Alp&CO.

cONTACT

PRIVACY POLICY

1. Data CONTROLLER

Alp&CO. (hereinafter referred to as the “Company”, “We”, and through similar words such as “us”, “our”, etc.), is a boutique legal and regulatory advisory firm operating in Türkiye and the United Kingdom. We provide a website at https://alpcolegal.com (the “Website”) through which visitors may contact us using our contact form (the “Service”).

This Privacy Policy (“Policy”) applies only to personal data collected through the contact form on our website. This Policy does not apply to third-party sites or services, even if they link to our Website.

2. personal data we collect

We collect personal data only when you voluntarily submit the contact form on our website. The data we collect is limited to:

  • Name and surname
  • E-mail address
  • The content of your message or enquiry

We do not collect any other personal data through this website (including, for example, cookies, analytics data, or tracking technologies).

3. purposes and legal bases for processıng

We process your contact form data solely to respond to your enquiry and to retain a record of our correspondence. Our legal basis is the necessity to take pre-contractual steps at your request where your enquiry relates to our services, and our legitimate interests in managing professional communications where it does not. We do not use your data for marketing, profiling, or automated decision-making.

4. Dısclosure to thırd partıes

We do not sell, rent, or share your personal data with third parties for commercial purposes. We may disclose your data only in the following limited circumstances:

Legal obligation: We may disclose data where required by applicable law, a court order, or a competent regulatory or supervisory authority.

5. retentıon

We retain your contact form data for as long as necessary to handle your enquiry and any resulting professional relationship. Unless a legal obligation requires longer retention (for example, bar association record-keeping rules applicable to legal correspondence), we will delete or anonymise this data after a period of three (3) years from the date of last contact.

6. securıty

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Access to your data is restricted to personnel who need it to handle your enquiry. No method of transmission over the internet is fully secure; however, we strive to use appropriate safeguards.

7. persons under 18

Our website and services are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have received data from a minor, please contact us so that we may delete it.

8. Your rıghts

Rights under GDPR and UK GDPR

If you are located in the EU or the UK, you have the following rights in respect of your personal data:

  • Right of access – to obtain a copy of your personal data that we hold.
  • Right to rectification – to correct inaccurate or incomplete data.
  • Right to erasure – to request deletion of your data, where applicable.
  • Right to restriction of processing – to limit how we use your data in certain circumstances.
  • Right to data portability – to receive your data in a structured, machine-readable format.
  • Right to object – to object to processing based on legitimate interests.
  • Right to lodge a complaint – with the relevant supervisory authority.

If you are in the UK, you may lodge a complaint with the Information Commissioner’s Office (ICO): http://www.ico.org.uk. If you are in the EU, you may contact your national supervisory authority.

Rights under KVKK

If you are a data subject under Turkish law, you have the right to:

  • Learn whether your personal data is being processed;
  • Request information about how it is being processed;
  • Learn the purpose of processing and whether it is being used in accordance with that purpose;
  • Know the third parties to whom your data has been transferred, domestically or abroad;
  • Request rectification of incomplete or inaccurate data;
  • Request erasure or destruction of your data in accordance with the conditions set out in Article 7 of KVKK;
  • Request that third parties to whom your data has been disclosed be notified of any rectification, erasure, or destruction;
  • Object to automated processing that results in a decision against your interests;
  • Claim compensation if you suffer damage as a result of unlawful processing.

To exercise your KVKK rights, you may submit a written application to us at info@alpcolegal.com. We will respond within thirty (30) days of receipt, free of charge.

9. updates to thıs polıcy

We may update this Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available at alpcolegal.com. Material changes will be notified on our website.