Data protection declaration / declaration of consent for inclusion in a database of test persons and the associated processing of personal data for the purposes of scientific research
— here the Central Experimental Server of Psychology (ZEP) at Technische Universität Dresden —
1. For what purpose will personal data be processed?
Scientific, psychological research depends on the voluntary participation of suitable test persons. The Central Experimental Server of Psychology (ZEP) supports the efficient selection and recruitment of test persons for psychological research at Technische Universität Dresden. ZEP users register independently and voluntarily to be potential test persons, whereupon they will receive non-binding invitations to participate in psychological studies, which they are free to accept or decline voluntarily. The ZEP is therefore used exclusively for the recruitment of test persons and for scheduling studies.
Personal data will be processed (processing in the sense of collection, storage, modification and use) solely for the above-mentioned purposes, which are exclusively related to scientific research. Voluntary and informed consent is required for this purpose.
2. Who is responsible for the processing?
Technische Universität Dresden
01062 Dresden
Faculty of Psychology
Chair of Psychological Methods and Cognitive Modelling
Phone: +49 351 463-34695
Fax: +49 351 463-33522
Email: zep@mailbox.tu-dresden.de
3. Is the processing of my personal data lawful?
The legal basis for the processing of personal data is in particular Art. 6 para. 1 lit. a) GDPR in conjunction with Section 12 of the Saxon Data Protection Implementation Act (Sächsisches Datenschutzdurchführungsgesetz – SächsDSDG) and Sections 4-45 of the Act on the Autonomy of Institutions of Higher Education in the Free State of Saxony (Sächsisches Hochschulfreiheitsgesetz – SächsHSFG).
4. What personal data is processed?
The declaration of consent covers the processing of the following personal data of the test person:
- Required personal information: Salutation; First name; Surname; Date of birth; Street and house number; Postal code; City; Country; Email address; Telephone number; Gender; Handedness; Student status; School-leaving qualification; Highest professional qualification; Native language
- Optional personal information: Field of study; Start date of studies; Semester; IBAN; Occupation; Occupation with managerial responsibility; Employment relationship; Other work experience; Mini-job/temporary job; Duration of mini-job; Second language learnt before the age of 6, Foreign languages with proficiency level; Musical training; Information on musical training; Driving license; Year driving license was obtained; Annual mileage driven; Safety training; Year safety training was completed; Professional driving experience; participation in a TMS study; participation in an MRT study; only participation with remuneration desired
- Data created by the system: Timestamp of profile creation; Timestamp of successful/incorrect registrations; Timestamp of profile changes; Information on invitations to experiments received; Information on registration and participation in experiment
5. Is personal data transferred to third parties? Who has access to the data in order to use it for research projects?
Unless otherwise stipulated by law or you have given your explicit consent in individual cases, no personal data will be transferred to third parties.
Only the following parties have access to the data:
- Members of the Chairs involved in the ZEP (i.e. professors, research assistants, student assistants with a valid employment contract),
- Staff members of the Neuroimaging Center (NIC) at Technische Universität Dresden,
- In exceptional cases, the persons designated by both above-mentioned parties in the given research project. These may be members of the faculty and, if applicable, employees of university and non-university partners, if they are involved in the project. In any case, it is ensured that this group of persons is bound to the provisions of data protection.
6. How long will personal data be stored?
Personal data is stored and used until consent is withdrawn. To ensure that an active pool of test persons is maintained, all users whose last profile activity took place more than half a year back are contacted every six months – on October 15 and March 15 of each calendar year – with a request to update their profile. If they do not do so within one month, the corresponding profiles and thus the personal data of the users will be deleted.
7. What are my basic rights?
To exercise your rights, a notification in text form (letter, email or fax) to the responsible person is sufficient.
1) Voluntariness and withdrawal (Art. 7 (3) GDPR)
The provision of personal data is voluntary. Consent to the processing of personal data may be withdrawn at any time pursuant to Art. 7 (3) GDPR with the consequence that the personal data of the person concerned will not be further processed.
2) Right of access (Art. 15 GDPR)
Participants have the right to request information about the data processed about them and the possible recipients of this data at any time. They are entitled to a reply within a period of one month after receipt of the request for information.
3) Right to rectification, erasure and restriction (Art. 16–18 GDPR)
Participants may at any time request that TU Dresden rectify, erase or restrict the processing of individual personal data.
4) Right to data portability (Art. 20 GDPR)
Participants may request that the person responsible transfer their personal data to them in a machine-readable format. Alternatively, they may request the direct transfer of the personal data they have provided to another controller, where this is possible.
5) Right to object (Art. 21 GDPR)
If the Service Desk processes personal data of participants based on a legitimate interest, these participants have the right to object to the processing.
6) Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Participants may contact the TU Dresden data protection officer and the supervisory authority for data protection at any time if they would like to lodge a complaint pursuant to Art. 77 GDPR.
TU Dresden Data Protection Officer
TU Dresden
Data Protection Officer
Mr Jens Syckor
01062 Dresden
Email: informationssicherheit (at) tu-dresden.de
Tel.: +49 (0)351 463 32839
|
Supervisory Authority
Saxon Data Protection Commissioner
Dr. Juliane Hundert
Devrientstr. 5
01067 Dresden
Email: post (at) sdtb.sachsen.de
Telefon: +49 (0) 35185471 101
|
| 