LEGAL
Personal Data Protection Notice
Köprü — İş Destek ve Ticaret Anonim Şirketi ("KÖPRÜ A.Ş." or the "Company") acts as the data controller under Personal Data Protection Law No. 6698 ("KVKK").
This notice has been prepared to explain how your personal data is processed when you visit our website (www.kopruas.com), fill in our contact forms, request an advisory appointment, or benefit from our services.
1. Identity of the Data Controller
| Title | Köprü — İş Destek ve Ticaret Anonim Şirketi |
|---|---|
| Address | Altınboynuz Plaza, Karaağaç Caddesi, Sütlüce, Beyoğlu / İstanbul |
| info@kopruas.com | |
| Web | www.kopruas.com |
| Phone | +90 533 015 4030 |
2. Personal Data Processed
Through our service process and digital channels, personal data is processed in the following categories:
Identity Data: First name, surname, date of birth, nationality, passport/ID information.
Contact Data: Email address, telephone number, correspondence address.
Financial Data: Investment budget range, preferred investment type, declarations regarding asset structure (only during the advisory process and as shared by the data subject).
Digital Trace Data: IP address, browser type, on-site navigation data, cookie data (see Cookie Policy).
Communication Content: Message content conveyed via forms, email or WhatsApp, meeting notes.
3. Purposes of Processing Personal Data
- Provision of advisory, company formation support and investor framework services
- Management of request, proposal and appointment processes
- Measurement and improvement of service quality
- Fulfillment of legal obligations (tax, trade registry, etc.)
- Carrying out security and verification processes
- Based on your explicit consent: sending commercial electronic messages (newsletter, announcement, event invitation)
- Based on your explicit consent: profiling and provision of personalized service
4. Legal Grounds for Processing (KVKK Article 5)
| Purpose | Legal Ground |
|---|---|
| Performance of the service contract | Establishment or performance of a contract (Art. 5/2-c) |
| Legal obligations | Legal obligation (Art. 5/2-ç) |
| Security, verification | Legitimate interest (Art. 5/2-f) |
| Commercial electronic messages | Explicit consent (Art. 5/1) |
| Profiling, segmentation | Explicit consent (Art. 5/1) |
5. Transfer of Personal Data
Your personal data may be shared only for the above purposes and within the scope of Articles 8 and 9 of the KVKK with the following parties:
- Service providers: Suppliers from whom we receive technical services such as hosting, CRM and email infrastructure (under a confidentiality agreement)
- Business partners: Lawyers, accountants and financial advisors to whom referrals are made only with the client's consent
- Authorized public institutions and bodies: Where legally required (court, prosecutor's office, tax office, trade registry, etc.)
- Cross-border transfer: Carried out, where requested by the competent authorities in the country in which you receive services or where the international advisory process so requires, based on your explicit consent or a Board decision within the scope of KVKK Art. 9.
Your personal data is not sold, rented or transferred for commercial purposes to third parties.
6. Retention Period of Personal Data
Your personal data is deleted, destroyed or anonymized once the purpose of processing ceases to exist or the statutory retention period expires.
| Data Category | Maximum Retention Period |
|---|---|
| Contract and advisory documents | 10 years (Turkish Commercial Code Art. 82) |
| Financial records | 5 years (Tax Procedure Law Art. 253) |
| Contact and form data | 3 years |
| Cookie data | Varies by cookie type (see Cookie Policy) |
| Commercial electronic message consent | 1 year from the date of cancellation |
7. Rights of the Data Subject (KVKK Article 11)
Under the KVKK, you have the following rights:
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether it is used in accordance with its purpose
- To know the third parties to whom the data is transferred, domestically or abroad
- To request rectification if processed incompletely or incorrectly
- To request erasure or destruction within the scope of KVKK Art. 7
- To request that the above rectification and erasure operations be notified to the third parties to whom the data was transferred
- To object to a result that arises against you as a result of analysis solely by automated systems
- To request compensation for damage you suffer due to unlawful processing
Application Method: To exercise your rights, you may apply to the data controller in writing or by email.
- Email: info@kopruas.com (subject line: "KVKK Application")
- Post: Altınboynuz Plaza, Karaağaç Caddesi, Sütlüce, Beyoğlu / İstanbul
Your application will be concluded within 30 days at the latest.
8. Amendments
This notice may be revised in line with legislative changes or updates to processing activities. You can access the current version at www.kopruas.com/kvkk.
Last updated: June 2026 · KÖPRÜ A.Ş.
Ready to Secure Your Future in Turkey?
Connect with our senior partners to discuss your investment opportunities in the Turkish market.
Book Consultation