learn whether your personal data are processed or not,, - to demand for information as to if your personal data have been processed, - to learn the purpose of the processing of your personal data and whether these personal data are used in compliance with the purpose, - to know the third parties to whom your personal data are transferred in country or abroad, - to request the rectification of the incomplete or inaccurate data, if any, - to request the erasure or destruction of your data under the conditions referred to in PDPL, - to request reporting of the operations carried out to third parties to whom your personal data have been transferred, - to object to the occurrence of a result against yourself by analyzing the data processed solely through automated systems, - to claim compensation for the damage arising from the unlawful processing of your personal data. Regarding your processed personal data, you can send your requests and applications, to ik@koksalpartners.com by your registered e-mail address in our systems; to koksalozdamaravukatlik@hs02.kep.tr registered e-mail address (KEP) by your registered e-mail address (KEP) and secure e-signature or mobile signature; or you can send your application in written to Metropol İstanbul A Blok, K: 3, Ofis: 45-46 Ataşehir/İstanbul address. Also, you can decide on other methods to send requests and applications provided from Communique On The Principles And Procedures For The Request To Data Controller. Your request for your rights regulated under Article 11 of the PDPL will be concluded as soon as possible regarding the nature of the request and thirty days at the latest, free of charge. If the application is within the scope of sensitive data, the applicant must be specifically authorized in accordance with Article 10 of the Communiqué on Personal Health Data. However, if the transaction also requires an additional cost, you may be charged based on the tariff determined by the Personal Data Protection Board.