Privacy Policy | Social Science Research Institute

Data Protection Policy of the SSRI

The data protection policy of the SSRI was first presented on 19.12.2018. The institute reserves the right to revise the policy at any time. All changes will be published on the website of the Social Science Research Institute as soon as they take effect.

1. Legal framework

The SSRI staff works in accordance with Act no. 90/2018 on personal protection and processing of personal information and according to the European Regulation 2016/679 on the processing of personal data.

2. What information is collected and for what purpose?

The SSRI conducts research for academic researchers within the universities, for ministries, municipalities, other institutions, etc. The data generated from our research is i.e. used in articles published in scientific journals and reports used in policy making. In most cases, the Social Science Research Institute delivers a completed report to the party concerned. In all cases, the SSRI makes sure that answers and findings cannot be traced to individuals. This is secured both by removing all personally identifiable information and by making sure that indirect personal information is not of such a nature that certain answers can be traced to individuals (for example, information about residence and occupation).

3. What information is stored at the SSRI?

The SSRI stores information about the participants on the institutes panel. Also, information is stored on the number of surveys that each person on the panel has participated in. This is being done to prevent the same person from being sent too many surveys. The SSRI does not store any other information about participants on the panel unless the participant has given informed consent.

4. How does the SSRI ensure security of personal data?

The Social Science Research Institute uses technology and procedures designed to ensure the security and protection of all personal information. All research data is stored on servers that only employees of the institute have access to with a password. The employees of the SSRI have signed a confidentiality and non-disclosure agreement. The SSRI uses an online survey service provider (Qualtrics) that meets all requirements for the storage of personally identifiable data according to European data protection legislation.

5. Who is responsible for data security?

The Social Science Research Institute is responsible for the protection of personal information, regardless of which data collection method is used. The institute never communicates personal information about its participants to third parties.

It depends on the nature of the research whether the SSRI is a responsible party, a processing party or a joint responsible party with others within the meaning of the Privacy Act.

6. Children’s privacy

In rare cases, the Social Science Research Institute conducts research among children under the age of 18. However, it is only done with the informed consent of the child’s guardian.