Data protection information sheet
1. Person responsible for data protection
Data processing is carried out by the University Medical Center Hamburg-Eppendorf (UKE), public corporation, Martinistr. 52, 20246 Hamburg. The following persons at the UKE are responsible for the use of personal contact data collected and the processing of the personal data collected in the online questionnaire:
Dr. med. Thomas Theo Brehm
I. Medical Clinic and Polyclinic
Section of Infectiology
PD Dr. med. André Hajek
Center for Psychosocial Medicine
Department of Health Economics and Health Services Research
2. Data protection information regarding the data collected by the questionnaire
2.1 Categories of personal data concerned
The survey is conducted through an online questionnaire created with LimeSurvey. The questionnaire collects some information about you, such as your gender, age, and statements about your attitudes and experiences. However, no personal identifying data such as surname, first name, addresses or similar are collected, nor are the IP addresses of the participants stored. The persons contacted are free not to participate in the survey or to leave individual questions unanswered. By participating in the survey, the person concerned is giving consent to the further processing of the data obtained.
3.1 Purpose of processing and legal basis
The information provided in the online questionnaire ("research data") is used by the UKE for scientific research. The research data will be evaluated using scientific methods exclusively on a group statistical basis, so that no conclusions can be drawn about your person, and will be used for any resulting publications. The legal basis for the processing of the research data is Art. 6 para. 1 lit. a. DSGVO.
3.2 Recipients of the data
The main recipients of the data collected by the questionnaire are the persons mentioned under 1. above. However, the responsible persons reserve the right to involve other scientific staff members of the Department of Health Economics and Health Services Research and the I. Medical Clinic and Polyclinic at the University Medical Center Hamburg-Eppendorf (UKE) for the evaluation of the research data, if necessary.
3.3 Storage period
The research results and research data will be stored at the UKE for 10 years after project completion as proof of good scientific practice and archived in a research data center.
4. Data subject rights
The DSGVO provides for so-called data subject rights, i.e. rights that you can exercise as a data subject in an individual case. You can assert these rights against the UKE. Due to the different processing of contact data and data collected by the questionnaires, the data subject rights that you can assert vary. In principle, the DSGVO provides for the following data subject rights:
- Right of access: You have the right of access to the personal data concerning you that are collected, processed or, if applicable, transferred to third parties in the context of the clinical study (handing over of a free copy) (Article 15 DSGVO).
- Right to rectification: You have the right to have inaccurate personal data concerning you rectified (Articles 16 and 19 DSGVO).
- Right to erasure: You have the right to have personal data concerning you erased, for example, if that data is no longer necessary for the purpose for which it was collected (Articles 17 and 19 DSGVO).
- Right to restriction of processing: Under certain conditions, you have the right to request restriction of processing, i.e. the data may only be stored but not processed. You must request this. To do so, please contact your study director or the data protection officer of the study center (Articles 18 and 19 DSGVO).
- Right to data portability: You have the right to obtain the personal data relating to you that you have provided to the clinical trial controller. This allows you to request that this data is transferred either to you or, where technically feasible, to another entity designated by you (Article 20 DSGVO).
- Consent to the processing of personal data and right to withdraw this consent: The processing of your personal data is only lawful with your consent (Article 6(1)(a) DSGVO). Consent is voluntary. You have the right to revoke your consent to the processing of personal data at any time without giving reasons. However, the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Neither non-participation nor revocation will have any disadvantages for you. In the event of revocation, your personal data must generally be deleted (Article 7, paragraph 3 DSGVO). However, there are exceptions according to which data collected up to the time of the revocation may be further processed, e.g. if the further data processing is necessary for the fulfillment of a legal obligation (Article 17, paragraph 3 b DSGVO).
With regard to contact data, you as the data subject have the right to information, correction, deletion, restriction of processing, as well as the right to data portability. In addition, you have the right to object to the processing of your contact data on the basis of the legitimate interest of the UKE in accordance with Art. 21 DSGVO. By participating in the online survey, you consent to the collection and processing of the research data.
During the contacting and collection of the research data with LimeSurvey, we use a pseudonymous privacy mode, which is held in trust by LimeSurvey. Therefore, once the survey is completed, no subsequent participant-related deletion will be possible. For this reason, consent to the collection and processing of data from the questionnaire is irrevocable. Further processing of the research data after completion of the survey will be anonymized. The persons concerned are free not to participate in the survey due to data protection concerns, and there will be neither advantages nor disadvantages for them.
5. Complaint possibilities
We make every effort to process your personal data in accordance with legal requirements. If you have any questions about data processing, you can contact the UKE's data protection officer for further information:
University Medical Center Hamburg-Eppendorf
- Data Protection Officer -
Tel.: 040/7410 56890
In addition, you also have the option of contacting a supervisory authority with a complaint. The jurisdiction of a supervisory authority depends, among other things, on the registered office of the responsible body, the federal state of your place of residence, your place of work or the alleged data protection violation. Responsible for the UKE is:
The Hamburg Commissioner for Data Protection and Freedom of Information.
Tel.: 040/42854 4040
Fax: 040/42854 4000