Law No. 6698 • Guideline • Technical review
Current policy notice
This notice explains how cookies and similar technologies may be used across mcthukuk.com and its related subdomains. The text has been prepared by taking into account the Turkish Personal Data Protection Law No. 6698, the Cookie Practices Guideline published by the Turkish Data Protection Authority, and recent Board decisions.
- Direct advertising / marketing pixel
- Not identified as active in the current application review
- Third-party touchpoints
- Google Maps, YouTube-nocookie, Cloudflare Turnstile, Office document preview
- Legal posture
- Separating strictly necessary technologies from optional ones
Based on the current codebase and a technical review of the public pages, the website mainly relies on necessary technical processes and certain embedded third-party services that become relevant on specific pages.
Scope and legal framework
Cookies are small data files that may be stored in your browser or device so that websites can function properly, remain secure, remember limited preferences, and deliver specific services. In addition to cookies, similar technologies such as pixels, local storage, embedded content calls, and security tokens may also be used.
Where cookies or similar technologies lead to the processing of personal data, we distinguish between technologies that are genuinely necessary and those that are optional. For non-essential technologies, information duties and, where required, explicit consent mechanisms should be handled separately.
How this website uses them in practice
- Technical cookies may be used for authenticated sessions within the admin panel, live preview flows, or other restricted operational areas.
- Cloudflare Turnstile is used on contact, appointment, and human resources forms in order to reduce abuse and automated submissions.
- Certain pages may include embedded Google Maps, YouTube-nocookie video content, or Office document previews. Those services may create their own technical requests when the relevant page or content is opened.
- In the current review, we did not identify a standalone advertising / marketing pixel layer or a direct behavioural advertising script running on the website.
Categories of cookies and similar technologies
Strictly necessary technical and session cookies
These support core website operations, authenticated sessions, security checks, and the delivery of technical services that you explicitly request.
- Legal assessment
- Providing the requested information society service, maintaining system security, and the applicable data processing grounds under Turkish law depending on the specific scenario.
- Retention / duration note
- For the duration of the session or for the technical period permitted by the relevant authentication or security configuration.
- Examples
- Admin session continuity
- Preview / access verification
- Preserving secure form flows
Security and abuse-prevention technologies
Third-party security solutions may be used to protect forms and related services against spam, automation, and abusive access.
- Legal assessment
- The data controller’s obligation to secure its systems and its legitimate interest in preventing misuse.
- Retention / duration note
- Usually limited to the short validation session or token period defined by the relevant provider.
- Examples
- Cloudflare Turnstile
- Bot / spam prevention requests
Embedded content and external rendering services
Map, video, and document preview services may trigger their own technical requests when the relevant page or embedded content is displayed.
- Legal assessment
- The user’s request to view the relevant page or content, subject to a separate legal assessment depending on the service involved.
- Retention / duration note
- Retention periods may vary based on the relevant third-party provider and your own browser configuration.
- Examples
- Google Maps embed
- YouTube-nocookie embed
- Microsoft Office document preview
Performance, measurement, and future enhancements
In the current version of the website, no direct advertising / marketing pixel or standalone analytics script has been identified. If such a technology is activated later, this notice and the relevant preference mechanism will also be updated.
- Legal assessment
- Any future activation would be assessed separately based on purpose and technology, and non-essential uses would require the appropriate consent handling.
- Retention / duration note
- There is currently no separate active set of performance or advertising cookies declared for the present architecture.
- Examples
- Any future analytics or preference-management layer would be announced separately
Third-party services
Cloudflare Turnstile
Security verification on contact, appointment, and HR forms
Used to reduce spam and automated misuse against interactive forms.
Google Maps
Embedded map on the contact page
Used to display the office location directly on a map interface.
YouTube-nocookie
Embedded video on the About page
The video is served through YouTube’s no-cookie domain, although the service may still initiate its own technical requests.
Microsoft Office Viewer
Inline previews for Office files published inside articles
Used when Word, Excel, or PowerPoint files are displayed inside article content.
How you can manage your preferences
- You can delete, block, or limit cookies through your browser settings.
- Where pages contain embedded maps, videos, or document previews, you may also wish to review the relevant third-party provider’s own privacy and cookie terms.
- If you use the admin panel or preview tools, it is advisable to sign out securely after completing your session.
- If new non-essential technologies are introduced in the future, the notice and the relevant preference / consent layer will be updated accordingly.
Data subject rights
If your personal data is processed through cookies or similar technologies, you may have rights under Article 11 of Law No. 6698, including the right to request information, learn the purpose of processing, ask whether data is transferred, request correction of inaccurate data, and request deletion or destruction where the legal conditions are met.
If you have questions about this notice, the technologies we use, or how personal data is processed in connection with website interactions, you may contact us directly. Requests are handled in line with the applicable legal framework and procedural rules.
Requests and contact
For questions about our cookie practices, embedded third-party services, or personal data processing connected to website use, please contact us directly.
iletisim@mcthukuk.comContact Us