If you gain access to or collect personal data to be used in an assignment/your Master’s thesis, you are responsible for taking care of that data. Personal data may include:
See what personal data refers to
You must comply with the requirements for processing personal data and safe storage.
If you collect personal data, e.g. from test subjects or through a questionnaire, to be used in an assignment/your Master’s thesis, you are responsible for the collected data. This means that you are responsible for:
If you collect data on other people, you need their written consent to use and possibly disclose the information you receive. To get written consent, you must asks everyone involved to sign a consent form. A signed consent form ensures that the person(s) involved agree to have their data used for your specific purpose.
You may not collect, process or disclose personal data until the consent forms have been signed. You must submit a copy of the consent form to the person who has signed it.
Find a template for a consent form.
Find information about the rights of data subjects
It is your responsibility to ensure that the data that you work with is stored safely. You must always delete personal data when it is no longer relevant for your assignment/Master’s thesis. In practice, the means that you must delete the personal data when your assignment/Master’s thesis has been assessed and the deadline for complaints has expired.
You can store data safely using OneDrive, which is available to all students at Aarhus University. Here, you can also store completed forms, consent forms and contracts. Information stored in OneDrive must be pseudonymised or anonymised if the data can be used to identify individual persons (confidential or sensitive data.)
Read more about classification of data
For further questions about storage or managing of data contact the director of studies at the relevant department or faculty.
As data controller, you are obliged to describe the nature and purpose of the personal data that you collect. This must be stated in a document called a ‘record of processing activities’.
When you have created the record, it must be stored electronically. You may need this record in the event that the Danish Data Protection Agency makes an inspection of Aarhus University to check whether we are in compliance with the personal data regulations.
Within a certain framework, you are allowed to work with personal data that you receive from a researcher to be used in an assignment/your Master’s thesis.
A researcher can only legally give you access to personal data from a research project under one of three circumstances:
If you collect and process personal data for a group assignment or a report/Master’s thesis written in collaboration between two or more students, you must make an agreement on joint data responsibility.
The agreement on joint data responsibility means that all group members will be responsible for the personal data collected in connection with the assignment/report/Master’s thesis.
If you borrow electronic equipment from Aarhus University for an interview etc in connection with an assignment or Master's thesis, you are responsible for the content. This means that the recordings (and other content on the equipment) you make, must be deleted from the borrowed equipment after use, and that the content must be stored securely afterwards.
When students collaborate with a party outside Aarhus University (i.e. a third party) as part of their studies and want to use this party’s confidential information/business secrets in connection with an exam or in a written thesis, an agreement concerning this must be made between Aarhus University, the student and the third party. Read more.
If you are employed as a student assistant at Aarhus University, and you, in connection with your job, are associated with a research project, you are obliged to process personal data confidentially. This means that you cannot show or send information to others or store it on your computer when you are no longer associated with the research project.
As a student assistant you must comply with Aarhus University’s information security policy.