At CEU GmbH - CEU Central European University Private University (address: Quellenstrasse 51, 1100 Vienna, hereinafter: CEU PU GmbH or University), we place great emphasis on the protection of your personal data and compliance with the EU General Data Protection Regulation (GDPR *) and the Austrian Data Protection Act (DSG). This privacy statement applies to the use, processing, and storage of personal data collected for research purposes in the Research Center for "Adaptive Cognition & Economics In Society" (ACES) of the CEU PU GmbH - Department of Cognitive Science.Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing directive 95/46/EC.1. Who are we, and what do we do? Designation of the data controllerWe, researchers working in the Adaptive Cognition & Economics In Society (ACES) Research Center of the Central European University, Department of Cognitive Science, are concerned with learning about multiple factors that lead people to choose distributions that benefit themselves and/or others and influence coordination strategies through a smartphone app.2. Availability of the data controllerCEU GmbH - CEU Central European University Private UniversityQuellenstraße 51 1100 ViennaPhone: + 43 1 2525307111Email: privacy@ceu.edu3. What is the purpose of processing personal data?I. We only collect and process your personal data to invite you to participate in our research and keep in touch with you.II. We will collect behavioral data through our online smartphone application Coordy during the experiments to analyze multiple factors influencing coordination strategies.4. What is the legal basis for the processing of personal data?The legal basis for processing the data indicated in 5.1 for the purpose of 3.1 is your (expressed) consent (Article 6 (1) (a) of the GDPR).5. What personal information do we collect?For the purposes of data processing specified in Section 4 of this Notice, the University may process the following personal data of the data subjects.5.1. Personal information:NameEmailAgeDate of consentSignatureDate of participation5.2. Behavioral data collected during experiments:Anonymized, indentified by unique codeACES - Adaptive Cognition & Economics In Society collects the personal data needed to contact you directly. You are not obliged to provide your personal data or to consent to its further processing; however, due to the non-provision of data, you will no longer be able to participate in the research.6. Who do we share your personal information with?The data is managed only by the Central European University, Department of Cognitive Science, Adaptive Cognition & Economics In Society (ACES). Solely the colleagues working on the project and conducting the studies have access to the data.7. How long do we process your personal information?I. Concerning the purpose of data processing specified in point 5.1, until the data subject's consent is revoked, or until the completion of the study. After the period specified above, your personal data will be deleted.II. The anonymized behavioral data (5.2) are stored for 5 years from publication of the results. If the results are not published, they will be kept for 10 years and then deleted. The storage of anonymized behavioral data until the dates indicated above is justified by the expectation of professional requirements for scientific results.8. What are your rights regarding data processing?You have the right to:ask us for access to your personal informationobject to the processing of your datarequest that your data be correctedrequest the deletion of your datarestrict the use of your personal datawithdraw your consent at any timeTo exercise any of the above rights, please email us at coordyteam@gmail.com. We will respond in writing no later than 30 days after receipt of the request.If you wish to request assistance from the competent national authority, you can do so at the following address:Austrian Data Protection Authority:Österreichische Datenschutzbehörde Address: Barichgasse 40-42, A-1030Phone: +43 1 52 052-0Email: dsb@dsbgv.at9. Security of your personal informationWe are committed to handling your personal information securely and carefully. Anonymized behavioral data (participants' behavioral data during experiments) is stored at Amazon Relational Database Service (RDS) - AWS (PostgreSQL database engine). The account is accessible only to authorized lab personnel. More information at: https://aws.amazon.com/rds/Management of participants' personal data (i.e., name, email, and age) and authentication services are provided by Clerk. The platform Clerk uses stateless session management based on JSON web tokens (JWTs) for secure authentication through participants' Google and Apple accounts. For authentication of users, all strictly necessary data is processed in compliance with the EU General Data Protection Regulation ('GDPR').The access to the server and the CEU Coordy account are restricted. Only the experimenters with administrative rights can access the data. Databases are temporarily downloaded to the CEU desk computer and password-protected; after the payment process, the private database is deleted from any device.We do not sell or transfer your information to other organizations.10. Account and data deletionYou may delete your Coordy account at any time by navigating from the home page to the “Profile” page (left bottom) and clicking on “Delete my account” (bottom). Upon deleting your account, all your personal data (5.1) will immediately be removed from our database. If you are unable to delete your account by following the previously described procedure, you can request the deletion of your account and personal data directly by emailing coordyteam@gmail.com. Notice that the behavioral data is anonymized and cannot be traced back to you.11. Confidentiality and Handling of DataWhen you access Coordy with your Apple account, you receive your Player ID to ensure anonymity of your research data. We will record your choices during the play sessions, and store it without any personal data. The results of the research may lead to the publication of statistical data that will under no circumstances refer to you personally.The only personally identifiable information we collect is your email address that you voluntarily give to us when choosing to participate in various activities related to the Application. We do not share it with the third parties and keep if safe in full compliance with GDPR.Contact InformationIf you have any questions, you can ask them by contacting us:coordyteam@gmail.comFor each participation, you will be required to accept the terms within our consent form (https://www.coordy.app/policies/consent). Read it carefully before consenting to participate in an experiment.Last update 30th Jully 2024