PRIVACY NOTICE – HELSINKI LABBET
This document is a description of the processing of personal data in scientific research (Regulation (EU) 2016/679 of the European Parliament and of the Council 13, 14, 30 article).
Helsinki LABBET personal data processing
Helsinki LABBET is a research platform designed to collect detailed personal data from volunteers who have indicated in writing their willingness to receive invitations to economic, social and behavioral decision-making experiments organized by the Hanken School of Economics (Svenska handelshögskolan).
Helsinki LABBET is a research platform that can be used for scientific research projects. Research projects utilizing the platform prepare a description of the operations on the processing of personal data, and inform the registered persons of their rights, in accordance with the data protection policy of the Hanken School of Economics (Privacy and data protection | hanken).
Research projects must also comply with the Code of Conduct of Helsinki LABBET (Laboratory guidelines).
Helsinki LABBET collects the following personal data about the registered persons (record descriptions):
first name
last name
phone number
gender
field of study (if a student)
profession (if employed)
email address
alternative email address
date of birth
approval of data protection policies and general experiment situation rules
record creation date
registered-but-no-show count
language skills
anonymous subject ID
timeslot ID
date of experiment
location of experiment
number of participants
number of those signed-up
experiment ID
experiment name
Legal basis for the processing of personal data on the research platform
☒ The processing is necessary for scientific research purposes and it is proportionate to the aim of public interest pursued (Section 4.1 (item 3) of the Data Protection Act)
☒ Consent of the data subject (EU 679/2016 6.1 a)
The following specific data will not be linked to identifiable personal data on the research platform:
☐ Race or ethnic origin
☐ Political opinion
☐ Religious or philosophical beliefs
☐ Trade union membership
☐ Genetic information
☐ Processing of biometric data for the purposes of unambiguous identification of a person
☐ Health
☐ Sexual behavior and orientation of a natural person
☐ Infringements and criminal convictions
Transfer of personal data outside the EU/EEA
Your data will not be transferred outside the EU/EEA from the research platform or the studies performed on it.
Protection of personal data
The processing of personal data in research conducted with the help of Helsinki LABBET must always be based on an appropriate research and data management plan, and the research must always have a person in charge. Personal data on registered persons will only be used and disclosed for scientific research purposes. Information about registered persons will not be disclosed to outsiders.
Deletion of identifiability
Data collected in research conducted on the Helsinki LABBET research platform is generally anonymous and thus the material is automatically anonymized already at the establishment stage (all identifying information has been completely deleted, and thus there is no return to identifiable information and no new information can be combined with existing data).
If research conducted on the platform deviates from this practice, a separate permission must be obtained from the ethics committee of the Hanken School of Economics. In addition, the research participants must be informed about the matter in advance in the invitation to participate sent from the Helsinki LABBET platform.
Personal data processed on the research platform is protected (select all realized options)
☒ with a username
☒ with a password
☒ with encryption
☒ by registering the users of the platform
A separate data protection impact assessment will be performed in the research conducted on the Helsinki LABBET research platform if required by the data protection legislation. The data protection officer at the Hanken School of Economics will be consulted on the need for and implementation of the impact assessment.
Researchers using Helsinki LABBET are trained in data protection by way of the Code of Conduct.
Processing of personal data after the platform is no longer in use
The information in the register of data subjects is valid until further notice. If a person has not participated in an experiment conducted on the platform within two years, they will be sent a message to the email address provided asking if they wish to remove their information from the register. However, the administrator reserves the right to delete the data in which case the data subject must be notified by sending a message to the email address provided.
Further details on duration and location of archiving
Registrar
Registrar is the one who, alone or together with others, defines the purposes and means of the processing of personal data and is responsible for the lawfulness of the processing of personal data.
The registrar of Helsinki LABBET is:
Hanken School of Economics, Professor Topi Miettinen, topi.miettinen@hanken.fi, tel. +358 40 352 1406, Arkadiankatu 22, PL 479, 00101 Helsinki
Hanken School of Economics, Laboratory manager Tuomas Nurminen, management@helsinkilabbet.fi, Arkadiankatu 22, PL 479, 00101 Helsinki
Data protection officer: Urpo Kaila, urpo.kaila@hanken.fi, operator +358 (0)29 431 331.
Contact person: Topi Miettinen, topi.miettinen@hanken.fi
Tuomas Nurminen, management@helsinkilabbet.fi
Rights of the data subject
Withdrawal of consent
The data subject has the right to withdraw their consent if the processing of personal data is based on consent. Withdrawal of consent shall not affect the lawfulness of the processing carried out based on the consent prior to its withdrawal.
Right to access information
The data subject has the right to receive information on whether their personal data is being processed and what personal data is being processed. They may also request a copy of the personal data being processed.
Right to rectification
If there are inaccuracies or errors in the personal data being processed, the data subject has the right to request their rectification or completement.
Right to delete data
The data subject has the right to request the deletion of their personal data in certain cases. However, there is no right to delete data if the deletion of the data is likely to render impossible or seriously impair the achievement of the purpose of the processing in scientific research.
Right to restrict processing
The data subject has the right to restrict the processing of their personal data in certain circumstances, such as if they dispute the accuracy of their personal data.
The right to transfer the data from one system to another
The data subject has the right to receive the personal data you they provided in a structured, commonly used and machine-readable form, and the right to transfer that data to another registrar if possible and if the processing is performed automatically.
Right to object
The data subject has the right to object to the processing of their personal data if the processing is based on the public interest or a legitimate interest. In this case, Hanken School of Economics will not be able to process the personal data unless it can show that there is a significant and valid reason for processing that overrides the data subject’s right to object.
Derogations for specific situations
The rights described here may be derogated from in certain individual cases on the grounds provided in the Data Protection Decree and the Finnish Data Protection Act. The rights of data subjects may only be derogated from in so far as the rights in question are likely to render impossible or seriously impair the achievement of the scientific or historical research purposes or statistical purposes. The need for derogations must always be evaluated on a case-by-case basis.
Profiling and automated decision making
In research, the data subject’s personal data will not be used for automatic decision making. In research, the purpose of processing personal data is not to assess personal characteristics, i.e. profiling, but identifying personal data will only be used for organizing experiments and for sending out invitations. Data collected in actual research is anonymous, cannot be linked to identifying personal data, and will only be used for scientific research.
Exercise of the data subject’s rights
If you have any questions about the data subject's rights, you can contact the data protection officer at Hanken School of Economics: dpo@hanken.fi.
Reporting data security breach
A data security breach or a suspicion of it must be reported to the data protection officer at Hanken School of Economics: dpo@hanken.fi.
You have the right to lodge a complaint with a supervisory authority, in particular in your place of habitual residence or place of work, if you consider that the processing of personal data infringes the general EU data protection regulation (EU) 2016/679. In Finland, the supervisory authority is the Data Protection Ombudsman.
UP-TO-DATE CONTACT INFORMATION OF THE OFFICE OF THE DATA PROTECTION OMBUDSMAN: https://tietosuoja.fi/en/home |