Government & Public Authority Data Request Policy

This policy applies to any request from a public authority (law enforcement, courts, government agencies, of any country) for personal data processed by Advena, including WhatsApp message content, phone numbers, and Platform Data received from Meta.

Every request is reviewed before any response. We verify: (a) the requesting authority's identity and jurisdiction, (b) a valid legal basis (court order, statutory power) citing the specific legal provision, (c) that the request is addressed to the correct entity — where Advena acts as processor, requests are redirected to the relevant controller (the Practice) unless the law compels us directly. Requests failing this review are refused. Where legal expertise is needed, we consult qualified counsel before responding.

If a request appears unlawful, overbroad, or improperly served, we will refuse it, seek narrowing, or challenge it through available legal channels before disclosing anything, to the extent permitted by law.

Any disclosure is limited to the minimum data strictly necessary to comply with the specific legal obligation. We do not provide bulk or open-ended access. Where possible, data is disclosed for named individuals and defined time ranges only.

Every request is logged: date received, requesting authority, legal basis cited, our legality assessment and reasoning, persons involved in the decision, the response given, and the data disclosed (if any). Records are retained for 5 years.

Where legally permitted, we notify the affected controller (Practice) and/or data subject of the request.

The owner of Software Services Zubeyr Yavas is responsible for handling requests under this policy.