The basis for processing personal data in scientific research
You are allowed to process personal data only when you have a lawful basis for it. Moreover, you are required to inform the research participants about the basis for processing their personal data. The basis cannot be unilaterally changed later. The processing of personal data for scientific, historical, or statistical purposes may be based on the controller’s performance of a task in the public interest, provided that the processing is necessary and proportionate to the aim pursued.
Scientific research must fulfil the following criteria: it must be based on an appropriate research plan with specified scientific objectives, the researcher must be scientifically competent, and the research must be autonomous and public.
Typically, the master’s thesis is completed in order to learn researcher skills, and the basis for the processing of personal data is formed by the thesis and the consent of the research participant. If the thesis is part of a larger project of the university, the basis may be formed by engagement in scientific research in the public interest.
Read more about choosing the processing basis >