Privacy Policy

1. Architectural Principle: We Do Not Touch MINA Platform Data

Important distinction: Within the scope of Opinion AI's MINA platform (TIS/SIT), patient, clinical, lab and operational data stays on the institution's own infrastructure. We do not collect, process or store this data. For details see Ethics & Compliance.

This Privacy Policy only covers data collected by the opinionmina.com website itself (visits, forms, cookies).

2. What Data Do We Process?

a) Information you actively share

• Contact form: name, email, message
• Contact form: name, company, role, work email, area of interest, notes
• Correspondence content when you email us directly

b) Automatically collected information

• IP address, browser type and version, operating system
• Visit date/time, pages viewed, referrer URL
• Cookie identifiers (see Cookie Preferences Information Security Policy)

3. How Do We Use This Data?

• To respond to your contact requests
• To provide information about services you request
• To measure and improve website performance
• To meet legal obligations (KVKK, GDPR, tax regulations, etc.)

We do not send bulk marketing emails. We use the information you provide only to communicate with you.

4. Who Do We Share Data With?

Your form and contact data is shared only with the Opinion AI team. It is not sold, rented or transferred to third parties. Exceptions:

• When required by law (court order, etc.)
• Technical infrastructure providers we use for email delivery (mailhost), strictly for functional purposes and under contractual confidentiality

5. How Long Do We Keep Data?

• Contact requests: 24 months after the request is closed
• Server access logs: 6 months
• If legal obligations require longer, the applicable statutory period

Data is securely deleted or anonymized at the end of the retention period.

6. Security Measures

• All connections use HTTPS (TLS 1.3)
• Data is stored on AES-256-encrypted disks
• Access is role-based (RBAC) and requires multi-factor authentication
• Regular security audits and penetration tests are conducted

7. Your Rights (KVKK Art. 11 / GDPR)

As a data subject, you have the following rights:

• Learn whether your personal data is processed
• Request information about its processing
• Learn the purpose of processing and whether it is used in line with that purpose
• Request correction if processed incompletely or incorrectly
• Request erasure/destruction in accordance with KVKK Art. 7
• Object to results based solely on automated systems
• Request compensation if you have suffered damages due to unlawful processing

For the detailed process see our GDPR / KVKK Notice or contact us via the channels below.

8. Cookies

Our website uses certain cookies to improve your experience. For details and preference management see Cookie Preferences.

9. Protection of Children

Our website and services are intended for users over 18 years of age. We do not knowingly collect data from users under 18.

10. Policy Changes

This policy may be updated from time to time. We will announce significant changes on the website. The effective date is shown at the top of this page.