Informationen für Studienteilnehmer

Information for research participants

Here we would like to inform you about some general regulations and your rights in connection with participation in scientific experiments. These are based on the regulations of the EU Commission, as documented in the GDPR (General Data Protection Regulation), as well as on general regulations of the Ethics Committee (see here). These documents contain a lot of legalese and can be intimidating - we apologize for that. Ultimately, however, most of the regulations are straightforward and if you have any questions, please feel free to contact us at any time.

Please note that all studies where personal data is processed are subject to the following conditions:

Things you should know before starting an experiment:

  • The provision of personal data by the participating person (i.e. you) is necessary to enter into a contract, i.e. to participate in the study, if this is necessary for the conduct of the study. For example, in order to plan your participation times, we need your contact details. If you do not wish to provide personal data that is essential for the purpose of the study, you will automatically be excluded from the recruitment process.

  • Participation is only possible if you have given your written or verbal consent as a research participant. This consent also includes the processing of your personal data as described here.

  • You will receive detailed information on the protection and specific processing of personal data as part of the consent procedure for each of our studies.

General information on the processing of your data:

  • You have the right to be informed about the purposes of the processing of your personal data. This includes the legitimate interest pursued by Osnabrück University (representative: Prof. Dr. P. König for experiments of the NBP group) and the legal basis of the processing (GDPR), which is explained here. The original documents can be accessed via the link at the top of this page. As the interests may vary depending on the purpose of the experiment, the exact purpose of each study is described in detail in the respective consent procedure. By reading the information and signing the consent form, participants (i.e. you) consent to the processing of their personal data for the purposes stated in the information statement.

  • You have the right to be informed about the recipients or categories of recipients of your personal data. This means that we will never share your personal data without a clear description of the persons or institutions that will have access to your data. If applicable, we will clearly indicate the contact details and exact purposes of all parties who have access to your data.

  • You can request access to your personal data at any time - even after your participation - and request that it be corrected or deleted. You also have the right to restrict or object to the processing of your personal data. Finally, you have the right to data portability, i.e. you can request and/or prevent us from transferring your personal data to another platform or service. Please note that this right expires when the personal data has been irrevocably deleted or completely anonymized, as in this case access to the data is no longer possible.

  • You can also withdraw your consent to the processing of your personal data at any time. Once you have withdrawn your consent, your data will be irrevocably deleted and no longer analyzed. Please note that the withdrawal of consent does not retroactively render the processing that took place up to the time of withdrawal unlawful. If your personal data has already been irrevocably deleted or anonymized, the right of withdrawal does not apply.

  • If automated decision-making processes or profiling are used for a study, you have the right to be informed about this. This means that in such cases we will explain to you the underlying logic and the possible consequences of this processing. However, none of our studies make decisions based solely on automated processing that could have a significant impact on participants or have legal consequences.

  • If personal data is to be further processed for purposes other than the original purposes, you will be informed of this in advance. If this is the case, you will receive a precise description of the new processing purpose and all relevant information in accordance with Article 13 of the GDPR. Further processing will only take place with the participant's renewed written or verbal consent. Please note that in accordance with good research practice, a growing number of studies are making experimental data available to other researchers in anonymized form. This anonymized data can then be analyzed and processed by other researchers without the need for further consent or separate information about this processing. The above-mentioned information obligations therefore only apply to non-anonymized data. As anonymized data cannot be linked to your identity, no further data protection regulations apply to it.

After the experiment:

  • If personal data is required solely for contacting participants (e.g. to make an appointment), it will be irrevocably deleted two weeks after participation. If the processing of personal data is essential for the purpose of the experiment, research participants will be informed about the storage period as part of the consent procedure.

  • Finally, you have the right to complain to a supervisory authority during or after participation in one of our studies, e.g. if you have doubts about the legality of the study procedures. We recommend that you first contact one of our internal data protection offices (see below). However, you have the right to contact an independent supervisory authority such as the European Data Protection Supervisor (EDPS) at any time:  Link to the EDPS complaints page.

In accordance with Article 13 of the European Commission's General Data Protection Regulation (GDPR), we inform research participants of the following:

  • Controller for the processing of personal data:

    • Osnabrück University, Representative: Prof. Dr. Peter König (e-mail: pkoenig@uos.de)

  • Contact details of the Data Protection Officer (DPO), who can be contacted internally for questions regarding the processing of personal data:

    • Dipl.-Kfm. Björn Voitel, CISM, CRISC, CISSP-ISSAP, CSSLP, SSCP

    • Data Protection Officer / IT Security Officer

    • Phone: +49 541 969 7880

    • Fax: +49 541 969 17880

    • Room 94/122

    • Data Protection & IT Security Unit

    • Nelson-Mandela-Straße 4

    • 49076 Osnabrück

    • E-mail: datenschutzbeauftragter@uni-osnabrueck.de

Official website (source):
 https://www.uni-osnabrueck.de/universitaet/organisation/zentrale-verwaltung/datenschutz-und-it-sicherheit/