OpiScopeDirectory — Product Privacy Notice
OpiScopeDirectory — Product Privacy Notice
Status: DRAFT Effective: [DATE] Version: 0.2 Last updated: 2026-08-311. Introduction
This Product Privacy Notice explains how OpiScopeDirectory handles personal data. It supplements the OpiScope Platform Privacy Policy — read both together.
OpiScopeDirectory is the public survey discovery and results listing product of the OpiScope platform. This notice covers:- Survey listing information visible to the public
- Aggregated results displayed on the directory
- Visitor analytics and behavior
2. Definitions
These terms are used throughout this Product Privacy Notice and all OpiScope legal documents:
| Term | Definition |
|---|---|
| Controller (or "Data Controller") | The legal entity that determines the purposes and means of processing personal data, as defined in Art. 2 of Organic Law 2004-63. In our product interface, this is called "Organization." In our marketing materials, this is called "Publisher." |
| Organization | The product-interface term for the entity that owns surveys and acts as data controller. |
| Publisher | The marketing/commercial term for the Organization. |
| Org Owner | The natural person authorized to bind the Organization and accept legal documents on its behalf. |
| Team Member | An employee or agent of the Organization acting under its authority. |
| Survey Creator | A Team Member or the Org Owner with permission to create surveys on behalf of the Controller. |
| Processor | An entity that processes personal data on behalf of the Controller. OpiScope acts as Processor for product data. |
| Respondent | A natural person who participates in a survey by providing responses. |
| Personal Data | Any information relating to an identified or identifiable natural person (Art. 2, Organic Law 2004-63). |
| Sensitive Data | Data relating to health, religion, politics, race, union affiliation, genetic or biometric data (Arts. 47-49, Organic Law 2004-63). |
| Anonymized Data | Data that cannot identify any natural person by any means reasonably likely to be used. Anonymized data is NOT personal data and falls outside the scope of Organic Law 2004-63. |
| INPDP | Instance Nationale de Protection des Données Personnelles — Tunisia's national data protection authority. |
| Flag | A report submitted by any person alleging that a survey violates OpiScope's Terms, Privacy Policy, or applicable law. |
| Verified Badge | A badge OpiScope assigns to a Publisher who has uploaded valid INPDP documentation and had it verified by OpiScope. |
3. Controller Roles
3.1 For Organizations (Publishers/Survey Creators)
You are the data controller for:- Your survey content and metadata
- Respondent data
- Published results
3.2 For Org Owners
The Org Owner acts as the legal representative of the Organization and:
- Files prior declarations with INPDP on behalf of the Organization
- Obtains INPDP authorizations on behalf of the Organization
- Ensures Team Members comply with data protection obligations
3.3 For Directory Visitors
OpiScope is the data controller for:- Visitor analytics (anonymized)
- Search queries (anonymized)
- Platform usage data
3.4 For Survey Respondents
The survey creator is your data controller. OpiScope processes your response data on their behalf. This notice covers how your data appears (in aggregated form) on the directory.4. What Data Is Public
4.1 Survey Listing Information
When a survey is listed in OpiScopeDirectory, the following is publicly visible:
| Data | Visible To |
|---|---|
| Survey title | Everyone |
| Survey description/summary | Everyone |
| Category | Everyone |
| Provider/organization name | Everyone |
| Estimated completion time | Everyone |
| Number of questions | Everyone |
| Status (Open/Closed) | Everyone |
| Approximate response count | Everyone |
| Language(s) | Everyone |
| Start/end dates | Everyone |
4.2 Aggregated Results
If the survey creator publishes results:
- Only aggregated statistics are shown (e.g., "38% selected Education")
- Never individual responses
- Never personally identifiable information
- Results appear only after minimum response threshold is reached
4.3 What Is NOT Public
The following is never visible on OpiScopeDirectory:
- Individual survey responses
- Email addresses
- IP addresses
- User agent information
- Any personal data of respondents
- Team Member contact information (unless they choose to display it)
5. What Data We Collect
5.1 From Survey Creators
| Data | Purpose |
|---|---|
| Survey metadata (title, description, category) | Directory listing |
| Visibility settings | Listing control |
| Aggregated results | Public display |
| Provider information | Listing attribution |
5.2 From Directory Visitors
| Data | Purpose | Personal? |
|---|---|---|
| Pages viewed | Analytics | No (anonymized) |
| Search queries | Search improvement | No (anonymized) |
| Referrer | Traffic source | No (anonymized) |
| Device/browser | Compatibility | No (anonymized) |
| IP address | Security | Hashed/anonymized |
5.3 From Survey Respondents
Respondent data is processed by OpiScopeSurvey. This notice covers only how it appears (in aggregated form) on the directory.
6. How We Use Directory Data
6.1 Providing the Directory
- Display survey listings
- Enable search and discovery
- Display aggregated results
- Provide survey participation links
6.2 Analytics & Improvement
- Analyze directory usage patterns (anonymized)
- Improve search relevance
- Understand which surveys are popular
- Improve directory UX
6.3 Security
- Detect and prevent scraping
- Prevent abuse
- Enforce rate limits
7. Legal Bases for Processing
| Purpose | Legal Basis | Controller |
|---|---|---|
| Directory listing display | Contract performance | Survey creator |
| Aggregated results display | Contract performance | Survey creator |
| Visitor analytics | Legitimate interest (anonymized) | OpiScope |
| Search functionality | Legitimate interest | OpiScope |
| Security | Legitimate interest | OpiScope |
8. Data Sharing
8.1 Public Information
Survey listing information and aggregated results are public by design. They are visible to anyone on the internet.
8.2 Search Engines
Listings are indexed by search engines (Google, Bing, etc.). We provide structured data (schema.org) to improve discoverability.
8.3 Third Parties
We do not share visitor analytics with third parties except:
- Analytics providers (anonymized, under DPA)
- Search engine indexing (standard web crawling)
- Legal requirements (court order, lawful request)
9. Cross-Border Data Transfers
9.1 Data Residency
Directory data is stored in [specify region]. The specific data residency depends on deployment configuration.
9.2 Transfer Mechanisms
When data is transferred outside Tunisia, INPDP authorization is ALWAYS required (Art. 52, Organic Law 2004-63).
9.3 Self-Hosted Deployments
If you deploy OpiScopeDirectory on your own infrastructure, you are responsible for your own data residency and transfer compliance.
10. Data Retention
10.1 Listing Data
| Data | Retention |
|---|---|
| Survey listing information | While listed + 1 year |
| Aggregated results | Indefinitely (anonymized) |
| Removed listings | 30 days after removal |
10.2 Visitor Analytics
| Data | Retention |
|---|---|
| Anonymized usage data | 2 years |
| Search queries (anonymized) | 1 year |
| Security logs | 1 year |
11. Your Rights
11.1 Survey Creators
As a survey creator, you have the right to:
- List or delist your survey at any time
- Publish or unpublish results at any time
- Update your listing information
- Export your data
11.2 Visitors
As a visitor, you have the right to:
- Browse anonymously — no account required
- Object to analytics processing (via cookie settings)
- Request information about our data practices
11.3 Respondents
As a respondent, your rights are governed by the survey creator's privacy notice. You have the right to:
- Information — know how your data is used
- Access — request your responses
- Erasure — request deletion
- Withdraw consent — at any time
12. Security
12.1 Technical Measures
- Encryption in transit — TLS 1.3
- Encryption at rest — AES-256
- Rate limiting — prevent scraping
- Access controls — for survey creators
- Anonymization — visitor analytics are anonymized
12.2 Anti-Scraping
We employ measures to prevent unauthorized scraping of directory content. Violations may result in IP blocking and legal action.
13. Cookies & Tracking
13.1 Essential Cookies (always active)
| Cookie | Purpose | Duration |
|---|---|---|
| `session_id` | Session management | Session |
| `cookie_consent` | Remembers cookie preferences | 1 year |
| `locale` | Language preference | 1 year |
13.2 Analytics Cookies (with consent)
| Cookie | Purpose | Duration |
|---|---|---|
| `_ga` | Google Analytics (usage patterns) | 2 years |
| `_gid` | Google Analytics (distinguish users) | 24 hours |
13.3 Managing Cookies
- Cookie banner — choose which categories to accept
- Browser settings — block or delete cookies
- Do Not Track — we respect browser DNT signals
14. Children's Privacy
14.1 Directory Content
OpiScopeDirectory may list surveys targeting children. Such surveys must:
- Obtain verifiable parental consent
- Comply with child protection laws
- Not collect unnecessary data
14.2 Visitor Data
We do not knowingly collect personal data from children under 16. If you believe a child has provided data, contact us.
15. Flagging
15.1 Right to Flag
Any person may flag a survey listing for violation of:
- OpiScope's Terms of Service
- This Product Privacy Notice
- Applicable Tunisian law (including INPDP rules)
15.2 Flag Categories
| Category | Examples |
|---|---|
| INPDP violation | No prior declaration, sensitive data without authorization |
| Privacy violation | Data collected beyond what's disclosed |
| ToS violation | Spam, fraud, illegal purpose |
| Sensitive data | Collecting health/religion/politics without authorization |
| Misleading content | Fake academic/commercial |
| Harassment | Questions target protected group |
| Minor protection | Collecting from children without consent |
| Fabrication | Fake survey |
15.3 How Flags Are Handled
See the OpiScopeDirectory Product Terms of Service, Section 10.
16. Changes to This Notice
We may update this Product Privacy Notice from time to time. Material changes will be notified at least 30 days in advance via email and in-platform notification. Continued use after changes constitutes acceptance.
17. Contact
| Purpose | Contact |
|---|---|
| Product support | [directory-support@opiscope.com] |
| Privacy inquiries | [privacy@opiscope.com] |
| Report a listing | [directory-moderation@opiscope.com] |
| Legal | [legal@opiscope.com] |
18. Governing Law
This Product Privacy Notice is governed by:
- Tunisian law — Organic Law No. 2004-63 and applicable regulations
- GDPR — for visitors in the EU/EEA, to the extent applicable
- Other local laws — where required by jurisdiction
This document is a draft. It must be reviewed by qualified Tunisian legal counsel before publication. It does not constitute legal advice.