You can find detailed information on the processing of personal data in the Privacy Notice.
About the Data Controller
As Moroğlu Arseven Attorney Partnership (“Moroğlu Arseven”), we process personal data in our capacity as a data controller within the scope of the legal services we provide and the various business processes we carry out.
In the course of our activities, we carry out personal data processing operations in relation to visits to our website, the provision of legal services to our clients, job application processes, relationships with our business partners, and the events organized by our firm. In this context, we process the personal data of our clients and their employees, representatives, or advisors; counterparties involved in legal proceedings and their employees, representatives, or advisors; employees of law firms, notary publics, tax advisory and audit firms with whom we cooperate; as well as job applicants, employees of our suppliers and business partners, website visitors, and event participants.
As Moroğlu Arseven, we attach great importance to the confidentiality of personal data and conduct our activities in compliance with the Data Protection Law No. 6698 (“DP Law”), the applicable legislation on the protection of personal data, and the Attorneyship Law No. 1136.
For any questions, contact may be made at any time through the communication channels set out below.
Address : Harbiye, Abdi İpekçi Cd. No:19-1, Nişantaşı, 34367 Şişli/İstanbul.
E-mail : info@morogluarseven.com
Phone : (0212) 377 47 00
Details of Personal Data Processing Activities
A. Website Visits
As Moroğlu Arseven, we use certain technologies such as cookies, pixels, and gifs (“Cookies”) during your online visits through our website www.morogluarseven.com (the “Website”), of which we hold all intellectual property rights pursuant to the Intellectual and Artistic Works Law No. 5460. In addition, we process personal data in order to receive and respond to your requests.
i. Processed Personal Data, Method of Processing, Purpose of Processing, and Legal Basis
When you access our Website, certain technical data, including IP address, browser information, visit duration, and page views, are automatically collected through cookies. Where you subscribe to our newsletter, your identity and contact information, as well as your preferences, are obtained directly from you via the subscription form made available on our Website.
Detailed information regarding the processing of personal data collected through Website visits and newsletter subscriptions, including the purposes, methods, and legal bases of processing under the DP Law, is set out in the table below.
Further information on our use of cookies is available in our Cookie Policy.
| Personal Data | Purpose of Processing | Legal Basis |
| Cookies and Technical Data
(IP address, location data, browser type and version, operating system, referral source, visit duration, page views, website navigation paths, session information, language preference)
|
· Providing the content and pages requested by the user
· Ensuring the security of the IT infrastructure used to operate the Website · Managing cookie preference settings · Maintaining user session information during page transitions · Storing the user’s preferred language selection · Improving Website performance and user experience · Exercising the right of defense in potential legal disputes · Responding to requests from competent authorities · Ensuring compliance with statutory data retention obligations · Planning internal reporting and business development activities · Carrying out data retention and archiving activities · Conducting information security processes |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Newsletter Subscription Data
(Name, surname, email address, phone number, company/institution information, position/title, content preferences, subscription date)
|
· Sending newsletters and updates regarding legal developments, legislative changes, and the activities of Moroğlu Arseven
· Delivering invitations and information related to events, conferences, seminars, and meetings organized or attended by Moroğlu Arseven · Managing and administering newsletter subscription and unsubscription processes · Analyzing newsletter delivery and usage statistics through the use of pseudonymization in order to improve user experience · Retaining records relating to subscription and delivery processes for evidentiary purposes in potential legal disputes |
· Legitimate Interest (DP Law Article 5/2(f))
· Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e)) · Explicit Consent (DP Law Article 5/1) |
ii. Details of the Transfer of Your Personal Data
Your personal data may be transferred by Moroğlu Arseven, within the scope of the purposes set out in the table above and limited thereto, for purposes including enabling users to benefit from the Website and the activities carried out thereon, and ensuring the data security of the Website. In this context, personal data may be transferred, in accordance with Articles 8 and 9 of the DP Law, to third parties located domestically or abroad from whom we receive support in areas such as storage, archiving, and information technologies (including servers, hosting services, software providers, cloud computing services, website content managers, and email service providers), as well as to business partners, service providers, other relevant parties where transfer is required for the specified purposes, and authorized public institutions and organizations.
B. Attorneyship / Legal Consultancy Services
Moroğlu Arseven provides attorneyship and legal consultancy services in compliance with the Attorneyship Law No. 1136, the regulations of the Union of Turkish Bar Associations, and the applicable professional rules, and within the framework of the confidentiality and duty of secrecy inherent to the legal profession. Information and documents obtained within the scope of the attorney–client relationship are treated as strictly confidential, except where disclosure is expressly instructed by the client or required by law, and this obligation continues indefinitely following the termination of the engagement.
Moroğlu Arseven reflects the heightened confidentiality standards arising from the legal profession in all personal data processing activities and processes personal data in compliance with the DP Law and secondary legislation, in accordance with the principles of lawfulness and fairness, for specific and legitimate purposes, in a limited and proportionate manner, and subject to appropriate technical and administrative safeguards.
Within this framework, the data subjects whose personal data are processed include our clients and their employees, managers, and members of management bodies; the representatives and advisors of our clients; actual or potential counterparties in legal proceedings and their employees, representatives, and advisors; witnesses, experts, and other specialists; employees of insurance companies; employees of courts and public institutions and organizations; as well as employees of domestic or foreign law firms, tax and audit advisors, and other service providers with whom Moroğlu Arseven cooperates for the purpose of delivering attorneyship and legal consultancy services.
i. Processed Personal Data, Method of Processing, Purpose of Processing, and Legal Basis
Within the scope of our attorneyship and legal consultancy services, personal data are processed through verbal, written, and electronic channels (including email, telephone, online meeting tools, physical and digital files, and UYAP), by automated and partially automated means, within the framework of an existing or prospective attorney–client relationship, and are retained in physical and electronic archives in accordance with applicable legislation.
| Personal Data | Purpose of Processing | Legal Basis |
| Identity Information
(Name, surname, Turkish ID number, copy of identification document, trade registry records, beneficial ownership information, representation authority information, power of attorney details) |
· Establishment and management of the client relationship
· Conduct of client acceptance (onboarding) processes · Performance of conflict of interest checks · Provision of attorneyship and legal consultancy services · Representation of clients and exercise and defense of their rights · Representation of clients before courts, public institutions, and other parties involved in the process · Establishment, exercise, or protection of legal claims · Management of internal file and archive systems · Fulfilment of statutory record-keeping and documentation obligations · Management of courier and delivery processes · Conduct of information security processes · Ensuring compliance with applicable legislation · Conduct of finance and accounting activities · Carrying out communication activities · Execution and supervision of business activities · Organization and management of events · Conduct of risk management processes · Performance of retention and archiving activities · Management of contractual processes · Sending event, information, and invitation communications where explicit consent is provided
|
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Contact Information
(Title, name, surname, email address, postal address, phone number, fax number, position/title) |
· Establishing communication and conducting correspondence
· Establishment, preparation, and management of the client relationship · Conduct of client acceptance and pre-contractual processes · Exchange of proposals, fee estimates, and pre-contractual correspondence · Provision of attorneyship and legal consultancy services · Representation of clients and defense of their rights · Communication with clients, counterparties, and their representatives or advisors · Correspondence with courts, public institutions, and authorities · Communication with witnesses, experts, specialists, and insurance companies · Sending correspondence and notifications on behalf of clients · Conduct of courier and delivery processes · Coordination of translation and similar support services · Internal office management, file tracking, and operational processes · Communication relating to accounting, invoicing, and payment processes · Making statutory notifications required by applicable legislation · Establishment, exercise, or defense of legal claims · Management of client relations · Conduct of information security processes · Ensuring compliance with legislation · Execution and supervision of business activities · Organization and management of events · Conduct of risk management processes · Performance of retention and archiving activities · Sending event, information, and invitation communications where explicit consent is provided |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Professional Experience Information
(Profession, job title, position, duties, and representation authority) |
· Establishment, preparation, and management of the client relationship
· Conduct of client acceptance (onboarding) processes · Identification of duties, positions, and representation authorities of persons acting on behalf of clients · Verification of authority and roles under statutory obligations · Provision of attorneyship and legal consultancy services · Representation of clients before courts, public institutions, and other parties · Establishment, exercise, or protection of legal claims · Management of contracts and powers of attorney · Conduct of case- and matter-based risk assessments · Internal office management and file and archive administration · Ensuring compliance with legislation · Execution and supervision of business activities · Organization and management of events · Conduct of risk management processes · Performance of retention and archiving activities · Sending event, information, and invitation communications where explicit consent is provided |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Client Transaction Information
(All data transmitted for the establishment and continuation of the mandate or consultancy relationship, content of documents provided by the client, file numbers, correspondence content, file notes, legal opinions, petitions, expert reports, court decisions, contracts, and other documented consultancy outputs) |
· Establishment, execution, and termination of mandate and legal consultancy relationships
· Receipt, evaluation, and monitoring of client requests · Provision of attorneyship and legal consultancy services · Representation of clients and defense of their rights · Determination of factual circumstances and legal assessment of matters and disputes · Preparation of legal opinions, petitions, applications, and defenses · Conduct of judicial and administrative proceedings · Representation before courts, enforcement offices, public institutions, and other relevant parties · Correspondence with clients, counterparties, witnesses, experts, and specialists · Establishment, exercise, or protection of legal claims · Creation and management of files, archives, and reference records · Internal office management and operational processes · Conduct of information security processes · Ensuring compliance with legislation · Fulfilment of statutory and professional retention and documentation obligations · Risk management and quality assurance processes · Execution and supervision of business activities · Establishing a basis for finance, accounting, and invoicing processes · Management of contractual and mandate processes · Assessment, establishment, or defense of legal liability claims |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Financial Information
(Bank details such as IBAN, BIC, bank name, account holder, tax identification number, invoice details, receivable account numbers, invoice numbers, payment transaction data, expense details, time-recording data, activity reports) |
· Management of fee-related processes for attorneyship and legal consultancy services
· Issuance of invoices and execution of collection and payment transactions · Fulfilment of financial obligations arising from agreements with clients · Calculation of fees based on expenses, time records, and activity reports · Conduct of accounting, finance, and financial reporting processes · Fulfilment of tax-related obligations and maintenance of relevant records · Compliance with statutory retention, documentation, and reporting obligations · Conduct of internal control and audit processes relating to financial transactions · Execution and supervision of business activities · Ensuring compliance with legislation · Establishment, exercise, or protection of legal claims · Assessment and resolution of legal and financial liability claims · Conduct of information security processes · Conduct of risk management processes · Performance of file retention and archiving activities |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Risk Management Information
(Information processed for the management of commercial, technical, and administrative risks) |
· Conduct of client- and matter-based risk assessments
· Identification, analysis, and management of risks relating to legal services · Creation and monitoring of risk profiles within client onboarding and ongoing relationships · Assessment of conflict of interest, compliance, and reputational risks · Ensuring compliance with statutory and professional obligations · Management of information security, data security, and business continuity risks · Conduct of internal control, audit, and quality assurance processes · Implementation of preventive and corrective measures relating to legal, financial, and operational risks · Assessment of legal liability and dispute risks · Ensuring lawful conduct of activities · Execution and supervision of business activities · Support of corporate governance, reporting, and decision-making processes · Management of risks relating to retention and archiving activities |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Court / Competent Authority Data
(Content of correspondence with courts and public authorities, official requests and responses, court file numbers, hearing records) |
· Provision of attorneyship and legal consultancy services
· Representation of clients before judicial and administrative authorities · Conduct of judicial, administrative, and regulatory proceedings · Correspondence and notifications with courts, enforcement offices, and competent authorities · Receipt, evaluation, and response to official requests · Fulfilment of statutory and professional obligations · Establishment, exercise, or protection of legal claims · Creation of evidence and maintenance of dispute-related records · Conduct of file retention and archiving activities · Internal office management and operational processes · Conduct of information security processes · Conduct of risk management and audit processes · Ensuring compliance with legislation |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Reference and Promotional Data
(Name, surname, title, contact details, project information) |
· Sending invitations relating to events, conferences, seminars, and similar organizations organized or attended by Moroğlu Arseven
· Maintaining and strengthening communication with clients and business contacts · Being referenced before legal ranking organizations, directories, and sector publications · Inclusion in rankings, analyses, and evaluations conducted by media organizations and analysts · Conduct of promotional, informational, and communication activities · Management of client relationships · Promotion of services and areas of expertise · Delivery of newsletters, informational content, and invitations |
· Legitimate Interest (DP Law Article 5/2(f))
· Explicit Consent (DP Law Article 5/1) |
| Special Categories of Personal Data
(Health data, data relating to criminal convictions and security measures, and other special category personal data processed depending on the nature of the specific client matter) |
· Provision of attorneyship and legal consultancy services
· Representation of clients and defense of their rights · Conduct of legal disputes, investigations, prosecutions, and other judicial or administrative proceedings · Determination of factual circumstances and legal assessment of matters and disputes · Establishment, exercise, or protection of legal claims · Submission of evidence and conduct of defense activities before judicial and administrative authorities · Provision of legal consultancy services within the scope of employment, social security, tax, or criminal law · Fulfilment of statutory and professional obligations |
· Explicitly Provided for by Law (DP Law Article 6/2(b))
· Establishment, Exercise, or Protection of a Right (DP Law Article 6/2(d)) |
ii. Details of the Transfer of Your Personal Data
Your personal data may be transferred, in compliance with applicable legislation and to the extent necessary, for the purposes of providing attorneyship and legal consultancy services, managing client relationships, and fulfilling Moroğlu Arseven’s legal and professional obligations. In this context, personal data may be transferred to competent public institutions and authorities; courts and judicial bodies; domestic and foreign law firms, notaries, tax advisory and audit firms with whom cooperation is established for the provision of legal advice and client representation; service providers and banks involved in accounting, finance, payroll, and audit processes; courier and delivery service providers for the execution of shipment processes; insurance companies for the management of insurance transactions and potential liability processes; domestic and foreign service providers that have implemented the necessary legal, technical, and security measures for the provision of legal consultancy services; and legal ranking and directory organizations.
Within the scope of information technologies and information security processes, personal data may be stored on systems located abroad, depending on the servers and systems of third-party service providers from whom services are obtained for the operation and support of Moroğlu Arseven’s technical infrastructure. In such cases, the transfer of personal data abroad is carried out in accordance with the conditions set out under the applicable legislation and subject to the implementation of appropriate technical and administrative safeguards.
C. Job Applications
Personal data shared within the scope of job and internship applications submitted to Moroğlu Arseven are processed, in accordance with applicable legislation, for the purposes of conducting, evaluating, and finalizing application processes and carrying out human resources planning activities. This section provides detailed information regarding the categories of personal data processed in connection with job and internship applications, as well as the purposes and transfer processes relating thereto.
i. Processed Personal Data, Method of Processing, Purpose of Processing, and Legal Basis
Your personal data are collected within the scope of recruitment processes pursuant to Article 5 of the DP Law, by automated or non-automated means, verbally, in writing, or electronically, through the following channels:
- Applications submitted via the email address ik@morogluarseven.com,
- Applications submitted through job application platforms and career portals such as linkedin.com,
- Applications submitted through events and organizations attended by Moroğlu Arseven, including career days and university events,
- Notes and evaluations obtained during job interviews,
- References provided by Moroğlu Arseven employees,
- Individuals listed as references by applicants,
- Human resources consultancy firms, career consultants, university career offices, and other business partners from whom Moroğlu Arseven receives services or cooperates in recruitment processes.
Where you provide reference information as part of your application, you will be deemed to have acknowledged that we may contact such individuals for reference checks and that you have duly informed the data subjects and lawfully transferred their personal data to Moroğlu Arseven.
| Personal Data | Purpose of Processing | Legal Basis |
| Identity Information
(Name, surname, Turkish ID number, date of birth, place of birth, gender, marital status, military service status, photograph) |
· Conducting candidate employee and/or intern application, selection, evaluation, and placement processes
· Receiving, evaluating, and finalizing job and internship applications · Verifying the suitability, qualifications, and application information of candidates and/or interns for specific positions · Communicating with candidates and/or interns in relation to recruitment and internship processes · Carrying out the necessary assessments for the establishment of an employment relationship · Planning and conducting human resources processes · Ensuring that activities are carried out in compliance with applicable legislation and professional regulations · Conducting retention and archiving activities
|
· Legitimate Interest (DP Law Article 5/2(f))
· Establishment or Performance of a Contract (DP Law Article 5/2(c))
|
| Contact Information
(Email address, phone number, address) |
· Receiving, evaluating, and finalizing job and internship applications
· Providing information regarding the position and application process · Communicating with candidates and/or interns in relation to recruitment and internship processes · Planning and conducting interview processes · Communicating feedback relating to evaluation processes · Ensuring necessary communication within the scope of reference checks · Planning and conducting human resources processes · Ensuring compliance with applicable legislation and professional regulations · Conducting retention and archiving activities
|
· Legitimate Interest (DP Law Article 5/2(f))
· Establishment or Performance of a Contract (DP Law Article 5/2(c)) |
| Reference Information
(Name and surname of reference persons, contact details, employing organization, position information, reference evaluation notes) |
· Assessing and verifying the suitability of candidates and/or interns for specific positions
· Conducting reference checks · Verifying previous work experience · Conducting retention and archiving activities |
· Legitimate Interest (DP Law Article 5/2(f))
· Establishment or Performance of a Contract (DP Law Article 5/2(c)) |
| Professional Experience Information
(Professional experience, diploma information, attended courses, vocational training records, certificates, transcript information) |
· Conducting candidate employee and/or intern application processes
· Receiving, evaluating, and finalizing job and internship applications · Assessing candidates’ and/or interns’ education, knowledge, and competencies for specific positions · Identifying and verifying professional experience and qualifications · Reviewing and comparing information and documents submitted as part of the application · Supporting decision-making processes relating to recruitment and internships · Planning and conducting human resources processes · Ensuring compliance with applicable legislation and professional regulations · Conducting retention and archiving activities |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Special Categories of Personal Data
(Where included in the CV: association or foundation membership, health data, data relating to criminal convictions and security measures, disability status) |
Moroğlu Arseven does not request the disclosure of special category personal data within the scope of job and internship application processes. However, where candidates and/or interns voluntarily include special category personal data in their CVs, application forms, or written or verbal statements submitted during the application process, such data may be processed in accordance with applicable legislation and for the purposes set out below:
· Conducting candidate employee and/or intern application processes · Evaluating and finalizing job and internship applications · Assessing the candidate’s suitability and qualifications for the relevant position · Supporting decision-making processes relating to recruitment and internships
|
· Employment processes (DP Law Article 6/2(f)) |
ii. Details of the Transfer of Your Personal Data
Your personal data may be transferred, solely to the extent relevant to the recruitment process and in line with the purposes set out above, to the recipients listed below, within the framework of the transfer conditions stipulated under Articles 8 and 9 of the DP Law: (i) third parties and service providers from whom support is obtained in areas such as human resources, storage, archiving, information technology services (including servers, hosting, software, cloud computing, and email services), and security; (ii) where you provide reference information, the data subjects for the purpose of conducting reference checks; (iii) depending on the servers and systems of third-party service providers, personal data may be stored on systems located abroad, in which case the transfer of personal data abroad is carried out in accordance with Article 9 of the DP Law.
Where reference information is provided as part of your application, the relevant reference persons may be contacted for the purpose of conducting reference checks, and limited personal data transfers may be carried out within this scope. In addition, where the servers and systems of third-party service providers engaged by Moroğlu Arseven are located abroad, personal data may be stored on such systems, and any transfer of personal data abroad is conducted in accordance with Article 9 of the DP Law.
D. Business Partners
Personal data relating to the representatives of business partners, suppliers, consultants, and other third-party individuals with whom Moroğlu Arseven has a business relationship, as well as the authorized persons of corporate business partners, are processed in accordance with applicable legislation for the purposes of establishing, conducting, and managing business relationships, and fulfilling contractual and statutory obligations. This section sets out information regarding the categories of personal data processed within the scope of business partner relationships, as well as the purposes of processing and data transfer processes.
i. Processed Personal Data, Method of Processing, Purpose of Processing, and Legal Basis
| Personal Data | Purpose of Processing | Legal Basis |
| Identity Information
(Name, surname, title, signature authority information, representation authority information) |
· Establishment, conduct, and management of business partner and supplier relationships
· Management, execution, and performance of contractual processes · Conduct of authorization and approval processes related to the business relationship · Fulfilment of legal and contractual obligations · Planning, coordination, and monitoring of service and procurement processes · Conduct of conflict of interest, compliance, and ethical assessments · Ensuring that activities are carried out in compliance with applicable legislation and professional regulations · Establishment, exercise, or protection of legal claims · Conduct of audit, internal control, and risk management processes · Provision of information to authorized persons, institutions, and organizations · Conduct of retention and archiving activities |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Contact Information
(Email address, business phone number, address) |
· Establishment, conduct, and management of business partner and supplier relationships
· Ensuring communication during pre-contractual and contractual processes · Conduct of correspondence and notifications required within the scope of the business relationship · Planning, coordination, and monitoring of service and procurement processes · Maintaining regular communication with business partners, consultants, and service providers · Communication relating to the fulfilment of contractual obligations · Communication regarding invoicing, payment, and other financial processes · Making notifications required under legal and administrative processes · Ensuring compliance with applicable legislation and professional regulations · Communication relating to audit, internal control, and risk management processes · Ensuring information security and the operational security of data controller activities · Conduct of retention and archiving activities |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Professional Experience Information
(Employing organization, position, job description, area of professional expertise)
|
· Establishment, conduct, and management of business partner, supplier, and service relationships
· Assessment of the professional qualifications and areas of expertise of business partners and authorized persons · Evaluation of the suitability of provided services or supplied goods in relation to the nature of the work · Conduct of pre-contractual assessment and proposal processes · Determination of roles and responsibilities within the contractual relationship · Planning, coordination, and execution of business processes · Ensuring compliance with applicable legislation and professional regulations · Fulfilment of legal and contractual obligations · Conduct of conflict of interest, compliance, and ethical assessments · Conduct of audit, internal control, and risk management processes · Establishment, exercise, or protection of legal claims · Conduct of retention and archiving activities |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Contractual and Transaction Information
(Information relating to contractual relationships, proposal and agreement details, contractual correspondence, records relating to the scope of the business relationship) |
· Establishment, conduct, and management of business partner, supplier, and service relationships
· Conduct of pre-contractual proposal, negotiation, and agreement processes · Preparation, execution, implementation, and monitoring of contracts · Determination and management of the scope, duration, and terms of the business relationship · Determination and fulfilment of rights and obligations of the parties · Monitoring and supervision of processes relating to contractual obligations · Fulfilment of legal and contractual obligations · Establishment, exercise, or protection of legal claims · Conduct of processes aimed at preventing, managing, and resolving disputes · Conduct of audit, internal control, and risk management processes · Ensuring compliance with applicable legislation and professional regulations · Conduct of retention and archiving activities |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Financial Information
(Invoice details, bank account information, payment and collection data) |
· Conduct of financial processes within the scope of business partner, supplier, and service relationships
· Issuance of invoices and execution of payment and collection transactions · Fulfilment of financial obligations arising under contracts · Conduct of accounting, finance, and financial reporting processes · Fulfilment of tax-related obligations and creation of relevant records · Conduct of internal control and audit processes relating to financial transactions · Ensuring compliance with applicable legislation and professional regulations · Fulfilment of legal and contractual obligations · Establishment, exercise, or protection of legal claims · Conduct of risk management processes · Conduct of retention and archiving activities |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
| Legal Transaction and Compliance Information
(Records relating to conflict of interest checks, compliance and audit processes, and records maintained pursuant to legal obligations) |
· Establishment, conduct, and management of business partner, supplier, and service relationships
· Conduct of conflict of interest checks within the scope of business partner relationships · Ensuring and monitoring compliance with ethical rules, professional standards, and applicable legislation · Fulfilment of legal obligations arising from legislation and contracts · Conduct of audit, internal control, and review processes · Assessment and management of legal risks · Establishment, exercise, or protection of legal claims · Provision of information to authorized persons, institutions, and organizations · Ensuring compliance with applicable legislation and professional regulations · Conduct of retention and archiving activities |
· Legitimate Interest (DP Law Article 5/2(f))
· Compliance with a Legal Obligation (DP Law Article 5/2(ç)) · Establishment or Performance of a Contract (DP Law Article 5/2(c)) · Establishment, Exercise, or Protection of a Right (DP Law Article 5/2(e))
|
ii. Details of the Transfer of Your Personal Data
Personal data relating to individual representatives of business partners, suppliers, consultants, and other service providers, as well as authorized persons of corporate business partners, may be transferred, in line with the purposes set out above, within the scope of establishing, conducting, and managing business relationships, in compliance with the transfer conditions set out under Articles 8 and 9 of the DP Law and strictly limited to the relevant process. In this context, personal data may be transferred to law firms, consultants, and other service providers cooperating with Moroğlu Arseven for the execution of contractual and business relationships; to relevant service providers and banks within the scope of accounting, finance, audit, and tax processes; to third parties providing information technology infrastructure and support services (such as servers, hosting, software, cloud computing, and email services); to security service providers for the purpose of ensuring physical premises security; and to competent public institutions, authorities, and judicial bodies for the fulfilment of statutory obligations.
Where the servers and systems of third-party service providers engaged by Moroğlu Arseven are located abroad, personal data may be stored on such systems. In such cases, the transfer of personal data abroad is carried out in accordance with Article 9 of the DP Law and subject to the implementation of the necessary technical and administrative safeguards prescribed under the applicable legislation.
E. Event Processes
Within the scope of events, seminars, conferences, and similar organizations organized by or attended by Moroğlu Arseven, personal data relating to participants are processed in accordance with applicable legislation for the purposes of planning, conducting, and organizing such events, as well as carrying out communication activities. This section provides information regarding the categories of personal data processed in connection with events, the purposes of processing, and data transfer processes.
i. Processed Personal Data, Method of Processing, Purpose of Processing, and Legal Basis
Your personal data are collected pursuant to Article 5 of the DP Law, for the purposes set out below, where you participate as a participant or speaker in events organized by or attended by Moroğlu Arseven, through physical or electronic means, including via email, completion of event participation forms and similar documents, and by means of taking photographs and/or video recordings during events.
| Personal Data | Purpose of Processing | Legal Basis |
| Identity Information (Name, Surname)
Contact Information (Phone number, E-mail)
Employer and Position Information
|
· Organization and event management
· Conduct of corporate communication activities · Conduct of communication activities · Conduct of retention and archiving activities · Creation and monitoring of visitor records |
· Legitimate Interest (DP Law Article 5/2(f))
· Establishment or Performance of a Contract (DP Law Article 5/2(c)) · |
| Visual Data (*) (Photographs taken during events) | · Sharing on our social media accounts and creating event memorabilia | · Explicit Consent (DP Law Article 5/1) |
(*) In order to protect your personal data, photographs are taken from the back to the extent possible during our events. In addition, following verbal notification, photographs may also be taken from the front for the purpose of providing information about the event on online platforms, including social media platforms.
ii. Details of the Transfer of Your Personal Data
Your personal data may be transferred, in line with the purposes set out above, within the framework of the transfer conditions stipulated under Articles 8 and 9 of the DP Law. In this context, your identity and contact information may be transferred to service providers from whom Moroğlu Arseven receives information technology infrastructure and support services for inclusion in Moroğlu Arseven’s information systems and for the conduct of event processes. Where you appear in photographs and/or video recordings taken during events following prior notification, such data may be shared via Moroğlu Arseven’s website and social media accounts. In addition, where required, personal data may be transferred, including abroad in accordance with Article 9 of the DP Law, to competent public institutions and organizations for the fulfilment of statutory or regulatory obligations or in response to requests from authorized authorities.
Rights of the Data Subject
Pursuant to Article 11 of the DP Law, you may exercise the following rights at any time by submitting a request to the Company with respect to the processing and use of your personal data:
- To learn whether your personal data are processed and, if so, to request information regarding such processing,
- To learn the purpose of processing of your personal data and whether they are used in accordance with such purpose,
- To know the third parties to whom your personal data are transferred domestically or abroad,
- To request the rectification of incomplete or inaccurate personal data and to request that such rectification be notified to third parties to whom your personal data have been transferred,
- To request the deletion or destruction of your personal data where the reasons requiring processing no longer exist, notwithstanding that such data have been processed in accordance with the law, and to request that such action be notified to third parties to whom your personal data have been transferred,
- To object to the occurrence of a result against you arising from the analysis of your personal data exclusively through automated systems,
- To request compensation for damages incurred due to the unlawful processing of your personal data.
Your personal data are stored by Moroğlu Arseven with great care through the provision of technical infrastructure in accordance with information security standards and procedures. Requests relating to your rights under this section may be submitted, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, to our address at Harbiye, Abdi İpekçi Street No. 19-1, Nişantaşı, 34367 Şişli, Istanbul, by way of a notary public or via registered mail with return receipt.
