Privacy Notice

This Privacy Notice describes how Sectis Consulting (“Sectis”) collects, uses, shares, and otherwise processes Personal Data regarding:

• Visitors to our website and other online services (“Site”);
• Contact persons of our clients and/or prospective clients (law firms);
• Individuals contacting us to request information about our services;
• Suppliers providing goods and services to Sectis.

In this Privacy Notice, “Personal Data” refers to any information relating to an identified or identifiable natural person processed by Sectis as a data controller. Processing activities we carry out strictly as a data processor based on our clients' instructions (e.g., structuring a law firm's client contact lists) fall outside the scope of this Notice; the respective law firms act as the data controllers in those instances.

We collect Personal Data directly from you, through electronic communications, online forms, or publicly available sources. The data categories we process include:

• Identification and contact data: Name, title, firm name, email address, phone number.
• Client service data: Invoicing details, payment history, and contract-related information.
• Registration and communication data: Newsletter subscriptions, meeting notes, email correspondence.
• Device data: IP addresses and general statistical data regarding Site usage.

(Note: As a matter of principle, Sectis Consulting does not collect or process sensitive personal data such as health, religion, or association memberships.)

We process your Personal Data for the following purposes and legal bases:

• To provide consultancy services and manage business operations: To fulfill our contractual obligations (such as preparing pitches, managing directory submissions, or BD infrastructure) and to process invoices. (Legal basis: Performance of a contract)
• Communication and Information: To provide you with relevant updates about our services, market insights, and events. (Legal basis: Legitimate interests or explicit consent for newsletters)
• To ensure the security and functionality of our Site: To improve Site performance and prevent fraudulent activities. (Legal basis: Compliance with legal obligations and our legitimate interests)

Sectis only shares Personal Data to the extent necessary and in line with the purposes above, with the following categories of recipients:

• Suppliers and service providers: Third-party IT infrastructure providers, including cloud storage, CRM, and email service providers.
• Financial institutions: Banks and accounting partners for invoicing and payment execution.
• Public Authorities: When required by law, to comply with legally enforceable demands or court orders.

(Cross-Border Transfer) The global standard cloud servers (e.g., Google Workspace, Microsoft) we use for electronic communications and data backups may be located outside of Turkey. When you contact us or use our services electronically, your data may be hosted on servers abroad, safeguarded by necessary technical measures in compliance with Article 9 of the Personal Data Protection Law No. 6698.

Sectis utilizes enterprise-grade security infrastructures matching global standards to prevent unlawful processing of and unauthorized access to your personal data, implementing all necessary technical and administrative measures.

Under the applicable Data Protection Law, you have the right to learn whether your data is being processed, the purpose of the processing, the third parties to whom it is transferred, and to request correction, deletion, or destruction of your personal data.

You may submit your requests via the following contact details:

Sectis Consulting

Email:

info@sectisconsulting.com

Address:

Istanbul, Turkey