Privacy notice for scientific research 19.3.2020
EU General Data Protection Regulation (EU 2016/679), art. 12, 13, 14
- Title, nature and duration of research
Title of research: Self and Technology
Nature of research: Follow-up study
Duration of research: 1.10.2022–31.12.2026.
Duration of data processing: 1.10.2022–31.12.2026.
- Data controller
Research will be conducted in an employment contract with the Tampere University, indicating the University to be the data controller.
Tampere University Foundation sr
33014 Tampere University
Kalevantie 4, 33100 Tampere
Business ID: 2844561-8
Also Norstat mainstains the registries used in the study.
Norstat Group
Norstat AS
Fridtjof Nansens Plass 5,
0160 Oslo
Norway
Business ID: NO982836018
- Contact person regarding the research registry
Name: Atte Oksanen
Address: Kalevantie 4, 33014 Tampere University
Phone number: +358503187279
E-mail address: atte.oksanen@tuni.fi
- Contact information of the Data Protection Officer
Name: The Data Protection Officer of Tampere University
Address: The Data Protection Officer of Tampere University, Tampere University, 33014 Tampere University
Email: mailto:dpo@tuni.fi
- Principal investigator
Name: Atte Oksanen
Address: Kalevantie 4, 33014 Tampere University
Phone number: +358503187279
E-mail address atte.oksanen@tuni.fi
- Researchers
Self and Technology -research group
Principal Investigator: Professor of Social Psychology Atte Oksanen, Tampere University.
Research group: Jenna Bergdahl, Magdalena Celuch, Roope Grönroos, Federica Previtali & Iina Savolainen.
- Content of research records
The personal data to be processed are common sociodemographic background variables (age, gender, birth year, marital and family status, education, monthly income, and belonging to a minority group). In addition to background information, the survey asks about respondents’ associations with technologies, their wellbeing and relationship with themselves and others.
- Sources of personal data
Target population of the research is 18–75-year-old adults from different countries in European Union. Respondents will be recruited from a volunteer participant pools that administrated by Norstat. Norstat Finland Oy is responsible for handling and storing survey participants’ personal data, and data collection. The research project has made a contract with Norstat regarding personal data management. The research group does not manage any personal identifiable information. Respondents will be approached by an email. Some personal information will be provided by the respondents through the survey (e.g., gender and birth year).
- Purpose of processing personal data
The purpose of processing personal data is scientific research. The cross-national research project investigates European respondents’ experiences about technology use. The research utilizes the following personal data for research purposes: age, gender, birth year, marital and family status, education, monthly income, and belonging to a minority group.
- Lawful basis for processing personal data
The lawful basis for processing under the EU’s General Data Protection Regulation, Article 6 Paragraph 1, and the Personal Data Act, Section 4: Public interest or the exercise of official authority: Scientific or historical research purposes or statistical purposes
- Sensitive personal data (special categories of data and criminal records)
No sensitive personal data will be processed during the research project.
- Transfer or disclosure of data to external parties
The research data will be processed by the research group. A separate Mutual Non-Disclosure Agreement regarding data usage will be made with any other user accessing the data (for instance, students using the data). The agreement stipulates the limits of data use and includes a confidentiality clause. Data given to students is anonymized by the research group and individual respondents cannot be identified from the data even through combining different data items.
- Transfer or disclosure of data outside the EU/EEA
Data will not be transferred to a third country or an international organisation that is located outside the EU/EEA.
- Automated decision-making
Decisions will not be made by automated means.
- Data protection principles
Protection of digital materials (e.g. information systems and equipment): usernames, password, multi-factor authentication (MFA)
Protecting data in transit: encrypted email, files protected by passwords. Individual respondents cannot be identified from the data the research group receives from Norstat, even through combining different data items.
Data will be stored on a Tampere University network drive, protected by usernames.
- Processing of personal data after the research project has been concluded
Survey data will be anonymised and archived without personally identifiable information into the Finnish Social Science Data Archive (FSD) where it can be utilized for study, teaching, and research purposes.
- Data subjects’ rights and possible restriction thereof
Data subjects have the following rights based on EU’s General Data Protection Regulation (GDPR), unless stated otherwise:
Right of access: Data subjects are entitled to find out what information the University holds about them or to receive confirmation that their personal data is not processed by the University.
Right to rectification: Data subjects have the right to have any incorrect, inaccurate or incomplete personal details held by the University revised or supplemented without undue delay. In addition, data subjects are entitled to have any unnecessary personal data deleted from the University’s systems.
Right to erasure: In exceptional circumstances, data subjects have the right to have their personal data erased from the Data Controller’s records (‘right to be forgotten’).
Right to restrict processing: In certain circumstances, data subjects have the right to request the University to restrict processing their personal data until the accuracy of their data, or the basis for processing their data, has been appropriately reviewed and potentially revised or supplemented.
Right to object: In certain circumstances, data subjects may at any time object to the processing of their personal data for compelling personal reasons.
Right to data portability: Data subjects have the right to obtain a copy of the personal data that they have submitted to the University in a commonly used, machine-readable format and transfer the data to another Data Controller.
Limitations concerning the above-mentioned rights: It is not possible to retrace an individual participant’s responses afterwards. The research group does not manage survey responses with corresponding participant name or email at any point during the research, therefore individual participant’s information cannot be accessed for them at a later point. A survey respondent may withdraw at any time during data collection and discard their responses. They also have the right to retract from the participant pool in which case they will not be contacted again.
Right to lodge a complaint with a supervisory authority: Data subjects have the right to lodge a complaint with a supervisory authority in their permanent place of residence or place of work, if they consider the processing of their personal data to violate the provisions of the GDPR (EU 2016/679). In addition, data subjects may follow other administrative procedures to appeal against a decision made by a supervisory authority or seek a judicial remedy.
Contact information:
Office of the Data Protection Ombudsman
Street address: Ratapihantie 9, 6th floor, 00530 Helsinki, Finland
Postal address: PO Box 800, FI-00531 Helsinki, Finland
Switchboard: tel. +358 29 56 66700
Kirjaamo: +358 29 566 6768
Email address: tietosuoja@om.fi
The Data Controller follows a GDPR-compliant procedure for responding to subject access requests.