(3) Collection of personal and non-personal data
In the context of the present research project, the following personal data will be collected according to art. 4, no. 1 GDPR (General Data Protection Regulation): Gender (female, male, diverse); Age in years; Country of work or study; Professional degree (related to midwifery science; nursing science or equivalent); Professional degree parents (minimum Bachelor's degree or higher; Yes/No query); Belonging to study population (students and lecturers in Master’s programmes in midwifery, persons working in a professional setting with academic midwives). All other data collected are non-personal data (information on assessments of competency goals in midwifery-related Master's programmes). Nevertheless, the GDPR is applied to the entire data set, as they are inextricably linked to personal data. The legal basis for processing personal data is consent according to art. 6, no. 1 a GDPR, which appears at the end of the clarification. The data is collected to meet the study objectives. Aspects are to be identified that influence expectations about competence goals in midwifery-related Master's programmes. For this purpose, differentiated statistical evaluations are necessary through the described person-related and non-person-related data. Thus, the data is collected for scientific purposes according to §13 Landesdatenschutzgesetz Baden-Württemberg (LSDG BW).
(4) Data evaluation
In accordance with art. 4, no. 5 GDPR, data is collected and analysed in pseudonymized form using a personal identification number. This is created by the participants themselves on the basis of instructions (after consent to participate in the survey is given, the instructions for creating a personal identification number appear). Only the participants themselves are aware of this identification number. The data is therefore protected and do not allow any conclusions to be drawn about a person. The identification number allows the recognition of the corresponding data record when exercising the right object or delete data as stated in Article 17 and Article 21 of the GDPR. This means that third parties, including the study staff, cannot identify the participants through the survey data. The data are analysed and used exclusively for scientific purposes (by authorized study staff using IBM SPSS 26 statistical software). The data will be published in pseudonymised, statistically aggregated and summarised form in scientific publications within professional journals. Identification numbers are removed during the analysis and presentation of the results.
(5) Data storage
The online survey provider LimeSurvey initially stores the collected data in encrypted form on their (German) servers. Here, the encrypted data is stored in a separate database. It is not possible to infer the time of survey participation or the IP address of the participants. An agreement on commissioned processing has been drawn up with LimeSurvey in accordance with art. 28 GDPR. LimeSurvey is compatible with the GDPR and EU law.
After the survey phase ends, the data is exported to internal servers of the University of Tübingen, to which only authorized scientists have access. This is password-protected. The necessary access control is also ensured by appropriate building and room security. Following the export of the data to internal servers of the University of Tübingen, the irrevocable deletion of the data on LimeSurvey is initiated. After the pseudonymised data has been processed for research purposes, it is stored electronically for 10 years according to the recommendation of the German Research Foundation. After this period, the data will be finally and irrevocably deleted. The information obtained from the survey data is processed exclusively in the EU, the European Economic Area or in countries with comparable levels of data protection.
(6) The rights of the study participants
According to art. 21 GDPR, consent under data protection law can be revoked at any time. In addition, the further processing of the data can be obtained, from which evaluations already carried out remain unaffected (art. 7 GDPR). It is possible at any time to obtain information about the stored personal data (art. 15 GDPR), to delete the data (art. 17 GDPR) or to entitle (art. 16 GDPR). Furthermore, the claim of restriction of data processing is possible at any time (art. 18 GDPR), as well as the right to data portability (art. 20 GDPR). There are no disadvantages for the data subject as a result of revocation or non-participation. If you wish to exercise these rights, please contact the responsible contact person.
Angela Kranz, M.Sc. Health Pedagogy
University of Tübingen, Institute of Health Sciences, Department of Midwifery, Hoppe-Seyler-Straße 9, 72076 Tübingen, Germany
email: Angela.Kranz@med.uni-tuebingen.de
phone: +49 7071 29-87447
One also has the right to complain to the competent supervisory authority for data protection.
State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg,
P.O. Box 10 29 32 70025 Stuttgart
email: Poststelle@lfdi.bwl.de
phone: 0711 / 61 55 41 - 716
The legal basis for processing the aforementioned personal data is the consent, pursuant to art. 6, no. 1 a GDPR, obtained from the information provided here.