Privacy Policy

1. Data Controller

The controller responsible for your personal data is the entity below. The "PAIRA" brand and the mypaira.com website are operated by this entity.

2. Personal Data We Process

Depending on how you interact with us, we may process the following categories of personal data:

• Identity: name.
• Contact: email address, phone number.
• Professional and usage data: job title, organization, professional role (law firm partner, in-house legal manager, lawyer), your answers to the AI Readiness Score assessment (including firm size, statements about your professional practice, priority level and contact preference), the content of your messages and requests, and meeting requests.
• Marketing: your newsletter and marketing preferences.
• Technical and cookie data: IP address, browser and device information, and usage data collected through our hosting infrastructure and embedded third-party services, and through cookies. See our Cookie Policy for details.

Our site is not intended to collect special category data. Please do not submit such data through our forms.

3. Purposes of Processing

• Responding to inquiries and requests you send through our forms.
• Providing advisory, training and event services, and scheduling introductory and assessment calls.
• Running the AI Readiness Score assessment, scoring your answers automatically, and preparing and emailing your personal report. The Score is informational and does not produce legal or similarly significant effects about you.
• Reviewing VibeLegal community applications and managing membership.
• Sending the PAIRA Notes newsletter and marketing communications, where you have given consent.
• Ensuring site security and measuring and improving our services.
• Meeting legal obligations and establishing, exercising or defending legal claims.

4. Legal Bases (Art. 6 GDPR)

• Performance of a contract or steps taken at your request (Art. 6(1)(b)): handling your inquiries and service requests, scheduling meetings, and preparing and delivering your Readiness Score report.
• Legitimate interests (Art. 6(1)(f)): responding to you, managing our community, ensuring site security, and measuring and improving our services, balanced against your rights and freedoms.
• Consent (Art. 6(1)(a)): sending the PAIRA Notes newsletter and marketing emails only. You may withdraw your consent at any time, without affecting processing carried out before withdrawal.
• Legal obligation (Art. 6(1)(c)): record-keeping and compliance where required by law.
• Cookies: strictly necessary cookies rely on our legitimate interests; non-essential cookies rely on your consent.

5. Recipients and International Transfers

We share personal data only as necessary for the purposes above, with:

• Service providers: providers of website infrastructure, email, scheduling and newsletter services, and, where needed, our legal, accounting and IT advisers.
• Competent authorities: public authorities and courts where required by law.

Some of the services we use are provided by companies located outside the European Economic Area (EEA), and your data may therefore be transferred internationally:

• Cloudflare, Inc.: website hosting and content delivery (United States).
• Substack: PAIRA Notes newsletter subscription and delivery (United States).
• Calendly: scheduling of introductory and assessment calls (United States).
• Google (Google Fonts): technical connection data when serving fonts (United States).

Because our company is established in Türkiye, your personal data is also processed by us, as the controller, outside the EEA. Where we transfer personal data outside the EEA to a country without a European Commission adequacy decision, we rely on appropriate safeguards under Art. 46 GDPR, in particular the European Commission's Standard Contractual Clauses (and, where applicable, the EU-US Data Privacy Framework), or on a derogation under Art. 49 (such as your explicit consent or the performance of a contract). You may request a copy of the relevant safeguards using the contact details above.

6. Data Retention

We keep your personal data only for as long as necessary for the purposes described above and as required by applicable law. After these periods, your data is deleted, destroyed or anonymized.

• Records of individuals who contact us but do not enter into a service relationship are deleted or anonymized within 12 months of the last contact.
• Data of clients and service recipients is retained for the duration of the relationship and for the applicable statutory limitation periods thereafter.
• Newsletter data is retained until you unsubscribe.

7. Your Rights

Subject to the conditions in the GDPR, you have the right to:

• Access your personal data (Art. 15).
• Have inaccurate data rectified (Art. 16).
• Have your data erased (Art. 17).
• Restrict processing (Art. 18).
• Receive your data in a portable format (Art. 20).
• Object to processing, including direct marketing (Art. 21).
• Withdraw consent at any time, without affecting prior processing (Art. 7).
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (Art. 22). Our AI Readiness Score provides recommendations and does not make such decisions about you.

8. How to Exercise Your Rights

To exercise any of these rights, contact us at burak@ozdemir-legal.com. We will respond within one month, which may be extended by two further months for complex or numerous requests, in which case we will inform you (Art. 12). You also have the right to lodge a complaint with your local data protection supervisory authority.

9. Updates

We may update this Privacy Policy in line with legal developments or changes to our processes. The current version is always published on this page.