Protection of Personal Data

DECLARATION OF DISCLOSURE OBLIGATION UNDER THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA

Dear Clients, 

We share your sensitivity regarding the protection of your personal data and, in this context, we store your data in accordance with the procedures and principles established in the Personal Data Protection Law No. 6698 (hereinafter referred to as the "Law or KVKK"), which entered into force following its publication in the Official Gazette on 7 April 2016, and in accordance with the law and good faith.

Your personal data is collected in writing or electronically, through e-mail, telephone and, where applicable, our website, during contract negotiations and the course of the service relationship. It is processed on the legal grounds set out in Article 5(2) of the KVKK, namely the establishment or performance of a contract, compliance with a legal obligation and legitimate interests, or, where none of these grounds applies, based on your explicit consent. Your personal data may be processed by BDO Türkiye, in its capacity as Data Controller under the Law, for as long as required by applicable legislation, for the purposes of providing you with better service, carrying out informational communications regarding our services, collecting and compiling statistical information, and developing our commercial activities, including blocking its use. Your personal data may be transferred, in accordance with Article 8 of the KVKK, to public institutions and organisations with which our Company cooperates or is legally obliged to cooperate, service providers and suppliers, insurance companies and other third parties. Where such recipients are located abroad, the transfer is carried out in accordance with Article 9 of the KVKK. The transfer may be made to countries in respect of which the Personal Data Protection Board has issued an adequacy decision or, in the absence of such a decision, provided that you are able to exercise your rights and seek effective legal remedies in the destination country, where appropriate safeguards are in place, such as binding corporate rules approved by the Board, a standard contract published by the Board or a written undertaking authorised by the Board. Where such safeguards have not been established, the transfer may be made on the basis of your explicit consent, provided that you are informed of the possible risks, or on the other exceptional circumstances provided for under the KVKK.

You can find detailed information on the processing of your personal data in our Personal Data Processing, Protection and Destruction Policy.

Under Article 11 of the KVKK, you may at any time apply to our Company, as the Data Controller, to exercise the following rights. Accordingly, a data subject has the right to:

  • Learn whether their personal data is being processed;
  • Request information if it has been processed;
  • Learn the purpose of the processing and whether the data is used in accordance with that purpose;
  • Know the third parties in Türkiye or abroad to whom the data is transferred;
  • Request correction of data that is incomplete or inaccurate;
  • Request deletion or destruction of the data within the framework of the conditions set out in Article 7 of the KVKK;
  • Request that any correction, deletion or destruction be notified to the third parties to whom the data has been transferred;
  • Object to a result arising to their detriment through the exclusive analysis of the data by automated systems;
  • Request compensation for damage suffered because of unlawful processing.


Detailed information on how to submit your requests is available on the “KVKK Application Procedures and Principles” page of our website.