Privacy Policy


For persons accessing the “” website, in order to be informed about the data used and processed within the scope of this website; “Clarification Text on the Protection of Personal Data of Kurtulus & Partners Law Firm” has been issued. In this context, the following items contain information about your processed data, and you are directed to the relevant departments in order to obtain more detailed information.


Within the scope of GDPR, “Personal Data” means any information relating to an identified or identifiable natural person, and “Special Quality Personal Data” means race, ethnicity, political opinion, philosophical belief, religion, sect or other beliefs, costume and clothing. , association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data. Within the scope of this Clarification Text, the explanations made for your “Personal Data” are also valid for your “Special Quality Personal Data”.


Kurtulus & Partners, regarding the prevention of illegal access to the personal data it processes, the prevention of unlawful processing of this data and the protection of personal data:

  • Protects all areas of the website or mobile application from which personal data is obtained with SSL,
  • Creates and implements access authorization and control matrices for its employees so that personal data collected from the website or mobile application is not processed unlawfully,
  • In order to ensure that personal data is not accessed unlawfully; periodically performs penetration tests, tests the system’s resistance to unauthorized access,
  • For all secondary data processing other than the primary processing purpose, it uses the Pseudonymization (aliased data) method. Pseudonymous uses encryption methods in the systems where this data is located in order to make it impossible to identify the person concerned, and applies a stricter access authorization and control policy to this data,
  • Personal data processed through cookies belonging to third parties from which service is received, are deleted from the systems of third parties if the membership is terminated.

Despite Kurtulus&Partners taking the necessary information security measures, in the event that personal data is damaged or in the hands of unauthorized third parties as a result of attacks on the platforms operated by Kurtulus&Partners or the Kurtulus&Partners system, Kurtulus&Partners will immediately notify you and the Personal Data Protection Board and take the necessary measures.


Your processed Personal Data will be stored for the periods stipulated in the relevant legislation.


5.1. Cookies: Kurtulus&Partners can obtain information about Users’ use of the Site by using a technical communication file (Cookie-Cookie). Said technical communication files are small text files that a website sends to the User’s browser to be stored in the main memory. The technical communication file facilitates the use of the Internet by storing status and preferences about a website. The technical communication file helps to obtain statistical information about how many people use the Site, for what purpose, how many times a person visits the Site and how long they stay, and to dynamically generate advertisements and content from User pages specially designed for Users. The technical communication file is not designed to retrieve data or any other personal information from the main memory or your e-mail. Most of the browsers are designed to accept the technical communication file at the beginning, but Users can change the settings so that the technical communication file does not arrive or a warning is given when the technical communication file is sent. You can access detailed information on the use of cookies on the Site from the Cookie Policy

5.2. Use of Third Party Electronic Wallets: MetaMask plug-in in your browser can be used on the website MetaMask is a cryptocurrency wallet used to interact with the Ethereum and some other blockchain protocohols. In connection with the operation of the Services, we may receive from third-party wallet providers your blockchain address or personal and anonymous information you choose to share with these third-party wallet providers. Your Metamask wallet information can be added to the information we have collected and/or will collect about you within the scope of the Privacy Policy and Personal Data Clarification Text on our website. The terms of use and privacy provisions between you and the third-party wallet provider apply to transactions and shared data.


In accordance with Article 11 of the Personal Data Protection Law, we declare that you have the following rights as a data owner:

– Learning whether your personal data is processed or not,

– If your personal data has been processed, requesting information about it,

– To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,

– Knowing the third parties to whom your personal data is transferred, in the country or abroad,

– Requesting correction of your personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,

Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, despite the fact that it has been processed in accordance with the Law and other relevant law provisions, and requesting the notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,

Objecting to a result against you by analyzing the processed data exclusively through automated systems,

Requesting the compensation of the damage in case you suffer damage due to unlawful processing of your personal data.

For your requests,” you can fill the form and send to:Büyükdere Caddesi Onur İş Hanı K:2 Esentepe Şişli/İSTANBULaddress via post. Kurtulus&Partners will conclude the requests made to it free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. In the event that a cost arises due to the fulfillment of your requests, only the fees in the tariff determined by the Personal Data Protection Board may be requested from you. Kurtulus&Partners may accept the requests or reject them by explaining the reason.