Last updated: 29 October 2026

This policy explains how Yilmaz Attorneys processes personal data when you visit yilmazattorneys.com or contact us through it, and how we use cookies. It is provided in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and Articles 13–14 of the EU General Data Protection Regulation (GDPR).

1. Who we are

For matters handled in Türkiye, the data controller is Attorney Mert Veysel Yılmaz (Yilmaz Attorneys), Fabrikalar Mahallesi Namık Kemal Bulvarı, Dalga Kule Plaza No:40, 07090 Antalya, Türkiye. For matters handled through our office in the Netherlands, Yilmaz Consultants (KvK 42195422) acts as data controller.

You can reach us about any data protection question at info@yilmazattorneys.com.

2. What personal data we collect

  • Contact forms: your name, email address, phone number, the service you are interested in and the content of your message.

  • Communications: information you share with us by email, phone or messaging apps when you contact us.

  • Website usage: anonymous visit statistics (pages viewed, referring site, country, device type). Detailed analytics are collected through Google Analytics, subject to your cookie choices.

Please do not send sensitive information (for example health data or criminal records) through the website forms. If such information is needed for your case, we will agree a secure way to share it once we have been in touch.

3. Why we use your data and on what legal basis

  • To respond to your enquiry and prepare a possible engagement: necessary to take steps at your request before entering into a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).

  • To provide legal services if you become a client: performance of our contract and compliance with our legal and professional obligations (KVKK Art. 5(2)(c) and (ç); GDPR Art. 6(1)(b) and (c)).

  • To keep the website secure and understand overall usage: our legitimate interests, using cookie-free statistics (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).

  • Google Analytics cookies: for visitors from the EU, only with consent (GDPR Art. 6(1)(a)); for other visitors, enabled by default and can be switched off at any time (KVKK Art. 5(2)(f)).

4. Cookies

Visitors from the European Union see a cookie banner and non-essential cookies are only placed after they accept them. For visitors from other countries, analytics cookies are enabled by default. Everyone can change their choice at any time by clicking “Cookie Consent” in the footer of any page.

  • Necessary: stores your cookie preferences so the banner does not reappear on every page.

  • Analytics: Google Analytics 4 (cookies _ga and _ga_*, retained for up to 2 years) helps us understand how visitors use the site.

  • Cookie-free statistics: Framer Analytics, provided by our website host, counts visits without cookies or personal profiles.

Some pages include content from other providers, such as a Google Maps map of our office and a client reviews widget (Wally, showing our Google reviews). When this content loads, these providers may receive your IP address and may set their own cookies under their own privacy policies.

5. Who receives your data

We share personal data only as needed for the purposes above:

  • Service providers: Framer B.V. (website hosting and form delivery), Google (analytics, maps and email services) and the email and IT providers we use to run our practice.

  • Authorities and courts: where required by law or necessary to establish, exercise or defend legal claims.

Some of these providers process data outside Türkiye and the European Economic Area, including in the United States. Such transfers are carried out in line with Article 9 KVKK and Chapter V GDPR, relying on adequacy decisions or appropriate safeguards such as standard contractual clauses where required.

6. How long we keep your data

Enquiries that do not lead to an engagement are deleted within two years of our last contact. Client files are kept for the periods required by the professional and legal record-keeping rules that apply to attorneys. Google Analytics data is kept for a maximum of 14 months.

7. Your rights

Under Article 11 KVKK you have the right to:

  • learn whether your personal data is processed and request information about it;

  • learn the purpose of processing and whether data is used in line with that purpose;

  • know the third parties in Türkiye or abroad to whom your data is transferred;

  • request correction of incomplete or inaccurate data;

  • request erasure or destruction of your data under the conditions of Article 7 KVKK;

  • request that corrections and erasures be notified to the third parties who received your data;

  • object to a result against you arising exclusively from automated analysis of your data;

  • claim compensation if you suffer damage due to unlawful processing.

If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent at any time without affecting earlier processing.

To exercise your rights, write to info@yilmazattorneys.com or to our postal address above. We will reply as soon as possible and within 30 days at the latest. You may also lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or, in the EU, with your local supervisory authority, such as the Dutch Autoriteit Persoonsgegevens.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) on this website and restricted access to client information, in line with attorney–client confidentiality.

9. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.