Privacy notice

Who decides how data is used

For the website, contact form, commercial enquiries, and optional measurement, the Quiziva operator decides the purposes and means of processing.

When an organization uses Quiziva for an assessment, that organization normally decides the purpose and rules for using participant data. Quiziva processes that data within the instructions and commercial documents agreed with the organization.

The full legal identity of the provider and the mandatory company identifiers will be added before these pages are published for commercial use.

Data we may use

• Contact data: name, email, telephone, role, organization, and message.
• Account and access data: identifiers, roles, sessions, and organization membership.
• Assessment data: questions, answers, scores, attempts, materials, and reports.
• Technical and security data: IP address, browser, device, action timestamps, and technical logs.
• Cookie preference and, only after acceptance, data about website use.
• Data needed for a quote, order, invoice, and accounting records.

Where data comes from

We receive data directly from you, from the organization that gives you access, from your activity in the service, and from technical information normally sent by your browser. If you choose external sign-in, we may receive the basic data you authorized that provider to send.

Why we use data

• To answer an enquiry and prepare a requested quote.
• To create approved access and deliver the project ordered by an organization.
• To secure the service, prevent abuse, and maintain technical operation.
• For invoicing, accounting, and legal obligations.
• For optional website measurement, only after acceptance.

For Quiziva's own processing, the legal basis depends on the context and may be requested pre-contract steps, performance of a contract, a legal obligation, a proportionate legitimate interest, or consent for optional measurement. For an organization assessment, the organization determines the applicable legal basis and Quiziva follows documented instructions.

Scores and use of results

Some scores are calculated automatically from answers and the rules set for an assessment. The organization that launched the assessment decides how results are used. Quiziva does not decide employment, education, or legal consequences for participants for its own purposes.

Suppliers that may receive data

Depending on the service and project, we may use the following suppliers. Each supplier should receive only the data needed for its service.

• Chroot for encrypted backups.
• Twilio for SMS messages included in a project.
• Google for email delivery and, on configured domains, accepted measurement.
• Cloudflare for DNS, traffic protection, and form verification. Turnstile Privacy Addendum.
• Tailscale for private infrastructure administration.
• Microsoft Clarity for measurement on configured public domains, only after acceptance.
• YouTube for video content loaded only after you choose to open it.

We do not sell personal data.

Processing locations and transfers

The primary infrastructure is planned in the European Economic Area. Some global suppliers may involve processing outside the EEA. Account configurations, contracting entities, and applicable safeguards are still being verified, so we do not state that all data remains exclusively in the EEA.

How long data is kept

• Participant data and assessment results: up to 3 years after the assessment ends, unless the organization requests earlier deletion or a legal duty requires retention.
• Commercial enquiries and related correspondence: no more than 3 years after the last interaction.
• Technical and security logs: normally 12 months.
• Documented backups: 14 days for the local copy and 30 days for the external copy.
• Financial and accounting documents: for the period required by law.
• Cookies and local storage: the periods in the cookie policy.

Application of the category-specific periods across all systems is still being implemented and verified. A legal duty or the defence of a claim may justify a different period.

Your rights

Depending on the context, you may request access, correction, erasure, restriction, portability, or object to processing. You may withdraw consent for the future at any time. Send a request to info@quiziva.com. We respond within the legal period, normally one month, with a possible extension of up to two months for complex requests.

Security and children

We use access controls, traffic protection, and technical measures appropriate to the risk. Public commercial forms are not intended for children. An organization using Quiziva with minors must establish the legal basis, age-appropriate information, and any required authorization.

Contact

For any question or request about personal data, write to info@quiziva.com.