Privacy notice

1. Who is responsible for your data

Data controller	OPINEOM LIMITED, DAMAC Ocean Heights, Dubai Marina, Dubai, UAE
Company number	12810289
Contact for data protection	dpo@opineom.com
Representative in the EU (Art. 27)	EU REPRESENTATIVE NAME, EU REPRESENTATIVE ADDRESS
Research project	PROJECT-ACRONYM — Full title of the European Union project as written in the grant agreement Horizon Europe, Grant agreement no. 000000
Coordinator	Coordinating institution name, Country
Ethics approval	ETHICS-APPROVAL-REF — Name of the research ethics committee that approved this study

2. Why we collect it, and on what legal basis

We collect your answers to produce aggregated, anonymised research results for the PROJECT-ACRONYM project and to send the reward promised for taking part.

Your answers	Consent — Art. 6(1)(a) GDPR. You give it by ticking the box before the eligibility questionnaire, and you may withdraw it at any time.
Your e-mail address	Consent — Art. 6(1)(a) GDPR, given separately before the main questionnaire, so that we can send your reward and verify your participation.
Technical records	Legitimate interests — Art. 6(1)(f) GDPR, limited to detecting duplicate and automated submissions so the research data stays valid.

Withdrawing your consent does not affect the lawfulness of processing carried out before you withdrew it. It also does not affect results that have already been aggregated to the point where you can no longer be identified in them.

3. What we collect

Demographic answers	Country of residence, age band, gender, education, employment status, household size, income band, role in household purchasing.
Study answers	Your responses to the main questionnaire, including free-text answers.
E-mail address	Collected only from participants who qualify, and only after separate consent.
Technical records	A one-way salted hash of your IP address (we do not store the address itself), your browser's user-agent string, the time you started and finished, and a random participation reference.

We do not ask for your name, postal address, date of birth, national identifier or payment details. We do not knowingly collect special categories of data under Art. 9 GDPR — please do not include health, religious, political or similar information in the free-text answers.

If your profile does not match the study, we keep only your pseudonymous screening answers for research-quality statistics. No e-mail address is collected in that case.

4. Who else sees it

• The research team named above, for analysis.
• Our hosting provider, acting as a processor under Art. 28 GDPR.
• The gift-card provider, which receives only the e-mail address needed to deliver your reward.
• Auditors of the granting authority, if they request evidence that the study was carried out — in which case pseudonymised records are provided.

We do not sell your data and we do not use it for advertising or profiling.

5. Transfers outside the EU/EEA

The data controller is established outside the EEA. Where personal data is transferred outside the EU/EEA, the transfer is covered by the European Commission's Standard Contractual Clauses together with the supplementary measures described in our transfer impact assessment. You can request a copy of those safeguards from dpo@opineom.com.

6. How long we keep it

E-mail address	Up to 24 months from the date you take part, then deleted.
Questionnaire answers	Kept in pseudonymised form for the duration of the project and its reporting obligations, then anonymised or deleted.
Consent records	Kept for as long as we hold the data they relate to, as evidence that consent was given.
Technical records	Deleted within 12 months.

7. Your rights

Under the GDPR you may ask us to:

• Access the personal data we hold about you (Art. 15).
• Correct anything inaccurate (Art. 16).
• Delete your data (Art. 17).
• Restrict or object to processing (Arts. 18 and 21).
• Receive a copy of your data in a portable format (Art. 20).
• Withdraw consent at any time, with no effect on your reward if you have already completed the study.

Write to privacy@opineom.com and quote the participation reference shown at the end of the questionnaire — it is the only way we can locate your record, since we do not store your name. We answer within one month.

8. How to complain

If you believe we have handled your data unlawfully, you may lodge a complaint with the data protection authority in your EU country of residence, or with Your lead EU supervisory authority (data protection authority). A list of national authorities is published at edpb.europa.eu.