Privacy Policy
Türkiye'deki ziyaretçilerimiz için: 6698 sayılı KVKK kapsamındaki bilgilendirme içinKVKK Aydınlatma Metni'ni inceleyebilirsiniz.
Cavus & Coskunsu Law Firm Last updated: 26.10.2026
Cavus & Coskunsu (“we”, “our”, “us”) is committed to protecting the privacy of all visitors, clients, candidates and users of this website. This Privacy Policy explains how we collect, use, store and protect personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK). Visitors in Türkiye can also read our KVKK Information Notice (in Turkish).
1. Data Controller
The data controller responsible for your information is:
Çavuş ve Coşkunsu Avukatlık Ortaklığı (Cavus & Coskunsu Law Firm) Windowist Tower Eski Büyükdere Cad. No: 26 Kat:9 Maslak 34467 İstanbul / Türkiye
info@cavus-coskunsu.com +90 212 245 56 02
2. Personal Data We Collect
We may collect and process the following types of personal data:
2.1 Data collected automatically
When you visit our website, we may collect:
- IP address
- Browser type and version
- Device information
- Pages viewed and browsing behavior
- Time and date of visit
- Referring websites
Technical data such as IP address, browser and time of visit is processed by our hosting provider to deliver the website securely and to protect it against abuse. Data on pages viewed, browsing behaviour and referring websites is collected through Google Analytics only if you accept analytics cookies (see section 8).
2.2 Data you provide directly
When you submit information through contact forms, application forms or by e-mail, we may collect:
- First and last name
- E-mail address
- Telephone number
- Company and position (if applicable)
- Message content or inquiry details
- Documents you upload (CV for career applications)
Information submitted through the website forms is not stored on the website; it is forwarded by e-mail to our firm.
2.3 Career applications
For internship or professional applications, we may collect:
- Identity details
- Education background
- Professional qualifications
- Work experience
- CV, cover letter, certificates
- References, if provided
2.4 Client information
If you become a client, we may collect additional data required for legal representation, including:
- Identification documents
- Case-related information
- Legal documents and correspondence
We only collect data necessary for providing legal services or fulfilling our obligations.
3. Legal Basis for Processing
We process personal data under the following legal bases (GDPR Art. 6(1)):
- Steps prior to entering into a contract, or contractual necessity (b): responding to your inquiry, assessing a career application, preparing or fulfilling a legal service agreement.
- Legitimate interest (f): responding to general inquiries, ensuring the security of the website and preventing abuse.
- Legal obligation (c): compliance with regulations applicable to law firms.
- Consent (a): analytics cookies only. You can withdraw your consent at any time through “Cookie settings” at the bottom of every page.
We do not use your data for marketing communications.
4. How We Use Your Personal Data
We use your information for the following purposes:
- To respond to inquiries submitted through our contact forms
- To provide legal services and manage client relationships
- To assess and respond to internship or job applications
- To manage and maintain the security and performance of our website
- To analyse website usage and improve user experience (only with your consent to analytics cookies)
- To comply with legal and regulatory obligations
- To communicate with you regarding administrative or operational updates
We do not sell or rent your personal data to any third party.
5. Sharing and Disclosure of Personal Data
We may share personal data only in the following circumstances:
- Service providers: Cloudflare, Inc. (website hosting, security and bot protection, form processing), our e-mail delivery provider (forwarding form submissions to our firm), our e-mail service provider, and Google Ireland Ltd. / Google LLC (Google Tag Manager and Google Analytics, only if you accept analytics cookies).
- Legal requirements: Courts, regulators, law enforcement or authorities when required by law.
- Business operations: Third-party professionals (e.g., experts, consultants) involved in client matters when necessary.
- Internship or hiring process: Limited sharing within our internal HR/legal teams.
All third parties are required to maintain confidentiality and comply with data protection laws.
6. International Data Transfers
Our firm is established in Türkiye, outside the European Economic Area (EEA). Personal data you send us is therefore processed in Türkiye. Our service providers may also process data in the EU and the United States. Where personal data is transferred outside the EEA, we rely on:
- Standard contractual clauses (SCCs),
- Adequacy decisions, including the EU–U.S. Data Privacy Framework where the provider is certified, or
- Other legally approved mechanisms.
Transfers from Türkiye are carried out in accordance with Article 9 of the KVKK.
7. Data Retention
We retain personal data only for as long as necessary:
- Contact form and inquiry data: up to 12 months
- Career applications: up to 24 months, unless the candidate requests deletion earlier
- Client files: retained according to regulatory and professional obligations (typically 5–10 years)
- Security logs: for the short period set by our hosting provider’s security policy
- Analytics data: up to 14 months (Google Analytics retention setting); your cookie choice is stored in your browser for 6 months
After the retention period, data is securely deleted.
8. Cookies and Tracking Technologies
We use two categories of cookies and similar technologies:
- Strictly necessary: website security, bot protection on the forms (Cloudflare Turnstile) and remembering your cookie choice (stored in your browser). These are always active.
- Analytics (Google Analytics via Google Tag Manager): visits, pages viewed and traffic sources. These are off by default and are activated only if you choose “Accept all” or select Analytics in the cookie banner.
You can change or withdraw your choice at any time through “Cookie settings” at the bottom of every page. You can also delete or block cookies in your browser settings.
9. Security of Your Personal Data
We implement appropriate technical and organizational measures to safeguard data against:
- Unauthorized access
- Accidental loss
- Alteration
- Disclosure
- Cyber threats
However, no system is completely secure; online data transmission always carries some risk.
10. Your Rights Under Data Protection Law
You may exercise the following rights (where applicable):
- Right to access — obtain a copy of your data
- Right to rectification — correct inaccurate information
- Right to erasure — request deletion of your data
- Right to restriction — limit processing in specific circumstances
- Right to object — object to processing based on legitimate interests
- Right to data portability — receive your data in a structured format
- Right to withdraw consent — when processing is based on consent
To exercise your rights, contact us at: info@cavus-coskunsu.com
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or place of work. In Türkiye, the competent authority is the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).
We may request verification to ensure the security of your information.
11. Third-Party Links
Our website may contain links to external sites. We are not responsible for:
- the content,
- privacy practices, or
- security of third-party websites.
12. Children’s Privacy
Our services are not intended for individuals under 18. We do not knowingly collect personal data from minors.
13. Changes to This Privacy Policy
We may update this policy from time to time. The “Last updated” date at the top will indicate the most recent revision. Significant changes will be announced on the website.
14. Contact Us
If you have questions, requests, or concerns regarding this Privacy Policy, please contact:
Çavuş ve Coşkunsu Avukatlık Ortaklığı (Cavus & Coskunsu Law Firm) Windowist Tower Eski Büyükdere Cad. No: 26 Kat:9 Maslak 34467 İstanbul / Türkiye info@cavus-coskunsu.com +90 212 245 56 02