Privacy Notice for the Cycle4Climate Travel Survey

Published 16 May 2025

The University of Gävle, in collaboration with City of Espoo is responsible for collecting and processing your survey responses.

For questions about data protection, you can contact:

• University of Gävle: registrator@hig.se
• City of Espoo: tietosuoja@espoo.fi

The survey collects information about:

• Your travel behavior (e.g., how often you use different transport modes).
• Your opinions (e.g., satisfaction with transport infrastructure, attitudes toward different mobility options).
• Your background (e.g., work situation, education level, household composition).
• Your health (self-reported physical and mental health).
• Your residential area (postal addresses are collected for linking responses across survey waves).

The data is collected for research and planning aimed at improving sustainable transport and mobility in participating cities. Insights from the survey will help inform decisions about mobility initiatives.

The legal basis under the General Data Protection Regulation (GDPR) depends on the type of data collected:

• For general survey responses: Consent (GDPR Article 6(1)(a)) – By participating, you voluntarily provide your answers.
• For health-related data: Explicit consent (GDPR Article 9(2)(a)).

Your survey responses will be processed by:

• Project member from the University of Gävle, which stores and pseudonymizes the data.
• Project members from University of Tartu, which conducts statistical analysis (without access to personal identifiers).

Your data will not be shared with third parties for commercial use.

We implement strict security measures to protect your data:

• Pseudonymization: Your responses are stored with a code instead of personal identifiers.
• Secure storage: Data is stored on protected servers at the University of Gävle, following GDPR requirements.

Survey responses will be stored for 10 years at the University of Gävle for research purposes, in compliance with Swedish research law. After this period, all personal identifiers will be deleted, and only fully anonymized data will remain for long-term analysis.

Under GDPR, you have the right to:

• Access your data (know what data we have about you).
• Request corrections if your data is inaccurate.
• Withdraw your consent (if you no longer want to participate).
• Request data deletion (except where legal retention requirements apply).

To exercise your rights, contact registrator@hig.se or tietosuoja@espoo.fi.

If you believe your data is being processed unlawfully, you can file a complaint with The Office of the Data Protection Ombudsman ,www.tietosuoja.fi, or contact the University of Gävle’s Data Protection Officer at registrator@hig.se.