Legal notice and privacy.

Istanbul Criminal Lawyer is the working name of a law practice whose attorneys are registered with the Istanbul Bar Association (İstanbul Barosu). It is a private practice. It is not a government body, a court, a consulate or an official service of any kind.

Practice	İstanbul Ceza Avukatları — a private law practice. Istanbul Criminal Lawyer is the working name under which it serves clients in English.
Bar	Istanbul Bar Association (İstanbul Barosu)
Attorneys	Av. Onur Çalışıcı — founding partner, roll no. 83426. Responsible for the files of foreign nationals, and for this site. Av. Oruç Aygün — founding partner, roll no. 83427.
Registered office	Gürsel Mah. Karataş Sk. SNS Plaza, Kat 3, No 6, 34413 Kağıthane / Istanbul, Türkiye
Languages	Turkish and English. The file itself is always in Turkish.
Contact	Telephone +90 850 242 40 43 · WhatsApp +90 850 242 40 43 · info@istanbulcriminallawyer.com
Hours	Monday to Friday, 09:00–19:00 (Istanbul). Custody, the police statement and remand do not wait for office hours; calls and messages outside those hours are answered as soon as possible.
Hosting	Cloudflare, Inc. (Cloudflare Pages), 101 Townsend St, San Francisco, CA 94107, USA — the hosting provider within the meaning of Law no. 5651.

The practice is subject to the Attorneyship Act no. 1136 and to the Union of Turkish Bar Associations' regulation on the prohibition of advertising. In line with those rules this site publishes no claims of success, no success rates or statistics, no case results, no client names or testimonials, and no comparison with other practices.

Nothing on this site is an offer of representation or a solicitation to instruct.

The content of this site is general information about Turkish criminal procedure, written for readers who are not Turkish lawyers. It is not legal advice, and it cannot take account of the facts of your matter.

Law and practice change, and pages here may not reflect the most recent position. Reading this site does not create an attorney–client relationship, and neither does sending an initial enquiry. That relationship arises only when we have agreed to act and fees have been agreed in writing.

This section is the privacy notice required by the Turkish Personal Data Protection Act (Law no. 6698, KVKK) and, for visitors in the EEA and the United Kingdom, the GDPR. It is short because this site collects very little.

Data controller	Av. Onur Çalışıcı and Av. Oruç Aygün, attorneys registered with the Istanbul Bar Association, acting jointly as data controller within the meaning of Law no. 6698.
Address	Gürsel Mah. Karataş Sk. SNS Plaza, Kat 3, No 6, 34413 Kağıthane / Istanbul, Türkiye
Contact for data requests	info@istanbulcriminallawyer.com · +90 850 242 40 43
Last updated	6 October 2026

What this site itself collects. There is no contact form connected to a server. The message tool on the contact page runs entirely in your browser: what you type is used only to compose the message that opens in your own WhatsApp, and nothing is sent to us or to anyone else until you press send in that application. The fonts, scripts and images all come from this domain. The one exception is Google Analytics, explained in full immediately below: it exchanges a small, cookie-free signal with Google on every visit regardless of your choice, and a fuller one only once you accept it. Two things besides are stored on your own device only: a flag that remembers you closed the message prompt, kept in session storage and deleted when the tab is closed; and copies of pages saved by the site's offline mode so that they open without a connection. Both can be cleared from your browser's site-data settings and neither reaches us.

Analytics, and your choice. Since 30 September 2026 this site counts visits with Google Analytics 4 (measurement ID G-ZNC8ZNM66W; the provider is Google Ireland Limited for visitors in the EEA and the United Kingdom and Google LLC elsewhere). Since 3 October 2026 it uses Google's advanced consent mode, which changes what happens before you choose anything, so it is set out here in full.

Before you choose, or if you decline. For as long as you have not pressed Accept on the notice at the bottom of the page — including while you are deciding, and for as long as you decline or never answer — a request already reaches Google on every page you open. It carries no cookie and no identifier of any kind that could connect that request to you or to any other visit you make. As with any request to a server outside Türkiye — the same is true of the hosting provider described further down this page — it necessarily carries your IP address and browser type; Google uses it only to produce a statistically modelled estimate of total traffic that is not attributed to an individual, so that the aggregate count stays roughly accurate even for visitors who never accept full measurement. It is not used to build a profile of you, and no cookie or other identifier is stored on your device because of it. We rely on our legitimate interest in keeping that aggregate count accurate, within the meaning of Article 5/2-f of Law no. 6698, and, for visitors in the EEA and the United Kingdom, Article 6(1)(f) of the GDPR.

If you do press Accept, this is what changes, and nothing else:

• two cookies are placed on your device — _ga and _ga_ZNC8ZNM66W, each lasting 400 days — holding a randomly generated identifier, not your name;
• Google receives the address of the page you opened, the address you arrived from, your device and browser type, an approximate location that Google derives from your IP address, and which kind of contact link you used — WhatsApp, telephone or email — including whether you opened WhatsApp from the message builder on the contact page, now linked to that identifier so repeat visits can be recognised;
• we see aggregate reports only. Advertising and personalisation signals are switched off permanently and are never granted, the data is not used to advertise to you, and it is deleted after fourteen months.

The legal basis for this processing is your explicit consent under Article 5/1 of Law no. 6698. It also involves a transfer to Google's servers outside Türkiye, for which the Personal Data Protection Board has issued no adequacy decision; that transfer therefore rests on the explicit consent described in Article 9/6-a of the same Act, given after being told of the possible risks — which is what this section and the notice are for. For visitors in the EEA and the United Kingdom the basis is GDPR Article 6(1)(a). You may withdraw consent at any moment and nothing else changes: the control below switches analytics off and deletes both cookies immediately.

Counting contact clicks. Since 6 October 2026, when you tap a telephone, WhatsApp or email link here, your browser also sends one small request to this same domain. All it carries is which of those three kinds of link was tapped, where on the page that link sits, and which page you were reading. It carries no cookie, no identifier of any kind and nothing you have typed, the reply is an empty file, and it does not depend on the analytics choice described above — it is sent whether you accept, decline or never answer. What we read from it is a total per address: how many telephone, WhatsApp and email taps a page produced. It cannot show us an individual visitor, and no part of it is stored on your device. We do not keep your IP address; the request reaches our hosting provider, whose standard server logs are described immediately below.

Hosting. The site is served by Cloudflare, Inc. (Cloudflare Pages). As hosting provider Cloudflare keeps standard server logs — IP address, browser type, requested address and time — for security and to keep the service running, on servers that may be located outside Türkiye. Those logs are not reported to us on a per-visitor basis.

What we receive when you contact us. If you call, write on WhatsApp or send an email, we receive what you choose to give us: typically a name, a number, and what has happened. We use it to answer you and, if we go on to act, to run the file. The legal basis under Law no. 6698 is Article 5/2-c (steps towards a contract for legal services), Article 5/2-f (our legitimate interest in responding to an enquiry addressed to us) and, where we act for you, Article 5/2-ç (obligations imposed on lawyers by law). For visitors in the EEA or the UK the corresponding bases are GDPR Article 6(1)(b) and (f). We do not sell what you send, we do not use it for marketing, and we share it with no one except where a court, a prosecutor or the law requires it.

Channels that run through other companies. A WhatsApp conversation is also subject to WhatsApp's (Meta's) own terms, and email passes through the mail provider's servers; both may be located outside Türkiye. Choosing one of those channels is your decision and constitutes your explicit consent, within the meaning of Article 9/6-a of Law no. 6698, to your message travelling through that provider. You do not have to put the details of your matter in a first message: a name and a number are enough, and the rest can be said on the telephone.

How long we keep it. An enquiry that does not lead to an instruction is deleted once it has been answered and there is no reason to keep it. Where we act for you, the file is kept for the duration of the matter and then for the period the Attorneyship Act requires — Article 39 obliges a lawyer to keep documents entrusted to them for three years after the mandate ends — after which it is deleted or destroyed.

Confidentiality. What you tell a lawyer about a legal matter is protected by professional secrecy under Article 36 of the Attorneyship Act no. 1136, whether or not you go on to instruct us. Please still avoid sending highly sensitive detail through channels you do not control, particularly from a device that is not yours.

Your rights. Under Article 11 of Law no. 6698 you may ask us to confirm whether we process personal data about you and to give you information about it; to learn the purpose and whether it is used for that purpose; to be told the third parties, in Türkiye or abroad, to whom it has been transferred; to correct it where incomplete or wrong; to have it deleted or destroyed where the conditions in Article 7 are met, and to have those steps notified to any recipient; to object to a result produced against you solely by automated analysis; and to claim compensation for damage caused by unlawful processing. Visitors in the EEA and the UK have the corresponding GDPR rights of access, rectification, erasure, restriction, portability and objection. Write to info@istanbulcriminallawyer.com or to the address above; we answer within the thirty days the Act allows, free of charge. If you believe your rights have been infringed you may complain to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) or, in the EEA or the UK, to your local data-protection authority.

Changes. If the site starts to use any tool that processes data, this notice is updated at the same time.

Photographic images on this site are illustrative and generated; they do not depict actual clients, actual officers, actual proceedings or identifiable individuals. Turkish legal terms are given in Turkish alongside English so that they can be checked against the source.

External links are provided for reference and we are not responsible for the content of other sites.