1. Introduction and scope
This page does two jobs at once. Sections 2-7 are the privacy notice (aydınlatma metni) required by Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”); sections 8-12 cover the rest of our privacy policy (cookies and analytics, security, links, changes, contact).
It applies to visitors of https://celikelcpa.com and to people who contact us through the contact form, e-mail, phone or WhatsApp. When a service relationship starts, the additional data needed to carry out the work (for example identity and tax details, financial documents) is processed under the service agreement, with a separate notice where required.
Reading this page or using the website does not mean you consent to the processing of your personal data; the legal basis for each activity is listed in section 4.
2. Data controller
The data controller under KVKK is Celikel CPA, an accounting and financial advisory office run by Yiğit Çelikel, a licensed Serbest Muhasebeci Mali Müşavir (SMMM, the Turkish certified public accountant and tax adviser licence).
- Address: Cevizli, Saraylar Cd. No: 6, 34846 Maltepe, Istanbul, Turkey
- E-mail: info@celikelcpa.com
- Phone: +90 544 649 40 87
3. Personal data we process and how we collect it
We collect data through these channels:
- Contact form: your name, e-mail address, phone number (optional), company name (optional), the topic you select and your message. The page path and language of the page you used are added to the request e-mail; the time you take to fill in the form is used only for spam checks.
- E-mail, phone and WhatsApp: the identity and contact details you share and the content of your messages when you write or call us.
- Website use (automatic): technical records such as IP address, browser and device information, requested pages and date and time. These are processed by the hosting and network security infrastructure; the spam check that runs when you send the form (Cloudflare Turnstile) evaluates your IP address and browser signals.
- Optional analytics: only if you allow it, page views, clicks on contact options, resource downloads, completed calculator use and a form-submission event (with the selected topic only) through Google Analytics.
- Preference record: your analytics choice is stored in your browser under
celikel_consent_v2.
Collection method: electronically and partly by automated means through the website, form, e-mail and WhatsApp; by non-automated means in phone calls and meetings. Please do not put passwords, banking credentials or unnecessary sensitive data in the form or in e-mails.
4. Purposes and legal bases
| Purpose | Data concerned | Legal basis (KVKK No. 6698) |
|---|---|---|
| Assessing and answering your request, scheduling a call, preparing a proposal | Identity and contact details, content of the request | Art. 5/2-c (directly related to the conclusion of a contract); Art. 5/2-f (legitimate interest) |
| Establishing and carrying out the service relationship | Identity, contact and engagement details | Art. 5/2-c (conclusion or performance of a contract) |
| Meeting tax, accounting and other legal obligations; answering requests from competent authorities | Data required by the relevant legislation | Art. 5/2-a (expressly provided by law); Art. 5/2-ç (legal obligation) |
| Keeping the website and the form secure, preventing spam and abuse | IP address, technical data, form submission time | Art. 5/2-f (legitimate interest) |
| Establishing, exercising or defending legal claims; keeping correspondence records | Request and correspondence records | Art. 5/2-e (establishment, exercise or protection of a right) |
| Website usage analytics (optional) | Analytics identifiers and event data | Explicit consent (Art. 5/1) |
The consent box in the form confirms that you want us to contact you about the request; apart from analytics, the legal basis for processing is the one shown in the table. Your explicit consent to analytics is collected through the analytics notice on the site, and you can withdraw it at any time.
Apart from answering your request, commercial electronic messages (e-mail, SMS, calls) for promotional purposes are sent only with prior approval obtained under Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages, subject to the exceptions in that legislation (for example, prior approval is not required for merchant or tradesperson recipients, but no message may be sent to one who has refused). Sending the contact form does not amount to such approval.
5. Recipients and transfers abroad
We do not sell your personal data. For the purposes above, and only as far as necessary, we may share it with these recipient groups:
- Competent public authorities and courts: where legislation requires it and only for the purpose the legal obligation requires.
- Professional advisers (such as a lawyer or another accountant): where the work requires it and under a duty of confidentiality.
- Service providers:
- Cloudflare, Inc. (headquartered in the United States): website hosting and network security; Turnstile spam verification. The data involved is your IP address, request information and browser signals.
- Resend (Plus Five Five, Inc.): delivery of your contact form submission to our office as an e-mail. The data involved is everything you enter in the form (name, e-mail, phone, company, topic, message) and the page path.
- Google LLC: Google Tag Manager and Google Analytics, only if you accept analytics. The data involved is analytics identifiers and event data.
Cloudflare is headquartered in the United States, Resend states that it transfers data to the United States and processes it there, and Google processes data on servers around the world. Sending the form and using the site therefore involves transferring data abroad; these transfers are subject to the regime for transfers abroad in Article 9 of KVKK. Transfers for analytics happen only if you accept analytics. To ask about these transfers, use the routes in section 7.
6. Retention periods
- Contact requests: requests that do not turn into a service relationship are kept for the reasonable period needed to close the request and to deal with possible disputes; when the purpose ends, the data is deleted, destroyed or anonymised (KVKK Art. 7).
- Books, documents and records of a service relationship: kept for the retention periods set by legislation. Under Tax Procedure Law Art. 253 the period is five years, counted from the start of the calendar year following the year the records relate to; under the Turkish Commercial Code it is ten years. Which period applies to which document depends on the nature of the document.
- Analytics data: for the retention period configured in the Google Analytics account.
- Preference record: in your browser until you delete or change it.
7. Your rights under KVKK Art. 11 and how to apply
Under KVKK Art. 11 you may apply to the data controller to:
- learn whether your personal data is processed;
- request information if it has been processed;
- learn the purpose of processing and whether it is used in line with that purpose;
- know the third parties in Turkey or abroad to whom it is transferred;
- request correction if it is incomplete or inaccurate;
- request deletion or destruction under the conditions in KVKK Art. 7;
- request that corrections, deletions and destructions be notified to the third parties to whom the data was transferred;
- object to a result against you that arises solely from analysis of your data by automated systems;
- claim compensation if you suffer damage because the data was processed unlawfully.
How to apply. Under the Communiqué on the Procedures and Principles of Applications to the Data Controller you can: (i) deliver a hand-signed written application to the address above, in person or by post; (ii) send an application signed with a secure electronic signature or mobile signature to info@celikelcpa.com; or (iii) write to info@celikelcpa.com from the e-mail address you previously gave us and that is registered in our system.
What the application must contain. Your name and surname, your signature for a written application, your Turkish ID number (if you are a foreign national, your nationality and passport number or, if any, ID number), your address for notices, your e-mail address and phone number if any, and the subject of your request.
Response time. We conclude your application as soon as possible and at the latest within thirty days, depending on the nature of the request.
Complaint to the Board. If your application is rejected, you find the reply inadequate or you receive no reply in time, you may complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within thirty days of learning our reply and in any case within sixty days of the date of your application (KVKK Art. 14). You must first have applied to the data controller before complaining to the Board. Your rights to compensation under the law are reserved. More information: Personal Data Protection Authority.
8. Cookies and analytics
Our own site code does not place cookies. Optional analytics are off by default, and Google tags are not loaded before you decide. If you select Accept analytics, Google Tag Manager loads Google Analytics, which measures events such as page use, clicks on contact options, resource downloads and completed calculator use. We do not send form contents, your contact details or salary amounts to analytics; for a form submission only the fact that it happened, the selected topic, the page path and the language are sent. Your choice is stored in your browser under celikel_consent_v2; you can change or withdraw it at any time through Analytics preferences in the footer.
Cloudflare’s infrastructure and the Turnstile check may use strictly necessary technical signals or identifiers to protect the site and the form.
9. Security
The website is served over HTTPS. Contact form submissions are validated and screened for spam before they are delivered to our office. Access to client information is limited to the people the work requires and falls under the professional secrecy duty that applies to licensed professionals (Law No. 3568 and TÜRMOB professional rules). No method of transmission over the internet is completely secure, so please do not send passwords or banking credentials through the form or by e-mail.
10. Third-party links
Our website contains links to WhatsApp, Google Maps, social media and official authority sites. When you open them, the privacy practices of that service apply, and we are not responsible for them.
11. Changes to this notice
We update this notice when needed; the current version is published on this page and the page’s update date is refreshed. If our purpose for processing your personal data changes, we will inform you before the new processing starts.
12. Contact Us
If you have questions about this notice or wish to exercise your rights, please contact us:
Celikel CPA
Address: Cevizli, Saraylar Cd. No: 6, 34846 Maltepe, Istanbul, Turkey
Phone: +90 544 649 40 87
Email: info@celikelcpa.com