Data protection notice for study participants
The purpose of the following data protection notice is to outline how your personal information is collected and processed by our company. Moreover, we would like to explain why we collect what data, and what rights you have in this context.
KDA and the sponsor of the study are obligated to adhere to the EU’s General Data Protection Regulation (GDPR) and the German Data Protection Act, as well as to national and international rules of conduct for market surveys. Your contact details (e.g. name, address, telephone number, e-mail address) are treated confidentially and are not passed on to the sponsor(s) of the study.
Data collection is the responsibility of KDA Marktforschung GmbH (see address in the site notice).
Method and purpose of using personal information
Within the scope of your participation in the study, we collect the following information:
- Your contact details (e.g. name, address) stated in the participation agreement. It serves as confirmation of your contribution and received expense allowance, and it informs you about the study.
- Your responses given during the interview are pseudonymised, i.e. they are analysed without your name or other personal data. Once the study is completed, the data are completely anonymised as soon as possible.
- Should you participate in a monitor study, your contact details and your responses given during the interview will be stored for follow-up interviews and data reconciliation. As soon as you quit the monitor study, your contact details are deleted and the responses you gave during the interview are anonymised completely.
Legitimacy of data processing and period of storage
If the interview involves questions about your own state of health or that of a loved one, we require your consent for data processing (Art. 6 paragraph 1 a, Art. 9 paragraph 2, letter a of GDPR).
The participation agreement serves as a supporting document and is stored for 10.5 years after your participation in accordance with legal requirements. For usability research, the recording of the discussion is destroyed no later than 10.5 years after your participation. For market research, the recording of the discussion is destroyed no later than 5.5 years after your participation.
Transmission of data to third parties
Aside from our own members of staff, only the following categories of recipients receive your data from us to a limited extent:
- Contact details: if the participation agreement serves as a receipt for the received fee, we forward it to our tax accounting firm.
- Recording of the discussion: recordings may be passed on to external collaborators of KDA, so-called data analysts, to the sponsor of the study, e.g. an international market research institute and/or a pharmaceutical company. This only occurs with your explicit consent.
Observations and uses of recordings are only permitted to those persons who have signed the “Personal commitment to compliance with the data protection requirements of the General Data Protection Regulation (GDPR)” or a comparable document of the client and have sent it to the performing institute/studio/client beforehand.
Your data may be transmitted to recipients in countries outside of the European Union or outside of the European Economic Area. However, this only applies to recordings of the discussion, not to your contact details.
You have the following rights under the EU’s General Data Protection Regulation:
- You may withdraw your given consent at any time by contacting the responsible project manager. In case of a revocation, we may still process the concerned data insofar as this is required in order to fulfil legal obligations.
- You may request information about your personal data processed by us, particularly about the purpose of processing, the category of personal data and the categories of recipients to whom your data have been disclosed.
- You may immediately request the rectification or completion of your personal data stored by us.
- You may request that we delete your personal data stored by us.
- You may request that we restrict our use of your personal data.
- You have the right to receive the personal data that you have provided us with in a structured, standard, and machine-readable format, and to request a transfer to another responsible party.
- You have the right to contact our data protection officer Hans Dethlefsen (firstname.lastname@example.org, Tel.: 069-973077-0) or to file a complaint with the competent regulatory authority for data protection.
- You have the right of objection. Provided that your personal data are processed based on a legitimate interest pursuant to Art. 6 paragraph 1, letter f of GDPR, you have the right to file an objection against the processing of your personal data, as per Art. 21 of GDPR, insofar as there are reasons arising from your particular situation.