Pursuant to the General Data Protection Regulation (information duty), you must provide the participants (also referred to as the data subjects) in your research project with information about how you will be processing their personal data. AU has two templates that you can use to meet your information duty.
You can use these templates in situations in which your legal basis for processing personal data is that it is for 'scientific research purposes' (i.e. if you do not base your legal basis for processing on consent). Before processing personal data, you must determine whether Aarhus University is an independent data controller or a joint controller together with an external party.
You can find a guide to fill out the information duty in the template.
Personal data may be processed if the processing takes place exclusively for scientific or statistical purposes, and if the processing is necessary for the research.
Please note that scientific research purposes cannot be used as a legal basis for the processing of personal data in an educational context.
You can disclose personal data for use in other research without the approval of the Danish Data Protection Agency within the EU/EEA by making a disclosure declaration.
You may only disclose personal data to a recipient outside the EU/EEA if you have received the Danish Data Protection Agency's approval to do so.
You may only disclose personal data in the form of biological material for other research if you have received the Danish Data Protection Agency's approval to do so.
You may only disclose special categories (sensitive) of personal data with a view to publishing if you have received the Danish Data Protection Agency's approval to do so. Disclosure of general personal data with a view to publishing can take place if necessary, and the personal data is pseudonymised.