ERASAZ

PRIVACY POLICY AND PERSONAL DATA PROTECTION NOTICE

 

Last updated: 9 August 2026

 

1. DATA CONTROLLER

 

For the purposes of Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by the following business in its capacity as data controller:

 

Legal business name: ERAS MÜZİK ALETLERİ

Tax Office: Şahinbey

Tax Number: 0850058939

Address: Akyol Mah. Tufan Hamam Sk. No: 2 B/A, Şahinbey / Gaziantep / Türkiye

Telephone: +90 530 039 03 09

Email: erasazbaglama@gmail.com

Website: www.erasaz.com

 

This notice explains how we process the personal data of individuals who visit www.erasaz.com, create an account, place an order, purchase digital content or services, or communicate with ERASAZ.

 

2. PERSONAL DATA WE MAY PROCESS

 

Depending on your relationship with ERASAZ, we may process the following categories of personal data:

 

• Identity information: First name, last name, and any identity or tax information required for invoicing.

• Contact information: Telephone number, email address, delivery address, and billing address.

• Customer transaction information: Order number, purchased products or services, shopping cart, delivery, cancellation, return, exchange, warranty, maintenance, and support records.

• Financial and payment information: Payment method, transaction amount, instalment information, payment status, invoice, and refund records. Full card details and card security codes are not stored by ERAS MÜZİK ALETLERİ; card payments are processed by iyzico and the relevant bank or payment service provider.

• Account and digital-access information: Account details, membership status, and records relating to access to and use of digital content.

• Communication records: Requests, complaints, and correspondence submitted through email, telephone, contact forms, WhatsApp, or other support channels.

• Transaction security and technical information: IP address, date and time, device, browser, operating system, session, error, security, and website usage records.

• Marketing preferences: Consent and opt-out records relating to newsletters, campaigns, and commercial electronic communications.

• Cookie and analytics data: Information collected through essential cookies and, where permission has been given, performance, analytics, personalisation, and advertising cookies.

• Visual or audio content: Photographs, videos, or audio recordings voluntarily submitted in connection with a product, damage report, maintenance request, custom order, or support request.

 

ERASAZ does not request special-category personal data that is unnecessary for its activities. Please do not submit unnecessary identity documents, health information, or other sensitive personal data when requesting support.

 

3. HOW PERSONAL DATA IS COLLECTED

 

Your personal data may be collected through:

 

• the website, account, order, and payment forms;

• cookies and similar online technologies;

• email, telephone, contact forms, and customer-support channels;

• our physical store and after-sales service processes; and

• iyzico, banks, carriers, and service providers involved in fulfilling your order.

 

Data may be collected by automated or partly automated means, or by non-automated means where the information forms part of a data filing system.

 

4. PURPOSES AND LEGAL BASES FOR PROCESSING

 

We may process your personal data for the following purposes and on the legal bases provided under Article 5 of the KVKK:

 

• Managing accounts, orders, payments, invoices, deliveries, digital access, returns, warranties, and after-sales support: Processing is necessary for the establishment or performance of a contract.

• Complying with tax, accounting, invoicing, consumer-protection, e-commerce, and authorised-government requests: Processing is necessary for compliance with a legal obligation of the data controller.

• Preventing fraud, unauthorised transactions, abuse, and information-security risks: Processing is necessary for the legitimate interests of ERAS MÜZİK ALETLERİ, provided that your fundamental rights and freedoms are not harmed.

• Managing requests, complaints, disputes, returns, warranties, and legal proceedings: Processing is necessary for the establishment, exercise, or protection of a legal right.

• Measuring website performance, improving services, and enhancing user experience: Processing is based on legitimate interests where appropriate or, where required by law, your explicit consent.

• Sending newsletters and campaigns, conducting remarketing, and displaying personalised advertising: Processing is based on your explicit consent and commercial electronic communication preferences.

 

Where processing is based on explicit consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Processing strictly necessary to establish and fulfil an order does not require separate consent.

 

5. SHARING OF PERSONAL DATA

 

Your personal data may be shared, only to the extent necessary and for the relevant purpose, with the following recipient groups:

 

• website hosting, e-commerce, account management, data storage, technical support, and security service providers;

• iyzico, banks, and other authorised payment service providers;

• carriers, postal operators, customs representatives, and logistics providers responsible for delivering orders;

• accounting, e-invoicing, financial-advisory, and related service providers;

• manufacturers, importers, distributors, and authorised service centres where warranty, maintenance, or repair services are required;

• legal, financial, and technical advisers;

• legally authorised public authorities, courts, and enforcement bodies; and

• analytics, advertising, and marketing service providers where you have provided the required consent.

 

We do not sell your personal data or disclose it to third parties for their own independent marketing activities.

 

6. INTERNATIONAL TRANSFERS OF PERSONAL DATA

 

www.erasaz.com operates on the Wix platform. Because website hosting, cloud storage, security, technical support, analytics, and communication services may be delivered through global infrastructure, certain personal data may be transferred to servers or service providers located outside Türkiye.

 

International transfers are carried out in accordance with Article 9 of the KVKK by relying on an adequacy decision, appropriate safeguards, standard contractual clauses, or another valid transfer mechanism provided by law. Where explicit consent is legally required, it will be obtained separately before the transfer.

 

Reading this notice does not, by itself, constitute explicit consent to an international transfer of personal data.

 

7. COOKIES

 

We may use cookies to operate the website, maintain security, remember preferences, measure performance, and, where permission has been given, conduct analytics or advertising activities.

 

Essential cookies are required for the website and payment process to function. Analytics, personalisation, and advertising cookies are used subject to visitor choice where required by law. Cookie types, providers, purposes, and retention periods are explained separately in our Cookie Policy. Visitors may change their cookie preferences through the cookie settings panel on the website or through their browser settings.

 

8. RETENTION AND DELETION OF PERSONAL DATA

 

Personal data is retained only for as long as necessary for the relevant processing purpose and for the limitation or retention periods required by applicable law.

 

• Order, payment, invoice, accounting, and commercial transaction records may generally be retained for up to 10 years where required by applicable legislation.

• Account and digital-access records may be retained for the duration of the account or service relationship and afterwards for the period necessary to address legal claims.

• Customer support, return, warranty, and dispute records may be retained until the request has been resolved and for the relevant limitation periods.

• Marketing consent and opt-out records may be retained until consent is withdrawn and for the legally required period needed to demonstrate the consent or opt-out request.

• Cookies are retained for the periods stated in the Cookie Policy.

 

When the legal basis and purpose for processing no longer exist, personal data is deleted, destroyed, or anonymised, subject to applicable legal retention obligations.

 

9. DATA SECURITY

 

ERAS MÜZİK ALETLERİ implements technical and organisational measures appropriate to the nature of its activities to prevent unlawful processing of or access to personal data and to ensure secure storage. However, no transmission of information over the internet can be guaranteed to be completely risk-free.

 

You are responsible for keeping your account password confidential and signing out on devices that are not yours. Please contact us if you notice any suspicious activity.

 

10. YOUR RIGHTS

 

Under Article 11 of the KVKK, you have the right to:

 

• learn whether your personal data is being processed;

• request information if your personal data has been processed;

• learn the purpose of processing and whether your data is being used in accordance with that purpose;

• know the third parties in Türkiye or abroad to whom your personal data has been transferred;

• request correction of incomplete or inaccurate personal data;

• request deletion or destruction of personal data where the relevant legal conditions are met;

• request that correction, deletion, or destruction be notified to third parties to whom the data has been transferred;

• object to a result arising against you through analysis carried out exclusively by automated systems; and

• request compensation if you suffer damage because your personal data has been processed unlawfully.

 

11. HOW TO SUBMIT A REQUEST

 

You may submit a request under the KVKK by delivering a signed application identifying you and describing your request to the address above in person, through a notary, or by registered mail with return receipt. You may also send your request from an email address previously provided to ERAS MÜZİK ALETLERİ and registered in our systems to erasazbaglama@gmail.com.

 

Your application should include your first name and last name; your signature if the application is in writing; your Turkish identity number or, for non-Turkish citizens, your passport or identity number; your notification address; your email address, if applicable; and the subject of your request. We will request only the information necessary to verify your identity.

 

Applications are answered free of charge as soon as possible and no later than 30 days, depending on the nature of the request. If the request creates an additional cost, the fee specified in the tariff determined by the Turkish Personal Data Protection Board may apply.

 

12. CHILDREN’S PRIVACY

 

The website is not directed specifically at children. Purchases and account transactions by persons without legal capacity must be carried out under the supervision of their legal representative. Please contact us if you believe that a child’s personal data has been submitted without proper authorisation.

 

13. THIRD-PARTY LINKS

 

The website may contain links to third-party websites or social-media platforms. Their privacy practices are not controlled by ERAS MÜZİK ALETLERİ. We recommend reviewing the relevant third party’s privacy notice before following such a link.

 

14. CHANGES TO THIS NOTICE

 

This notice may be updated following changes in legislation, website infrastructure, or our data-processing activities. The current version takes effect when published on www.erasaz.com. Changes that materially affect the processing of personal data will also be communicated through an appropriate method.

 

15. CONTACT

 

For questions or requests concerning privacy and personal data:

 

ERAS MÜZİK ALETLERİ

Akyol Mah. Tufan Hamam Sk. No: 2 B/A, Şahinbey / Gaziantep / Türkiye

Telephone: +90 530 039 03 09

Email: erasazbaglama@gmail.com