DATA PROTECTION NOTICE FOR SCIENTIFIC RESEARCH
General Data Protection Regulation of the EU Articles 12–14, date 30.9.2021
Information on the processing of personal data in the research project entitled ‘The new Tampere casino: Laying foundations for a longitudinal qualitative study on the impact on gambling behaviour, harm, and the community’ (Short: TRESINO-LONG)
The research project entitled ‘The new Tampere casino: Laying foundations for a longitudinal qualitative study on the impact on gambling behaviour, harm, and the community’ involves processing of personal data. The purpose of this data protection notice is to provide information on the personal data to be processed, from where they are obtained and how they are used. Detailed information on the rights of data subjects will be provided at the end of this notice.
Your participation in the research project and provision of personal data are voluntary. If you do not wish to participate in the project or you wish to withdraw from it, you can do so without negative consequences.
- Data Controller
University of Helsinki, Faculty of Social Sciences, University of Helsinki Research Centre for Addiction, Control, and Governance CEACG
Siltavuorenpenger 1A, 00014 University of Helsinki (SUOMI/FINLAND)
Contact person: Michael Egerer
Tel. +358 2941 23919
- Contact person and principal investigator
Dr. Soc. Sc. Michael Egerer (University researcher)
Tel. +358 2941 23919,
P.O. Box 9 (Siltavuorenpenger 1A)
FIN-00014 University of Helsinki
- Contact details of the data protection officer
You can contact the University of Helsinki data protection officer via email at firstname.lastname@example.org.
- Description of the research project and the purpose of processing personal data
The purpose of the TRESINO-LONG study is to produce reliable and up-to-date information on the effects of the Veikkaus casino, which will be opened in Tampere, on players’ gambling consumption and behavior, gambling disadvantages and the community in the Tampere region and throughout Finland. The interviews will be conducted at three different points in time.
- Personal data included in the research data
Personal identifying data (name, contact details) collected into the TRESINO-LONG personal register will only be used during the collection of the research data for the purpose of contacting research participants.
Participants are asked to indicate age, gender, family situation, income and education information, as well as mother tongue and regional information as background information. This information is not combined with the personal identifying data (name, contact details).
- Sources of personal data
Personal data will be obtained from the research participants.
- Sensitive personal data
No special categories of personal data (i.e., sensitive data), as defined in Article 9 of the GDPR, will be processed in this research.
- Lawful basis for processing personal data
Personal data are processed on the following basis (Article 6(1) of the GDPR):
Task carried out in the public interest.
- Recipients of data
All members of the research group have to sign a non-disclosure statement, before getting access to the data. Research collaborators can have access to the pseudonymised interview transcripts. Anonymised transcripts are available for educational purposes, such as university seminars. The tape recordings are available for the research group and, if necessary (i.e. when a clear co-operation plan with Dr. Egerer has been drawn), to research collaborators upon signing a non-disclosure statement.
- Transfer of data to countries outside the European Economic Area
Data will not be transferred to countries outside the European Economic Area.
- Automated decision-making
The research project involves no automated decision-making that has a significant effect on data subjects.
- Protection of personal data
Personal data included in the research dataset will be processed and kept protected so that only those who need the data can access them.
The data processed in data systems will be protected using the following:
Username and password
Registration/log of use
Physical material (e.g., data in paper form or other tangible form) will be protected using the following: stored in a locked cabinet in the office of Dr. Egerer.
Processing direct identifiers:
Direct identifiers will be removed during the analysis stage and kept separate from the analysed research data (i.e. the data will be pseudonymised).
- Duration of the processing of personal data in this research project:
Until the year 2030
- Processing of personal data when the research project ends
The research data will be kept for later, compatible scientific research in accordance with the requirements of the GDPR:
The storage of the research data is based on Article 5(1)(b) and (e) of the GDPR.
Before the data can be used for other research, the controller will ensure that the new use is compatible with the initial purpose in accordance with the requirements of the GDPR. Data subjects will receive a new data protection notice on the new use of the research data, unless the controller can no longer identify the subjects from the data.
In addition, the data subjects will not be informed of the new research if delivering this information to them is impossible or involves a disproportionate effort or renders impossible or seriously impairs the achievement of the research objectives (Article 14(5)(b) of the GDPR).
Where and for how long will the data be stored:
The interview transcripts including the interviewee’s background information will be stored in the Finnish Social Science Data Archive maintained by the University of Tampere. The FSD archives and transmits research materials for research, teaching and study.
The personal identifying data (name and contact information), will be destroyed two years after having conducted the third interview. Interview recordings will be destroyed 10 years after the research has been finished, transcripts and background information that are not eligible to be archived at the Finnish Social Science Data Archive, 20 years after the research.
- Rights of data subjects and derogations from those rights
The contact person in matters related to research subjects’ rights is the person stated in section 1 of this notice.
Rights of data subjects
Under the General Data Protection Regulation, data subjects have the following rights:
- Right of access to their data
- Right to rectification of their data
- Right to the erasure of their data and to be forgotten
- Right to the restriction of processing of their data
- Right to data portability
- Right to object to the processing of their data
- Right not to be subject to automated decision-making
However, data subjects cannot exercise all their rights in all circumstances. The circumstances are affected by, for example, the legal basis for processing personal data.
Further information on the rights of data subjects in various circumstances can be found on the website of the Data Protection Ombudsman: https://tietosuoja.fi/en/what-rights-do-data-subjects-have-in-different-situations.
If data subjects cannot be identified
If the processing of personal data for research purposes does not require the identification of the data subject and if the controller is unable to identify the data subject, the right to access, rectify, erase and restrict the use of personal data, as well as any notification obligations and the right to data portability do not apply unless the data subject provides additional data enabling their identification (Article 11 of the GDPR).
Derogations from rights
The General Data Protection Regulation and the Finnish Data Protection Act enable derogations from certain rights of data subjects if personal data are processed for the purposes of scientific research and the rights are likely to render impossible or seriously impair the achievement of the research purposes.
The need for derogations from the rights of data subjects will always be assessed on a case-by-case basis.
Right to appeal
If you consider that the processing of your personal data has been carried out in breach of data protection laws, you have the right to appeal to the Office of the Data Protection Ombudsman.
Office of the Data Protection Ombudsman
Street address: Ratapihantie 9, 6th floor, 00520 Helsinki
Postal address: PO Box 800, 00521 Helsinki
Phone (switchboard): 029 56 66700
Fax: 029 56 66735