Privacy notice for scientific research
EU General Data Protection Regulation (EU 2016/679), art. 12, 13, 14
1. Title, nature and duration of research
Title of research: Self and Technology Global Extended
Nature of research: Cross-sectional research
Duration of research: 1.10.2024–31.12.2027
Duration of data processing: 1.10.2024–31.12.2027
2. Data controller
Research will be conducted in an employment contract with the Tampere University, indicating the University to be the data controller.
Tampere University Foundation sr
33014 Tampere University
Kalevantie 4, 33100 Tampere
Business ID: 2844561-8
3. Contact person regarding the research registry
Name: Atte Oksanen
Address: Kalevantie 4, 33014 Tampere University
Phone number: +358503187279
E-mail address: atte.oksanen@tuni.fi
4. Contact information of the Data Protection Officer
Name: The Data Protection Officer of Tampere University
Address: The Data Protection Officer of Tampere University, Tampere University, 33014 Tam-pere University
Email: mailto:dpo@tuni.fi
5. Principal investigator
Name: Atte Oksanen
Address: Kalevantie 4, 33014 Tampere University
Phone number: +358503187279
E-mail address atte.oksanen@tuni.fi
6. Researchers
Principal Investigator (PI): Professor of Social Psychology Atte Oksanen, Tampere University
Self and Technology -research group
7. Content of research records
The personal data to be processed are common sociodemographic background variables (age, gender, birth year, marital and family status, education, monthly income, and belonging to a mi-nority group). In addition to background information, the survey asks about respondents’ asso-ciations with technologies, their wellbeing and relationship with themselves and others.
8. Sources of personal data
Target population of the research is 18–75-year-old adults in 6 different countries (Australia, Brazil, Japan, Portugal, South Africa, and the United States). Survey respondents will be re-cruited from volunteer participant pools administrated by Dynata. The research group does not manage any personal identifiable information. Some personal information will be provided by the respondents through the survey (e.g., gender and birth year).
9. Purpose of processing personal data
The purpose of processing personal data is scientific research. The cross-national research project investigates respondents’ experiences about technology use. The research utilizes the following personal data for research purposes: age, gender, birth year, marital and family sta-tus, education, monthly income, and belonging to a minority group.
10. Lawful basis for processing personal data
The lawful basis for processing under the EU’s General Data Protection Regulation, Article 6 Paragraph 1, and the Personal Data Act, Section 4: Public interest or the exercise of official au-thority: Scientific or historical research purposes or statistical purposes
11. Sensitive personal data (special categories of data and criminal records)
No sensitive personal data will be processed during the research project.
12. Transfer or disclosure of data to external parties
The research data will be processed by the research group. A separate Mutual Non-Disclosure Agreement regarding data usage will be made with any other user accessing the data (for in-stance, students using the data). The agreement stipulates the limits of data use and includes a confidentiality clause. Data given to students is anonymized by the research group and individ-ual respondents cannot be identified from the data even through combining different data items.
13. Transfer or disclosure of data outside the EU/EEA
Data will not be transferred to a third country or an international organisation that is located out-side the EU/EEA.
14. Automated decision-making
Decisions will not be made by automated means.
15. Data protection principles
Protection of digital materials (e.g. information systems and equipment): usernames, password, multi-factor authentication (MFA)
Protecting data in transit: encrypted email, files protected by passwords. Individual respondents cannot be identified from the data the research group receives from Dynata.
Data will be stored on a Tampere University network drive, protected by usernames and multi-factor authentication.
16. Processing of personal data after the research project has been concluded
Survey data will be anonymised and archived without personally identifiable information into the Finnish Social Science Data Archive (FSD) where it can be utilized for study, teaching, and re-search purposes.
17. Data subjects’ rights and possible restriction thereof
Data subjects have the following rights based on EU’s General Data Protection Regulation (GDPR), unless stated otherwise:
Right of access: Data subjects are entitled to find out what information the University holds about them or to receive confirmation that their personal data is not processed by the Universi-ty.
Right to rectification: Data subjects have the right to have any incorrect, inaccurate or incom-plete personal details held by the University revised or supplemented without undue delay. In addition, data subjects are entitled to have any unnecessary personal data deleted from the University’s systems.
Right to erasure: In exceptional circumstances, data subjects have the right to have their per-sonal data erased from the Data Controller’s records (‘right to be forgotten’).
Right to restrict processing: In certain circumstances, data subjects have the right to request the University to restrict processing their personal data until the accuracy of their data, or the basis for processing their data, has been appropriately reviewed and potentially revised or supplemented.
Right to object: In certain circumstances, data subjects may at any time object to the pro-cessing of their personal data for compelling personal reasons.
Right to data portability: Data subjects have the right to obtain a copy of the personal data that they have submitted to the University in a commonly used, machine-readable format and trans-fer the data to another Data Controller.
Limitations concerning the above-mentioned rights: It is not possible to retrace an individual participant’s responses afterwards. The research group does not manage survey responses with corresponding participant name or email at any point during the research, therefore indi-vidual participant’s information cannot be accessed for them at a later point. A survey respond-ent may withdraw at any time during data collection and discard their responses. They also have the right to retract from the participant pool in which case they will not be contacted again.
Right to lodge a complaint with a supervisory authority: Data subjects have the right to lodge a complaint with a supervisory authority in their permanent place of residence or place of work, if they consider the processing of their personal data to violate the provisions of the GDPR (EU 2016/679). In addition, data subjects may follow other administrative procedures to appeal against a decision made by a supervisory authority or seek a judicial remedy.
Contact information:
Office of the Data Protection Ombudsman
Street address: Ratapihantie 9, 6th floor, 00520 Helsinki, Finland
Postal address: PO Box 800, FI-00521 Helsinki, Finland
Switchboard: tel. +358 29 56 66700
Fax: +358 29 56 66735
Email address: tietosuoja@om.fi
The Data Controller follows a GDPR-compliant procedure for responding to subject access re-quests.