We process your data only to provide services to you, fulfil our legal obligations, and communicate with you; we do not sell it for marketing purposes or share it with third parties without authorisation.
This Privacy Policy explains how your personal data is processed when you visit our website, contact us, or make use of our services. This website is operated by Dr. iur. Mehmet Köksal in the course of the legal practice he carries on in Berlin. Because that establishment is in the European Union, the EU General Data Protection Regulation (Regulation (EU) 2016/679 — GDPR, Article 3) applies to processing carried out in the course of its activities. Turkish Law No. 6698 on the Protection of Personal Data (KVKK) applies in addition, to the processing for which Köksal Attorney Partnership is responsible. We observe both.
Controllers
Who is responsible depends on the region the data relates to:
- For European and international data, and for all data arising from use of this website, the controller under the GDPR is Dr. iur. Mehmet Köksal, Stellingdamm 6, 12555 Berlin, Germany, acting in the course of the legal practice he carries on in Berlin. Please send requests to [email protected].
- For data relating to Türkiye, the data controller (veri sorumlusu) under Turkish Law No. 6698 is Köksal Attorney Partnership (Köksal Avukatlık Ortaklığı), Şehit Polis Fethi Sekin Cad. No: 10, Uskumruköy Mah., Sarıyer, 34450 İstanbul, Türkiye. Please send requests to [email protected].
Whichever channel you use, we will route your request to the right party. You may also use the channels on the Contact page.
Personal data we process
Depending on the nature of our relationship with you, we may process identity, contact, client file, digital footprint, and application and career data. The scope of processed data is limited to only what the relevant purpose requires.
| Category of data | Sample data |
|---|---|
| Identity & contact | Name-surname, title, company, e-mail, telephone, address |
| Client file | Subject of the matter, correspondence, contracts and documents |
| Digital trace | IP address, browser information, cookie data, site usage |
| Application & career | CV, education and professional experience information |
Processing purposes and legal bases
We process your personal data for specific, explicit, and legitimate purposes:
- Providing legal services and conducting the client relationship,
- Responding to your requests and communicating with you,
- Fulfilling our legal obligations,
- Ensuring the security and improvement of our website and enhancing service quality.
Professional secrecy and confidentiality
In addition to personal data protection, all information you share in your capacity as a client is covered by the legal profession's duty of professional secrecy.
Transfer of data
We do not sell or rent your personal data to third parties for marketing purposes. Your data may be shared only with authorised institutions as required by legal obligation, with suppliers and business partners to the extent the service requires, and, in cross-border matters, with partner firms under the necessary safeguards.
Retention periods
We retain your personal data for the periods required by the processing purpose and prescribed by the relevant legislation. When the period expires or the reason for processing ceases, your data is deleted, destroyed, or anonymised.
Your rights as a data subject
Where the GDPR applies, you have the rights of access, rectification, erasure, restriction of processing, data portability and objection (Articles 15 to 22 GDPR), and the right to withdraw any consent at any time with effect for the future. Please send those requests to [email protected]. You may also lodge a complaint with a supervisory authority, in particular in the Member State of your residence or place of work (Article 77 GDPR); for the practice established in Berlin, the competent authority is the Berlin Commissioner for Data Protection and Freedom of Information.
Under Article 11 of the KVKK (Turkish Personal Data Protection Law), you have the rights to learn whether your data is being processed, to request information, to request its correction, deletion or destruction, to object to the processing, and to claim compensation for damage. Those rights follow Turkish law and are not identical to the GDPR rights above. To exercise them, use the KVKK Application Form or write to [email protected].
Cookies
Cookies are used on our website for its operation and security and to remember your language preference. To measure visit statistics we also use the Matomo web analytics software; Matomo runs on our own server, so the data it collects does not leave it and is not passed to any third party. The cookies it requires are set only after your prior consent for visits from Germany and the European Union, and you may withdraw that consent at any time with effect for the future. The full list of cookies in use, and how to manage your preferences, is available in the cookie preferences panel on this site.
Changes to the policy
We may update this policy in line with legislative developments and changes in our practices. The current version is always published on this page; for significant changes, the effective date and version number are updated.
Change History
- Version 3.3Aug 2026Applied Matomo IP, referrer, and search-data minimisation and automatic retention periods; clarified infrastructure providers and consent for all visitors.
- Version 3.2Aug 2026Matomo named as the web analytics software used for visit statistics; analytics cookies stated as consent-gated for visits from Germany and the EU.
- Version 3.1Aug 2026Controllers stated separately for European/international and Turkish data, with a separate contact address for European requests; GDPR data-subject rights and the supervisory authority added alongside the KVKK rights.
- Version 3.0Jun 2026GDPR cross-border transfer section added; retention periods clarified.
- Version 2.0Jan 2025Linked to the Cookie Policy; data categories table updated.
- Version 1.0Mar 2023Initial publication.