GDPR / KVKK Privacy Notice

1. Introduction

At Dama Music, we are committed to protecting the privacy of our users and ensuring secure use of our services. This Privacy Notice (“Notice”) has been prepared to inform our users about the processing of their personal data in compliance with the Turkish Personal Data Protection Law No. 6698 (“Law”) and applicable regulations.

The purpose of this Notice is to set out the conditions regarding the use of personal data shared with Dama Music during the use of the website www.damamuzik.com and its mobile application (“Platform”).

2. Definitions

“Personal data” means any information relating to an identified or identifiable natural person.
“Processing of personal data” means any operation performed on personal data such as collection, storage, alteration, disclosure, transfer, or restriction of use.

3. Principles of Processing

Personal data will be processed by Dama Music in accordance with the following principles:

Lawfulness, fairness, and transparency,
Accuracy and being up to date,
Specific, explicit and legitimate purposes,
Limited and proportionate use,
Retention for as long as required by law or the intended purpose.

4. Data Processed and Purposes

Data processed may include:

Name, surname, email, phone, gender, date of birth, ID or tax number, address, social media information (if connected).
IP address, order times, visited product pages.
Payment card details are only processed by banks and never stored by us.

Purposes: to process orders, provide customer support, ensure site security, comply with legal obligations, conduct analytics, and inform users of products and promotions.

5. Data Transfer

Personal data may be transferred to:

Competent authorities,
Banks,
Business partners, consultants, subcontractors,
Domestic and international service providers,

in compliance with Articles 8 and 9 of the Law.

6. Rights of Data Subjects

Under Article 11 of the Law, users have the right to:

Learn whether their data is processed,
Request correction or deletion,
Learn third parties to whom data is transferred,
Object to unlawful processing,
Claim compensation for damages.

Requests: iletisim@damamuzik.com

7. Retention Period

Commercial communication: 3 years
Consent records: 1 year
Purchase and invoicing data: minimum 10 years

Expired data is deleted, destroyed, or anonymized.