1. What is being studied in this research study and the purpose of processing personal data

In this research, we use technology creatively and playfully to engage in political discourse and bridge gaps between groups in conflict. We are guided by open participation and open source. We work with activist communities to create solutions, publish DIY instructions to the public, and invite anyone to join the activities. With technological puppets, we ask questions on identity, borders, and the role of humour in political discourse. After every activity, we ask ourselves what worked and what didn’t. We construct theories and guidelines to promote the cause of technology in service of humans.

This research is funded by the Kone Foundation

2. What personal data is processed in the research study

Event organizers may take photos and videos of the public event, including the participants. Those could be used for research analysis. All identifying materials collected are deleted after the analysis and the results are anonymous.

Special categories of personal data (sensitive personal data)

In addition, the following special categories of personal data may be processed:

• Political opinions: Photos and videos may reveal the political affiliation of the participants. Those would be fully anonymized during the analysis.
• Data concerning health or sexual orientation: Photos and videos may reveal private details on the participants. Such details are discarded during the analysis.

3. Processing of necessary personal data and removal of the direct identifiers from the data

The research study only processes personal data that is necessary for the purpose and execution of the study. The research data is processed during the analysation phase of the research in a manner that you are not directly identifiable to the researchers.

Since the research target is a public event, information is colleted via photos and videos. Once the material analyzed, the identifying data is destroyed. Identity of the individual research participant will not be disclosed in a scientific publication or other research results to be published.

4. Legal basis for the processing of personal data

The legal basis is scientific research, a task in the public interest.

5. Sharing personal data

Personal data processed in the study will not be shared with third parties.

6. International data transfers

Research data containing personal data will not be transferred outside the European Union/ European Economic Area or to international organizations.

7. Storage and protection of personal data

Information processed in IT systems: Your personal data is processed and preserved in secure IT systems, which are approved by Aalto University and suitable for personal data. Access to all computers and IT systems are protected by username and strong personal password. Access to IT systems containing personal data is technically restricted in a manner, that only researchers participating in the study and persons necessary for the implementation of the study have access to your personal data.

Archival: Only fully anonymous data, such as statistical data may be published as an open data.

8. Retention and deletion of personal data

Research data containing personal data will be deleted from the secure IT systems after analysis (no more than 1 year after collection).

9. Rights of the research participant

According to the General Data Protection Regulation (GDPR), a data subject has the right to:

• Receive information on the processing of their personal data
• Right to access the personal data collected and processed
• Right to rectification of inaccurate personal data
• Request that the processing of personal data be restricted
• Object the processing of personal data
• Right to erasure of personal data if the conditions of Article 17(1) of the Data Protection Regulation are met and processing is no longer necessary for archiving purposes in the public interest or for scientific research or statistical purposes in accordance with Article 89(1)

If the research purpose does not require, or no longer requires the identification of the data subject, the controller shall not be obliged to obtain further information so that the data or the data subject may be identified only for purposes to able the data subject to exercise his/her rights. If the controller is unable to link the data to a particular data subject, the data subject does not have the right to access or correct the personal data, object the processing, or delete the personal data. However, if the data subject provides additional information that allows their identification from the research data, the rights will not be restricted.

10. Contact details of the controller

The controller of this research study is Aalto University Foundation sr., operating as Aalto University.

Person in charge of the research study

Questions regarding the conduct of the research study may be addressed to the person in charge of the study:

Avner Peled
avner.peled@aalto.fi

Data Protection Officer

If the research participant has questions or requests related to data protection or the processing of personal data, the research participant should contact the Data Protection Officer of Aalto University: tel. +358 9 47001 (exchange), dpo@aalto.fi .

In this data request service, you can request the exercise of your rights under GDPR from Aalto University as the controller https://datarequest.aalto.fi/en-US/.

If a participant of the research study feels that his or her personal data has been processed in violation of data protection legislation, the participant has the right to lodge a complaint with the supervisory authority, the Data Protection Ombudsman’s office (read more: http://www.tietosuoja.fi ).