Search

Privacy policy

Below you find the privacy policy for the app. You also find this information in the settings tab in the app

Privacy policy

MyGävle is part of a research project at the University of Gävle called BIG. BIG aims at creating knowledge for urban solutions that simultaneously promote individual, social, and ecological health. More information about the project you can find on the Universitys webpage for the project or at the Future Position X. All the research of the BIG project will be done on Gävle and for the people of Gävle. By living in Gävle, you know where Gävle makes you feel good or bad and we would like to understand how to your good experiences can be maximized and your bad experiences reduced. The research project is a collaboration between the University of Gävle, Future Position X (FPX), and it is financed by Vinnova. The principal investigator is Matteo Giusti, Researcher in Sustainability Science at the University (matteo.giusti@hig.se). Below you will find information about what it means to use MyGävle and participate in the BIG project.

Who is responsible?

For the purposes of the Data Protection Act 2018 (“The Act”), University of Gävle is the data controller. This means that the University of Gävle is responsible for protecting the data you provide when you use the MyGävle and the the vívosmart® 4 fitness band. By using the word ‘we’, we refer to Högskolan i Gävle. We have adopted this Privacy Policy to ensure that the data that we collect from you via the MyGävle and the vívosmart® 4 is protected. By publishing this Privacy Policy, we aim to make it easy for you to understand what data we collect and store, how and why we collect it, and the rights you have as an individual to access your data. This policy applies to all forms of information, physical and digital, whether collected or stored electronically or in hardcopy.

Which data will you collect with MyGävle?

You will also be asked to consent to share with us the activity and lo-cation data of your smartphone. We will acquire information about your geographical location using the GPS sensor on your mobile phone. We will also acquire information about whether you are walking, running or cycling using the sensors of your smartphone. This is to have detailed information about your activity and use the least amount of battery of your phone. We ask for your consent to provide your geographical location and physical activity data when you first use MyGävle. This is essential data to understand to which environment you are exposed and to understand exactly where ‘your’ Gävle is and how it affects you. If, for whatever private reason, you do not want to share your location, you can disable the location and activity services temporarily in the setting page.

In addition, you will be asked to answer two questionnaires. The first questionnaire is 1 minute long and we ask you to answer it at least once a week. We call this the ‘experience’ survey. It allows you to report positive and negative experiences in Gävle that influence your daily life. You can also report what make them positive or negative and how they affect your happiness, social cohesion, or general wellbeing.

The second questionnaire is 3 minutes long and you are asked to an-swer it only five times (September 2021, December 2021, March 2022, June 2022, and September 2022). We call this the ‘baseline’ survey. This is a questionnaire to evaluate how your baseline happiness, mental and physical health, your connection with nature, and your level of connection with the community changes throughout the year. So, over a period of 15 months - the entire length of the study - the commitment required by MyGävle and the BIG project is roughly 80 minutes.

What happens to my data from MyGävle?

According to the EU Data Protection Regulation (GDPR), research carried out by state higher education institutions is a task of public interest. Your personal data will be collected by MyGävle, securely transferred and store at servers at HIG. Only few authorized researchers at HIG will be able to access with an encrypted access the information collected about you and only for the research purposes of the BIG project. Your personal data will not be presented publicly in any form. Data will be presented only at the aggregate level. According to the GDPR, you have the right to access, rectify, be forgotten, have access your data, restrict the processing of your data, object the processing, or limit the use for automated decision making (which will not be developed in this project). These rights are free of charge. You can correct errors if necessary or request that data concerning you to be deleted or that the processing of your personal data be restricted. If you wish to perform any changes to your data, please contact the principal investigator at matteo.giusti@hig.se or 026 64 50 16 (for English communication), or karl.samuelsson@hig.se or 026 64 84 26 (for Swedish communication). You can also find these contact details later under the Settings tab of MyGävle. If you are dissatisfied with the way your personal data is processed, you have the right to lodge a complaint with the Data Protection Authority, which is the supervisory authority. The Data Protection Officer can be reached at: registrator@hig.se, 026-64 88 56.

Which data will you collect using the vívosmart® watch?

By using the vívosmart® 4 fitness band we will have access to the biometric data that you transmit to Garmin® using the Garmin® Connect application. The vívosmart® 4 fitness band has heart rate and pulse oximetry sensors and acquires information about your heart rate, steps, calories consumed, stress levels, and sleep quality. This data will be collected whenever you wear the watch. This means both during waking hours and during resting hours. This is important to evaluate your daytime heart rate variability, which can be influenced by where you go and your activities, and your resting HRV, which is an indication of your overall health and an important predictor of cardiovascular diseases and mortality. For these reasons, we ask you to keep the watch on at night. At any given point in time and without providing any explanation to the researchers, you are allowed to temporarily remove (maximum 1 day) the watch or temporarily disable the connection in the setting page.

In addition, we will use the Garmin® SDK to have data about your heart rate variability directly from your vìvosmart 4. Heart rate variability is a recognised indicator of stress and overall health of autonomic nervous system. In brief, we will collect data on some aspects of your objective personal health. You will also be able to see all these data using MyGävle and the Garmin® proprietary app Garmin® Connect.

When you use the vívosmart® 4 watch, this data is transferred to Garmin® directly using the proprietary app Garmin® Connect. We will use the Garmin® Health API and Garmin® SDK to access the data that is associated to your watch.

What happens to my biometric data?

Your personal data is collected for research use only. According to the EU Data Protection Regulation (GDPR), research carried out by state higher education institutions is a task of public interest. Your personal data will be collected by MyGävle, securely transferred and store at servers at HIG. Only few authorized researchers at HIG will be able to access with an encrypted access the information collected about you and only for the research purposes of the BIG project. Your personal data will not be presented publicly in any form. Data will be presented only at the aggregate level. According to the GDPR, you have the right to access, rectify, be forgotten, have access your data, restrict the processing of your data, object the processing, or limit the use for automated decision making (which will not be developed in this project). These rights are free of charge. You can correct errors if necessary or request that data concerning you to be deleted or that the processing of your personal data be restricted. If you wish to perform any changes to your data, please contact the principal investigator at matteo.giusti@hig.se or 026 64 50 16 (for English communication), or karl.samuelsson@hig.se or 026 64 84 26 (for Swedish communication). You can also find these contact details later under the Settings tab of MyGävle. If you are dissatisfied with the way your personal data is processed, you have the right to lodge a complaint with the Data Protection Authority, which is the supervisory authority. The Data Protection Officer can be reached at: registrator@hig.se, 026-64 88 56.

How do we keep your information safe and secure?

We take your privacy, confidentiality, and the security of your information very seriously and we will take all reasonable precautions to protect your data from unauthorised access.

All data collected from MyGävle and from the Garmin vìvosmart 4 is saved and stored in one server at the University of Gävle. Each survey will have a different entry in the server, so data about the profile of participants with be separated from the data about the reported experiences, their baseline health and wellbeing, or their biometric data. To identify and link one participant to his/her biometric data and his/her survey responses we use a randomly created identification code (uuid) that has no connection to the person’s identity. Only during data analysis, the link between different data sources will be created and the data combined. Thus, it is no possible to identify participants and having their sensitive information without additional data analysis.

No unauthorised person will have access to data at individual level. We will not report results at individual or group level for groups of less than five individuals. The server where the data is stored has restricted access to the personnel at the University only, and access to the data themselves is guaranteed by a personal encrypted key given to only the few researchers involved in MittGävle by the principal investigator Matteo Giusti. Data will be stored at HIG's servers until 2032.

We will endeavour to ensure that our partners or any third parties to which we may transfer data according to the terms of this Privacy Policy have in place high standards for privacy and security policies. We will govern the sharing of information for research purposes or in relation to services provided to us in connection with the research purposes, by data sharing agreements which will ensure that third parties keep the data safe and secure. However, the collection and use of an individual’s information by such partners or third parties may be subject to separate privacy and security policies for which HiG is not responsible.

Complaints and disputes

If you have a complaint about our handling of your data, you should address your complaint in writing to the Project Lead. You have the right to lodge a complaint with a supervisory authority if you consider that the processing of your data infringes the General Data Protection Regulation. If we have a dispute regarding your data, we both must first attempt to resolve the issue directly between us. If we become aware of any unauthorised access to your data which is likely to result in a high risk for your rights and freedoms, we will inform you without undue delay using MyGävle or via email address, once we have established what was accessed and how it was accessed.

Additions to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we decide to do this, we will post a notification on MyGävle and send an email address and we will post a new version of the Privacy Policy on our website and on MyGävle. Changes and clarifications will take effect immediately upon posting on MyGävle.

Contacting us

If you have any questions or concerns, please contact the principal investigator Matteo Giusti for communication in English or Karl Samuelsson for communication in Swedish.
Matteo Giusti: e-mail: matteo.giusti@hig.se or phone: 026 64 50 16
Karl Samuelsson: e-mail: karl.samuelsson@hig.se or 026 64 84 26

You can also find this consent form and these contact details in the Settings tab of MyGävle.

Published by: Veronica Liljeroth Page responsible: Veronica Liljeroth Updated: 2021-11-26
Högskolan i Gävle
www.hig.se
Box 801 76 GÄVLE
026-64 85 00 (växel)