Güneş & Güneş Law Firm · Privacy and Information Security
Privacy and
Information Security
Protecting your information and your privacy is our fundamental professional responsibility.
- Attorneyship Law, Art. 36
- Law No. 6698 (KVKK)
- Criminal Procedure Code, Art. 130
- Responsible Attorney Oversight
- Confidentiality in 4 Languages
At our firm, founded in Kemer on March 18, 1999 and based in Antalya since 2007, we protect client information from the first inquiry until the end of the representation, guided by attorney professional secrecy, the security of personal data and access limited to the task at hand.
At the first inquiry, throughout the matter and after the representation ends.
What this means for you
How is your information protected?
When seeking legal help, it is important to know what you will share, with whom and by what method. We set out the framework for the most basic questions clearly before moving on to the detailed explanations.
Will anyone find out that I contacted you?
The existence of an inquiry, an appointment and a search for legal help are also treated as confidential, depending on their nature.
Who can see my file?
Persons with the relevant role and authority can access it only to the extent the legal matter requires.
Can my family or the person paying the fees get information?
Being a relative or making a payment does not by itself confer authority to receive information; identity and authority are verified separately.
Through which channel will you contact me?
Your preference for secure communication is determined together with the nature of the file and the official procedures.
Our confidentiality principles
Trust begins at the first meeting
The information you share about your private life, family relationships, health, assets and business activities may be the most sensitive aspect of a legal matter. We shape our approach within the framework of the Attorneyship Law (Avukatlık Kanunu), the Professional Rules of the Union of Turkish Bar Associations, KVKK and related legislation.
Even if you are not yet our client
We do not limit our duty of confidentiality to accepted matters. Information learned during a meeting request, a preliminary inquiry, a conflict-of-interest check and the initial legal assessment is also protected according to its nature.
Declining an inquiry, not establishing a representation relationship or the end of representation does not remove the confidentiality of information that must be protected.
Necessary information first, then the relevant documents
At first contact, you can share a brief summary of the matter, the parties concerned and the date of any upcoming step. Before a matter is accepted, conflicts of interest are assessed; the identity details and documents needed for review and a suitable sharing method are determined.
If the engagement is not accepted, the inquiry information is not used for any other purpose.
The existence of your inquiry is also confidential
Confidentiality is not limited to the content of documents. Your request for a meeting with our firm, your appointment, your search for legal help and the existence of the work being carried out are also treated as confidential, depending on their nature.
This information is not shared with third parties, except where legally required and in authorized disclosures.
Your information is not turned into an advantage in another matter
Confidential information we learn at a preliminary meeting or while handling your matter is not used to support another person’s legal interests or to gain an advantage against you.
When accepting new matters, conflicts of interest that may arise from earlier inquiries and current files are also assessed separately.
Confidentiality in mediation, victim–offender mediation (uzlaştırma) and settlement negotiations
In mediation, criminal-law victim–offender mediation and settlement negotiations aimed at an amicable resolution of the dispute, we safeguard our clients’ interests, the confidentiality of the discussions and the evidentiary protections arising from the law.
Statements, offers and records made or prepared solely because of the process are assessed separately from the legal status of documents that already existed.
Limits on access and sharing
Access to your file is limited by role and authority
Who may receive information, which documents will be shared and which channel will be used are decided by weighing the requirements of the legal matter, professional secrecy, personal data protection and the client’s express instructions together.
Access as needed
Attorneys, trainee attorneys and support staff access only the information and documents needed for their tasks. When roles change or someone leaves, access rights are reviewed without delay.
Closeness is not authority
Being a spouse, family member, company employee, intermediary or the person paying the fees does not by itself confer authority to receive information about the file. Identity and authority are verified before any information is given.
Designated contacts
The authority of a person contacting us on behalf of a company to represent it or to receive information is assessed together with the subject and scope of the request. It is important that changes to authorized contacts are notified to us.
Colleagues, sworn translators and expert consultants
Where the nature of the work calls for support, only the information needed for the task is shared, within the defined scope and under a duty of confidentiality. Using outside support does not remove our firm’s responsibility.
Disclosures to judicial authorities and official institutions
Any transfer of information to courts, competent institutions or other counterparts is assessed in terms of the legal basis of the step, its procedural necessity, its strategic scope and the safeguards relating to professional secrecy.
Attorney professional secrecy, the right to refuse to testify and special safeguards for law offices
Under Article 36 of the Attorneyship Law (Avukatlık Kanunu), an attorney may not disclose matters entrusted to them or learned by reason of their professional duty. Testimony on these matters depends on the consent of the person concerned; even where consent has been given, the attorney’s right to refuse to testify is reserved.
Article 130 of the Criminal Procedure Code (Ceza Muhakemesi Kanunu, CMK) subjects searches and seizures at law offices to special procedural safeguards, such as a court order, supervision by the public prosecutor and the presence of a bar association representative. The objection and judicial review mechanisms provided by law for documents and records belonging to the attorney–client relationship are assessed separately.
A request from an official authority does not mean that the entire contents of the file will automatically be disclosed. The basis and scope of the request and the applicable professional safeguards are reviewed by the responsible attorney.
Document security
From sending to storage, careful document management
The right channel, complete documents, evidentiary integrity and delivery checks are complementary steps in secure communication. Existing clients should use the sharing method communicated by the team responsible for their file.
Verify the channel
Compare the recipient’s address and number with our official channels. Confirm any suspicious request by calling the known office line you have verified before.
Prepare the document
Send the relevant pages and attachments in complete and legible form. Include the date of service and, if available, the service envelope; do not alter original documents or original digital records.
Check delivery
Keep the sending and delivery records. A message being delivered or read does not mean legal review or acceptance of the matter; confirm the status of the step separately.
For document types, sending channels and preparation steps use the detailed sharing guide.
Secure Document SharingPhysical files and original documents
Printed files, powers of attorney, contracts and other records are kept in a working arrangement that prevents unauthorized access. When original documents are handed over or returned, the type of document and the persons delivering and receiving it are identified.
Digital documents and evidentiary integrity
The source of emails, messages, photos, audio, video and other digital records, their creation and sending details and their link to the file are preserved as far as possible. Altering records or taking them out of context may affect their evidentiary value.
Retention, deletion and destruction
Files are retained for as long as necessary, taking into account professional obligations, statutory retention periods, limitation periods, accounting and tax rules and the preservation of legal claims. When the reasons no longer apply, action is taken in accordance with the legislation.
Confidentiality is also maintained when a file is transferred
If a file is transferred to another attorney, the information and documents to be handed over and the recipient’s authority are determined. Original documents, copies from the file and the necessary records are handed over with regard to professional and statutory obligations.
Get separate confirmation for time-sensitive steps
State the date of any service, objection, hearing or other step in your first contact. Until acceptance of the matter and the scope of follow-up are clear, do not rely solely on sending a form or email; in urgent matters, contact us directly.
Protection of personal data
A clear purpose, proportionate data processing
Knowing which data is processed and why, and being able to exercise your rights, is part of our approach to confidentiality. This page explains our general institutional approach; it does not replace the privacy notices specific to each processing activity.
Purpose, legal basis and duration
Personal data is processed lawfully and fairly, accurately and, where necessary, kept up to date; for specified, explicit and legitimate purposes; and in a manner that is relevant, limited and proportionate to those purposes. It is retained only for the period provided for in the legislation or required by the purpose.
A privacy notice is not explicit consent
Reading or receiving a privacy notice does not mean that explicit consent has been given. Where consent is required for a processing activity, a separate declaration is obtained that relates to a specific matter, is based on information and is given freely.
Special-category personal data
For health, biometric and genetic data, information on criminal convictions and security measures, and other special-category data listed in the law, the conditions for processing and additional security measures are assessed separately.
The privacy of children and third parties
Records relating to children, witnesses, family members, employees and other persons whose information appears in the file are also handled with care. Information needed for the legal step is separated from unnecessary disclosures of private life.
Transfer of data abroad
In dealings with clients, colleagues, translators, institutions or digital service providers abroad, the purpose, legal basis, scope of data, recipient and necessary safeguards of a transfer are determined in accordance with the legislation in force.
Digital tools and human oversight
Technology changes, professional responsibility remains
When we use digital conveniences, we are guided by the confidentiality of the file, data security, the accuracy of sources and the oversight of the responsible attorney. Technical tools do not replace legal judgment or professional responsibility.
Accounts, devices and remote work
We rely on technical and administrative measures such as strong and unique passwords, two-step verification, up-to-date software, access control, secure backups and device locks. The risks of shared devices and public networks are also taken into account.
Meeting recordings and automatic meeting summaries
Joining an online meeting does not in itself mean that permission has been given for audio or video recording or for the automatic transcription of the conversation. The purpose, legal basis, service provider and storage conditions are assessed in advance.
Accuracy of sources and data privacy
Artificial intelligence can support research, classification, language checks and work processes. Information containing professional secrets or personal data is not transferred to open third-party systems without a legal basis and appropriate security measures.
Service providers and digital infrastructure
For hosting, email, video calls, document transfer and backup services, we assess the security conditions, data processing terms, access, retention and, where necessary, the provisions on transfers abroad.
Website and cookie preferences
Strictly necessary technologies and uses that depend on your preferences or explicit consent are assessed separately. For non-essential uses, the necessary information and a preference mechanism are provided.
“The final legal assessment belongs to the attorney.”
Automated output is not treated as an independent and definitive legal source. Sources are verified; output that has not been reviewed by an attorney is not presented as a legal opinion or final legal text. The possibilities that data may be stored by third-party systems, made accessible, used for other purposes or transferred abroad are also assessed separately.
Your rights and how to apply
Get information, and tell us your preference and your request
You can exercise your rights regarding the processing of your personal data by the methods provided for in the legislation. The scope of an application and identity verification are determined proportionately according to the nature of the request.
Learning whether data is processed
You can learn whether your personal data is processed, the purpose of processing and whether it is used in accordance with that purpose.
Requesting correction
You can request the correction of incomplete or inaccurately processed personal data and, where necessary, that recipients be notified.
Requesting deletion or destruction
If the conditions provided for in the law are met, you can request the deletion or destruction of your personal data.
Objecting to the result of automated analysis
You can object to an outcome against you that results solely from analysis by automated systems.
Requesting compensation for damage
If you suffer damage because your personal data was processed unlawfully, you can claim compensation for the damage.
How to apply and response time
You may use a written application, registered electronic mail (KEP), a secure electronic signature, a mobile signature or other methods accepted by the legislation. Your identity, contact details and request must be stated. Applications are answered as soon as possible according to their nature and within thirty days at the latest.
Complaint to the Personal Data Protection Board
A data subject whose application has been rejected, who finds the response inadequate or who has not received a response in time may, provided that they have fulfilled the requirement of applying to the data controller, file a complaint with the Board within thirty days of learning of the response and in any case within sixty days of the application date.
Direct contact
You can contact us with your questions
When applying by KEP, use your own KEP account. A KEP address does not mean the same method as sending a standard email. In a time-sensitive or urgent matter, do not rely solely on an electronic delivery indicator.
Antalya Office contact details
- Main contact and WhatsApp
- +90 531 883 33 88
- Office line
- +90 850 532 64 85
- Corporate email
- info@gunesgunes.com
- KEP address
- umut.gunes@hs01.kep.tr
Address
Bahçelievler Mahallesi, Konyaaltı Caddesi, Yalı Apartmanı No:66/8 Kat:4Muratpaşa / Antalya / Türkiye, 07050
Monday–Friday, 09:00–18:00 · Türkiye time
Get Directions (opens in a new tab)Confidentiality and security notice
Misdirected message or suspicious access?
Briefly tell us what happened, when it happened, the channel used and how we can reach you. Do not open suspicious attachments; ask for guidance before resending sensitive documents to other addresses. In cases of unauthorized access, sending to the wrong recipient, account takeover, a lost device or similar incidents, the information and persons affected, the likely consequences and the necessary responses are assessed.
Personal data breaches that require notification to the Board are notified to the Board without delay and within 72 hours at the latest from the moment the breach becomes known. The persons affected are also notified by an appropriate method within the shortest reasonable time after they have been identified.
Frequently asked questions
What you may wonder about confidentiality
Short answers to the most common questions, from the first inquiry to the closing of the file. The specifics of the individual case and the applicable legal rules are assessed separately.
Is my information protected if I am not yet your client?
Yes. Information learned during a preliminary inquiry, an initial meeting, a conflict-of-interest check and the initial legal assessment is treated within the duty of professional secrecy according to its nature. Not accepting the matter does not remove this protection.
Can my spouse, a relative or the person paying the fees get information about my file?
Being a relative or making a payment does not by itself confer authority to receive information. Identity, representation and the authority to receive information are verified; cases of statutory representation are assessed separately.
Should I send my identity and health documents in my first message?
Start your first contact with a brief summary of the matter, the parties concerned and any upcoming deadline. Agree with our firm on the necessary documents and a sharing method suited to sensitive content.
Does joining an online meeting mean that I have given permission for recording?
No. If a recording or an automatic transcript is planned, its purpose, legal basis, service provider, and access and storage conditions are assessed; the necessary information and, where applicable, the explicit consent process are handled separately.
Are all my documents deleted immediately when my file is closed?
No. Statutory and professional retention obligations and the preservation of legal claims are assessed separately. When the reasons for retention no longer apply, the appropriate deletion, destruction or anonymization is carried out in accordance with the legislation.
What should I do if I send a document to the wrong address?
Tell our firm without delay when it was sent, through which channel and what information it contained. Keep the records; ask for guidance before resending the same sensitive documents to other addresses.
Does a WhatsApp or email delivery receipt show that my matter has been accepted?
No. A message being delivered or read does not show that the legal review has been completed or that a time-sensitive step has been taken on. Clarify the acceptance of the matter and the scope of follow-up separately.
Is the fact that I contacted you also confidential?
Your meeting request, your appointment and your search for legal help are also treated as confidential according to their nature. Cases where disclosure is legally required and authorized disclosures are considered separately.
Can I transfer my file to another attorney?
You can submit a request to transfer your file to another attorney. The information and documents to be handed over and the recipient’s authority are determined; the transfer is carried out within the framework of professional and statutory obligations. The duty of confidentiality continues.
Legal assessment
Let us assess your legal matter with confidence
In your meeting request, you can briefly share the general framework of your legal matter, important dates and your preferred language of communication. Send sensitive documents such as identity, passport and extensive case files by the secure method determined after the preliminary assessment and the conflict-of-interest check.
An initial meeting request or the sending of documents does not by itself mean that the matter has been taken on or that an attorney–client relationship has been established; acceptance of the matter and the scope of representation are clarified separately by mutual agreement. Electronic submissions do not by themselves suspend or extend statutory time limits.