Privacy Policy
This Privacy Policy explains what information OpinionTally ApS collects about you, how we use it, who we share it with, and what legal rights you have under the EU General Data Protection Regulation (GDPR).
Who is Responsible for Your Information
OpinionTally ApS is the data controller. This means we determine what your information is used for and ensure that processing happens lawfully and transparently.
What Information We Process and Why
| Category of Data | Purpose of Processing | Legal Basis (GDPR) |
|---|---|---|
| Name, email, and phone number | Account creation, user identification, and general platform communication | Contract performance, Article 6(1)(b) |
| Professional history, demographic data, and domain expertise | Matching specialists with B2B enterprise recruitment requests | Explicit consent, Article 6(1)(a) / Contract, Article 6(1)(b) |
| Interview transcripts, survey responses, and consultation notes | Delivering datasets, reports and specialist knowledge to enterprise clients | Explicit consent, Article 6(1)(a) |
| Device IP address, browser information, and system activity logs | Maintaining platform operations, system security, and user analytics | Legitimate interest, Article 6(1)(f) |
You can withdraw your consent at any time by contacting us at [email protected]. Withdrawal does not affect processing that occurred prior to withdrawal.
Age Limit
You must be at least 18 years old to create an account, register as an expert, or participate in research projects with OpinionTally ApS.
Research, Agent Processing, and B2B datasets
We do not sell personal identification data to third parties. Our core platform uses agents to search, match, and aggregate expert perspectives across specialized domains. Information shared with commercial partners or enterprise buyers is delivered in aggregated/anonymized formats, or with explicit consent when a specific expert engagement is agreed upon.
Transfers to Third Countries
Where service providers operate outside the EU/EEA (e.g., in the USA), data transfers are secured via the EU-U.S. Data Privacy Framework or the EU Commission's Standard Contractual Clauses (SCCs).
Data Security & Breach Notification
We protect your data using technical measures including encryption, role-based access restrictions, and logging. In the event of a security breach presenting a risk to rights and freedoms, we notify Datatilsynet within 72 hours and inform affected users directly if risks are high.
Your Rights
You have the right to request access, rectification, deletion, processing restriction, data portability, and to object to processing. Write to [email protected] to submit requests. We respond within one month.
Complaints
You have the right to lodge a complaint with the national supervisory authority: