Privacy Statement

Privacy Statement CKVE Contamination Research

1. What is CKVE Contamination Research?
Delft University of Technology (TU Delft), together with the COVID Knowledge Centerfor Events, a coalition of various parties, including representatives from the event industry via the Alliance of Event Builders and Event Platform and the ministries of EZK, VWS, J&V, and OCW, has developed a risk model to make predictions about the contagion risks of the COVID-19 virus. The model includes information about the effectiveness of vaccines, new insights into the transmission of the virus and the relationship with the type of event (for example, indoor or outdoor, with fixed seats or not) and can always be adjusted in response to changed insights. This risk model can be used in the future to respond more quickly and adequately to virus outbreaks.

This model can be further refined by means of questionnaires. If you attended an event, the event organizer may invite you to complete a questionnaire. Participation is of course completely voluntary.

2. How is your personal data protected?
CKVE Contamination Research is organized on the basis of the privacy-by-design principle. This means that separate databases are used and that as little personal data as possible is processed and exchanged:

The event organizer will send you an invitation to participate in the survey. The research organization will not have access to your e-mail address or telephone number.
It is not necessary for the purpose of the study to know who completed the questionnaire. When you participate, your IP address will only be processed for the technical connection: to send you the questionnaire and receive your answers. For a short time, your answers are therefore linked to your IP address. Although we cannot find out who the IP address belongs to, this can still qualify as processing personal data. As soon as we have received your answers, we will immediately delete this IP address. After that, the data can no longer be linked to you.
The data in the risk assessment model can never be traced back to you or another natural person. The GDPR no longer applies.

3. Who is responsible for the processing of your personal data?
The following parties are involved in the research:

Type of Party	Who is this party and what does this party do?	What is the legal role within the meaning of GDPR?
The event organizer	This party will send an email or text message a few days after the event inviting them to participate in the survey.	(Joint) Data Controller
Research organization	TU Delft has developed the risk assessment model and can refine it by means of completed questionnaires.	Processing Officer
Technical party that provides the hosting	This party provides the hosting of the questionnaires and answers (in the Netherlands).	Processor
Third parties that receive results of the risk assessment model.	Based on the risk assessment model, third parties, including licensing and advisory parties, may be better able to make a risk assessment with regard to the planning of an event.	None. The GDPR no longer applies because personal data is no longer processed.

4. From whom do we process personal data?
Event visitors who complete the questionnaire or just visit the website.

5. Welke gegevens worden verwerkt voor welk doeleinde op welke grondslag?

Personal data and basis	Purpose
E-mail address/telephone number Basis: legitimate interest in inviting you to participate in the research.	The organizer of the event you attended will send you an invitation by email or text containing the link to the webpage where you can participate in the survey.
The event you attended Basis: legitimate interest in inviting you to participate in the research.	The link you received from the organizer is associated with a specific event. This allows your answers to the questions in the questionnaire to be linked to this event.
IP address Basis: necessary for the execution of the agreement - to allow you to complete the questionnaire.	The IP address of the device with which you consult the questionnaire is necessarily processed. It is technically not possible to offer a web form that can be completed completely anonymously by default.
Answers to the research questions, including health data Basis: your explicit consent.	The answers to questions such as "Have you developed complaints related to COVID-19?" can be linked to your IP address at any time, this is immediately anonymized and then further processed in the risk assessment model.
Information about your device, such as the type of device, the browser you use and the size of your screen Basis: necessary for the execution of the agreement - to show you the website correctly.	We use this information to ensure that our website and the questionnaire are clearly visible.
Cookie Basis: necessary for the execution of the agreement - so that the form can only be completed once.	By means of a functional cookie it is possible to keep track of whether the form has already been completed from your device.

6. How do we get your data?
The organizer for the event you attended obtained your details from the ticket sales of the event. You provide the answers to the questions in the survey yourself when you participate in the survey. Your IP address and data about your device are necessarily processed when you access the questionnaire website.

7. To which other parties do we provide your data?
In the context of CKVE Infection Research, no personal data is provided to third parties. See the table under 3.

8. Is personal data transferred to countries outside the EEA?
In the context of CKVE Contamination Research, no personal data is passed on to countries outside the European Economic Area (EEA). Hosting of the web form with the questionnaire and the answers takes place in the Netherlands.

9. What are your rights?
You have the right to inspect, correct and delete your personal data. In addition, you can ask us to limit the processing, to transfer the personal data and you have the right to object to the processing. You can exercise these rights by contacting us at [email protected].

10. Contact
For questions, please contact [email protected].