Data Protection Notice

The data controller is Aymez Teknoloji, the operator of the Adliyelik platform.

• Address: Bahçelievler / İstanbul
• Data protection requests: info@aymez.com

• Identity: full name; bar association and registration number for lawyer accounts; optional date of birth and national ID number on client profiles (for invoicing and identity verification).
• Contact: email address, phone number, billing/delivery address.
• Customer transactions: question, answer and article records, purchase and subscription history, refund requests and reviews.
• Finance: payment amount, currency, payment status, commission and payout records. Card details are processed by the payment institution and never stored by us.
• Transaction security: IP address, session and sign-in logs, device/browser information and two-factor authentication records.
• Professional experience: lawyer practice areas and verification documents.
• Legal proceedings: correspondence with competent authorities, requests and complaint records.

• Creating your membership record, verifying your identity and securing your account.
• Providing the question-and-answer service and routing questions to lawyers in the relevant practice area.
• Running payment, invoicing, commission and payout processes for paid services.
• Moderating content and preventing unlawful posts.
• Following up requests and complaints and providing support.
• Measuring service quality, diagnosing faults and improving the platform.
• Marketing and newsletter communication where you have given explicit consent.
• Meeting statutory retention, notification and disclosure obligations.

• Art. 5/2-c — necessary for the conclusion or performance of a contract: membership, the Q&A service, payment and delivery processes.
• Art. 5/2-ç — compliance with our legal obligations: retaining financial records, informing competent authorities.
• Art. 5/2-e — establishment, exercise or protection of a right: retaining evidence in disputes.
• Art. 5/2-f — legitimate interest: preventing fraud and abuse, keeping security logs and improving the service.
• Art. 5/1 — explicit consent: only for newsletter/marketing communication and measurement (page speed metrics and linking usage analytics records to your account). If you do not allow measurement, usage events are recorded anonymously, without your identity.

While describing your legal issue you may voluntarily share special category data such as health, criminal convictions and security measures, religion or trade union membership. Such data is processed solely to answer your question and only to the extent you shared it. We recommend not writing this information unless it is essential.

Your personal data is collected electronically by automated and partly automated means through registration and profile forms, question/answer and message fields, payment steps, support correspondence, the cookies essential to the platform's operation and server logs.

• To answering lawyers: the content of the question and visible profile information (performance of the service).
• To the payment institution: the data required for payment and refund transactions.
• To infrastructure providers: hosting, email/SMS delivery and error monitoring — as data processors and limited to our instructions.
• To competent public authorities: within the scope of lawful requests.

Data is hosted in Türkiye as a rule. If a service provider located abroad has to be used, the transfer is made in accordance with article 9 of the Law (adequacy decision, standard contract or explicit consent) and announced in this notice.

Data is retained for as long as the purpose of processing requires and in any case within the maximum statutory periods; once the period ends it is deleted, destroyed or anonymised under our Personal Data Retention and Destruction Policy. Example periods are listed in the Privacy Policy (financial records 10 years, access logs 2 years, account data no more than 30 days after a deletion request).

Under article 11 of the Law you may apply to the data controller to:

• Learn whether your personal data is processed and, if so, request information about it,
• Learn the purpose of processing and whether the data is used in line with that purpose,
• Know the third parties to whom the data is transferred, in Türkiye or abroad,
• Request the correction of incomplete or inaccurate data,
• Request deletion or destruction under the conditions of article 7 of the Law,
• Request that corrections, deletions and destructions be notified to the third parties concerned,
• Object to a result against you produced solely by automated analysis,
• Claim compensation if you suffer damage due to unlawful processing.

These are your rights under the Law.

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may send your requests together with identifying information to info@aymez.com (from the email address registered in the system) or in writing to Bahçelievler / İstanbul. Applications are concluded within 30 days at the latest; where the process incurs a cost, the fee set in the Board's tariff may be charged. If your application is rejected or not answered in time, you may complain to the Personal Data Protection Board.