Personal Data Protection Notice
Data Controller
Under Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by the Diyarbakır Bar Association (“the Bar”) as data controller, within the scope described below.
Personal Data Processed
Depending on the service used on our website and mobile app, the following categories of personal data may be processed:
- Identity data (name, surname, Turkish ID number)
- Contact data (e-mail address, phone number)
- Form content (contact messages, survey responses)
- Transaction security data (IP address, access logs)
Purposes of Processing
Your personal data is processed solely for the following purposes:
- Providing document verification and bar registry search services
- Receiving and responding to contact requests
- Conducting the CMK survey and similar professional assessments
- Operating the newsletter subscription
- Fulfilling obligations arising from legislation
- Ensuring the security of the website and mobile app
Legal Grounds
Your personal data is processed on the legal grounds set out in Article 5 of the KVKK: express provision in law (Attorneyship Law No. 1136 and related legislation), necessity for the data controller to fulfil its legal obligations, and the controller's legitimate interest provided it does not harm your fundamental rights and freedoms; in other cases, on the basis of your explicit consent.
Transfer of Personal Data
Your personal data may be transferred, to the extent required by our legal obligations, to authorised public institutions and judicial authorities, and to the hosting and e-mail infrastructure providers used to operate our website and mobile app, within the limits of legislation.
Retention Period
Your personal data is retained for the period required by the purpose of processing and for the retention and limitation periods prescribed by legislation; at the end of these periods it is deleted, destroyed or anonymised.
Your Rights under Article 11
Under Article 11 of the KVKK you have the right to:
- Learn whether your personal data is processed
- Request information if it has been processed
- Learn the purpose of processing and whether the data is used accordingly
- Know the third parties to whom it is transferred, in Turkey or abroad
- Request correction of incomplete or inaccurate data
- Request erasure or destruction within the framework of Article 7
- Request that corrections and erasures be notified to third-party recipients
- Object to a result arising against you from analysis made exclusively by automated systems
- Claim compensation for damage caused by unlawful processing
Applications
You may submit requests regarding your rights in writing to our address above or by e-mail, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications are concluded free of charge within thirty days at the latest.



