Rafet Aslan Law Office delivers strategic representation and durable legal solutions for individuals and companies across advisory, litigation, and arbitration matters.
Rafet Aslan Law Office delivers strategic representation and durable legal solutions for individuals and companies across advisory, litigation, and arbitration matters.
Only the minimum data necessary for the purpose is collected, retention periods are shortened and access roles are narrowed. Unnecessary fields should be removed from forms and systems.
The data controller determines the purpose and means; the data processor carries out technical operations on the controller's behalf. The contract must set out, in writing, security, purpose, duration and instructions.
Under the data-protection law (KVKK), notification to the Board is recommended as soon as possible after a breach is detected, usually within 72 hours. An impact assessment should be carried out and the affected data subjects should also be informed.
It must state the data controller's details, the purpose, the legal basis, any transfers, the retention period and the rights of the data subject. Up-to-date contact and application channels should also be included.
As a rule, the data controller must respond to requests within 30 days. The request must be made in writing, by registered e-mail or through a system, and identity verification must be ensured; the time limit is calculated accordingly.
Turkish Citizenship Test
Turkish 
English 
Russian