Data Controller and Officer 

Data controller responsible for the processing of personal data in the research project: 

Aarhus University 

Nordre Ringgade 1 
DK-8000 Aarhus C 
CVR no.: 31119103 

The research project is headed by Associate Professor and PI, Helene Ratner who can be contacted at: 

Address: Danish School of Education, Tuborgvej 164, 2400 Copenhagen NV 
Phone: 0045 3082 6019 
Email: helr@edu.au.dk   

Data protection officer at Aarhus University: 

Søren Broberg Nielsen 
Data protection officer/DPO 
dpo@au.dk 

In order to gain insight from stakeholders and practitioners, interviews, observations and participant-observation will be conducted with schools and EdTech companies. The project also harvest data visualizations from Danish digital learning materials, however, only with dummy data (i.e. no data about students will be stored). 

The project uses the scientific research purposes as legal basis. Pursuant to the General Data Protection Regulation, the project should provide all participants/data subjects with information about how their personal data will be processed. 

All personal data collected for the project will be pseudonymized and stored in accordance with GDPR compliance rules. Personal data is pseudonymized by removing all directly identifying information from the data. A unique serial number will be added within the framework of pseudonymization. The serial number - with an associated separate 'key file' - will make it possible to return to the original person identification. This so-called ‘translation key’ will be stored separately from the pseudonymized data using an Aarhus University-based GDPR compliant solution only made available to the project researchers. Data harvested from interviews, documents, archives, and other sources will be stored on a secure Aarhus university based platform. 

Personal data will not be subject to automated processing and will not be disclosed to others. 

Data from interviews will be pseudonomized in research publications with reference only, in a few instances, to the organization (organizations such as ministries will be referenced, schools and EdTech companies will remain pseudonomized). 

Your personal data will be processed by Aarhus University for as long as required by the research purpose and the rules on storage according to responsible conduct of research. When we no longer need your personal data for processing, the data will be erased. 

Complaints about the processing of personal data should be directed to the supervisory authority: 

The Danish Data Protection Agency 
Carl Jacobsens Vej 35 
DK-2500 Valby