Personal Data Protection Law

As Nova Law and Consultancy Office, we offer comprehensive and meticulous consultancy services to our clients in the field of Personal Data Protection Law (KVKK). We are pleased to have a strong portfolio in this area.

The KVKK compliance process not only fulfills legal obligations but also enhances the reliability of companies and prevents significant costs that may arise from data breaches. Regular and professional consultancy services in this area prevent potential disputes and legal issues before they arise, eliminating unwanted outcomes. In this context, our services in the field of KVKK are considered an investment that prevents future costs and ensures the uninterrupted continuation of commercial activities.

Under the leadership of our expert in compliance processes and personal data law consultancy, Av. Ezgi Günay, who has experience in this area since the first legislative studies in our country, we provide our clients with the highest quality legal support.

Main services we offer in the field of Personal Data Law:

KVKK Compliance Process Consultancy Service:

Information Meetings:

Organizing information meetings about KVKK and other relevant legislation, process steps, and all elements of the compliance process.

Data Inventory and Sharing Map:

Identifying personal data sources (personnel, customer, supplier, etc.).

Supporting the creation of your company's data inventory by assisting internal teams.

Assisting in creating a data sharing map within and outside the company.

Making distinctions between personal data and special categories of personal data according to the data inventory.

Evaluating data collection and processing purposes within the scope of KVKK.

Evaluation of Data Processing and Storage Methods:

Aligning data processing and storage methods with KVKK for personal and special categories of personal data.

Determining data retention periods through regulatory research.

Preparation of Disclosure and Consent Texts:

Creating disclosure texts specific to different groups.

Preparing necessary consent texts to be obtained from individuals whose personal data is collected.

Creating necessary approval texts for data transferred abroad.

Creating Policies and Procedures:

Preparing data retention and destruction policies and other policies and procedures required by legislation.

Preparing KVKK compliance clauses to be added to contracts used in company activities and where the company transfers or collects data.

Written Consultancy and Process Control Service Related to Compliance Process:

Document Creation and Control:

Contributing to the creation of necessary documents (inventory, disclosure texts, explicit consent texts, policies, etc.) by the company.

Checking documents created by the company.

Administrative and Technical Measures:

Providing legal advice on administrative and technical measures to be taken by the company.

Supporting the registration process with the VERBİS system.

Ensuring the advancement of the compliance process regarding potential changes under the law.