Clear answers to the questions on your mind.

BIT protection can apply independently of the contract; moreover, pre-dispute positioning (documentation, notices) increases your options. Have the case analysed early.

Yes — exemption frameworks get updated, and old clauses can be left unprotected. A periodic compliance scan should be routine for every company that owns a network.

No — these clauses can be negotiated. Unannounced audits at your expense, vague termination triggers and unlimited sub-supplier commitments can be balanced; your bargaining power increases when you come prepared.

The obligation depends on your contract. Data requests are legitimate, but the scope, format, and confidentiality limits can be negotiated; protective mechanisms should be put in place for process data that qualifies as a trade secret.

Vendors processing high-volume and sensitive data (cloud, CRM, payroll) come first. We build a risk-ranked renewal plan based on the inventory.

Have the scope reviewed before you sign: some commitment letters contain disproportionate audit and termination rights. We negotiate the text into a version you can genuinely implement, with the risk contained, and prepare a counterproposal where necessary.

We proceed first through the platform’s internal appeal mechanism and, where necessary, under the P2B rules, with structured grounds and evidence; EU rules oblige platforms to state reasons and to offer an appeal route. In parallel, we put an interim plan in place to manage inventory and revenue risk, and document the correspondence with potential litigation in mind.

No — the two regimes use separate instruments. The EU side is secured with the SCCs, the Türkiye side with the KVKK standard contract; we set the two up as a single, non-conflicting package.

No — what is decisive is that the product is placed on the EU market; where the data is held does not remove the scope, it only adds a transfer layer.

It is possible with limited tools (unfair competition), but weak. The first step is a registration strategy; a swift application should be filed while preserving your evidence of prior use.

The inventory must be updated and the registration brought into line with your current processing reality; an outdated registration is evidence against you in an audit. The programme makes VERBİS maintenance part of an annual routine.

A share deal transfers the company with all its rights and liabilities; an asset deal takes selected items but multiplies the required consents and transfer formalities. We compare the structures in light of tax, liability, and operational continuity and make a recommendation.

Setting up a branch is fast, but the parent company's liability continues without limit; a GmbH provides a separate legal entity and limited liability. Tax, customer perception and tender requirements also affect the choice. We evaluate the model comparatively according to your objectives.

An inter vivos transfer offers flexibility in control and tax planning; testamentary dispositions may run up against reserved-share balances. By separating usufruct and management rights, hybrid models can be built — we design the balance specific to each family.

In cross-border contracts arbitration is often the better choice: a neutral forum, arbitrators who know the subject matter, and an award enforceable in more than 170 countries under the 1958 New York Convention (172 contracting states as at July 2026). In Türkiye arbitration is recognised under the International Arbitration Law (No. 4686) and the Code of Civil Procedure (No. 6100).It is not always the answer. In low-value or high-volume routine matters the cost of arbitration can make it dearer than going to court…

No — you need a module embedded in new-hire onboarding, quarterly refreshers, and micro-trainings with each version update. Habits are built through repetition.

It depends on the recovery guarantee, the amount, and the confidentiality terms: sometimes it is the fastest route to collection, sometimes it weakens deterrence. The decision is made on the mathematics of the concrete offers.

In most systems, yes — allowing anonymous reports builds trust and is expected in LkSG practice. What is critical is a platform setup that can keep communication going even with anonymous reports.

For most needs, mature off-the-shelf tools are sufficient; custom development makes sense only if the process is truly unique. We compare the options on total cost of ownership and data portability and give an impartial recommendation.

Not verbatim, but proportionately: simplified commitments suited to scale and realistic audit rights. Otherwise, the lower tiers of the chain will not sign, or the terms cannot be applied.

Marriage and birth certificates must be obtained with an apostille from the country of origin and submitted with a sworn translation. A missing formal requirement is the number one reason an appointment goes to waste.

Yes. The platform was shut down on 20 July 2025 and the regulation has been repealed; keeping a dead link creates a risk of misleading information. Your ADR/consumer arbitration board notices need to be updated along with it.

Yes; the regulation applies in stages: the rules on prohibited practices and AI literacy obligations apply from early 2025, the general-purpose (GPAI) model rules from August 2025, while the main obligations for high-risk systems take effect from August 2026. We build a scheduled compliance plan that starts with an inventory and risk classification.

Most programmes use both together: a criminal complaint cuts off the flow through raids and seizure, while a civil action produces damages and a permanent injunction. The sequencing is built around the state of the evidence.