PRIVACY POLICY

Privacy Policy

N&H Law Firm is an international legal practice. We are committed to safeguarding the privacy of information provided to us and information about visitors to our website.

This Privacy Policy explains how we may collect and use information that we obtain about you, and your rights in relation to that information. Your use of our online services or your provision of information to us constitutes your acknowledgment of the terms of this Privacy Policy. Please do not send us any of your information if you do not want it to be used in the ways described in this Privacy Policy.

Scope of Privacy Policy

This Privacy Policy applies when we receive any personal information from you, our clients or other third-parties, including in the following circumstances:

• when you request information from us or provide information to us;
• when you or the organisation you work for engages our legal and consultancy services;
• when you or the organisation you work for are a counterparty, or provide services to a counterparty, of one or more of our clients;
• as a result of your relationship with one or more of our clients, including when you or the organisation you work for is a regulator, government agency, court, tribunal or other law enforcement agency;
• when you apply for a role or work placement opportunity, open day or recruitment event with us;
• when you complete application forms or contact forms on our Websites;
• when we conduct open source searches on you in connection with our business acceptance or business development processes;
• when you visit our Websites and online services (including our mobile apps);
• when you are entered onto our mailing lists to receive publications and other marketing emails.

Information/Data Collecting

N&H Law Firm collects personal information and data directly from the data subjects. The data subjects referred in the Privacy Policy are the job applicants, clients and contacts.

We may also collect personal information from third parties such as regulatory authorities, your employer, other organisations with whom you have dealings, government agencies, credit reporting agencies, recruitment agencies, information or service providers, publicly available records and the third parties.

We may collect current and historical personal information including your name (including name prefix or title), contact details (such as your postal address, email address and phone number(s)), nationality, identification, gender, organisation, business interests, employment, positions held, special categories of data (such as race and ethnicity, trade/bar union membership), billing and financial information (such as billing address, bank account and payment information) and enquiry/complaint details. We may also collect personal information about your other dealings with us and our clients, including any contact we have with you in person, by telephone, email or online.

Online Services

When you use our online services (such as filling a contact or information form), we may collect the following:

• information you provide by completing subscription, registration and application forms (including when you  submit  material or request further services);
• information you provide to us if you contact us, for example to report a problem with our online services or raise a query or comment; and
• details of visits made to our online services such as the volume of traffic received, logs (including, the internet protocol (IP) address and location of the device connecting to the online services and other identifiers about the device and the nature of the visit) and the resources accessed.

Careers and Recruitment

We collect, process and store personal data which may directly or indirectly identify a job applicant (together “personal information”) as part of our candidate application and recruitment activities. We process personal information for a range of purposes relating to general recruitment activities as well as the recruitment process and this may include the job applicant’s application, assessment and job applicant’s worker permissions.

The applications will be evaluated only if the job applicant sends them to us at [email protected]. Otherwise the application will not be taken into consideration.

We may process the job applicant’s personal information for the purposes of application, assessment, candidate searches and general recruitment activities. We use personal information that we collected concerning candidates to identify job opportunities we think may be of interest to the job applicant. We may contact potential candidates from time to time regarding such opportunities.

Clients

N&H Law Firm treats client information as strictly confidential and all information collected from the clients will be subject to attorney-client privilege. Such information will only be collected and processed within the scope of our legal services provided to the clients in line with our engagement to them. These processing of this data will be based on the legal purposes of compliance with legal obligations, performance of contract, establishment, exercise or protection of a legal right and legitimate interest of the data controller. These data will not be shared with third parties unless for specific instructions received by the client or unless it is required for the purposes of fulfilling a legal obligation.

Use of Your Information/Data

We use your personal data for the following purposes:

• Service provision: providing legal advice and services;
• Business relationship: managing and administering our relationship with you, your company or organisation including keeping records about business contacts, services and payments so we can customise our offering for you, develop our relationship and target our marketing and promotional campaigns;
• Communication: sending emails, newsletters and other messages to keep you informed of legal developments, market insights, of our services and events;
• Client surveys and feedback: including events feedback and client listening exercises as well as answering issues and concerns which may arise;
• Client legal compliance: client due diligence (under anti-money laundering, sanctions screening and other crime prevention and detection laws and regulatory requirements) which may involve automated screening checks to ensure that clients and contacts are genuine and to prevent fraud or crime and we may not be able take instructions if you do not provide the information we need to do these checks;
• Website monitoring: to check the website and our other technology services are being used appropriately and to optimise their functionality;
• Site security: to provide security to our offices and other premises (normally collecting your name and contact details on entry to our buildings);
• Online security: protecting our information assets and technology platforms from unauthorised access or usage and to monitor for malware and other security threats;
• Regulatory: compliance with our legal and regulatory obligations as a law firm including auditing and reporting requirements ;
• Managing suppliers: who deliver services to us;

Legal Basis for Processing Personal Information/Data

Under the Turkish Personal Data Protection Law (KVKK) the General Data Protection Regulation (GDPR), the processing activities described in this text are based on contract (Art. 5 of KVKK and Art. 6(1)(b) GDPR – for information you provide in the process of having attorney-client relationship or applying for a position online); consent (Art. 3 of KVKK and Art. 6(1)(a) GDPR – to the extent you sign up for one of our email newsletters, and if you agree to cookies through our banner); and legitimate interest (Art. 5 of KVKK and Art. 6(1)f) GDPR), specifically our interest in promoting our services and customizing our website.

Transfer of Information/Data and Disclosure to Third Parties

We use various third parties to operate the website, including, for example, our providers of professional, consulting, marketing, communications and business development services. We may disclose personally identifiable information to such entities as needed for them to perform their specific tasks under our instructions, subject to this policy.

In addition, we may disclose information that you expressly authorise; as required by law or when we believe that such disclosure is necessary in connection with a judicial proceeding or to comply with a court order, law or regulation applicable to us or the site; or as we determine to be necessary to protect our property or assert our legal rights or to protect the property or safety of any other person.  However, for the processing of your data N&H Law Firm will at all times ensure data protection under KVKK and GDPR.

Please contact us if you have additional questions via [email protected].

Security

We take reasonable steps to hold data/information securely in electronic or physical form and to prevent unauthorised access, modification or disclosure.

All partners and staff and third party providers with access to confidential information are subject to confidentiality obligations.

The transmission of information via the internet is not completely secure. We cannot guarantee the security of your data transmitted to our online services; any transmission is at your own risk.

Changes to Our Privacy Policy

If we change anything important about this Privacy Policy, we will notify you through our website for a reasonable length of time prior to and following the change. You may review the Privacy Policy by visiting the website and clicking on the “Privacy Policy" link.

Your Rights

You have the right to learn whether or not personal data is being processed; to request information if personal data related to the data subject have been processed; to obtain information as to purpose of processing and whether or not such data have been processed accordingly; to know the third parties within or outside the country to whom personal data are transferred; to ask for the rectification of any incomplete or inaccurate personal data process; to ask for the erasure or destruction of the personal data within the framework of the law; to request the notification to third parties to whom the personal data have been transferred of operations carried out within the meaning of correction, erasure or destruction of the personal data; to object to any conclusion to the detriment of the data subject which results from analysis of the processed data exclusively by means of automated systems and to request compensation for the damages incurred as a result of an unlawful personal data processing.

In the limited circumstances where you have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.

Please advise us in writing of any changes to your information via [email protected].

Contact

If you have any questions about this Privacy Policy, or want to submit a written complaint to us about how we handle your personal information, please contact us via [email protected].