Privacy Policy

Serka Law Firm’s privacy policy complies with the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR) for EU-based visitors. Data controller: Av. Serkan KARA, Serka Law Firm. The website has no contact form, user account or database: its pages are static files delivered through Cloudflare’s network. The personal data the website itself handles are the technical request data Cloudflare processes to deliver and protect the pages (IP address, browser, requested address, time), the cookie choice kept in your browser and, only if you accept statistics cookies, Google Analytics measurement. A message you send us by e-mail or through a messaging application is processed by that service under its own terms, and by us as correspondence. Processing purposes: responding to legal inquiries, compliance with legal obligations, and website analytics. Legal bases for processing: explicit consent (KVKK Article 5/1), legitimate interests, and legal obligation. Recipients: Cloudflare (delivery and security of the website), Google (analytics, only with your consent), the provider of the channel you write on, and legal authorities when required by law. Data subject rights under KVKK Article 11: access, rectification, erasure, restriction, and objection. Requests should be directed to info@serkalaw.com. Cookies can be managed through the site’s cookie settings and your browser settings.

SERKA LAW PRIVACY POLICY

Last updated: October 29, 2026

This privacy notice for Serka Law Firm (“we”, “us”, “our”) explains how and why we collect, use, disclose, and safeguard your personal data when you use our services (“Services”), including when you:

• visit https://serkalaw.com (and any page that links to this notice),
• contact us by e-mail, by phone or through a messaging application, or
• engage with us in marketing, events, or business development communications.

If you do not agree with this notice, please do not use our Services.
Questions can be sent to info@serkalaw.com.

SUMMARY OF KEY POINTS

• What data we process: identifiers and contact details (name, phone, email), communication content, technical data (IP, device, log data), and cookie/tracking preferences.
• Sensitive data: we do not intentionally request sensitive categories via the website; however, a law firm may receive sensitive data within client communications when a matter requires it.
• Third parties: we may use service providers (hosting, security, analytics, email) under confidentiality and data processing terms.
• Cookies and consent: Google Analytics runs only after you accept statistics cookies, and embedded maps and videos only after you accept marketing cookies; the website carries no advertising tag.
• Your rights: you may have access, correction, deletion, objection, restriction, portability, and complaint rights depending on jurisdiction (KVKK, GDPR/UK GDPR, and other laws).

TABLE OF CONTENTS

1. WHO WE ARE (DATA CONTROLLER)
2. WHAT DATA WE COLLECT
3. HOW AND WHY WE USE YOUR DATA
4. LEGAL BASES FOR PROCESSING
5. COOKIES, CONSENT, AND TRACKING TECHNOLOGIES
6. HOW WE SHARE DATA
7. INTERNATIONAL TRANSFERS
8. DATA RETENTION
9. SECURITY
10. MINORS
11. YOUR PRIVACY RIGHTS AND HOW TO EXERCISE THEM
12. DO-NOT-TRACK
13. UPDATES TO THIS NOTICE
14. CONTACT DETAILS

1. WHO WE ARE (DATA CONTROLLER)

Data Controller: Av. Serkan KARA, Serka Law Firm
Address: Gayrettepe Mah., Cemil Aslan Güder Sk., Modül Apt. No:26 D:2, 34349 Beşiktaş / İstanbul, Türkiye
Email: info@serkalaw.com

2. WHAT DATA WE COLLECT

A) Data you provide

• Identity and contact data: name, surname, phone number, email address, contact preferences.
• Communication data: messages you send to us, attachments, call notes, meeting notes, and related correspondence content.
• Client intake data (if you become a client): identification and matter-related information necessary to evaluate, establish, and perform legal services.

B) Data collected automatically

When you visit our website, we may automatically collect:

• Log and usage data (IP address, timestamps, viewed pages, referrers, approximate location derived from IP, error logs).
• Device and browser data (browser type, OS, language, device identifiers).
• Cookie and consent signals (your cookie choices and consent states).

3. HOW AND WHY WE USE YOUR DATA

• Responding to inquiries and communicating with you.
• Client intake, conflict checks, and evaluation of whether we can accept a matter (where legally required and proportionate).
• Providing legal services once engaged, including case management, drafting, representation, billing, and compliance steps.
• Website operation, performance, security monitoring, fraud prevention, and abuse prevention.
• Analytics and service improvement (aggregated and where possible privacy-preserving).
• Marketing communications where permitted by law and your preferences (you may opt out at any time).

4. LEGAL BASES FOR PROCESSING

Depending on your jurisdiction and context, we rely on one or more of the following legal bases:

A) GDPR and UK GDPR (where applicable)

• Consent (for certain cookies, marketing, and optional processing).
• Contract necessity (to take steps at your request prior to entering a contract and to perform a contract).
• Legal obligation (compliance, recordkeeping, regulatory duties).
• Legitimate interests (security, service improvement, limited business development) balanced against your rights.
• Vital interests (rare, urgent protection of life/health).

B) Turkiye KVKK (Law No. 6698) (where applicable)

We process personal data under KVKK conditions such as explicit consent where required, and other lawful grounds including necessity for establishment, exercise, or protection of a right, legal obligations, and legitimate interests while respecting your fundamental rights and freedoms.

5. COOKIES, CONSENT, AND TRACKING TECHNOLOGIES

We use cookies and similar technologies (pixels, local storage, tags) for:

• Strictly necessary functions (security, load balancing, basic site functionality).
• Preferences (language, consent choices).
• Analytics (under your settings and applicable law).
• Embedded maps and videos, whose providers may set their own cookies (only after you accept the marketing category).

Consent and the Google tag

Google Analytics is loaded through the Google tag only after you accept statistics cookies. Before your choice no Google tag loads, no Google cookie is set and no signal is sent to Google. The website carries no advertising tag and sends no advertising consent signal.
You can change your cookie choices at any time via our cookie settings or by adjusting your browser settings.

6. HOW WE SHARE DATA

We may share your personal data only as needed and under appropriate safeguards:

• Service providers (hosting, security, email delivery, analytics, consent management) acting as processors under contract.
• Professional advisers and partners (co-counsel, local counsel, consultants) where needed for your matter, under confidentiality.
• Authorities and courts where required by law or necessary to establish, exercise, or defend legal claims.
• Business transfers if our practice or assets are reorganized (with appropriate notice where required).

We do not sell your personal data.

7. INTERNATIONAL TRANSFERS

Because we work cross-border, your data may be transferred and processed in countries other than where you live.
Where GDPR applies, we use appropriate safeguards (such as contractual protections) and limit transfers to what is necessary.

8. DATA RETENTION

• General inquiries and leads: typically up to 24 months, unless you become a client or law requires longer.
• Client files and case records: for the duration of the engagement and for an additional period required by applicable legal, regulatory, accounting, and professional obligations.
• Technical logs: retained for security and troubleshooting for a limited period, then deleted or anonymized.

Retention periods may vary by matter type and legal requirements.

9. SECURITY

We use reasonable technical and organizational security measures (access controls, backups, monitoring, and vendor controls).
However, no system is 100% secure, and using the internet carries inherent risk.

10. MINORS

Our Services are not directed to children under 18, and we do not knowingly collect data from minors through the website.
If you believe a minor provided data, contact info@serkalaw.com.

11. YOUR PRIVACY RIGHTS AND HOW TO EXERCISE THEM

Depending on where you live, you may have rights to:

• access, correct, delete,
• object or restrict processing,
• data portability (where applicable),
• withdraw consent (where processing is based on consent).

To exercise rights, email info@serkalaw.com with sufficient details to identify you and your request.
We may ask for reasonable verification.

California notice

If you are a California resident, you may have specific rights under CCPA/CPRA, including the right to know, delete, correct,
and opt out of sharing for cross-context behavioral advertising where applicable. If we do not sell or share, we will state that in our California responses and honor cookie opt-outs for tracking.

12. DO-NOT-TRACK

Browser Do-Not-Track signals are not currently implemented as a uniform standard.
We rely on our cookie settings and consent tools to manage tracking preferences.

13. UPDATES TO THIS NOTICE

We may update this notice from time to time. The Last updated date reflects the latest revision.
Material changes will be posted on the website.

14. CONTACT DETAILS

Serka Law Firm
Gayrettepe Mah., Cemil Aslan Güder Sk., Modül Apt. No:26 D:2, 34349 Beşiktaş / İstanbul, Türkiye
Email: info@serkalaw.com