{"id":81,"date":"2023-10-30T12:04:29","date_gmt":"2023-10-30T10:04:29","guid":{"rendered":"https:\/\/blogit.utu.fi\/managementnatura2000\/?page_id=81"},"modified":"2023-10-30T12:32:39","modified_gmt":"2023-10-30T10:32:39","slug":"privacy-notice-for-research-data","status":"publish","type":"page","link":"https:\/\/blogit.utu.fi\/managementnatura2000\/?page_id=81","title":{"rendered":"Privacy Notice for Research Data"},"content":{"rendered":"\n

1. Data controller of the research<\/strong><\/p>\n\n\n\n

University of Turku, FI-20014 Turku, Finland<\/strong><\/p>\n\n\n\n

2. Parties involved in research conducted as a collaboration project and division of responsibilities<\/strong><\/p>\n\n\n\n

The research is carried out as part of the Biodiversa (BioDivProtect) project \u201cScenarios for protecting European Avian redistributions\u201d SPEAR, which is funded by the European Union and the Finnish Ministry of the Environment. The research is a collaboration between the University of Turku (creation of the questionnaire and analysis), Tour du Valat (creation of the questionnaire and analysis)<\/em> and Eurosite (distribution).<\/em><\/p>\n\n\n\n

3.  Research project leader or responsible group <\/strong><\/p>\n\n\n\n

Project leader: Jon Brommer<\/em><\/p>\n\n\n\n

Email: jon.brommer@utu.fi<\/em><\/p>\n\n\n\n

4. Contact information of the Data Protection Officer<\/strong><\/p>\n\n\n\n

Contact information of the Data Protection Officer at the University of Turku: dpo@utu.fi<\/p>\n\n\n\n

5. Persons conducting research<\/strong><\/p>\n\n\n\n

Giorgio Zavattoni, Elie Gaget, Jon Brommer<\/em><\/p>\n\n\n\n

6. Contact person in matters related to the research registry<\/strong><\/p>\n\n\n\n

Name: Giorgio Zavattoni<\/em><\/p>\n\n\n\n

Email: giorgio.zavattoni@utu.fi<\/p>\n\n\n\n

7. Name of the research registry<\/strong><\/p>\n\n\n\n

Questionnaire on management in Natura 2000 sites<\/p>\n\n\n\n

8. Purpose of processing personal data<\/strong><\/p>\n\n\n\n

The survey does not collect the person’s name, contact information or similar personal information. However, we are asking respondents to specify which Natura2000 protected area they manage as well as details of the management they have been responsible for in that particular protected area. With the ID of the protected area, the identity of the respondent can be either fully or at least partially inferred. Therefore, the ID of the protected area can be considered an identifier and can, at least partly, be used to infer the respondent\u2019s management actions. This survey data is collected to investigate the use and effectiveness of local conservation management actions, especially in connection to climate change. In addition, as the gathering of the data is funded by E.U. public money, the collected survey data is a product in itself and will be made publicly available. To facilitate future use the data will be made publicly available including the ID of the protected site.<\/p>\n\n\n\n

9. Legal basis for processing personal data<\/strong><\/p>\n\n\n\n

The legal basis for processing personal data is the Article 6 or Article 9 of the EU General Data Protection Regulation.<\/p>\n\n\n\n

The EU General Data Protection Regulation, Article 6 Section 1 (select one basis for processing data for each usage):<\/p>\n\n\n\n

X consent of the data subject<\/p>\n\n\n\n

\u2610 compliance with the data controller’s legal obligation<\/p>\n\n\n\n

      legislation: <\/p>\n\n\n\n

\u2610 task carried out in the public interest or in the exercise of official authority vested in the controller<\/p>\n\n\n\n

X scientific of historic research or statistical purposes<\/p>\n\n\n\n

\u2610 archiving research or cultural heritage materials<\/p>\n\n\n\n

\u2610 \u200b\u200blegitimate interests pursued by the controller or by a third party<\/p>\n\n\n\n

     which legitimate interest:<\/p>\n\n\n\n

 \u200b\u200b\u200b<\/p>\n\n\n\n

Article 9 of the EU General Data Protection Regulation (special categories of personal data):<\/p>\n\n\n\n

\u2610 consent of the data subject<\/p>\n\n\n\n

x \u200barchiving purposes in the public interest, scientific or historical research purposes or statistical purposes<\/p>\n\n\n\n

10. What categories of personal data the research data includes<\/strong><\/p>\n\n\n\n

The survey does not collect the person’s name or contact information. We are collecting data connected to protected area, which means the identity of the respondent can be at least partially inferred by knowing who works in the management of such areas.<\/em><\/p>\n\n\n\n

11. Which sources the personal data is collected from<\/strong><\/p>\n\n\n\n

The questionnaire is created and distributed using Shiny, an open source R package.<\/em><\/p>\n\n\n\n

12. Transfers or disclosures of data outside the research group<\/strong><\/p>\n\n\n\n

The data will be used to create a database that will be made public upon publication of the research.<\/em><\/p>\n\n\n\n

13. Transfers or disclosures of data outside the EU or the European Economic Area<\/strong><\/p>\n\n\n\n

The data will be used to create a public database on the basis of Article 49: derogations and safeguards, condition d): the transfer is necessary for important reasons of public interest.<\/em><\/p>\n\n\n\n

14. Automated decision-making<\/strong><\/p>\n\n\n\n

The processing does not include automatic decision-making or profiling.<\/em><\/p>\n\n\n\n

15. Principles of safeguarding personal data<\/strong><\/p>\n\n\n\n

Safeguarding manual data:
 
The data processed in the information systems is safeguarded with the following measures:

account credentials and password 

Processing direct identifiers:

The data has no direct personal identifiers, but includes the identifier \u201cprotected area ID\u201d which can be interpreted as an indirect identifier of the person responsible for that particular protected area.  Data is analysed keeping the \u201cprotected area ID\u201d because it is essential to connect the responses to the correct protected area.<\/p>\n\n\n\n

16. Processing of data after the research has ended<\/strong><\/p>\n\n\n\n

The data will be archived in a password-protected cloud server and on external hard drives with access restricted to members of the research team. The data will be made public with the identifier (protected area ID) upon publication of the research results.<\/p>\n\n\n\n

17. Rights of the data subjects and possible limitations to them<\/strong><\/p>\n\n\n\n

The data subject has a right to cancel the consent they have given if the processing of personal data is based on consent.<\/p>\n\n\n\n

The data subject has the right to lodge a complaint with the supervisory authority if the data subject considers that the processing of personal data related to him\/her has violated the information security legislation currently valid. <\/p>\n\n\n\n

The rights of the data subject under the GDPR can be deviated from in scientific research with the following safety measures:<\/em><\/p>\n\n\n\n