SERKA LAW PRIVACY POLICY

Last updated: January 28, 2026

This privacy notice for Serka Law Firm (“we”, “us”, “our”) explains how and why we collect, use, disclose, and safeguard your personal data when you use our services (“Services”), including when you:

• visit https://serkalaw.com (and any page that links to this notice),
• contact us via forms, email, phone, messaging apps, or
• engage with us in marketing, events, or business development communications.

If you do not agree with this notice, please do not use our Services.
Questions can be sent to info@serkalaw.com.

SUMMARY OF KEY POINTS

• What data we process: identifiers and contact details (name, phone, email), communication content, technical data (IP, device, log data), and cookie/tracking preferences.
• Sensitive data: we do not intentionally request sensitive categories via the website; however, a law firm may receive sensitive data within client communications when a matter requires it.
• Third parties: we may use service providers (hosting, security, analytics, email) under confidentiality and data processing terms.
• Cookies and consent: we use cookie and consent tools, including Google Consent Mode v2 consent signals for ad and analytics tags.
• Your rights: you may have access, correction, deletion, objection, restriction, portability, and complaint rights depending on jurisdiction (KVKK, GDPR/UK GDPR, and other laws).

TABLE OF CONTENTS

1. WHO WE ARE (DATA CONTROLLER)
2. WHAT DATA WE COLLECT
3. HOW AND WHY WE USE YOUR DATA
4. LEGAL BASES FOR PROCESSING
5. COOKIES, CONSENT, AND TRACKING TECHNOLOGIES
6. HOW WE SHARE DATA
7. INTERNATIONAL TRANSFERS
8. DATA RETENTION
9. SECURITY
10. MINORS
11. YOUR PRIVACY RIGHTS AND HOW TO EXERCISE THEM
12. DO-NOT-TRACK
13. UPDATES TO THIS NOTICE
14. CONTACT DETAILS

1. WHO WE ARE (DATA CONTROLLER)

Data Controller: Serka Law Firm
Address: Gayrettepe Mah. Cemil Aslan Guder Sk. No:26 D:2, Besiktas / Istanbul, Turkiye
Email: info@serkalaw.com

2. WHAT DATA WE COLLECT

A) Data you provide

• Identity and contact data: name, surname, phone number, email address, contact preferences.
• Communication data: messages you send to us, attachments, call notes, meeting notes, and related correspondence content.
• Client intake data (if you become a client): identification and matter-related information necessary to evaluate, establish, and perform legal services.

B) Data collected automatically

When you visit our website, we may automatically collect:

• Log and usage data (IP address, timestamps, viewed pages, referrers, approximate location derived from IP, error logs).
• Device and browser data (browser type, OS, language, device identifiers).
• Cookie and consent signals (your cookie choices and consent states).

3. HOW AND WHY WE USE YOUR DATA

• Responding to inquiries and communicating with you.
• Client intake, conflict checks, and evaluation of whether we can accept a matter (where legally required and proportionate).
• Providing legal services once engaged, including case management, drafting, representation, billing, and compliance steps.
• Website operation, performance, security monitoring, fraud prevention, and abuse prevention.
• Analytics and service improvement (aggregated and where possible privacy-preserving).
• Marketing communications where permitted by law and your preferences (you may opt out at any time).

4. LEGAL BASES FOR PROCESSING

Depending on your jurisdiction and context, we rely on one or more of the following legal bases:

A) GDPR and UK GDPR (where applicable)

• Consent (for certain cookies, marketing, and optional processing).
• Contract necessity (to take steps at your request prior to entering a contract and to perform a contract).
• Legal obligation (compliance, recordkeeping, regulatory duties).
• Legitimate interests (security, service improvement, limited business development) balanced against your rights.
• Vital interests (rare, urgent protection of life/health).

B) Turkiye KVKK (Law No. 6698) (where applicable)

We process personal data under KVKK conditions such as explicit consent where required, and other lawful grounds including necessity for establishment, exercise, or protection of a right, legal obligations, and legitimate interests while respecting your fundamental rights and freedoms.

5. COOKIES, CONSENT, AND TRACKING TECHNOLOGIES

We use cookies and similar technologies (pixels, local storage, tags) for:

• Strictly necessary functions (security, load balancing, basic site functionality).
• Preferences (language, consent choices).
• Analytics (under your settings and applicable law).
• Marketing and advertising (only where enabled by your consent and applicable law).

Consent and Google Consent Mode v2

If we use Google tags (such as Google Analytics or Google Ads), we may send consent signals required for Consent Mode v2, including ad_user_data and ad_personalization states, so tags adapt based on your choices.
You can change your cookie choices at any time via our cookie settings or by adjusting your browser settings.

6. HOW WE SHARE DATA

We may share your personal data only as needed and under appropriate safeguards:

• Service providers (hosting, security, email delivery, analytics, consent management) acting as processors under contract.
• Professional advisers and partners (co-counsel, local counsel, consultants) where needed for your matter, under confidentiality.
• Authorities and courts where required by law or necessary to establish, exercise, or defend legal claims.
• Business transfers if our practice or assets are reorganized (with appropriate notice where required).

We do not sell your personal data.

7. INTERNATIONAL TRANSFERS

Because we work cross-border, your data may be transferred and processed in countries other than where you live.
Where GDPR applies, we use appropriate safeguards (such as contractual protections) and limit transfers to what is necessary.

8. DATA RETENTION

• General inquiries and leads: typically up to 24 months, unless you become a client or law requires longer.
• Client files and case records: for the duration of the engagement and for an additional period required by applicable legal, regulatory, accounting, and professional obligations.
• Technical logs: retained for security and troubleshooting for a limited period, then deleted or anonymized.

Retention periods may vary by matter type and legal requirements.

9. SECURITY

We use reasonable technical and organizational security measures (access controls, backups, monitoring, and vendor controls).
However, no system is 100% secure, and using the internet carries inherent risk.

10. MINORS

Our Services are not directed to children under 18, and we do not knowingly collect data from minors through the website.
If you believe a minor provided data, contact info@serkalaw.com.

11. YOUR PRIVACY RIGHTS AND HOW TO EXERCISE THEM

Depending on where you live, you may have rights to:

• access, correct, delete,
• object or restrict processing,
• data portability (where applicable),
• withdraw consent (where processing is based on consent).

To exercise rights, email info@serkalaw.com with sufficient details to identify you and your request.
We may ask for reasonable verification.

California notice

If you are a California resident, you may have specific rights under CCPA/CPRA, including the right to know, delete, correct,
and opt out of sharing for cross-context behavioral advertising where applicable. If we do not sell or share, we will state that in our California responses and honor cookie opt-outs for tracking.

12. DO-NOT-TRACK

Browser Do-Not-Track signals are not currently implemented as a uniform standard.
We rely on our cookie settings and consent tools to manage tracking preferences.

13. UPDATES TO THIS NOTICE

We may update this notice from time to time. The Last updated date reflects the latest revision.
Material changes will be posted on the website.

14. CONTACT DETAILS

Serka Law Firm
Gayrettepe Mah. Cemil Aslan Guder Sk. No:26 D:2, Besiktas / Istanbul, Turkiye
Email: info@serkalaw.com