Please read this Statement carefully and only continue with answering the survey if you understand and agree to everything written in this statement. Participation in the survey is voluntary and free of charge. The authors of the survey may not obtain any information about you without your prior knowledge and agreement. Respondents have no costs for participating in the survey; also do not receive any award from the 1KA.si part.
- People who participate in survey research (hereinafter referred to as respondents);
- Individuals that carry out surveys within 1KA (hereinafter surveys’ editors) or any other person who sent you the link to the survey or otherwise invited you to take part in it;
- EnKlikAnketa and Centre for Social Informatics, Faculty of Social Sciences, Kardeljeva ploščad 5, Ljubljana (hereinafter 1KA).
Owners and managers of 1KA.si are aware of the importance of privacy and act in accordance with the Personal Data Protection Law and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on protection individuals in the processing of personal data concerning the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). Moreover, in its operation, they take into account the recommendations and good practices from codes of ethics "ICC/ESOMAR International Code on Market and Social Research" and "ESOMAR Guideline for Online Research" (www.esomar.org).
The personal data operator is every survey contractor on the 1KA.si portal.
II. PRIVACY AND RESPONDENTS' PERSONAL DATA
All information you provide as a respondent answering survey questions is collected in an anonymous form, unless you choose to disclose any personal information. If you choose to specify personal information about yourself or other people, do this with understanding the risks and possible consequences of such conduct. Surveys’ editor is reminded to omit questions that ask for personal information (name, address, etc.) from the survey, and try not to seek to collect personal data in any other way.
Administrators of 1KA.si are not managers of personal databases which users of 1KA may create in the information infrastructure of 1KA. Administrators of 1KA.si do not determine the purposes and means of processing of personal data in surveys, generated by users of the 1KA.si service; we only offer the infrastructure to carry out online surveys, which should not include questions that ask personal information.
In the event that there is data that respondents transmitted to surveys’ editors with prior consent (e.g. e-mail address), data and survey data is strictly separately stored. 1KA ensures the separation of the two databases and therefore disables the identification of answers in case of sending electronic invitations to participate in the survey, and the same applies to facilitate related phone calls or literate invitations. If the user demonstrates a proper legal basis (consent and knowledge of the respondents), they may request from 1KA to turn this on explicitly at the user's request.
Exercise of the individual rights regarding their own personal data
You have the right to request: access to personal data, rectification, erasure or restriction of processing, you also have the right to object to the processing and the right to transfer the data. You can submit your request to exercise rights:
- by mail; or
- in person.
For the purpose of reliable identification in the case of the exercise of personal data rights, the controller may request additional information from you, and the enforcement procedure may only be refused if it is proven that they cannot identify you reliably.
The rights of the individual/respondent
An individual has the right to obtain confirmation from the personal data controller whether their personal data is being processed and, if so, access to it also (The right of access).
If we process personal data that is inaccurate or incomplete, the individual has the right to request that we rectify inaccurate information concerning you (The right to rectification) without undue delay.
When you believe that we no longer need your personal data for the purposes for which we have collected it, or if you withdraw the consent you have given for the processing of personal data and there is no other legal basis for the processing of personal data, for objecting to the processing of your personal data, if you believe that your personal data have been processed illegally or if you need to delete your personal data to fulfil a legal obligation, you may request us to delete your personal data (The right to erasure).
With respect to the processing of personal data, you also have the right to limit the processing of your personal data (The right to restrict processing) when you dispute the accuracy of the data if the processing is illegal and you want to restrict the processing instead of deleting the personal data, when you feel that we do not need personal data anymore for the purposes of processing, but you need them to enforce, execute or defend legal claims, or if you have objected to the processing of personal data.
Even if your personal data is correct and complete and we have the right to process it, you may object to the processing of this data in specific, justified individual cases. You may also object to receiving direct marketing notices from us and request that you no longer receive them (The right to object).
You also have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable form and to pass it on to another controller when the processing of personal data is based on your consent or contract and is performed by automated means (The right to data portability).
To exercise the rights mentioned above, or in the case of complaints, please contact the relevant manager (surveyor). If you believe that the processing of personal data violates the provisions on the protection of personal data, you have the right to file a complaint with the Information Commissioner. The controller undertakes to process and protect the data in accordance with the Personal Data Protection Act and the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council.
The data entered while respondent fills in the questionnaire is not added to IP addresses. IP addresses are recorded separately and only for the purpose of counting respondents, therefore the database cannot be associated with survey data or respondents’ answers.
In the case of research that have been published using the e-mail invitation, for the purpose of counting respondents we also record their e-mail addresses, which are recorded separately in the database and cannot be associated with survey data. Only survey’ author and those whom he explicitly grants the access to the survey have the access to a separate list of IP and e-mail addresses. All stated individuals commit to use this information only for the purposes of research, to not disclose publicly or hand over this information to third parties and to protect their confidentiality.
III. USE OF COLLECTED DATA
Owners and managers of 1KA do their best to implement appropriate security measures to protect the privacy and confidentiality of the data collected on 1KA servers. Only the editor of the survey and the people to whom the editor explicitly granted access (i.e. other users or people responsible for technical assistance 1KA) have the access to the data collected from each survey. Without surveys’ editor explicitly granting the access, owners and managers of 1KA do not have access to information on the content of each questionnaire. The exception is an intervention in the event of a suspected breach of the laws, for example based on the police investigation or judicial decision.
The editor of the survey can use data exclusively for the purposes of the research and may not use them for purposes of direct marketing or sales.
We, managers and owners of the 1ka.si website, reserve the right to use collected survey data, paradata, metadata, process data and other information in anonymised form for the purpose of optimizing our services, for the preparation and analysis of our services and for scientific-research analysis, all of which is done to improve the quality of 1KA services.
When necessary, we process your personal data on the basis of legal interests, including:
- improving, developing and upgrading services and systems;
- technical maintenance of our websites and services;
- ensuring the operation of information systems, network and information security (prevention of unlawful or malicious acts that threaten the accessibility, authenticity, integrity and confidentiality of stored or transmitted personal information and security of related IT services);
- preventing unauthorized access to information systems and responding to computer security threats and incidents.
The managers and owners of the 1ka.si website reserve the right to use the collected survey data, parapadata, metadata, process data and other data in anonymized form for the purpose of optimizing our service, for the preparation of analyzes of our services and for scientific-research analyzes, all of which serve improving the quality of 1KA service.
Transmission of data to third parties
The controller may transmit certain personal data, in accordance with the purpose of processing, to contractual data processors within the EU with whom he/she has contracts for the processing of personal data and who process the data on behalf of the controller.
Transfer of personal data to a third country or international organization
Your personal information is not transferred to third countries or international organizations.
Information on the right to withdraw consent when processing is based on consent
When the processing is based on your consent, you can cancel it at any time. Your cancellation will continue to apply and will not affect the processing of personal data that was completed prior to your cancellation. The processes of processing personal data based on the personal consent of the individual are evident from the legal basis.
Information on the right of appeal to the supervisory authority
We would also like to remind you that if you believe that the regulations governing the protection of personal data have been violated, you have the right to file a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana. On the website of the Information Commissioner, you can submit a complaint via the form for violations of the legislation in the field of personal data protection.
The existence of automated decision-making, including the creation of the profiles, referred to Article 22 (1) and (4) of the GDPR, and at least in such cases meaningful information as to the reasons for it, as well as the meaning and foreseeable consequences of such processing for the data subject
Automated decision making or profiling is not performed.
IV. TECHNICAL AND ORGANIZATIONAL MEASURES TO PROTECT YOUR PERSONAL DATA
1KA provides organizational, technical and logical-technical procedures and measures for the protection of personal data files. 1KA thus:
- protects premises, equipment and system software;
- protects application software that processes personal data;
- prevents unauthorized access to personal data during their transmission, including transmission over telecommunications networks;
- provides an effective way of blocking, destroying, deleting or anonymizing personal data;
- enables the subsequent determination of when individual data were entered into the personal data file, used or otherwise processed, and who did so for the period when the legal protection of the individual's rights is possible due to the inadmissible transmission or processing of personal data.
1KA periodically conducts impact assessments in critical areas regarding the protection of personal data, taking into account the risks posed by processing, in particular as a result of unintentional or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data that is sent, stored or otherwise treated.
In accordance with the General Data Protection Regulation, 1KA also uses pseudonymisation and encryption methods for personal data files. Systems and services ensure ongoing confidentiality, integrity, accessibility and resilience. In the event of a physical or technical incident, the availability and access to personal data are provided. Technical and organizational measures to ensure the safety of processing are regularly tested and evaluated.
Surveying minors is regulated by national laws. The author of the survey should ensure that it operates in accordance with national legislation related to surveying minors when implementing said survey. Taking into account the fact that the complete identification of underage Internet users is not possible, the author of the survey has to do everything in his power to include minors in research solely on the basis of consent of their parents or legal representatives, in the case that national law requires such consent.
In Slovenia minors aged less than 15 years have to obtain parental consent before filling out a questionnaire. The most common and simple way of obtaining consent in online surveying is by doing it personally by an interviewer (e.g. visiting the parents at their home) or by written transmission (e.g. through a letter which children bring home from school). The consent doesn't need to be obtained for interviewing minors aged 15 year or more. However, in cases where the survey is carried out at the school, the school can require parental consent, even if the respondents are older than 15 years.
VI. FINAL PROVISIONS
1KA permanently stores the data collected through provided services. 1KA collects the data entered by the respondents who agree to participate in the study during the survey process. This means that 1KA also collects and stores the data of respondents who did not fully complete the survey (e.g. only one page).
If you continue to participate in the survey it means that you understand and agree with this statement. For any questions you may have regarding this Statement or 1KA services, you can contact us at firstname.lastname@example.org
Ljubljana, July 2019