EU General Data Protection Regulation
Art. 12 to 14
Date: 11 Dec 2022
Controller for the processing of personal data
The organization responsible for the processing of personal data is the University of Helsinki
University of Helsinki
00014 Helsingin yliopisto
Contact persons for the processing described in this notice are:
Josefina Sipinen, Postdoctoral Research Fellow, Faculty of Social Sciences, University of Helsinki, firstname.lastname@example.org
Åsa von Schoultz, Professor (Political Science), Faculty of Social Sciences, University of Helsinki, email@example.com, tel. +358 50 303 5686, +358 29 412 4822
Contact details for the Data Protection Officer
You can contact the Data Protection Officer by email: firstname.lastname@example.org
Who are the parties involved in the processing and what are their responsibilities?
The research project is led by the University of Helsinki with partners from University College Cork and the University of Liège. University of Helsinki is responsible for the collection of the survey data. Before analysing the data, researchers at the University of Helsinki will anonymise the data, i.e. recode and/or remove information that is sufficient on its own to identify an individual. Partners from the University College Cork and the University of Liège will only have access to this anonymised data.
Why do we process your personal data and what is the lawful basis for processing?
MOBILEU is an EU funded project investigating the voting rights of mobile non-resident citizens. The purpose for the processing of your personal data is to acquire information about non-resident citizens’ attitudes towards their voting rights in their country of origin.
The legal basis for processing is scientific research purposes.
What personal data do we process?
We process the following data:
- Attitudes towards the political rights of non-resident citizens
- Engagement in politics in the country of origin and in the country of residence (e.g. political orientation, political interest, trust in politics, satisfaction with the political system, voting)
- Age, gender, education, citizenship, native language, own and parents’ country of birth, current country of residence, length of residence abroad, reason for migration
Before analysing the data, researchers at the University of Helsinki will recode and/or remove direct identifiers, i.e. information that is sufficient on its own to identify an individual.
The processing includes the following information that is regarded special category data in the light of data protection regulation:
- political opinions
The processing of special category data is necessary for scientific research.
What are the sources for personal data?
Personal data is voluntarily provided by the respondents themselves.
Do we disclose your personal data to third parties?
We do not disclose your personal data to third parties.
For how long do we process and retain your personal data?
We anonymise the data directly after the data collection has ended. The research data are offered for permanent archiving without personal data at the Finnish Social Science Data Archive. The Archive may hand over the data for reuse to registered clients for research, teaching and study.
Transfers of personal data to countries outside the EU/European Economic Area
The data is not transferred outside the EU/EEA.
What rights do you have?
The contact details in matters concerning the rights of the participant is the contact point mentioned in section 1 of this notice.
Right to withdraw your consent
When the processing is based on your consent, you have the right to withdraw your consent any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before the withdrawal.
Right to access
You have the right to know whether we process your personal data and what data we process about you. You have also the right to request for the access to that data.
Right to rectification
You have the right to request for the rectification of inaccurate personal data concerning you. You also have the right to have incomplete personal data completed.
Right to erasure and right to be forgotten
You have the right to request for the erasure of your data from our systems. The data will be erased in the following cases:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
- You withdraw your consent on which the processing was based and there is no other legal ground for the processing
- You object for the processing and there are no overriding legitimate grounds for the processing
- The personal data have been unlawfully processed
- The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject
You do not have the right to erasure, if the processing is necessary:
- For compliance with a legal obligation which requires processing by law
- For the performance of a task carried out in the public interest or in the exercise of official authority
- For archiving purposes in the public interest, scientific of historical research purposes or statistical purposes if the erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing
- For the establishment, exercise or defense of legal claims
Right to restriction of processing
You have the right to request for the restriction of processing. This means that we store the data but do not process it in any other way.
You have this right when:
- The accuracy of the personal data is contested by you. Then the processing will be restricted until the accuracy of the data is verified.
- The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead
- We no longer need the data for the purposes of the processing, but you need the data for the establishment, exercise or defense of legal claims
- You have objected to processing that is based on legitimate interest. Then the processing will be restricted for the time it is verified whether the legitimate ground for the controller override those of the data subject.
Right to lodge a complaint with a supervisory authority
You can always contact us if you have any questions or concerns about the processing of your personal data. However, you have also the right to lodge a complaint with the Data Protection Ombudsman’s Office if you think your personal data has been processed in violation of applicable data protection laws.
Office of the Data Protection Ombudsman
Visiting address: Ratapihantie 9, 6. krs, 00520 Helsinki, Finland
Postal address: PL 800, 00521 Helsinki, Finland
Switchboard: +358 29 56 66700