The legal basis for processing personal data

...

Under the GDPR, you have a general right of access to your data, a right to rectification, erasure, restriction, objection or portability. You also have a right to withdrawal. Please note, not all rights apply where data is processed purely for research purposes. For further information see, https://www.york.ac.uk/records-management/generaldataprotectionregulation/individualsrights/ If you would like to access your right to portability, please contact dataprotection@york.ac.uk. In simple terms if you would like access to your data then please contact the university's data protection officer via the email: dataprotection@york.ac.uk

Online studies:

If you are taking part online, many of our online studies are run through Gorilla.sc or Qualtrics. Both are GDPR compliant, frequently used online participation platforms. These platforms are the data processor, while the researcher in charge of the experiment remains the data controller (owner responsible for the data). The data will only be accessible to the researchers working on this project. Both Gorilla.sc and Qualtrics will never view or use any participant data, unless explicit permission is given by the researcher with consent from the participant if personal data are accessed. Data will be stored at University of York servers and removed by the researchers from these platforms as soon as possible

Right to complain

If you have a concern about any aspect of a given study, then you should ask to speak with the researchers who will do their best to answer your questions. If you remain unhappy and wish to complain formally, you can do this through the complaints procedure of the University of York.  Details can be obtained from the email address: registrar-and-secretary@york.ac.uk. If you are dissatisfied with the way your personal data have been handled please contact the lead researcher in the first case, or the University’s Data Protection Officer at dataprotection@york.ac.uk. If you are unhappy with the way in which the University has handled your personal data, you have a right to complain to the Information Commissioner’s Office. For information on reporting a concern to the Information Commissioner’s Office, see www.ico.org.uk/concerns.