General information on personal data that may be processed during website visits and initial contact by telephone or email.
Last updated: 25 September 2026.
1. Data controller
For the purposes of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), the data controller is Attorney Emrah Maşalacı. Contact address: Pîri Mehmet Paşa Mah. Başkomutan Cad. Silivrili İş Hanı No:56/1, 34570 Silivri/İstanbul; email: emrahmasalaci@hotmail.com.tr; telephone: 0212 727 37 67.
2. Scope and data processed
This notice covers only technical access to the website and initial contact with the office using the published telephone or email channels. If a legal-services or consultancy relationship is established, information required for that file is provided separately.
- Website usage data: IP address, request time, requested page, technical headers transmitted by the browser or device, security and error logs, and technical performance measurements such as page visits and loading time.
- Contact data: name, telephone number, email address and message content you choose to provide.
Do not send an identity number, health information, case documents or other sensitive data in an initial contact. If later processing is necessary, its scope and secure transfer method will be determined separately.
3. Processing purposes and legal bases
| Activity and data | Purpose | Collection method | Legal basis |
|---|---|---|---|
| Page visits, browser/device information and cookie identifiers | Assess website use through aggregate statistics | Automatically through Google Analytics when the page loads | No legal basis is asserted in this notice; the assessment belongs to the controller |
| Website requests, technical performance measurements and security records | Serve pages, measure performance, identify technical faults, prevent misuse and ensure information security | Automatically through server and security infrastructure | KVKK 5/2-f: the controller’s legitimate interest |
| Name, contact details and general message content | Receive and reply to an initial message and direct it to the appropriate channel | Direct submission by telephone or email; electronic retention of the contact record | KVKK 5/2-f: the controller’s legitimate interest |
| Initial contact concerning a legal-service request | Assess and prepare for entering a contract concerning the requested service | Direct submission by telephone or email | KVKK 5/2-c: direct relation to establishment of a contract |
| Necessary part of an application or correspondence | Comply with a duly made request of a competent authority | Limited extraction from contact records | KVKK 5/2-ç: the controller’s legal obligation |
| Necessary part of an application or correspondence | Establish, exercise or protect a legal right | Limited extraction from contact records | KVKK 5/2-e: establishment, exercise or protection of a right |
If a new purpose outside these conditions arises, information specific to that activity is provided before processing and separate explicit consent is obtained where necessary.
4. Collection method
Data are collected electronically or orally through automatic records of the web server and security infrastructure and information you provide directly by telephone or email. This website has no contact form, user account or file-upload area.
5. Recipients and transfers
- Cloudflare: technical usage data are transferred to the hosting, content-delivery, performance-measurement and security provider to serve pages, measure technical performance and provide security.
- Google Analytics: to measure page visits, the visited page address, browser/device information and cookie identifiers are sent to Google. The service may involve processing abroad. Advertising personalisation and Google Signals are not enabled. Google privacy policy.
- Microsoft: contact details and message content sent by email are transferred to the email provider for delivery and storage.
- Electronic communications operator: the telephone number and traffic data concerning a call are processed by the operator to establish the call and provide communications.
- Competent public or judicial authorities: only where a duly made binding request exists, the limited data required are transferred to fulfil a legal obligation.
If Cloudflare or Microsoft services involve transfers abroad, the transfer takes place after an appropriate legal transfer mechanism and necessary safeguards under Article 9 KVKK have been identified and documented. The relevant service is not used for personal-data transfers before these conditions are met.
6. Retention and security
Personal data are kept for the time necessary for the purpose and applicable statutory retention or limitation periods, then erased, destroyed or anonymised. Technical-log retention is limited by security needs and provider settings. Appropriate administrative and technical measures include restricted access, secure connections and data minimisation.
Detailed retention of Google Analytics user and event data is set to two months; new activity does not restart that period. This is different from retention of Google’s aggregate statistical reports.
7. Cookies and external links
The site uses Google Analytics to assess page visits through aggregate statistics. Measurement starts automatically when the page loads; no separate permission step is requested. The analytics cookies are described below. You can delete or block these cookies in your browser settings.
- _ga and ga*: analytics cookies used to distinguish visitors and sessions. On this site they are set to at most 180 days. You can remove them by clearing site data in your browser.
Query parameters and the part after # in the page address are excluded from analytics measurement. Advertising, user-account matching and form-content measurement are not configured. If your browser blocks cookies, no measurement is taken. The infrastructure provider may use technical cookies necessary for security and operation.
Cloudflare Web Analytics is used for page visits and technical performance. It does not use cookies or browser local storage (localStorage).
Map and official-resource links are not embedded content. Clicking them opens the relevant service’s site, whose privacy practices then apply.
8. Your rights under KVKK
Under Article 11, you have the right to learn whether your personal data are processed; request information if processed; learn whether they are used for their intended purpose; know the third parties receiving them domestically or abroad; request correction of incomplete or inaccurate data; request erasure or destruction where conditions are met; request notification of these actions to recipients; object to a result against you arising solely from automated analysis; and seek compensation for damage caused by unlawful processing.
You may deliver a signed application in person or in writing to the office address above. The email address emrahmasalaci@hotmail.com.tr may be used only for applications sent from an email address you previously provided to the controller and which is recorded in the controller’s system.
Under the Communiqué on Application Procedures and Principles to the Data Controller, registered electronic mail (KEP), secure electronic signature, mobile signature or software or an application developed for this purpose may also be used. Such applications are sent to the verified address or channel the controller has announced for that method.
An application must contain name and surname; signature for a written application; Turkish identity number for Turkish citizens, or nationality and passport or identity number, if available, for foreigners; notification address; email and telephone details if available; and a clear request. Do not send identity details in an ordinary initial-contact message.
Applications are resolved free of charge as soon as possible according to their nature and within 30 days at the latest. If the process entails an additional cost, only the fee in the Board’s tariff may be requested.
9. Changes to this notice
This notice is updated when the infrastructure, contact channels or processing activities change. The current version and date are published here.