Privacy notice
ODYS Research Study 2026 · consent version 2026-07-v1
Who is responsible for this data
The data controller is Paul Bonea, 5540 Ullerslev, Denmark. For any question about your data — including deletion — write to privacy@odys.dk.
What we collect, and why
Your questionnaire answers. They are anonymous: we do not ask for your name, and nothing in the answers identifies you. We use them, in aggregate, to test whether a product like ODYS is needed, and to document that research in academic and funding applications.
Your email address, only if you choose to join the waiting list. It is stored encrypted, in a separate table from your answers, and is used only for ODYS updates. You can unsubscribe at any time.
Technical basics: when you started and finished, roughly what kind of device you used (phone, tablet or computer — never a device fingerprint), and which link brought you here. We store a one-way scrambled version of your IP address (a salted SHA-256 hash) purely to limit spam. The real IP address is never stored, and the scrambled version cannot be turned back into it.
Legal basis
Consent. The first question of the survey is the consent question; nothing is recorded before you tick it, and it is never pre-ticked. You can stop at any point, and every question except consent and the single core research question can be skipped.
How long we keep it
Completed responses: 24 months from submission, after which they are deleted or fully anonymised beyond the anonymity they already have. Unfinished responses are deleted automatically after 30 days. Waiting-list emails are kept until you unsubscribe or ask for deletion.
Cookies
One first-party cookie ("odys_rid") holds a random response ID so you can leave and resume the questionnaire. It identifies your response, not you. There are no analytics cookies, no advertising cookies, and no third-party requests of any kind on this site — every font, style and script is served from this domain.
Your rights
You can withdraw consent and have your data deleted at any time. Email privacy@odys.dk; if you saved the response ID shown on the final screen, include it so we can find your anonymous answers. Waiting-list deletion needs only the email address you used. You also have the right to access, correct and export your data, and to complain to the Danish Data Protection Agency (Datatilsynet).
Children
This study is for adults (18+). One question asks parents for their children's age bands only — never names, schools or any other detail about a child.
How this study is built
The platform is self-hosted, aligned with the GDPR, and designed against the principles of ISO 27001 (information security) and ISO 42001 (AI governance). Answers and contact details live in separate tables, joined only by a removable link, so deleting your email never touches the research dataset — and deleting your answers never fails because of your email.