Paksoy advises clients on data protection matters in the context of local and GDPR requirements by assessing databases, preparing data inventories, internal policies, notices and consent forms; drafting and revising contracts that involve the sharing or transfer of data; and advising on domestic and international data transfers, data usage and minimisation, and deletion, anonymization or destruction procedures.
We offer tailored guidance on e-commerce, mobile offers and digital advertising, assist in designing and implementing customer relationship management systems and customer loyalty programmes, and review data pooling and licence management solutions to structure them in compliance with the data protection legislation.
We also provide compliance advice on TOMs, breach prevention and notification, incident management procedures, emergency action plan and security policies.
“ Paksoy provides a great level of service to its clients. The lawyers are hailed as attentive, experienced and highly professional. ”
Chambers and Partners
Featured publications
18 July 2024
Turkish Data Protection Authority issues new regulation on cross-border data transfers
Paksoy legal briefing: “Turkish Data Protection Authority issues new regulation on cross-border data transfers”
28 July 2023
Turkish Data Protection Authority amends exemption criteria for data controller registration
The Turkish Data Protection Authority has amended the criteria for data controllers to be exempt from the requirement to register with the…
Related contents
15 May 2026
VERBIS registration deadline set to 5 June for data controllers newly subject to the requirement based on 2025 accounts
With Decision No. 2026/1026 dated 13 May 2026, the Turkish Personal Data Protection Board extended the deadline for registration with the…
7 May 2026
Recent developments in Türkiye regarding the protection of children in digital environments
Since the beginning of 2026, notable legislative and policy developments have taken place in Türkiye on the protection of children in…
10 March 2026
Loyalty card practices under increased data protection scrutiny in Türkiye
The Turkish Data Protection Authority (DPA) has issued a principle decision dated 11 February 2026, addressing the widespread practice of…
30 January 2026
Recent developments in Turkish data protection law
The end of 2025 and the beginning of 2026 have seen notable developments in Turkish data protection law, particularly regarding personal…
7 October 2025
Turkish Data Protection Authority eases registration requirements for organisations processing sensitive data
In Decision No. 2025/1572 dated 4 September 2025, the Turkish Data Protection Authority introduced an exemption for data controllers…
26 March 2025
Turkish Cybersecurity Law enters into force
The long-anticipated Cybersecurity Law No. 7545 came into force in Türkiye following its publication in the Official Gazette on 19 March…