Privacy Notice for Research Participants

 

This Privacy Notice provides information on how your data will be collected and used in this research project.  Please refer to the research Participant Information Sheet for further details about the study and what information will be collected about you and how it will be used. 

Oxford Brookes University is the independent data controller, which means they will be handling and analysing the data in line with agreed principles with Nanit, set out below. Nanit will securely collect and store all of the data in this project and only transfer a pseudonymised data set to Oxford Brookes University researchers for analysis purposes. This pseudonymised data set will then be stored in accordance with Oxford Brookes University data principles. 

Why do we need to collect your data?

Researchers at Nanit and Oxford Brookes University are collaborating to conduct a research study to better understand the relationship between parents’ thoughts, sleep-related practices and children’s sleep. 

The legal basis for collecting this data is: 

• Consent defined under Art.6(1)(a) of the UK GDPR

• Explicit consent in case of special category-related data defined under Art. 9(2)(a) of the UK GDPR. 

What type of personal data will I be asked for? 

As part of this research project you will be asked to share:

• Your email address

• Your age in years

• Your relationship to the child (e.g. mother/father)

• Your geographic location (in the form of your postcode or zip code and country)

• Your nationality

• Your ethnic origin

• Your highest educational level

• Your employment status 

• Some demographic information about your child (age of child in months, sex assigned at birth, birth order of your child and overall number of children in the household) 

• Some health about your child (whether you child was born full term or premature, their birth weight, any medication your child is taking, your child’s current health status)

Who will my data be shared with?

Your questionnaire responses (including personal data) will initially be linked with your child’s sleep data (by Nanit) using your email address. Once the datasets are linked, all direct identifiers (such as email address and IP address) will be removed. Each participating family will then be assigned a unique study ID number. Only this pseudonymised dataset, which will be prepared by a Nanit Clinical Research Data Analyst and checked by another member of the Nanit research team, will be shared with the researchers at Oxford Brookes University. 

Data will be transferred securely by Nanit uploading the anonymous data set to a shared password-protected Google Drive, for which Oxford Brookes University has a contract. No encryption key or information enabling re-identification will be shared between Oxford Brookes University and Nanit. Oxford Brookes University will not take any steps to identify you and will treat your information as anonymous. 

The data will only be accessible to the researchers directly involved in this project at Oxford Brookes University and Nanit. The data will be collected and stored, initially by Nanit (see Nanit’s Privacy Notice), using Alchemer, their internal database and Amazon Web Services (AWS S3). Once transferred to Oxford Brookes University, the data will be stored securely on a shared password-protected Google Drive.

Will your data be shared outside of your country? 

Yes, Nanit will collect the data on our behalf and share pseudonymised with Oxford Brookes University in the United Kingdom. 

What rights do I have regarding my data?

• You have the right to be informed about what data will be collected and how this will be used

• You have the right of access to your data

• You have the right to correct data if it is wrong

• You have the right to ask for your data to be deleted (before data is analysed)

• You have the right to restrict use of the data we hold about you

• You have the right to data portability

• You have the right to object to Oxford Brookes using your data

• You have rights in relation to using your data in automated decision making and profiling

Your rights will depend on the legal ground used to process your data.

Where was my data sourced from?

The only data included in this research study will be data that you as the participant has provided (via questionnaires) or give consent to access (Nanit sleep summary data).

Are there any consequences of not providing the requested data?

There are no consequences of not providing data for this research project. It is purely voluntary. If you would like to withdraw part way through the research project, you are able to do so without giving a reason. Your data can be withdrawn up until the point of data analysis. If you would like more information about this, you should contact the research team.

Will there be any automated decision making using my data?

No.

How long will Oxford Brookes keep my data?

In line with Oxford Brookes policies, data generated in the course of this research project must be kept securely in electronic form for a period of ten years.

Who can I contact if I have concerns?

In the event of any questions about the research study, please contact the research team in the first instance. Their contact details are listed on the Participant Information Sheet. If you have any concerns about the way in which the study has been conducted, please contact the Chair of the University Research Ethics Committee at ethics@brookes.ac.uk. For further details about information use contact the Information Security Management team on info.sec@brookes.ac.uk or the Data Protection Officer at brookesdpo@brookes.ac.uk. You can also contact the Information Commissioner’s Office via their website ico.org.uk.