Privacy Policy

1. Controller

The controller responsible for data processing on this website/app within the meaning of the General Data Protection Regulation (GDPR) is:

Ogulcan Erdag
Mühlstraße 23
71717 Beilstein
Germany

Email: info@ogulcanerdag.com
Phone: +49 (0) 1575 9236064

2. Overview of processing

This Privacy Policy explains what personal data is processed when you use Quizly and for what purpose. “Personal data” means any information that can be related to you (e.g., name, email address, IP address).

3. Hosting and server log files

When you access this website/app, the hosting provider and/or server automatically processes information in so-called server log files. This may include:

• IP address
• Date and time of the request
• Requested page / URL
• HTTP status code
• Referrer URL
• Browser type and version / operating system

Purpose: ensuring technical stability, security (e.g., defense against attacks), and troubleshooting.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests).
Retention: log data is stored only as long as necessary for security and troubleshooting and is then deleted or anonymized, unless legal obligations require longer retention.

4. Account, authentication and use of the app

If Quizly provides user accounts (e.g., login), we process the data required to create and manage your account and to provide the app’s features. Depending on the implementation, this may include:

• Account data (e.g., username, email address)
• Authentication data (e.g., password hash, tokens/sessions)
• App content you create within Quizly (e.g., quizzes, questions, answers)

Purpose: providing the service, login, security, preventing misuse, and fulfilling requested features.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract / pre-contractual measures) and Art. 6(1)(f) GDPR (security, prevention of abuse).

Important: Passwords are not stored in plain text. They are stored only in a secure, hashed form.

5. Contact

If you contact us (e.g., by email), we process the data you provide (e.g., name, email address and message) to handle your request.

Legal basis: Art. 6(1)(b) GDPR (if related to a contract/service) or Art. 6(1)(f) GDPR (legitimate interest in responding).
Retention: data is deleted once your request has been fully processed, unless legal obligations require longer retention.

6. Cookies and tracking

This website/app does not use tracking technologies for advertising purposes (e.g., third-party ad tracking). If technically necessary cookies or local storage are used (e.g., for keeping you logged in), they are used solely to provide the requested functionality.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a functional and secure service) and, where applicable, Art. 6(1)(b) GDPR (service provision).

If analytics tools (e.g., Google Analytics) or marketing tools are added in the future, this Privacy Policy will be updated accordingly and, if required, consent will be obtained.

7. Data recipients and third-party services

We only share personal data if it is necessary to operate this website/app, if there is a legal obligation, or if you have consented.

Typical recipients may include:

• Hosting provider / infrastructure service providers (for operating servers and databases)
• IT service providers involved in maintenance and security (only if necessary)

Data transfers to countries outside the EU/EEA may occur only if legally permitted and protected by appropriate safeguards (e.g., EU standard contractual clauses), where required.

8. Data retention

We store personal data only as long as necessary for the respective purpose or as required by law. Account-related data is generally retained for the duration of your account. You can request deletion where applicable (see your rights below).

9. Your rights under the GDPR

You have the following rights, subject to the legal requirements:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (“right to be forgotten”, Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR), if processing is based on consent
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact: info@ogulcanerdag.com

10. Security

We implement appropriate technical and organizational measures to protect your data (e.g., encryption via HTTPS/TLS, access controls, and security updates). Nevertheless, no method of transmission over the internet is 100% secure.

11. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in the app or legal requirements. The current version is always available on this page.

Last updated: 28 December 2025