MEKANLAR

Privacy Policy

Last updated: 29.11.2025

This Privacy Policy explains the principles relating to the processing of personal data in connection with all services provided through the grauu.com domain and its subdomains (together, the “Website”).

The Website is a non-profit platform focused on electronic music, operated under the GRAUU brand by NOTOFC (Buğra Bilecen) (“Company”, “we”, “us”, “our”). In this document, the terms “user” or “you” refer to natural persons who visit or use the Website.

1. Data Controller

For the purposes of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the EU General Data Protection Regulation (“GDPR”), the data controller is:

GRAUU (Buğra Bilecen)
Website: https://grauu.com
E-mail: info@notofc.com

2. What Data Do We Collect?

2.1. Data Collected Automatically

When you visit the Website, certain data is automatically transmitted by your browser and may be processed, such as:

  • IP address
  • Browser type and version
  • Operating system information
  • Pages visited, clicks and navigation information
  • Date, time and duration of the visit
  • Usage data collected through cookies and similar technologies

This data is generally used in an anonymous or pseudonymous form for analytical purposes.

2.2. Data You Provide to Us

Data you provide directly to us through forms or interactions on the Website may include:

  • Contact forms: Name, surname, e-mail address, message content
  • Newsletter / mailing list subscriptions (if any): E-mail address, your preferred categories
  • Demo / track submissions (if any): Name, artist name, e-mail, social media or streaming links, your message
  • Comments (if any): Name, nickname, e-mail (if not publicly displayed), comment text

We process this data only to the extent necessary for the relevant purpose.

We process your personal data for the following purposes and on the legal bases provided by KVKK / GDPR:

  • Responding to your contact requests
    • Legal basis: Performance of a contract upon your request or legitimate interest
      (KVKK Art. 5/2-c,f; GDPR Art. 6(1)(b),(f))
  • Ensuring the security and performance of the Website and detecting technical issues
    • Legal basis: Legitimate interest
      (KVKK Art. 5/2-f; GDPR Art. 6(1)(f))
  • Performing analytics to improve our visitor statistics, content and services
    • Legal basis: Legitimate interest and/or your explicit consent (depending on your cookie preferences)
  • Sending newsletters (if any)
    • Legal basis: Explicit consent
      (KVKK Art. 5/1; GDPR Art. 6(1)(a))
  • Fulfilling our legal obligations
    • Legal basis: Legal obligation
      (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c))

4. Cookies and Similar Technologies

The following types of cookies may be used on the Website:

  • Strictly necessary technical cookies (required for the operation of the site)
  • Preference cookies (e.g. language settings)
  • Performance and analytics cookies (e.g. visitor statistics)
  • Marketing / targeting cookies (if any; e.g. advertising and social media pixels)

You can manage, reject or delete cookies via your browser settings. However, disabling certain cookies may limit some functions of the Website.

5. Sharing of Data

We do not share your personal data with third parties except in the cases listed below:

  • Service providers: Hosting (server), e-mail service providers, analytics and security services (e.g. server provider, e-mail delivery tools, analytics tools).
  • Legal obligations: Competent public authorities and institutions, where required by law.
  • Professional advisors: Lawyers, accountants and similar professionals, only where necessary and subject to confidentiality obligations.

If your data is transferred outside the European Economic Area, we take care to ensure appropriate safeguards are in place under the GDPR (such as standard contractual clauses).

6. Data Retention Periods

We retain your personal data:

  • For contact requests, for a reasonable period depending on the nature of the communication,
  • For newsletter subscriptions, as long as your subscription remains active,
  • For legal obligations, for the periods required by applicable legislation,
  • For analytics and log data, for periods as short as reasonably possible and in a way that allows anonymization where possible.

Data that is no longer necessary is deleted, anonymized or destroyed in accordance with applicable law.

7. Your Rights

Under KVKK and GDPR, your main rights include:

  • To learn whether your personal data is being processed,
  • To request information regarding such processing,
  • To learn the purposes of processing and whether data is used in line with those purposes,
  • To know the third parties to whom your data is transferred, within or outside the country,
  • To request the correction of incomplete or inaccurate data,
  • To request the deletion or destruction of your data where the conditions are met,
  • To request that these operations (correction, deletion, destruction) be notified to third parties to whom data has been transferred,
  • To object to results arising exclusively from automated processing, if such results are to your detriment,
  • To claim compensation if you suffer damage due to unlawful processing of your personal data.

If you reside in the EU, you also have the right to lodge a complaint with the competent data protection authority.

You may exercise your rights via the contact channels below:

E-mail: info@notofc.com
Contact form: https://grauu.com (contact page)

8. Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss and misuse (such as encryption, restricted access rights and secure servers).

9. Changes to This Policy

This Privacy Policy may be updated from time to time. The most recent version will always be published on the Website. Where we make significant changes, we will inform you in a manner we deem appropriate.