The Connection Between Gut Microbiome, Stress, and Sleep

What you need to know about Aarhus University's processing of your personal data

Here you will find information about why and how Aarhus University processes your personal data.

1. Who is the data controller?

Aarhus University (AU) is data controller for the processing of your personal data. Our information:

Aarhus University
Nordre Ringgade 1
8000 Aarhus C
CVR-no.: 31119103

Aarhus University has a Data Protection Officer. You can contact our Data Protection Officer at dpo@au.dk.

If you have any questions about the research project, including participation and processing of personal data, please contact Sonja Perkovic, associate professor, at sp@mgmt.au.dk.

2. What is personal data?

Personal data is any information that directly or indirectly can be attributed to you. This can, for example, be your name, your age, but it can also be a lot of information that, when linked to other information, tells something about you, for example, your address combined with information from a public register.

3. Why do we process personal data about you?

As a university in Denmark, we have an obligation to conduct research. In order to conduct research, we often need to process personal data. In the research project “The Connection Between Gut Microbiome, Stress, and Sleep”, we process personal data to investigate whether different microbiome profiles (defined by the type and abundance of different bacteria) are associated with sleep quality and stress levels.

4. What information do we process about you?

We will process the following categories of personal data about you: general personal data and special categories of personal data.

For example, information such as age, sex (general personal data), bacteria type, bacteria abundance, sleep quality, personal health and nutrition information, and stress level (special categories of personal data).

We collect the information from the company InnerBuddies.

5. What is the legal basis for processing your personal data?

The processing of personal data requires that there is a legal basis for the processing in the data protection rules or other legislation. We process your personal data on the basis of article 6(1)(e) of the General Data Protection Regulation and section 10 (1) of the Danish Data Protection Act.

6. How long do we process your personal data?

At present, it is not possible to say for how long Aarhus University will process your personal data, as this depends on the purpose of the research project and the rules on storage according to responsible research practice. When your personal data is no longer required for processing, it will be anonymised, transferred to the Danish National Archives or deleted.

When assessing how long it is necessary to process your personal data, we take into account, among other things: achieving the research purpose, disseminating the research results and being able to account for the accuracy of the research findings for a period after the research has been completed (e.g. according to the rules on responsible research practice or according to law).

7. Who do we share your information with?

We must provide you with information about who we share your personal data with.

It may be necessary to share your personal data at a later time. In this case, we will only share them with recipients who have a legitimate research purpose.

8. What are your rights?

According to the General Data Protection Regulation, you have a number of rights when we process your personal data. Your rights are limited when the processing is carried out for research purposes. Therefore, you can read below what rights you have in connection with the processing of your personal data in research.

Rights in research

You have the right to have your data erased if the erasure of your data does not make it impossible or seriously impede the achievement of the research purpose.
In the event that we erase your personal data, we are obliged to notify any recipients of your personal data of the deletion, unless this proves impossible or is disproportionately difficult.

You can assert your rights by contacting Sonja Perkovic, associate professor, at sp@mgmt.au.dk.

9. How can you complain?

The processing of your personal data and your trust are important to us. Therefore, we hope that you will contact us if you have any questions or are unhappy with the way we process your information.

If you nevertheless wish to complain about our processing of your personal data, you can contact the supervisory authority in Denmark:

Danish Data Protection Agency (Datatilsynet)

Carl Jacobsens Vej 35

DK-2500 Valby