Concerning this information
This is a translation of the original Danish information about registration. If any doubt arises about the interpretation of any aspect of the text please refer to the Danish original text. https://www.mineindkob.dk/da-DK/#home_9
Information on the processing of personal data in the research register
Have you ever considered how what you buy, including your diet, affects your health?
You can help find answers to this by donating information about your purchases when you shop. Thus, you may be able to help prevent diseases such as multiple sclerosis, cancer, and other serious diseases.
Purpose of the processing of personal data
The purpose of the collection and subsequent processing of personal data is to create more knowledge about the lifestyle's significance for health and illness. Researchers at the Statens Serum Institut (SSI) will use the information to investigate connections between what we eat, drink, lubricate ourselves with, inhale, and are otherwise exposed to and our health. We can do this by combining information on shopping habits with information on health and diseases from registries or other research projects. The information will be stored in a research register, which will be used to conduct scientific and statistical studies of significant societal significance.
The register will be used for future research into how purchasing behavior affects health. The information can, for example, be used for research into the connection between what people buy and the risk of contracting or exacerbating a disease such as salmonella, multiple sclerosis, or diabetes. In short, SSI will eventually investigate what to buy, or refrain from buying to stay healthy, whether you are healthy or have contracted a chronic illness. You can see short descriptions of current projects that use information from the register at www.mineindkob.dk. We get the best and most accurate information if all adults who buy into your household sign up.
Participation is voluntary
It is voluntary to register for the study and contribute personal information to the research register. You agree that Storebox may disclose information about you to SSI, but SSI's processing of the information is not based on your consent.
On what basis can SSI then process the information?
SSI processes the information in accordance with a special research provision in section 10 of the Data Protection Act, where your consent is not required. SSI has nevertheless chosen that you have the opportunity to indicate whether you only want to participate in some specific research projects. SSI has also chosen to restrict the use of the information about you if you no longer wish to contribute information to the register.
Can you regret participation?
You can always choose that you no longer want to contribute more information to the register. Information already included in the register will not be deleted, but SSI will no longer disclose the information to researchers. The information is not deleted because SSI, as a state authority, may be obliged to hand over the information to the National Archives. When the information is handed over to the National Archives, it is covered by the rules of the Archives Act. Information already provided for research projects will continue to be included in those projects.
When section 10 of the Data Protection Act is applied, information may not later be used for purposes other than scientific and statistical studies of significant social significance.
The actual results from the research project can later be used in connection with the publication of scientific articles.
Data controller and contact information
SSI is the data controller for the processing of personal data about you in the research register. This means that it is SSI that must ensure that the rules on the processing of personal data are complied with and that the processing of personal data takes place while observing appropriate security.
SSI is located at Artillerivej 5, 2300 Copenhagen S.
If you have questions about SSI's processing of personal data or about your rights in connection with the processing, you can contact SSI by sending an email to firstname.lastname@example.org or tel .: 32 68 32 68. On the page “The researchers behind the project” you can see which researchers are behind the project.
If you have other questions about how SSI processes personal information about you, you are always welcome to contact SSI's compliance department at email@example.com or on tel .: 40 46 00 83.
You are also welcome to contact The Danish Ministry of Health joint data protection adviser (DPO), Helle Ginnerup Nielsen. Among other things, the DPO has the task of advising the ministry and the agencies on data protection. The DPO can be contacted via e-mail: firstname.lastname@example.org or by letter to the following address: Holbergsgade 6, 1057 København K, att. "Data protection adviser".
The legal basis for the processing of your personal data
The transfer of purchasing information from Storebox ApS to SSI takes place on the basis of your express consent (the Data Protection Ordinance, Art. 9, subsection 2, letter a and Article 6, subsection 1, letter a).
SSI's processing of personal data about you takes place on the basis of Article 6 (1) of the Data Protection Regulation. Article 9 (1) (e) 2, letter j, as well as the Data Protection Act §§ 10, and 11, paragraph. 1. The information contained in the study is used solely for scientific and statistical purposes and may not subsequently be used for other purposes. This follows from the Data Protection Act, section 10, subsection 2.
Categories of personal information
We process the following categories of personal information in the register about you:
Name, address and telephone number
CPR number and purchasing information
Other information that you provide in connection with your registration, including health information
If the information is used in a specific research project at SSI, other information about you will typically be collected from, for example, Danish registers at the Danish Health and Medicines Authority and Statistics Denmark. This is completely usual for research projects and takes place on the basis of section 10 of the Data Protection Act.
Collection of personal information
For use in the research register, procurement data is collected from the private company Storebox ApS. To participate, you must therefore be registered with Storebox. If you are registered, we ask you to provide your storebox e-mail and telephone number. If you are not already registered with Storebox, you can read their personal data policy on the Storebox website and register: https://dk.storebox.com/#/privacy. Storebox is itself data responsible for the processing of personal data on www.storebox.dk. To participate in the project, it is important that you at www.mineindkob.dk under REGISTRATION announce your consent to Storebox may pass on your personal information to SSI for use in the research register. Storebox is the data controller for this transfer.
In connection with your registration, you have the opportunity to provide information about your health situation, which will also be registered in the register.
Your personal information is stored for as long as is necessary to fulfill the purpose. Therefore, there may be storage for many years to come to allow researchers to examine diseases that occur late in life.
If you have chosen to only participate in specific projects, SSI will, when the project is completed, send you a notification that you must resubmit your choices if you wish to continue to be included in the register.
SSI will notify and possibly submit data from the register to the National Archives in accordance with the rules of the Archives Act.
Disclosure of personal information
SSI can pass on information about you from the register to other Danish and European research institutions, as long as the transfer takes place with regard to scientific and statistical studies of significant societal importance. Such disclosure will in certain cases require permission from the Danish Data Protection Agency. The transfer will only take place via secure connections, eg the Researcher Scheme at Statistics Denmark, Forskermaskinen, or Computerome, one of Denmark's supercomputers, or equivalent European supercomputers or other security-recognized shipping methods. If you have indicated that you only wish to participate in one or more specific projects on the list of projects in connection with your registration, SSI will not pass on your information to others.
Your rights as registered
When personal data are processed exclusively for scientific and statistical purposes, there are a number of restrictions on the rights under the Data Protection Regulation. This means that you, among other things. does not have the right to access, correct, restrict, object to or delete personal data about you that are included in the investigation. The limitation of your rights follows from the Data Protection Act, section 22, subsection. 5 and Article 17 (2) of the Data Protection Regulation. 3, letter d.
SSI has decided that you can request insight into your own personal information in the register, request that incorrect personal information be corrected, and request a restriction of the data processing.
You can always choose that you no longer want to contribute more information to the register. Information already included in the register will not be deleted, but SSI will no longer disclose the information to researchers. Information already provided for research projects will continue to be included in those projects.
If you wish to change your information or permits in the future, this can be done by refilling the participation form. The information previously provided will continue to be retained, but it will be noted that the information has been replaced by more recent information.
If you have any questions about your rights, please contact SSI via e-box. You can read more about how to use the e-box on the page Secure communication with SSI (https://www.ssi.dk/om-ssi/kontakt/sikker-kommunikation-m-ssi).
Complaint to the Danish Data Protection Agency
As a participant in the research project, you have the right to submit a complaint to the Danish Data Protection Agency if you are dissatisfied with the processing of your personal data. You can read more about your rights at www.datatilsynet.dk, where you can also find the Data Inspectorate's contact information.