Clear answers to the questions on your mind.

Outsourcing does not remove liability; your obligations as the data controller continue. Recourse against the provider, in turn, depends on the security and indemnity clauses in your contract — those clauses need to be built strong from the start.

Your obligations as data controller continue; recourse against the provider depends on the security and indemnity clauses in your contract. We strengthen supplier contracts based on incident scenarios.

In legal terms there is no ownership; there are contractual rights and limits. What is critical is that usage rights for raw data, processed data, and derivatives are allocated explicitly.

It is a status granting highly qualified labour and investors the right to indefinite work and residence; criteria such as academic career, investment size, and contribution to employment are considered. We prepare the eligibility analysis and the application file together.

The employer runs the work permit application, but the route differs depending on where the foreign national is. If they already hold a residence permit in Türkiye of sufficient duration, the employer makes the application from inside the country.If the foreign national is abroad, the process has two legs: the employee applies for a work visa at the Turkish consulate in the country where they are, and the employer completes the application from Türkiye with the Ministry of Labour and Social Security under the same…

Copyright protection for purely machine-generated content is contested; the nature of the human contribution is decisive. In addition, tool agreements may regulate output rights differently. We structure your production workflow to secure ownership of the rights.

Valuation and financial modelling are carried out, where needed, with corporate finance specialists from the GCG network or with your own financial advisor. We manage the legal backbone of the process — confidentiality, offer, due diligence, contract…

Your first point of contact should be your legal team, because the steps taken in the first hours have irreversible consequences for evidence, liability, and notification deadlines. We coordinate the crisis from a single centre and tie the other advisers into that framework.

The decision must be made through a documented assessment, together with product safety legislation, contractual obligations, and insurance notifications. The scope of the recall and the wording of the announcement directly affect liability; we conduct the process in coordination with the competent authorities.

Management approval + a record of employee notification (preferably electronic signature/log) is the standard. In the NIS2 world, the management body’s approval record has gained additional importance.

Both the KVKK and the GDPR require the breach to be notified to the authority within a short time; delay is in itself grounds for sanctions. With a response plan prepared in advance, the detection, containment, notification, and communication steps proceed without panic.

Because of ambiguity in the target metrics and post-sale management decisions. We define the metrics in auditable terms and balance information and intervention rights, narrowing the room for disputes.

Most often: late notification, breach of policy conditions and missing documents. The record-keeping discipline maintained during the incident is the foundation of collection — which is why the recovery plan is built in connection with the acute phase.

An agent acts in your name and enjoys strong statutory protections (including the goodwill indemnity); a distributor buys and sells in its own name. Mislabelling leads to unexpected claims on termination. We set the model up correctly from the start and operate it in keeping with its label.

Statements made in the moment of a crisis can be used in litigation as an admission, a notification of breach, or an undertaking. Pre-approved message frameworks and a single-spokesperson rule speed up communication while reducing legal risk; we build the plan together with your communications team.

Because the value of a digital record depends as much on how it was obtained and kept as on what it says. If you cannot document who took the data, when, and by what method, the other side will argue that the record may have been altered afterwards or obtained unlawfully — and the evidence becomes something to litigate about rather than something to rely on.The chain of custody is the unbroken record that closes that gap: forensic imaging, integrity verified by hash value, access logs and every step committed to a…

An examination conducted under attorney coordination provides protection with respect to legal privilege, the chain of custody, and any potential litigation strategy. We structure the report together with the technical team within a scope suited to litigation and notification needs.

No. In the tools we use under enterprise agreements your documents are kept out of model training — your inputs are not used to feed the general model. That is secured both by an express clause in the supplier contract and by the technical setting itself, and the retention period, the access rules and the deletion terms are given in writing as well.We work to an internal protocol that decides which data may be processed in which environment, and documents containing personal data are handled under the Personal Dat…

You find out early by running a short regulatory scan that sets your business model against the legislative map. The scan shows which regulatory regimes actually engage: if personal data is processed, the Personal Data Protection Law (No. 6698) and, for the EU market, the GDPR; if there is a payments, credit or crypto dimension, financial regulation and its licensing regimes; and in sectors such as health, food and e-commerce, their own permits and limits.Establishing where the permit, notification and prohibition…

No; a legal check-up runs largely on documents, in a way that does not stop your day-to-day operation. We begin with a list of the documents that will be needed and a secure way of sharing them, and our own team does the bulk of the review.We take up the time of management and your teams only for short, scheduled information meetings and at the reporting stage where the findings are discussed. Where documents containing personal data are shared, the confidentiality and access limits required by the Personal Data P…

Yes, and it is the fastest payback a digital contract system offers. Every contract’s expiry, renewal and termination-notice windows are defined in the system, and automatic reminders reach the people responsible before the window closes rather than after it.That is what puts an end to unwanted silent renewals and to missed notice periods. It matters most on fixed-term contracts, because under the Turkish Code of Obligations (No. 6098) a termination notice has to be given within the period and in the manner the co…

With a complete file, the process is generally concluded within a few weeks to a few months; the biggest source of delay is missing documents. We build a timeline backwards from the start date and file the application at the right moment.

Yes. Reviewing contracts already in force is often where the most immediate risk is found. We scan your existing portfolio and report agreements that have lapsed, renew automatically, carry unbalanced liability, penalty or termination clauses, or no longer align with current legislation. Because contracts in Türkiye are governed mainly by the Code of Obligations (TBK, Law 6098) and, for commercial dealings, the Turkish Commercial Code (TTK, Law 6102), amendments to those rules can leave older clauses unenforceable…

Yes. For the agreements you use most often, such as sales, services, supply, confidentiality and distance-selling contracts, we prepare company-specific templates with plain-language completion guides. Each template is built on the Code of Obligations (TBK, Law 6098) and, for commercial transactions, the Turkish Commercial Code (TTK, Law 6102), carrying the clauses your business actually needs — scope, price and payment, liability, termination, governing law and dispute resolution. The drafting stays inside the li…