Privacy Statement

In this privacy statement, you can read more about data processing for the MOBI-AIR project of Utrecht University (UU). We would like to emphasize that the questionnaires and the use of the app have no medical purpose for you. The aim is solely to measure personalized exposure to air pollution and its impact on health.

1. Who is the controller?

UU is the controller within the meaning of the General Data Protection Regulation. If you have questions about your rights mentioned below or if you want to exercise them, you can contact the research team of the project by email: mobi-air@uu.nl

2. What personal data do we process?

We process your contact details and data about your mobility, health, and research data. The contact details and other data are processed strictly separately. Only UU researchers authorized for this purpose have access to the research data. They do not have access to the contact details. Only separately authorized researcher has access to the contact details.

3. How long do we process personal data?

Data collection for the MOBI-AIR project will take approximately one year. Subsequently, the researchers keep the data for another 10 years after the last publication of the research results. This is according to the UU’s policy for research data. It is necessary because research results must always be verifiable and are sometimes also of interest to other researchers.

4. Who else can receive the data?

Sometimes we will want to share the research data with researchers outside the UU for further scientific analyses. Researchers at other research institutions conduct similar research. By combining the results, much better statistically relevant results can be obtained, differences in regions can be mapped, etc.
Sharing is done under strict conditions regarding security and permitted use. Further research must, of course, fit within the purpose of MOBI-AIR, to which you have consented. Contact information is never shared and if research information is shared, it is further pseudonymized or encrypted. It is not possible for other researchers to find out your identity.

5. The Expanseeker MobiAir app

This study uses the application “Expanseeker MobiAir” built by Games for Health, a trading name of Game Solutions Lab. They process your data on behalf of Utrecht University for the MOBI-AIR research project, and a processing agreement has been concluded for this.
By using Expanseeker, the following data is recorded for research purposes:
• Year of birth, contact details
• Your answers to questions
• Location data
• Device ID for sending notifications
The data is processed for the following purposes:
• Collect answers to questions about your daily activities
• Collection of location data
The collection of this data is based on the consent you have given. If we start processing more personal data in the future, we will first ask for your permission.
To make the app work properly, Games for Health uses the services of other companies. They have entered into processor agreements with these companies to ensure that these companies maintain the same level of security and confidentiality as Games for Health. Games for Health remains responsible for the processing. The processor agreements include, among other things, all relevant security standards and provisions about the way in which your rights must be respected by these processors.
The data from the Expanseeker MobiAir app and the database that the app uses are deleted three times a year as soon as all data has been moved to the UU research database.

6. SODAQ sensors

The study uses SODAQ sensors and meters that measure location via GPS. SODAQ processes your data on behalf of Utrecht University for the MOBI-AIR research project. By using the sensors, your location is recorded. The data is processed for the purpose of characterizing your exposure and movement pattern.
The MOBI-AIR project has concluded a processing agreement with SODAQ. The processor agreement includes all important safety standards and provisions about the way in which your rights must be respected by these processors.
The data collected with SODAQ’s devices is deleted every two months once all data has been moved to the UU research database.
You can read SODAQ’s privacy statement here: https://sodaq.com/privacy-policy

7. Security

The entire data processing provides security according to the latest technical insights. Secure connections and databases are used that comply with the information security policy for data of Utrecht University. Secure connections and databases are used for the Expanseeker MobiAir app and SODAQ, which are certified according to the latest healthcare standards.

8. Your rights

a. You can request a request for access to personal data by sending it to the contact address mentioned in section 1. We will then contact you. In order to receive personal data, it is necessary that you first identify yourself properly. We do not want this data to fall into the wrong hands.
b. You can request the correction of data that is factually incorrect. We will follow up on this, but data that was already included in the published results of a study will, in principle, not be corrected afterwards.
c. You can stop participating at any time. Then stop completing the questionnaires or delete the app. The data already entered will then remain available for the research.
d. You can also indicate that you no longer want your data to be used for the research. That will no longer happen. Your data will, of course, not be shared with other researchers. If that had already happened, we will inform those researchers that the data under that code number may no longer be used for further research. However, data already incorporated in the published results of the research will remain available for review of outcomes according to scientific standards.
e. You can also indicate that you want your data removed. The data already used in publications remain available for verification, as mentioned in the previous point.

9. Who is the Data Protection Officer (DPO)?

The UU has appointed a DPO for this study. If you have questions that cannot be solved at the contact address mentioned in paragraph 1, you can reach the DPO via privacy@uu.nl

10. Complaints

If you have complaints about data processing, we request that you contact us by e-mail at mobi-air@uu.nl .
You can also submit a complaint to the Dutch Data Protection Authority. You can do this via the following link, which also states the conditions under which you can submit your complaint:

https://www.autoriteitpersoonsgegevens.nl/nl/zelf-doen/gebruik-uw-privacyrechten/klacht-melden-bij-de-ap