{"id":134,"date":"2022-08-18T09:00:00","date_gmt":"2022-08-18T09:00:00","guid":{"rendered":"https:\/\/utuhukuk.com\/6698-sayili-kisisel-verilerin-korunmasi-kanunu-kapsamindaki-gelismeler\/"},"modified":"2026-10-01T14:08:00","modified_gmt":"2026-10-01T14:08:00","slug":"developments-personal-data-protection-law-no-6698","status":"publish","type":"post","link":"https:\/\/utuhukuk.com\/en\/6698-sayili-kisisel-verilerin-korunmasi-kanunu-kapsamindaki-gelismeler\/","title":{"rendered":"Developments under Personal Data Protection Law no. 6698"},"content":{"rendered":"<div class=\"pm\" data-utu-pm=\"1\">\n<p class=\"pm-giris\"><strong>The basic concepts of the KVKK (Personal Data Protection Law)<\/strong>, are the starting point for understanding to whom and to which data the Personal Data Protection Law applies. The Draft Personal Data Protection Law, prepared within the scope of harmonisation with the European Union, was submitted to the Speaker of the Grand National Assembly of T\u00fcrkiye on 18 January 2016. The text was adopted by the General Assembly of the Grand National Assembly on 24 March 2016, became law, and entered into force upon publication in Official Gazette No. 29677 dated 7 April 2016. In this article we discuss the scope of the Law; basic concepts such as personal data, special categories of personal data, data processing, data controller, data processor and explicit consent; and the obligation to register with VERB\u0130S.<\/p>\n<aside class=\"pm-ozet\" aria-label=\"In brief\">\n<p class=\"pm-etiket\">In brief<\/p>\n<ul>\n<li>Personal Data Protection Law No. 6698 entered into force upon publication in the Official Gazette of 7 April 2016 and makes no distinction between public institutions and private organisations.<\/li>\n<li>The Law protects only personal data of natural persons; data belonging to a legal person may also benefit from protection if it makes a natural person identifiable.<\/li>\n<li>The basic concepts of the KVKK (Personal Data Protection Law) explained are personal data, special categories of personal data, data processing, data controller, data processor, explicit consent, anonymisation and data filing system.<\/li>\n<li>VERB\u0130S is the registry system, accessed through the Authority's website, in which natural and legal persons processing personal data must register before starting to process data.<\/li>\n<li>Article 28 of the Law regulates full and partial exemptions; exemption from the obligation to register with the Registry does not mean exemption from the provisions of the Law.<\/li>\n<\/ul>\n<\/aside>\n<div class=\"pm-not\">\n<p class=\"pm-etiket\">Currency note<\/p>\n<p>This article was prepared on the basis of the legislation and practice in force on the date of its publication. There may have been changes since then to the deadlines for registration with VERB\u0130S, the thresholds for the registration obligation and certain provisions of the Law. You are advised to consult a lawyer regarding the current position.<\/p>\n<\/div>\n<details class=\"pm-ic\" open>\n<summary>Contents<\/summary>\n<ol>\n<li><a href=\"#kanunun-kapsami\">Scope of the Law<\/a><\/li>\n<li><a href=\"#kisisel-verilerin-korunmasi\">What does protection of personal data mean?<\/a><\/li>\n<li><a href=\"#kisisel-veri\">Personal data and special categories of personal data<\/a><\/li>\n<li><a href=\"#veri-isleme\">Data processing, data controller and data processor<\/a><\/li>\n<li><a href=\"#acik-riza\">Explicit consent, anonymisation and data filing system<\/a><\/li>\n<li><a href=\"#verbis\">VERB\u0130S and the obligation to register with the Registry<\/a><\/li>\n<li><a href=\"#sicil-istisnalari\">Exemptions from the obligation to register with the Registry<\/a><\/li>\n<li><a href=\"#sss\">Frequently asked questions<\/a><\/li>\n<li><a href=\"#iletisim\">Consultation request<\/a><\/li>\n<\/ol>\n<\/details>\n<section id=\"kanunun-kapsami\">\n<h2>Scope of the Personal Data Protection Law<\/h2>\n<p>Article 2 of the Law sets out its scope. Under that article, the Law applies to natural persons whose personal data are processed, and to natural and legal persons who process such data wholly or partly by automated means, or by non-automated means forming part of any data filing system.<\/p>\n<p>The Law draws no distinction between public institutions and private bodies. The procedures and principles it lays down apply, as a rule, to all institutions and organisations. Its provisions therefore also apply to personal data processed by public institutions.<\/p>\n<p>The personal data protected under Law no. 6698 are only those belonging to natural persons; data belonging to legal persons are not protected. However, where obtaining data belonging to a legal person leads to the identification of one or more natural persons, such data may also benefit from the protection of the Law. Even then, what is in substance protected is the personal data relating to the natural person.<\/p>\n<p>Nor does the Law draw any distinction according to whether personal data are processed wholly or partly by automated means, or by non-automated means forming part of a data filing system. Accordingly, any system structured according to particular criteria so as to facilitate access to personal data falls within the scope of the Law.<\/p>\n<p>The Law applies only to data relating to natural persons. Data relating to legal persons fall outside its scope, since Article 1 of the Law uses the expression \u201cnatural persons whose personal data are processed\u201d.<\/p>\n<p>Nor do the provisions of the Law on the processing of personal data apply to personal data recorded physically and not forming part of a data filing system, since Article 1 uses the expression \u201cprocessed wholly or partly by automated means, or by non-automated means forming part of any data filing system\u201d.<\/p>\n<div class=\"pm-not\">\n<p class=\"pm-etiket\">Excluded cases \u00b7 Art. 28<\/p>\n<p>Article 28 of the Law, moreover, lays down the cases that fall wholly or partly outside its scope: paragraph 1 sets out the full exemptions and paragraph 2 the partial exemptions. Where a full exemption applies, the provisions of the Law do not apply at all; where a partial exemption applies, only certain provisions do not apply.<\/p>\n<\/div>\n<\/section>\n<section id=\"kisisel-verilerin-korunmasi\">\n<h2>What Does Protection of Personal Data Mean?<\/h2>\n<p class=\"pm-tanim\">The protection of personal data means the protection of fundamental rights and freedoms through the regulation of the processing of personal data.<\/p>\n<p>The protection of personal data is aimed fundamentally at protecting not the data but the persons to whom the data relate. In other words, data protection refers to the administrative, technical and legal measures \u2014 given concrete form in the principles governing the protection of personal data \u2014 directed at protecting individuals against the harm that may arise from the processing of data about them, whether wholly or partly by automated or by non-automated means.<\/p>\n<div class=\"pm-not\">\n<p class=\"pm-etiket\">Example from a Court of Cassation decision<\/p>\n<p>By way of example, in a judgment of the Court of Cassation the sharing of a person\u2019s photographs on social media by another without permission was treated as an act infringing that person\u2019s rights (Court of Cassation, 12th Criminal Chamber, E.2015\/13582, K.2017\/3109, 12.04.2017).<\/p>\n<\/div>\n<\/section>\n<section id=\"kisisel-veri\">\n<h2>Personal Data and Special Categories of Personal Data<\/h2>\n<p>The basic concepts used in applying the Law are as follows:<\/p>\n<ul class=\"pm-cipler\" aria-label=\"KVKK bak\u0131m\u0131ndan temel kavramlar\">\n<li>Personal data<\/li>\n<li>Special categories of personal data<\/li>\n<li>Data processing<\/li>\n<li>Veri sorumlusu<\/li>\n<li>Data processor<\/li>\n<li>Explicit consent<\/li>\n<li>Anonim hale getirme<\/li>\n<li>Data filing system<\/li>\n<\/ul>\n<h3>The concept of personal data<\/h3>\n<p class=\"pm-tanim\">Personal data means any information relating to an identified or identifiable natural person.<\/p>\n<p>For there to be personal data, the data must relate to a natural person and that person must be identified or identifiable.<\/p>\n<p>Not only information that establishes a person\u2019s identity \u2014 such as name, surname, date and place of birth \u2014 but all data that render a person directly or indirectly identifiable are regarded as personal data: telephone number, vehicle registration number, social security number, passport number, curriculum vitae, images, video and voice recordings, fingerprints, e-mail address, hobbies, preferences, persons with whom the individual interacts, group memberships, family information and health information.<\/p>\n<p>As the Law does not adopt an exhaustive list of the information to be treated as personal data, the scope may be extended. What matters is that the data can be associated with the person or can identify them. Whether particular data constitute personal data must be assessed on the facts of each case, having regard to their capacity to identify the person.<\/p>\n<h3>Special categories of personal data<\/h3>\n<p>Special categories of personal data are data relating to a person\u2019s race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, dress and appearance, membership of an association, foundation or trade union, health, sexual life, criminal conviction and security measures, together with biometric and genetic data. Sensitive data may thus be regarded as a small group of personal data subject to greater protection.<\/p>\n<ul class=\"pm-cipler\" aria-label=\"\u00d6zel nitelikli ki\u015fisel veri t\u00fcrleri\">\n<li>Irk<\/li>\n<li>Ethnic origin<\/li>\n<li>Political opinion<\/li>\n<li>Philosophical belief, religion, sect and other beliefs<\/li>\n<li>Appearance and dress<\/li>\n<li>Membership of an association, foundation or trade union<\/li>\n<li>Health<\/li>\n<li>Cinsel hayat<\/li>\n<li>Criminal convictions and security measures<\/li>\n<li>Biyometrik ve genetik veriler<\/li>\n<\/ul>\n<p>These data, a more strictly protected subset of personal data, fall within the category of sensitive data because, if learned by others, they may expose the data subject to discrimination or exclusion by society; the Law lays down a number of special provisions in respect of them.<\/p>\n<\/section>\n<section id=\"veri-isleme\">\n<h2>Data Processing, Data Controller and Data Processor<\/h2>\n<h3>Data processing<\/h3>\n<p>The Law defines the processing of personal data as \u201cany operation performed on data, such as obtaining, recording, storing, retaining, altering, reorganising, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, wholly or partly by automated means, or by non-automated means forming part of any data filing system\u201d.<\/p>\n<p>The Regulation defines the same concept as \u201cany operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction\u201d.<\/p>\n<p>The definitions of \u201cdata processing\u201d in the Law and in the Regulation correspond to one another.<\/p>\n<h3>Data controller and data processor<\/h3>\n<p>The Law describes as the data controller the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data filing system. Legal persons are themselves \u201cdata controllers\u201d in respect of the activities they carry out in processing personal data, and the legal responsibility set out in the relevant provisions arises in the person of the legal entity. In the Regulation this corresponds to the definition of \u201ccontroller\u201d.<\/p>\n<p>The data processor is a separate natural or legal person who processes personal data on behalf of the data controller in accordance with the instructions given to them, and who is authorised by the data controller by means of a personal data processing agreement.<\/p>\n<div class=\"pm-ikili\">\n<div class=\"pm-kart\">\n<p class=\"pm-etiket\">Veri sorumlusu<\/p>\n<p>Determines the purposes and means of processing personal data; is responsible for establishing and managing the data filing system.<\/p>\n<\/div>\n<div class=\"pm-kart\">\n<p class=\"pm-etiket\">Data processor<\/p>\n<p>A separate natural or legal person who processes personal data on behalf of the data controller within the framework of the instructions given to it.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<section id=\"acik-riza\">\n<h2>Explicit Consent, Anonymisation and Data Filing System<\/h2>\n<h3>Explicit consent<\/h3>\n<p>The Law defines explicit consent as consent relating to a particular matter, based on information, and expressed by free will. Article 20\/3 of the Constitution further provides that personal data may be processed only in the cases prescribed by law or with the explicit consent of the person concerned. Under the Law, explicit consent is one of the grounds of lawfulness for both special categories of personal data and other personal data.<\/p>\n<p>Consent is a concept to which all instruments governing data processing attach importance; the Regulation likewise defines consent as \u201cany freely given, specific, informed and unambiguous indication of the data subject\u2019s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her\u201d.<\/p>\n<div class=\"pm-not\">\n<p class=\"pm-etiket\">Age limit for consent under the Regulation<\/p>\n<p>The Regulation lays down an age limit in respect of consent. Where the child is at least 16 years old, the child\u2019s consent is valid and the processing of that child\u2019s personal data is lawful. Where the child is under 16, the processing is lawful only if, and to the extent that, consent is given or authorised by the holder of parental responsibility over the child. Member States may also provide by law for a lower age, provided that it is not below 13 years.<\/p>\n<\/div>\n<h3>Anonim hale getirme<\/h3>\n<p class=\"pm-tanim\">Anonymisation means rendering personal data incapable of being associated with an identified or identifiable natural person in any way, even by matching them with other data.<\/p>\n<h3>Data filing system<\/h3>\n<p>This is the filing system in which personal data are processed, structured according to particular criteria; it corresponds to the filing system referred to in the Regulation.<\/p>\n<p class=\"pm-tablo-baslik\" id=\"tablo-kanun-tuzuk\">Equivalents of the concepts in the Law and the Regulation<\/p>\n<div class=\"pm-tablo-kap\">\n<table class=\"pm-tablo\" aria-labelledby=\"tablo-kanun-tuzuk\">\n<thead>\n<tr>\n<th scope=\"col\">Kanun<\/th>\n<th scope=\"col\">Regulation<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Data processing<\/td>\n<td>Data processing (the definitions correspond to each other)<\/td>\n<\/tr>\n<tr>\n<td>Veri sorumlusu<\/td>\n<td>Data controller<\/td>\n<\/tr>\n<tr>\n<td>Data filing system<\/td>\n<td>Dosyalama sistemi<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/section>\n<section id=\"verbis\">\n<h2>VERB\u0130S and the Obligation to Register with the Registry<\/h2>\n<p class=\"pm-tanim\">VERB\u0130S is a registration system in which natural and legal persons who process personal data must register before beginning to process such data, and in which they enter information, by category, about the personal data they process.<\/p>\n<p>Registration is made through the website of the Personal Data Protection Authority, <em>www.kvkk.gov.tr<\/em> On the page that appears, click the VERB\u0130S button and complete the relevant fields to register with VERB\u0130S.<\/p>\n<p>Provisional Article 1\/2 of the Law confers on the Personal Data Protection Board (\u201cthe Board\u201d) the task and power to decide and announce the dates on which the obligation to register with the Data Controllers\u2019 Registry begins. Decision no. 2019\/387, taken by the Board on that basis and published in the Official Gazette of 27 December 2019, sets the registration start dates for data controllers as follows:<\/p>\n<ul class=\"pm-liste\">\n<li><strong>- data controllers with more than 50 employees per year or an annual financial balance sheet total exceeding TRY 25 million, and all data controllers established abroad: 01.10.2018 \u2013 30.06.2020,<\/strong><\/li>\n<li><strong> - natural and legal person data controllers established abroad: 01.10.2018 \u2013 30.06.2020,<\/strong><\/li>\n<li><strong> - data controllers with fewer than 50 employees per year and an annual financial balance sheet total below TRY 25 million whose principal activity is the processing of special categories of personal data: 01.01.2019 \u2013 30.09.2020,<\/strong><\/li>\n<li><strong> - public institution and organisation data controllers: 01.04.2019 \u2013 31.12.2020<\/strong><\/li>\n<\/ul>\n<p>must register with the Registry.<\/p>\n<h3>Which data controllers are obliged to register with VERB\u0130S?<\/h3>\n<p>Under Article 16 of the Law, natural and legal persons who process personal data must register with the Registry before beginning to process such data. As a general rule, therefore, natural and legal person data controllers established in Turkey, natural and legal person data controllers established abroad, and public institution and organisation data controllers must register with VERB\u0130S where they process personal data in Turkey. Data controllers exempted by the Board under Article 16 are not, however, subject to the obligation to register.<\/p>\n<\/section>\n<section id=\"sicil-istisnalari\">\n<h2>Exemptions from the Obligation to Register with the Registry<\/h2>\n<h3>Exemptions under the Law<\/h3>\n<p>Under Article 16 of the Law, natural and legal persons who process personal data must register with the Registry before beginning to process such data. Where, however, they carry out the activities set out in Article 28 of the Law, data controllers are not required to enter information about those personal data into VERB\u0130S at the time of registration.<\/p>\n<blockquote class=\"pm-kanun\">\n<p><strong><em>Exemptions \u2014 ARTICLE 28 - <\/em><\/strong><em>(1) The provisions of this Law do not apply in the following cases:<\/em><\/p>\n<p><em>a) the processing of personal data by natural persons in the course of activities relating wholly to themselves or to family members living in the same dwelling, provided that the data are not given to third parties and the obligations relating to data security are complied with.<\/em><\/p>\n<p><em>b) the processing of personal data for purposes such as research, planning and statistics, by anonymising them, together with official statistics.<\/em><\/p>\n<p><em>c) the processing of personal data for artistic, historical, literary or scientific purposes, or within the scope of freedom of expression, provided that it does not infringe national defence, national security, public security, public order, economic security, the privacy of private life or personal rights, and does not constitute an offence.<\/em><\/p>\n<p><em>\u00e7) the processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organisations entrusted by law with the task and power of ensuring national defence, national security, public security, public order or economic security.<\/em><\/p>\n<p><em>d) the processing of personal data by judicial authorities or enforcement authorities in connection with investigation, prosecution, trial or enforcement proceedings.<\/em><\/p>\n<p><em>(2) Provided that it is proportionate and consistent with the purpose and basic principles of this Law, Article 10, governing the data controller\u2019s obligation to inform, Article 11, governing the rights of the data subject (other than the right to claim compensation for damage), and Article 16, governing the obligation to register with the Data Controllers\u2019 Registry, do not apply in the following cases:<\/em><\/p>\n<p><em>a) where the processing of personal data is necessary for the prevention of crime or for a criminal investigation.<\/em><\/p>\n<p><em>b) the processing of personal data made public by the data subject themselves.<\/em><\/p>\n<p><em>c) where the processing of personal data is necessary, on the basis of the power conferred by law, for the performance of supervisory or regulatory duties, or for disciplinary investigation or prosecution, by competent and authorised public institutions and organisations and by professional bodies having the character of a public institution.<\/em><\/p>\n<p><em>\u00e7) where the processing of personal data is necessary for the protection of the economic and financial interests of the State in budgetary, tax and financial matters.<\/em><\/p>\n<p><cite>Personal Data Protection Law No. 6698, Art. 28<\/cite><\/p><\/blockquote>\n<h3>Exemptions under Board decisions<\/h3>\n<p>Article 16 of the Law provides that <em>\u201cthe Board may grant exemptions from the obligation to register with the Data Controllers\u2019 Registry, having regard to objective criteria to be determined by the Board, such as the nature and number of the personal data processed, whether the processing arises from law, and whether the data are transferred to third parties\u201d <\/em>is the applicable provision.<\/p>\n<p>On the basis of that provision, the Board has granted exemptions from the registration obligation to certain data controllers. Board Decision no. 2018\/32 was published in the Official Gazette of 15 May 2018, and Board Decisions nos. 2018\/68, 2018\/75 and 2018\/87 in the Official Gazette of 18 August 2018. Accordingly:<\/p>\n<ul class=\"pm-liste\">\n<li><em>a) those who process personal data solely by non-automated means forming part of a data filing system,<\/em><\/li>\n<li><em>b) notaries operating under Notaries Law no. 1512 of 18 January 1972,<\/em><\/li>\n<li><em>c) associations established under Associations Law no. 5253 of 4 November 2004, foundations established under Foundations Law no. 5737 of 20 February 2008, and trade unions established under Trade Unions and Collective Bargaining Agreement Law no. 6356 of 18 October 2012, where they process personal data only in accordance with the relevant legislation and their objects, limited to their fields of activity, and only in respect of their own employees, members, affiliates and donors,<\/em><\/li>\n<li><em>\u00e7) political parties established under Political Parties Law no. 2820 of 22 April 1983,<\/em><\/li>\n<li><em>d) lawyers practising under Attorneyship Law no. 1136 of 19 March 1969,<\/em><\/li>\n<li><em>e) customs brokers,<\/em><\/li>\n<li><em>f) mediators,<\/em><\/li>\n<li><em>g) Certified Public Accountants and Sworn-in Certified Public Accountants practising under Law no. 3568 of 1 June 1989 on Certified Public Accountancy and Sworn-in Certified Public Accountancy,<\/em><\/li>\n<li><em>\u011f) natural or legal person data controllers with fewer than 50 employees per year and an annual financial balance sheet total below TRY 25 million, whose principal activity is not the processing of special categories of personal data,<\/em><\/li>\n<\/ul>\n<p><em>are exempt from the obligation to register with VERB\u0130S.<\/em> Although data controllers within this scope are not obliged to register, they may register with VERB\u0130S.<\/p>\n<div class=\"pm-not\">\n<p class=\"pm-etiket\">Scope of the exception<\/p>\n<p>However, it should be borne in mind that exemption from the obligation to register with the Registry does not mean exemption from the provisions of the Law.<\/p>\n<\/div>\n<p class=\"pm-dipnot\">Selda G\u00dcNG\u00d6R<\/p>\n<\/section>\n<p class=\"pm-dipnot\">Related legislation: <a href=\"https:\/\/www.mevzuat.gov.tr\/mevzuat?MevzuatNo=6698&amp;MevzuatTur=1&amp;MevzuatTertip=5\" target=\"_blank\" rel=\"noopener\">Personal Data Protection Law No. 6698<\/a> (mevzuat.gov.tr)<\/p>\n<section id=\"sss\" class=\"pm-sss\">\n<h2>Basic Concepts of the KVKK: Frequently Asked Questions<\/h2>\n<details open>\n<summary>What are the basic concepts of the KVKK?<\/summary>\n<div>\n<p>The article addresses as basic concepts under Law No. 6698 personal data, special categories of personal data, data processing, data controller, data processor, explicit consent, anonymisation and data filing system.<\/p>\n<\/div>\n<\/details>\n<details>\n<summary>What is personal data?<\/summary>\n<div>\n<p>Personal data is any information relating to an identified or identifiable natural person. In addition to first name, surname and date of birth, data that make a person directly or indirectly identifiable, such as a telephone number, licence plate, image and audio recordings and e-mail address, are also personal data.<\/p>\n<\/div>\n<\/details>\n<details>\n<summary>Does the KVKK also protect the data of legal persons?<\/summary>\n<div>\n<p>No. The Law protects only personal data of natural persons. However, if obtaining data belonging to a legal person leads to the identification of one or more natural persons, such data may also benefit from the protection of the Law; in that case too, what is protected is the natural person's data.<\/p>\n<\/div>\n<\/details>\n<details>\n<summary>Which are the special categories of personal data?<\/summary>\n<div>\n<p>They are data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.<\/p>\n<\/div>\n<\/details>\n<details>\n<summary>What is the difference between a data controller and a data processor?<\/summary>\n<div>\n<p>A data controller is the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data filing system. A data processor is a separate natural or legal person who processes data on behalf of the data controller and in accordance with its instructions.<\/p>\n<\/div>\n<\/details>\n<details>\n<summary>Does being exempt from the obligation to register with VERB\u0130S also mean being exempt from the Law?<\/summary>\n<div>\n<p>Hay\u0131r. Makalede, Sicile kay\u0131t y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fcnden istisna tutulan veri sorumlular\u0131n\u0131n isterlerse VERB\u0130S&#8217;e kaydolabilece\u011fi, ancak bu istisnan\u0131n Kanun h\u00fck\u00fcmlerinden istisna olmak anlam\u0131na gelmedi\u011fi vurgulanmaktad\u0131r.<\/p>\n<\/div>\n<\/details>\n<\/section>\n<section id=\"iletisim\" class=\"pm-form-kap\">\n<div class=\"pm-form-sol\">\n<p class=\"pm-etiket\">Consultation request<\/p>\n<h2>Do you have a question about the protection of personal data?<\/h2>\n<p>At UTU Hukuk Dan\u0131\u015fmanl\u0131k, we provide legal representation and advisory services in the field of company law.<\/p>\n<p>Fill in the form and we will call you. You can also contact us directly:<\/p>\n<ul class=\"pm-kanal\">\n<li><a href=\"tel:+905365931600\">+90 536 593 16 00<\/a><\/li>\n<li><a href=\"mailto:bilgi@utuhukuk.com\">bilgi@utuhukuk.com<\/a><\/li>\n<\/ul>\n<\/div>\n<form class=\"pm-form\" data-alan=\"\u015eirketler Hukuku\" novalidate action=\"\">\n<div class=\"pm-alan\"><label for=\"pm-ad\">Full name *<\/label><input id=\"pm-ad\" name=\"ad\" type=\"text\" autocomplete=\"name\" required><\/div>\n<div class=\"pm-alan\"><label for=\"pm-tel\">Phone *<\/label><input id=\"pm-tel\" name=\"tel\" type=\"tel\" autocomplete=\"tel\" inputmode=\"tel\" required><\/div>\n<div class=\"pm-alan\"><label for=\"pm-mail\">Email<\/label><input id=\"pm-mail\" name=\"mail\" type=\"email\" autocomplete=\"email\"><\/div>\n<div class=\"pm-alan\"><label for=\"pm-konu\">Your situation in brief<\/label><textarea id=\"pm-konu\" name=\"konu\" rows=\"4\" placeholder=\"\u00d6rne\u011fin: \u015eirketimizin VERB\u0130S\u2019e kay\u0131t y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc olup olmad\u0131\u011f\u0131n\u0131 ve hangi kavramlar\u0131n bizi ilgilendirdi\u011fini \u00f6\u011frenmek istiyoruz.\"><\/textarea><\/div>\n<div class=\"pm-bal\" aria-hidden=\"true\"><label for=\"pm-web\">Website<\/label><input id=\"pm-web\" name=\"website\" type=\"text\" tabindex=\"-1\" autocomplete=\"off\"><\/div>\n<p><label class=\"pm-onay\"><input name=\"kvkk\" type=\"checkbox\" required> <span>I consent to the processing of my personal data for this request and to being contacted.<\/span><\/label><br \/>\n<button type=\"submit\">Send request<\/button><\/p>\n<p class=\"pm-durum\" role=\"status\" aria-live=\"polite\">\n<input type=\"hidden\" name=\"trp-form-language\" value=\"en\"\/><\/form>\n<\/section>\n<footer class=\"pm-imza\">\n<div class=\"pm-imza-logo\" aria-hidden=\"true\">UTU<\/div>\n<div>\n<p class=\"pm-imza-ad\">UTU Hukuk ve Dan\u0131\u015fmanl\u0131k<\/p>\n<p>Since 2016 it has been providing legal and advisory services in Ankara in many areas, labour law in particular. <a href=\"https:\/\/utuhukuk.com\/en\/corporate-law\/\">Our company law practice \u2192<\/a><\/p>\n<p class=\"pm-uyari\">This article is for general information only and does not constitute legal advice. You are advised to consult a lawyer about your specific situation.<\/p>\n<\/div>\n<\/footer>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Scope of the Personal Data Protection Law. The Draft Personal Data Protection Law, prepared as part of the alignment with the European Union, was submitted to the Presidency of the Grand National Assembly of Turkey on 18 January 2016\u2026<\/p>","protected":false},"author":1,"featured_media":383,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_canvas","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-134","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sirketler-hukuku"],"_links":{"self":[{"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/posts\/134","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/comments?post=134"}],"version-history":[{"count":6,"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/posts\/134\/revisions"}],"predecessor-version":[{"id":657,"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/posts\/134\/revisions\/657"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/media\/383"}],"wp:attachment":[{"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/media?parent=134"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/categories?post=134"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/utuhukuk.com\/en\/wp-json\/wp\/v2\/tags?post=134"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}