Son güncelleme / Last updated: 26 Ekim 2026
1. Roles
The customer organisation is the controller of employee and other personal data it supplies to the GoActiveX panel. Applixus Teknoloji Anonim Şirketi acts as processor under documented customer instructions.
Applixus’s controller activities for its own contracts, billing, business contacts and legal obligations are assessed separately.
2. Agreement scope
Customer data-processing arrangements address:
Subject matter, duration, purposes and processing operations.
Data subjects and categories of information.
Customer instructions and authorisations.
Confidentiality obligations.
Appropriate technical and organisational measures.
Subprocessor appointment, changes and objections.
Assistance with rights requests, breaches and required assessments.
Return, deletion and backup handling at contract end.
Information and audit arrangements.
International-transfer safeguards.
Contact info@applixus.com for information about the agreement and annexes.
This page is a general summary. The executed agreement and annexes govern and are not amended by this summary.
3. AI-assisted survey analysis
The feature uses the OpenAI API.
Data submitted:
[DOLDURULACAK: actual survey fields, free text, identifiers and outputs]
Service and retention configuration:
[DOLDURULACAK: endpoint/model, project region, application storage, abuse-monitoring retention, sharing/training settings and deletion procedure]
The customer determines the lawful basis and notices for its employee processing. Applixus retains its own processor obligations.
Unnecessary identifiers or special-category information should not be submitted. Pseudonymised information remains personal data where it can still be linked to a person.
Outputs require review and should not be the sole basis for decisions about employees.
4. Panel sub-processors
Provider Purpose Data and locations Transfer arrangements
OpenAI — [DOLDURULACAK: actual contracting entity] AI-assisted survey analysis [DOLDURULACAK: fields, countries and remote access] [DOLDURULACAK: KVKK and applicable GDPR mechanisms]
[DOLDURULACAK: panel hosting provider] Hosting and storage [DOLDURULACAK: production, backups, logs and access locations] [DOLDURULACAK]
[DOLDURULACAK: actual notification/email provider] Panel notifications [DOLDURULACAK] [DOLDURULACAK]
[DOLDURULACAK: actual support/monitoring provider] Support or monitoring [DOLDURULACAK] [DOLDURULACAK]
Only actual providers with access to customer personal data belong in this list.
Change notifications:
[DOLDURULACAK: notification channel, contractual notice period and objection procedure]
5. Marketing-site providers
Provider Purpose Scope
Cal.com, Inc. Introductory-call booking Contact, meeting and technical information; United States and [DOLDURULACAK: other actual countries]
Hosting Dünyam (AS212219), Dokploy; İstanbul, Türkiye Website delivery and technical records [DOLDURULACAK]
[DOLDURULACAK: email and connected calendar providers] Correspondence and scheduling [DOLDURULACAK]
[DOLDURULACAK: actual analytics infrastructure operator] Configured website measurement [DOLDURULACAK]
Use of Cal.com for marketing bookings does not automatically make it a panel subprocessor.
The AI-assisted blog workflow receives no visitor or customer employee personal data. It is separate from survey analysis.
The Turkish version is authoritative without limiting mandatory rights.