Data protection notice

Information on the processing of personal data in the research project entitled "The role of English in the integration, employment, and social engagement of academically trained migrants in Finland"
DATA PROTECTION NOTICE FOR SCIENTIFIC RESEARCH

General Data Protection Regulation of the EU

Articles 13–14

Date: 08 November 2023

Information on the processing of personal data in the research project entitled The role of English in the integration, employment, and social engagement of academically trained migrants in Finland

Thank you for your interest in this research. Please read this data protection notice carefully.

The research project entitled The role of English in the integration, employment, and social engagement of academically trained migrants in Finland involves the processing of personal data. The purpose of this data protection notice is to provide information on the personal data to be processed, from where they are obtained and how they are used. Detailed information on the rights of data subjects will be provided at the end of this notice.

Your participation in the research project and provision of personal data are voluntary. If you do not wish to participate in the project or you wish to withdraw from it, you can do so without negative consequences.

1. Data Controller

Joint controllership

University of Helsinki

Address: PO Box (Fabianinkatu 33), 00014 University of Helsinki, Finland

Katariina Pyykkö

Doctoral researcher

katariina.pyykko@helsinki.fi

2. Contact person and principal investigator

Contact person in matters concerning the research project:

Name: Katariina Pyykkö

Faculty/department/unit: Faculty of Arts, Department of Languages

Email: katariina.pyykko@helsinki.fi

 

Principal investigator:

Name: Elizabeth Peterson

Address: PL 24 (Unioninkatu 40) 00014 Helsingin yliopisto

Phone: 050 4482246

Email: elizabeth.peterson@helsinki.fi

3. Contact details of the data protection officer

You can contact the University of Helsinki data protection officer via email at tietosuoja@helsinki.fi.

4. Description of the research project and the purpose of processing personal data

Personal data is processed as part of doctoral research at the University of Helsinki. The researcher is responsible for the practical management of the data, such as the minimization of the data to be processed, the accuracy and the determination of storage periods and the use of appropriate systems/applications. The risks related to the treatment are assessed in cooperation with the supervisor. The University guides and supports the processing of personal data from planning to the publication of the final work and provides the necessary infrastructure and tools to carry out the research.

The researchers of the LAIF research project have a right to view and use the data in research.

5. Personal data included in the research data

The following data is collected and stored from research subjects:

Direct identifiers:

  • email (voluntary, only for arranging interviews)

Indirect identifiers:

  • gender
  • age
  • region
  • language skills
  • level and field of education
  • employment status
  • country of origin
  • time lived in Finland
  • reason for migration

Other personal data:

  • communication (screenshots and notes on daily language use)

Direct identifiers will be excluded and indirect identifiers will be retained, categorised, generalised, or excluded before analysing the data.

6. Sources of personal data

The data will be collected via an online survey, interviews, and observations.

7. Sensitive personal data

No special categories of personal data (i.e., sensitive data), as defined in Article 9 of the GDPR, will be processed in this research.

8. Lawful basis for processing personal data

Personal data are processed on the following basis (Article 6(1) of the GDPR):

☑ Task carried out in the public interest:

☑ Scientific or historical research purposes or statistical purposes

9. Recipients of data

Personal data will not be transferred or disclosed to parties outside the University of Helsinki.

10. Transfer of data to countries outside the European Economic Area

Data will not be transferred to countries outside the European Economic Area, they are processed only within the EEA.

11. Automated decision-making

The research project involves no automated decision-making that has a significant effect on data subjects.

12. Protection of personal data

The survey data is collected with the secure REDCap tool which is installed on the servers of the University of Helsinki.

Personal data included in the research dataset will be processed and kept protected so that only those who need the data can access them.

The data processed in data systems will be protected using the following:

☑ Username and password

☑ Registration/log of use   

◻ Access control 

☑ Encryption 

☑ Two-factor identification 

◻ Other, please specify:

Physical material (e.g., data in paper form or other tangible form) will be protected by storing it in a locked facility that can be accessed by authorised persons alone.

Processing direct identifiers:

☑ Direct identifiers will be removed during the analysis stage and kept separate from the analysed research data.

13. Duration of the processing of personal data in this research project:

The duration of the processing of personal data is determined by the data type. Please refer to section 14 “Processing of personal data when the research project ends”.

14. Processing of personal data when the research project ends

◻ The research data will be deleted

☑ The research data will be kept for the purposes of validating or replicating the results of this research project:

  ☑ without identifiers   ◻ identifiers included

☑ The research data will be kept for later, compatible scientific research in accordance with the requirements of the GDPR:

  ☑ without identifiers   ◻ identifiers included

The storage of the research data is based on Article 5(1)(b) and (e) of the GDPR.

Data subjects will receive a new data protection notice on the new use of the research data, unless the controller can no longer identify the subjects from the data.

In addition, the data subjects will not be informed of the new research if delivering this information to them is impossible or involves a disproportionate effort or renders impossible or seriously impairs the achievement of the research objectives (Article 14(5)(b) of the GDPR).

Where and for how long will the data be stored:

The survey and transcribed interview data will be stored for 10 years after the collection of the data for later, compatible scientific research in accordance with the requirements of the GDPR. Direct identifiers will be excluded from the data and indirect identifiers will be retained, categorised, generalised, or excluded to prevent the identification of individuals. The data are stored on a password-protected external hard drive in a locked facility. The data are removed if a later scientific study has not been started within 10 years of data collection.

The observational data will be stored for 5 years after the research project has ended for the purpose of validating or replicating the results of the research project. Direct identifiers will be excluded from the data and indirect identifiers will be retained, categorised, generalised, or excluded to prevent the identification of individuals. The data are stored on a password-protected external hard drive in a locked facility.

15. Rights of data subjects and derogations from those rights

The contact person in matters related to research subjects’ rights is the contact person stated in section 1 of this notice.

Rights of data subjects

Under the General Data Protection Regulation, data subjects have the following rights:

  • Right of access to their own data
  • Right to rectification of their data
  • Right to the erasure of their data and to be forgotten
  • Right to the restriction of processing of their data
  • Right to data portability from one controller to another
  • Right to object to the processing of their data
  • Right not to be subject to automated decision-making

However, data subjects cannot exercise all their rights in all circumstances. The circumstances are affected by, for example, the legal basis for processing personal data.

Further information on the rights of data subjects in various circumstances can be found on the website of the Data Protection Ombudsman.

Derogations from rights

The General Data Protection Regulation and the Finnish Data Protection Act enable derogations from certain rights of data subjects if personal data are processed for the purposes of scientific research and the rights are likely to render impossible or seriously impair the achievement of the research purposes.

The need for derogations from the rights of data subjects will always be assessed on a case-by-case basis. 

Right to appeal

If you consider that the processing of your personal data has been carried out in breach of data protection laws, you have the right to appeal to the Office of the Data Protection Ombudsman.

Contact details:

Office of the Data Protection Ombudsman

Street address: Ratapihantie 9, 6th floor, 00520 Helsinki

Postal address: PO Box 800, 00521 Helsinki

Phone (switchboard): 029 56 66700

Fax: 029 56 66735

Email: tietosuoja(at)om.fi