Skip to content

Personal Data Protection

Information under the Protection of Personal Data Law (No. 89/2007) of the Turkish Republic of Northern Cyprus.

Last updated: 2 October 2026

Legal framework

The processing and protection of personal data in the Turkish Republic of Northern Cyprus is governed by the Protection of Personal Data Law (No. 89/2007) (Kişisel Verilerin Korunması Yasası, “the Law”). The Law sets out the obligations of controllers who process personal data and the rights of data subjects, and compliance with it is supervised by the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

This notice has been prepared within the controller’s duty to inform under Article 13 of the Law.

Controller

The controller of your personal data is ÖZAD LEGAL (Law & Consulting).

  • Address: İlker Karter Caddesi No: 101/A (Gazimağusa Kaza Mahkemesi Arkası), Namık Kemal Mahallesi, Gazimağusa, KKTC
  • E-mail: info@ozadlegal.com
  • Telephone: +90 548 868 68 76

Data processed and purposes

The data that may be processed when you visit this website or contact us, and the purposes for which it is used, are explained in detail on the “Privacy Policy” page. In summary:

  • Identity and contact details (name, telephone, e-mail) and the content of your message — to reply to your request and arrange a meeting;
  • Technical connection records (IP address, browser information, time of access) — for the security and operation of the website.

Recipients

Your data may be transferred, as far as necessary to provide the service, to hosting and e-mail service providers, to the messaging service if you contact us via WhatsApp, and, where there is a legal obligation, to competent public authorities and courts. Transfers of data outside the TRNC are subject to the conditions set out in Article 11 of the Law.

Your rights as a data subject

Under the Law, as a data subject you have the following rights:

  • To find out whether personal data about you is being processed and to request access to it (Article 14). The controller must respond to this request within 30 days.
  • To ask for incomplete or incorrectly processed data to be corrected, deleted or blocked (Article 14).
  • To object, on legitimate grounds, to the processing of your personal data (Article 15). The controller must respond to your objection in writing within 15 working days.
  • To claim compensation if you suffer damage because your data was processed in breach of the Law.
  • To apply to the Personal Data Protection Board if your request is not answered in time or the answer is unsatisfactory.

How to apply

To exercise your rights, you may send your request in writing to info@ozadlegal.com or to İlker Karter Caddesi No: 101/A (Gazimağusa Kaza Mahkemesi Arkası), Namık Kemal Mahallesi, Gazimağusa, KKTC. Stating your identity and your request clearly will help your application to be concluded quickly.

Message on WhatsApp