Information Security and Privacy
Your matter,
for authorised eyes only.
Client information is the most sensitive trust of the legal profession. Below we describe, without exaggeration, the measures our firm and the legal operations platform we use actually apply.
01
Authorised access
Only people invited by our firm can enter the client portal. The invitation link is single-use; the client sets the password, the firm neither sees nor stores it.
02
User-based access control
Every user in the firm has a defined role and permission set (role-based access). A matter is visible only to those assigned and authorised; a client sees only their own matters.
03
Activity logs
Changes to matters, documents and settings are recorded with who-and-when information (audit log). These records are reviewed only by managing attorneys.
04
Secure document sharing
Documents are downloaded through an authorised session, not a public link. The attorney decides which documents are shared with the client; unshared documents do not appear in the portal.
05
Encrypted connection and two-step verification
The site and the portal run over HTTPS. Two-step verification (2FA) by e-mail can be enabled optionally for firm users.
06
Protection of personal data (KVKK)
Your personal data is processed under Turkish Law No. 6698 only to the extent and for the period required by the legal service. The web form does not ask for national ID numbers or health data.
07
Attorney-client confidentiality
Under the Attorneys Act and professional rules, client information is not shared with third parties. Experience examples on this site use no names or case details.
08
Incident reporting and contact channel
If you notice anything suspicious about your account or wish to report a security incident, reach our office through the channels below; we will investigate and inform you.
KVKK
Privacy Notice (summary)
- Data controller: HASBAL & GÜMÜŞTEN Law & Consultancy. Contact details are below.
- Data processed: name, phone, e-mail, subject of request and documents you attach via the web form or meetings; if you become a client, data required by the representation.
- Purpose and legal basis: evaluating your request, conflict-of-interest check, providing the legal service and fulfilling legal obligations (KVKK art. 5/2-c, ç, e, f).
- Transfers: only to competent authorities where legally required; the legal operations platform (KGLEX) hosts data on behalf of our firm as a data processor.
- Retention: if a request does not turn into a client relationship it is deleted after a reasonable period; client files are kept for the statutory retention periods.
- Your rights: under KVKK art. 11 you may request information, correction, deletion or object through the contact channels below.
Security and privacy requests
0216 766 56 52info@hgavukatlik.com
Yeşilbağlar Mah. D 100 Bulvarı No: 20 Ofis No:36 Pera Residence Pendik İSTANBUL