Who is responsible for my data?
The University of Oxford, as sponsor, is the data controller. This means that we, as University of Oxford researchers, are responsible for looking after your information and using it properly.
The University of Oxford is using your personal data for research purposes and will only process personal data as necessary to undertake research that is being carried out in the public interest. This is known under data protection law as our “legal basis”. The legal basis for the processing and storage of your personal data for ASCEND and its sub-studies is that it is ‘a task in the public interest’ (Article 6 (1) (e) EU General Data Protection Regulation (GDPR)). In addition, a required condition under GDPR to process your special category (sensitive) personal data is met as it is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes (Article 9 (2) (j) GDPR).