This text is a draft and has not passed legal review. Fields in square brackets are still to be completed.
Privacy Policy
A summary of how QUIS handles personal data across its website, business relationships and research services.
Last updated: · Version: 0.1-draft
The Turkish version of this document prevails in case of any inconsistency.
1. Scope
This policy applies to www.quis.com.tr, operated by QUIS ARAŞTIRMA VE DANIŞMANLIK LİMİTED ŞİRKETİ ("QUIS"), and to QUIS's business relationships and research activities.
Formal notice for individuals in Türkiye is given in the KVKK Privacy Notice. This policy is a general summary of it; if they conflict, the Notice prevails.
This policy also covers the app.quis.com.tr platform. Use of the platform is further governed by the Platform Terms of Service.
2. What role does QUIS play?
| Situation | QUIS's role | Who to contact |
|---|---|---|
| Website visitors, contact requests | Data controller | QUIS |
| Customer and supplier employees (B2B) | Data controller | QUIS |
| Participants in QUIS's own research (B2C) | Data controller | QUIS |
| Participants in research run for a customer | Data processor | The commissioning customer |
| Data a customer uploads to the platform | Data processor | That customer |
Where we act as a processor, the B2B Data Processing Terms and the customer contract apply. Participants can find details in the Research Participants Notice.
3. What data does this website process?
- Technical logs: IP address, request time, requested address and browser details, kept in server logs for 14 days.
- Contact: The website does not store contact form data. The form opens your message in your own email application, and it reaches us only if you send it.
- Cookies: Only a session record used to show the opening animation once. See the Cookie Policy.
The website does not currently use analytics or advertising tools.
Quis platform
- Account data: Name, email, password hash, workspace and permission details, usage records.
- Customer content: Surveys, interviews, responses and reports. QUIS is generally a data processor for this data.
- Participant technical data: IP address and browser details to check for duplicate responses and misuse.
- AI: When AI features are used, the relevant text is sent to OpenAI.
4. Business customers and partners (B2B)
We process employees' names, titles, business contact and contract details for proposals, contracts, invoicing and service communication. This data usually comes from the individuals or their organisations.
5. Individuals (B2C)
Our relationship with individuals arises mainly through research participation, enquiries and job applications. The website does not sell products to individuals. If paid services are offered to consumers, separate pre-contractual information and distance contract documents will apply.
6. Sharing and international transfers
We do not sell personal data. Providers we use:
| Provider | Purpose | Location |
|---|---|---|
| Radore | Website and platform hosting | Türkiye [TO BE CONFIRMED] |
| Google Workspace | Business and system email | Outside Türkiye |
| OpenAI | AI features on the platform | Outside Türkiye |
| Google sign-in, fonts, consent-based analytics on platform marketing pages | Outside Türkiye |
International transfers rely on safeguards under Article 9 of the KVKK: [SAFEGUARD TO BE CONFIRMED].
7. Security and retention
We apply measures such as access restriction and encrypted connections. Data is kept for the purpose and statutory retention periods, then deleted, destroyed or anonymised.
8. Your rights
You may exercise your rights under Article 11 of the KVKK in Türkiye and, where applicable, under the GDPR in the EU/EEA. See section 7 of the KVKK Privacy Notice or write to info@quis.com.tr.
9. Children
The website is not directed at children. Research involving people under 18 requires parental or guardian permission.
10. Changes
When this text changes, the version and date on this page are updated.