Sena Gül

• Supporting Aras Kargo's data privacy compliance program by formulating/revising policies, procedures, and tailored privacy notices to align with data protection legislation.

• Fostering strong collaborations with internal units, providing guidance on aligning operations with top-tier data protection practices.

• Managing DSARs, handle data privacy complaints, and engage proactively with Turkish Data Protection and Information and Communication Authorities.

• Drafting and reviewing contracts, emphasizing data privacy clauses to safeguard Aras Kargo's interests and mitigate risks in data processing and sharing.

• Providing employees with training sessions and prepare materials to enhance company-wide awareness of data protection, ethics, and compliance issues.

• Assisting in establishing a comprehensive compliance program for Aras Kargo by creating policies and procedures.

• Conducting assessments to identify and mitigate compliance risks, collaborating with cross-functional teams (e.i., Audit and Risk Management).

• Conducted data protection compliance programs for both international and national clients spanning a diverse range of industries, such as software, e-commerce, retail, pharmacy, finance, insurance, and leasing.
• Performed comprehensive data privacy audits to evaluate compliance with applicable privacy regulations, to address risks and vulnerabilities, and to recommend remedial actions to improve compliance.
• Provided exceptional legal advice to clients on a regular basis in matters pertaining to the Turkish data protection law and General Data Protection Regulation (GDPR), on multifaceted issues.
• Assisted clients in taking necessary administrative measures, including but not limited to providing regular employee awareness training, monitoring regulatory compliance, and anonymizing, deleting, or destroying personal data if necessary.
• Prepared thorough memoranda analyzing and synthesizing complex legal issues related to information technologies and telecommunication law.
• Crafted a wide range of legal documents, such as privacy statements, policies, procedures, and data transfer agreements, and revised them to suit each client's specific requirements.
• Drafted, reviewed and negotiated of data protection agreements and contractual provisions for both controllers and processors.
• Conducted due diligence assessments, including reviewing legal documentation on data privacy matters in mergers and acquisitions (M&A) transactions, and providing recommendations.

• Conducted research and analysis in various fields of law including corporate, contract, and commercial law, with a particular focus on data privacy law, and prepared legal memorandums and summaries.
• Assisted senior lawyers in drafting legal documents and managing clients' compliance matters.