Personal Data Notice
Data controller and scope
SET Hukuk Bürosu, the data controller for access to this site and the contact channels listed here, provides this notice under Türkiye’s Personal Data Protection Law No. 6698 (KVKK).
Address Petroliş Mahallesi, Beyazvilla Sokak No: 24/1, Kartal, İstanbul
Email info@set.av.tr
Data and how it is collected
When you access the site, ChatGPT Sites may process IP addresses, browser and device details, and session and security logs electronically. When you sign in with ChatGPT, OpenAI uses account information to check access. If you approve sign-in, the platform may pass your name, email address and available profile photo to the site. The firm’s page code does not separately record that information.
When you email the firm, we receive sender details, the subject, your message and any attachments by email. The draft is prepared in your browser and handed to your email application. The firm receives it when you send it from that application.
Purposes and legal grounds
- Site access and security. The legal ground for verifying access, managing sessions and preventing unauthorised access is the controller’s legitimate interest, subject to your fundamental rights and freedoms (KVKK Art. 5(2)(f)).
- Enquiries. Receiving and answering general enquiries relies on the firm’s legitimate interest in operating its contact channels (Art. 5(2)(f)). Correspondence directly necessary for forming or performing a services contract is assessed under Art. 5(2)(c) for data about the parties to that contract.
- Legal obligations and rights. Records necessary to comply with a legal obligation are processed under Art. 5(2)(ç). Records needed to establish, exercise or protect a right are processed under Art. 5(2)(e).
Recipients and international transfers
The site uses ChatGPT Sites (OpenAI) for access, hosting and security. Correspondence is handled by authorised members of the firm and by email infrastructure providers as necessary to deliver or store the message. Relevant data is provided to competent public or judicial authorities where required by law or a valid request.
Personal data may be processed outside Türkiye depending on the configuration of ChatGPT Sites. Data flows that involve hosting abroad or authorised access from outside Türkiye are subject to the transfer conditions in Article 9 of the KVKK.
Retention
The firm retains email correspondence for as long as necessary to consider, respond to and follow up on the enquiry. Applicable retention periods apply where there is a legal obligation or an ongoing dispute. OpenAI’s privacy policy explains its handling of ChatGPT account and platform records.
Your rights under the KVKK
Under Article 11 of the KVKK, you may ask whether your personal data is processed and request information about that processing, its purposes, whether the data is used for those purposes, and the third parties who receive it in Türkiye or abroad. You may request correction of incomplete or inaccurate data, deletion or destruction when the statutory conditions are met, and notification of those actions to third-party recipients. You may object to an adverse outcome based solely on automated analysis and seek compensation for harm caused by unlawful processing.
How to exercise your rights
You can deliver or post a signed written request to Petroliş Mahallesi, Beyazvilla Sokak No: 24/1, Kartal, İstanbul. You can also email info@set.av.tr from an email address you previously provided to the firm and that is registered in its records.
Include your full name, a signature for written requests, your Turkish identity number or, for foreign nationals, your nationality and passport or available identity number, an address for service, and the details of your request. Include your email address, telephone and fax number for notifications, where available. We respond as soon as practicable and within 30 days. Requests are generally free. If handling a request involves an additional cost, the Board’s published tariff may apply.