2. Information on the controller
The YouCount Project is a joint research project between the following partners:
- Oslo Metropolitan University (OsloMet, Norway)
- The University of Central Lancashire (UK)
- Vetenskap & Allmänhet (Sweden)
- Södertörn University Stockholm (Sweden)
- Universität Wien (Austria)
- ESSRG Environmental Social Science Research Group (Hungary)
- Aalborg University (Denmark)
- Kaunas University of Technology (Lithuania)
- Dipartimento di Studi Umanistici, Università degli Studi di Napoli Federico II (Italy)
- Foundation Deusto (Spain)
OsloMet is the project coordinator and data controller for the processing described in section 4.1 to 4.3 below. For the processing described in section 4.4 below, there is a joint controllership between the partners listed above.
The contact details of OsloMet as controller and representative for the controllers are as follows:
Address: Postboks 4, St. Olavs plass, 0130 Oslo
Telephone: +47 67 23 50 00
Organization number: 997058925
For questions you may have regarding the processing of your personal data, you can contact the following persons:
3. About whom do we process personal data?
- Visitors to the YouCount Website
- Contact persons for organizations signing up to our Community of Interest
- Persons who sign up for our newsletter
- Participants in the YouCount Project and other users of the YouCount app
4. How do we process the personal data?
4.1 Personal data processed to operate the website – cookies and similar technologies
We process the following personal data of persons who visit the YouCount Website:
a. IP address
b. Usage data, such as entry points, date and time of access, websites visited, content interest, browser type, data volume and transferred traffic, operating system, information on whether the access was successful or unsuccessful, etc.
The purpose of this processing is to operate the YouCount Website, ensure that it works as intended, and to keep it secure. The YouCount Website shall provide information about the YouCount project to the public and to stakeholders interested to learn about or participate in project activities and to get access to publications and data as part of our open science approach.
The legal basis for placing the cookies in the browser of your device is consent. If your browser settings accept cookies, you are considered to give consent to the placement of cookies.
The legal basis for the processing of the information gathered by the cookies is our legitimate interest in being able to operate the YouCount Website, cf. the GDPR article 6(1) letter f.
4.2 Personal data processed for subscription to the newsletter
We process the following personal data of persons who sign up to our newsletter:
a. Contact information, including email address, name, and home country
The purpose of the processing is to provide information on our activities and marketing to persons who have actively asked to receive information from us.
The legal basis for the processing is consent cf. the GDPR article 6(1) letter a.
4.3 Personal data processed for sign-up to the Community of Interest
We process the following personal data of the contact persons for organizations who sign up to the Community of Interest:
a. Contact information, including name, email address, and phone number
b. Position or role at the organization
The purpose of the processing is to be able to communicate and stay in touch with the organizations that sign up to the Community of Interest. The Community of Interest has been established for interested parties to receive more information about and invitations to project activities.
The legal basis of the processing is our legitimate interest in having a point of contact with the organizations that have signed up for the Community of Interest, cf. the GDPR article 6(1) letter f. If the information is published or used on our homepage, the legal basis for our processing is consent cf. the GDPR article 6(1) letter a.
4.4 Personal data processed in the YouCount app
We process the following personal data of participants of the YouCount Project and other persons that download and use the YouCount app:
a. Contact information, such as name, email address, phone number, and address.
b. Content data, such as video, text, and photographs the user adds to the app.
c. Location data, such as information on the geographical position of a device or person
The purpose of the processing is to be able to collect research data for the YouCount Project.
The legal basis for the processing consent cf. the GDPR article 6(1) letter a.
More information on the processing of personal data of participants in the YouCount Project through the YouCount app can be found here. The YouCount app is provided by Spotteron GmbH. More information on how they process personal data can be found here.
The personal data will be processed for the duration of the YouCount Project, namely from 1 February 2021 to 31 January 2024. The personal data will be deleted at the end of this period.
6. Who we share the personal data with
We do not disclose or share personal data to third parties except for the following instances:
- If there is a legal obligation that requires us to disclose the information.
- Between the research partners to the extent necessary to carry out the YouCount Project.
- To our data processors. We use data processors to collect, store or otherwise process personal data on our behalf. In such cases, we have entered into data processing agreements to safeguard information security at all stages of the processing. We currently use the following data processors, who may use sub-processors:
- Spotteron GmbH for provision of the YouCount Website and app
- Rule Communication – Nordic AB for newsletter
Personal data may be transferred to recipients outside of EU/EEA, as one of the partners of the YouCount Project is situated in the UK. The basis for such transfer is the GDPR article 45 and the Commission’s decision that UK ensures an adequate level of protection. Personal data will not be transferred to third countries in any other way.
All processing of personal data is secured with the required technical and organizational measures. Routines have been established for handling breaches of information security and rules on privacy. In the event of a breach of personal data security, OsloMet will notify the breach to the Norwegian Data Protection Authority without undue delay and, when possible, no later than 72 hours after becoming aware of the breach, unless the breach is not likely to entail a risk to the rights and freedoms of the persons concerned. If it is likely that the breach of personal data security will result in a high risk to the rights and freedoms of natural persons, OsloMet will notify the persons concerned as well.
8. Your rights when we process your personal data
As a data subject, you have the following rights:
a. Information and access: You have the right to request information about and access to the personal data we process about you.
b. Rectification: You have the right to request rectification or completion of inaccurate or incomplete personal data.
c. Erasure: You have the right to request the erasure of personal data in certain cases.
d. Restriction: You have the right to request the restriction of the processing of your personal data in certain cases.
e. Objection: You have the right to object to the processing of your personal data in certain cases.
f. Data portability: You have, in certain cases, the right to receive your personal data that you have provided us with in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
If the processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on the consent before its withdrawal.
If you believe that our processing of personal data is not in line with what we have described here or that we are in breach of privacy legislation, you can complain to the Norwegian Data Protection Authority. You can find information on how to contact the Norwegian Data Protection Authority on their website: www.datatilsynet.no.