Comprehensive
Cookie Policy

1. Scope and Technical Definition

This Cookie Policy governs the deployment of cookies, web beacons, tracking pixels, local shared objects (LSOs), browser fingerprinting technologies, and analogous local storage mechanisms (collectively referred to as “Cookies”) on the online infrastructure of aydlaw.com.

A Cookie is a micro-data file downloaded onto the User’s terminal equipment (computer, mobile device, tablet, or other internet-enabled device) upon accessing the Website. The Firm utilizes these mechanisms strictly to safeguard website operability, ensure network defense, maintain session integrity, and aggregate anonymized telemetry data to analyze traffic performance. This Cookie Policy should be read in conjunction with the Firm’s Privacy Policy.

2. Typology of Deployed Cookies

In alignment with the ePrivacy Directive (2002/58/EC), as amended by Directive 2009/136/EC, the GDPR, and the Turkish Electronic Commerce Law (Law No. 6563), Cookies utilized on the Website are classified as follows:

• Strictly Necessary (Essential) Cookies: These are technically non-negotiable components required to operate the fundamental security architectures and core functionalities of the Website, including cross-site request forgery (CSRF) prevention tokens, load balancing identifiers, session authentication tokens, and secure login persistence. These do not require User consent and deploy automatically based on legitimate operational necessity pursuant to GDPR Recital 47 and ePrivacy Directive Art. 5(3).
• Performance and Analytical Cookies: These mechanisms quantify visitor volumes, isolate navigation barriers, identify high-traffic pages, track page response times, and measure the effectiveness of content delivery. All data aggregated through performance cookies is deeply anonymized and is used exclusively in aggregate form. These are disabled by default and deploy exclusively upon your affirmative opt-in consent.
• Functional Cookies: These remember user-configured preferences such as language selection, regional layouts, font size adjustments, and display mode (light/dark). They operate solely on an opt-in consent basis and are not used for cross-site tracking or behavioral profiling.
• Targeting and Advertising Cookies: In conformance with the professional confidentiality standards and the Prohibition of Advertising Regulation (Reklam Yasağı Yönetmeliği) governing Turkish legal practitioners, the Website does not deploy third-party advertising, commercial profiling, retargeting, or cross-site tracking Cookies of any kind.

3. Consent Management Framework

Upon entering the Website, a dedicated Consent Management Platform (CMP) banner, compliant with the IAB Transparency & Consent Framework (TCF) v2.2 where applicable, will prevent non-essential tracking until you affirmatively configure your settings.

• Consent is only registered via definitive, affirmative action (e.g., clicking “Accept All” or configuring specific category toggles). Passively browsing past the banner, scrolling through the Website, or closing the banner without affirmative action does not register consent.
• The User retains the unassailable right to modify preferences or entirely withdraw consent at any time via the “Cookie Settings” link permanently embedded in the Website footer.
• Users can configure their browsers to systematically reject all Cookies; however, the Firm formally disclaims any responsibility for structural disruptions to Website functionality should essential Cookies be disabled.
• Consent records (including timestamp, IP address, and consent string) are securely stored for a minimum of five (5) years to demonstrate compliance with the accountability principle under GDPR Art. 5(2) and Art. 7(1).

4. Third-Party Integration and Expiration Parameters

Where the Firm integrates trusted analytical tools (e.g., enterprise-grade Google Analytics 4 with IP anonymization enabled), the IP anonymization protocols are structurally hardcoded, ensuring that user IP addresses are permanently truncated before any server storage occurs. The Firm has entered into Data Processing Agreements with all third-party analytics providers in compliance with GDPR Art. 28.

Session Cookies automatically self-destruct upon closing the browser. Persistent Cookies—subject to active user consent—are programmed with hard temporal limitations, under no circumstances remaining active beyond a maximum duration of twelve (12) months from deployment, after which consent must be legitimately re-acquired.

5. Detailed Cookie Inventory

A complete inventory of all Cookies deployed on the Website, including their names, purposes, categories, durations, and associated third-party providers, is available upon request by contacting info@aydlaw.com. This inventory is reviewed and updated at least semi-annually or whenever material changes are made to the Website’s tracking infrastructure.