1. Controller
The controller of the research project is: an individual researcher. The research project will be conducted by the researcher identified below.
Susanna Ågren
Postdoctoral Researcher
Researcher’s contact information:
University of Tampere
Faculty of Social Sciences
Kalevantie 4
33014 University of Tampere
+358503365712
susanna.agren@tuni.fi
The contact person for questions about data processing is Susanna Ågren, Grant-funded Post Doc Researcher in Youth Research, who can be reached by email at susanna.agren@tuni.fi, or by phone at +358 (0)50 336 57 12. To call Tampere University’s switchboard, dial +358 (0) 294 52 11.
2. Scope and purpose of data processing
Name of the research project: “Amiksen aika” [Time for Vocational Students] – A Hanging-Out Ethnography of Young People’s Relationships with Time and Society in Vocational Education
This is a one-time study that will last until 31.07.2030.
I will process your personal data as part of a research project. The purpose of processing your personal data is to conduct the research project specified above.
Firstly, the study examines what time and everyday life look like through the eyes of young people studying in a vocational school and whether hanging out in vocational education institution could produce better information about the young people studying there (research question 1). The study will be carried out in a vocational institution, where the researcher will spend time “hanging out” with young people on the premises of the school for six months in the spring of 2027.
During the study, the data is processed as part of the researcher’s field notes (i.e. the researcher writes down their observations at the educational institution and the conversations they have had with the young people) and the field diary compiled on the basis of them, as well as notes taken from the research inter-views or written recordings of the recorded interviews (i.e. the speech is written in text form). The interviews will be recorded if the young people participating in the study give their consent.
Some young people can also discuss with the researcher what “good youth research” is (research question 2): workshops are organised in connection with this. Young people can observe the presence of a researcher in the educational institution, interpret observations related to conducting youth research together with the researcher, and participate in the preparation of blog posts and research articles and in communicating about these research results.
However, these young people do not process the personal data of other young people that are related to the young people’s views on time and everyday life – their research and observation focus on the presence of the researcher in their school.
Personal data is used to answer research questions. The data is not used or stored for any other purpose. A more detailed purpose, objectives and benefits of personal data can be read in the study’s research information sheet and on the website, where young people are directed to receive more information.
The results of the research, from which an individual research subject cannot be identified, are intended to be published in scientific journals or conferences in the field or in other forums where the results of the research are presented.
3. Lawful basis for processing personal data
The lawful basis for processing your personal data is:
- a task carried out in the public interest or the exercise of official authority
- scientific or historical research or compilation of statistics
In case special categories of personal data (such as health data or criminal offence data) will be processed, the lawful basis for processing is:
- scientific or historical research in the public interest or conduct of statistics
4. Sources and types of personal data
Depending on the circumstances, I may collect personal data either directly from you or from other sources. I will collect data from:
- you as the data subject
- the following regular data sources:
the researcher spends their time at the educational institution, in which case the staff of the educational institution may also tell the researcher about you (e.g. information related to your name or studies).
This information is not combined with other research data, i.e. the researcher’s observations about you or what you say in the interview.
The researcher does not collect unnecessary information about you from teachers or other staff of the educational institution, or record it in the field diary.
I will process the following types of personal data:
General personal data:
- age
- mother tongue
- nationality
- country of birth
- family relationships
- occupation
- education
- personal events
- the voices of the interviewees (if the interview is recorded).
Name, personal identity code, contact information (address, e-mail and telephone number), as well as bank and tax information are collected only from those who discuss “good youth research” with the researcher and participate in the writing of research articles and who are paid a fee for their participation.
Special category data (sensitive personal data):
- health data: only if you bring this up and feel that it is relevant from the perspective of the research topic (for example, when you say that society’s excessive demands affect your well-being). If the information is deemed not relevant to the research, it is removed from the data. The personal health data of young people is not the actual subject of the study.
- racial or ethnic origin
- political opinions or religious/philosophical beliefs
- trade union membership
- sexual behaviour or orientation
- Technical data: Young people participating in the reflection of good youth research can use the Signal application to keep in touch, which can also be used with a pseudonym and without giving out a phone number. The researcher has the Signal app on a work phone maintained and protected by the university.
- Other data: Not collected
I will process data on the following categories of data subjects:
- research participants
- others, please specify: the staff of the educational institution as part of the observational notes, but the staff is not the main research subject.
5. Transfer and disclosure of personal data
Under certain circumstances, your personal data may be transferred to a third country or an international organisation located outside the European Union (EU) or the European Economic Area (EEA). During such transfers, personal data will be appropriately protected by employing suitable transfer mechanisms (such as standard contractual clauses) and technical measures.
- Your personal data will not be transferred outside the EU/EEA.
- Your personal data will not be regularly disclosed to other controllers.
In some cases, your personal data may be processed by data processors with whom I have signed appropriate data processing agreements. Your personal data may also be processed on a case-by-case basis by personal data processors, with whom I have entered into appropriate agreements on the processing of personal data. The research interviews are recorded in digital format as an audio recording, after which they are transcribed (= transcribed into verbal form) in a reliable service outside the university.
An agreement on the processing of personal data is concluded with the transcriber (i.e. the person who transcribes the audio recordings into text) in accordance with the General Data Protection Regulation. Any identifiers that may locate a person are removed during the transcription review phase. Audio recordings and their transcripts (= text versions) are stored on a drive protected by Tampere University data protection guidelines (username, password, double-verified identification). Audio recordings are destroyed after the transcripts have been reviewed.
6. Protecting personal data
Your personal data is protected by using appropriate technical and organisational safeguards from the Tampere University. Your data is technically protected, for example, with virus protection, a firewall and by taking care of regular software updates. The storage and transfer of personal data is carried out using a double-verified, secure online storage service (One Drive Business/Microsoft Office 365) in accordance with the General Data Protection Regulation, as well as a personal backed-up network drive (P: drive) maintained by the University of Tampere. To use these, you need a password, username, and double-verified authentication (Microsoft Authenticator).
Your data is also protected by organisational measures. The staff of the Tampere University, including grant-funded researchers, are bound by a duty of secrecy, and access to the information is restricted internally. VeraCrypt encryption software is also used as an additional protection for the data (e.g. the direct personal data related to the payment of the remuneration and interview recordings).
Any manual data are protected by storing them in locked spaces, fireproof and locked storage spaces. The interview recordings are immediately saved to the university’s drive (P-drive) and removed from the tape recorder. The recordings are removed from the recorder after the interviews have been transcribed into text. The personal data provided for the payment of the fee will be saved from the e-mail on the P-drive and deleted from both locations immediately after the payment of the fee.
Material will be:
- collected with direct identifiers
- collected without direct identifiers
- pseudonymised after collection
7. Retention period for personal data
I will retain your personal data for only as long as necessary, as determined on a case-by-case basis. The retention period also depends on the requirements set out in data protection legislation. I will adhere to our Data Management Plan and all applicable legislation when determining the retention period of personal data.
Your personal data will be retained as follows: Transcripts or interview notes and the field diary will be retained for one year after the final report or publication arising from the research project has been completed and will be destroyed by 31 December 2031 at the latest.
Audio recordings of interviews will be stored until the transcripts have been checked for accuracy. With participants’ consent, the interview data will be archived in the Finnish Social Science Data Archive (FSD) for long-term preservation. The archived data may be made available to registered users for research purposes and master’s theses. Individuals cannot be identified from the transcripts, as directly identifying information, such as names, will be removed.
The field diary will not be archived in the Finnish Social Science Data Archive.
Consent forms signed by co-researchers will be stored digitally for one year after the final publication of the study has been completed or deleted earlier if you choose to withdraw your participation.
Bank and tax information submitted for the payment of the fee will be destroyed immediately after the payment, as well as the e-mails you have used to provide the information to the researcher. Receipts for the payment of the fee will be stored for reporting to the funder (Kone Foundation), but they will be destroyed at the end of the study and no later than 31 December 2031.
After the research project has been completed, the research records containing personal data will be:
- destroyed in their entirety
- anonymised and archived without personally identifiable information.
8. Profiling and automated decision-making
I will not use your personal data for profiling or automated decision-making.
9. Data subjects’ rights and how to exercise them
Data protection legislation affords certain rights to data subjects, depending on the lawful basis for processing their personal data. Under certain circumstances, your rights may be restricted, for example, due to our legal obligations or if personal data are processed for scientific research, statistical or archiving purposes. If your rights have been restricted, I will implement appropriate and necessary technical and organisational measures to protect your privacy. As a data subject, you have the following rights which you can exercise by sending us a request.
Right of access
You have the right to request confirmation of whether I hold your personal data and to receive a copy of the data I hold.
Right to rectification
You have the right to request that any incorrect or incomplete personal data I hold about be revised or supplemented. You can also request to have any unnecessary personal data erased from our records.
Right to restrict processing
You may have the right to restrict the processing of your personal data in certain cases defined by law. For example, this right may apply if you believe the personal data I hold about you is incorrect or that your data are being processed in violation of data protection legislation, or if you have opposed the processing of your data.
Right to object
In certain circumstances, you have the right to object to the processing of personal data on grounds relating to your particular situation.
Right not to be subject to automated decision-making
You have the right not to be subject to decisions based solely on automated processing (such as profiling) that produce legal effects concerning you or otherwise similarly and significantly affect you. However, there are exceptions to this prohibition.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority (Data Protection Ombudsman), if you believe that the processing of your personal data violates data protection legislation.
Office of the Data Protection Ombudsman
Street address: Lintulahdenkuja 4, FI-00530 Helsinki, Finland
Postal address: PO Box 800, FI-00531 Helsinki, Finland
Switchboard: +358 29 56 66700
Fax: +358 29 56 66735
Email address: tietosuoja@om.fi