This notice explains how the GenAI Healthcare Evaluation Toolbox research project processes personal data.
Associate Professor Laura-Maria Peltonen, University of Eastern Finland, is the data controller and principal investigator. Contact: laura-maria.peltonen@uef.fi. Data Protection Officer: [dpo address].
Only if you choose “Use with research” on the consent screen, we collect: the application description you type, screening answers and verdicts, which evaluation items you accept or reject, slider settings, completion ratings, which exports you trigger, and how long each step takes — all stored under a random session code. We use these data to improve the tool (P1), to study which evaluation items work (P2), to understand adoption and completion (P3), and as validation evidence in scientific publications (P4).
We do not collect names, accounts, IP addresses, or cookies beyond a consent flag stored in your own browser. If you decline, nothing leaves your browser at all.
Your consent (GDPR Article 6(1)(a)). [Adjust if the DPO selects Art. 6(1)(e): "public-interest research, with your consent as an ethical safeguard".]
If you give an email address, we store it separately from your session data — the two cannot be joined — and use it only to invite you to follow-up research.
On [provider], in the European Union. No transfers outside the EU/EEA.
| Data | Retention | Then |
|---|---|---|
| Raw session content (incl. free text) | 5 years from collection | Deleted, or irreversibly anonymised |
| Aggregated, anonymised statistics | Indefinite (no personal data) | May be published openly |
| Contact emails | Until the follow-up study ends, max 3 years, or on request | Deleted |
| Consent records | As long as raw data are kept | Deleted with the raw data |
You may request access, rectification, or erasure of your data, and withdraw consent at any time, by emailing laura-maria.peltonen@uef.fi and quoting your session code (shown in the footer of the tool — save it). If you cannot provide your session code, we cannot find your data among the pseudonymous records (GDPR Article 11), and will tell you so. You also have the right to complain to the Office of the Data Protection Ombudsman (tietosuoja.fi).
Results are published as statistics and themes. Free text you typed is never published verbatim.
Changes to this notice are announced on this page with a new version number and date. If the purposes change, we will ask for your consent again.