PRIVACY POLICY 

1. Introduction

This privacy policy explains the processing of personal data in relation to the website https://www.youcountproject.eu/ (the “YouCount Website”). The YouCount Website provides information on the YouCount research project, which is a citizen science project aimed at addressing the issue of how to increase social inclusion for young people (the “YouCount Project”). Below you will find information on which personal data is processed, why and how we process your data, and your rights related to our processing of your personal data.

2. Information on the controller

The YouCount Project is a joint research project between the following partners:

• Oslo Metropolitan University (OsloMet, Norway)
• The University of Central Lancashire (UK)
• Vetenskap & Allmänhet (Sweden)
• Södertörn University Stockholm (Sweden)
• Universität Wien (Austria)
• ESSRG Environmental Social Science Research Group (Hungary)
• Aalborg University (Denmark)
• Kaunas University of Technology (Lithuania)
• Dipartimento di Studi Umanistici, Università degli Studi di Napoli Federico II (Italy)
• Foundation Deusto (Spain)

OsloMet is the project coordinator and data controller for the processing described in section 4.1 to 4.3 below. For the processing described in section 4.4 below, there is a joint controllership between the partners listed above.  

The contact details of OsloMet as controller and representative for the controllers are as follows: 

Address: Postboks 4, St. Olavs plass, 0130 Oslo

Email:  This email address is being protected from spambots. You need JavaScript enabled to view it.

Telephone: +47 67 23 50 00

Organization number: 997058925

For questions you may have regarding the processing of your personal data, you can contact the following persons:

• Reidun Norvoll, project manager of the YouCount project (OsloMet) This email address is being protected from spambots. You need JavaScript enabled to view it.
• Ingrid Jacobsen, Data Protection Officer at OsloMet: This email address is being protected from spambots. You need JavaScript enabled to view it.

3. About whom do we process personal data?

This privacy policy concerns our processing of personal data for the following data subjects:

• Visitors to the YouCount Website
• Contact persons for organizations signing up to our Community of Interest
• Persons who sign up for our newsletter
• Participants in the YouCount Project and other users of the YouCount app

4. How do we process the personal data?

4.1 Personal data processed to operate the website – cookies and similar technologies

We process personal data of visitors to the YouCount Website. This information is collected through use of cookies and similar technologies. Cookies are small text files that are placed in the browser of your device and allows for the proper functioning of the website. We only use first party cookies, of which most are deleted after the end of the session.

We process the following personal data of persons who visit the YouCount Website:

a. IP address
b. Usage data, such as entry points, date and time of access, websites visited, content interest, browser type, data volume and transferred traffic, operating system, information on whether the access was successful or unsuccessful, etc.

The purpose of this processing is to operate the YouCount Website, ensure that it works as intended, and to keep it secure. The YouCount Website shall provide information about the YouCount project to the public and to stakeholders interested to learn about or participate in project activities and to get access to publications and data as part of our open science approach.

The legal basis for placing the cookies in the browser of your device is consent. If your browser settings accept cookies, you are considered to give consent to the placement of cookies.

The legal basis for the processing of the information gathered by the cookies is our legitimate interest in being able to operate the YouCount Website, cf. the GDPR article 6(1) letter f.

4.2 Personal data processed for subscription to the newsletter

We process the following personal data of persons who sign up to our newsletter:

a. Contact information, including email address, name, and home country

The purpose of the processing is to provide information on our activities and marketing to persons who have actively asked to receive information from us.

The legal basis for the processing is consent cf. the GDPR article 6(1) letter a.

We use Rule Communication – Nordic AB as a provider of and processor for our newsletters. You can read more about their privacy policy here.

4.3 Personal data processed for sign-up to the Community of Interest

We process the following personal data of the contact persons for organizations who sign up to the Community of Interest:

a. Contact information, including name, email address, and phone number
b. Position or role at the organization

The purpose of the processing is to be able to communicate and stay in touch with the organizations that sign up to the Community of Interest. The Community of Interest has been established for interested parties to receive more information about and invitations to project activities.

The legal basis of the processing is our legitimate interest in having a point of contact with the organizations that have signed up for the Community of Interest, cf. the GDPR article 6(1) letter f. If the information is published or used on our homepage, the legal basis for our processing is consent cf. the GDPR article 6(1) letter a.

Only information about the organization, and not the information about the contact persons, will be shared publicly. You can read more about the processing in the privacy policy for the Community of Interest.

4.4 Personal data processed in the YouCount app

We process the following personal data of participants of the YouCount Project and other persons that download and use the YouCount app:

a. Contact information, such as name, email address, phone number, and address.
b. Content data, such as video, text, and photographs the user adds to the app.
c. Location data, such as information on the geographical position of a device or person

The purpose of the processing is to be able to collect research data for the YouCount Project.

The legal basis for the processing consent cf. the GDPR article 6(1) letter a.

More information on the processing of personal data of participants in the YouCount Project through the YouCount app can be found here. The YouCount app is provided by Spotteron GmbH. More information on how they process personal data can be found here.

5. Retention

The personal data will be processed for the duration of the YouCount Project, namely from 1 February 2021 to 31 January 2024. The personal data will be deleted at the end of this period.

6. Who we share the personal data with

We do not disclose or share personal data to third parties except for the following instances:

• If there is a legal obligation that requires us to disclose the information.
• Between the research partners to the extent necessary to carry out the YouCount Project.
• To our data processors. We use data processors to collect, store or otherwise process personal data on our behalf. In such cases, we have entered into data processing agreements to safeguard information security at all stages of the processing. We currently use the following data processors, who may use sub-processors:
  • Spotteron GmbH for provision of the YouCount Website and app
  • Rule Communication – Nordic AB for newsletter

Personal data may be transferred to recipients outside of EU/EEA, as one of the partners of the YouCount Project is situated in the UK. The basis for such transfer is the GDPR article 45 and the Commission’s decision that UK ensures an adequate level of protection. Personal data will not be transferred to third countries in any other way.

7. Security

All processing of personal data is secured with the required technical and organizational measures. Routines have been established for handling breaches of information security and rules on privacy. In the event of a breach of personal data security, OsloMet will notify the breach to the Norwegian Data Protection Authority without undue delay and, when possible, no later than 72 hours after becoming aware of the breach, unless the breach is not likely to entail a risk to the rights and freedoms of the persons concerned. If it is likely that the breach of personal data security will result in a high risk to the rights and freedoms of natural persons, OsloMet will notify the persons concerned as well.

8. Your rights when we process your personal data

As a data subject, you have the following rights:

a. Information and access: You have the right to request information about and access to the personal data we process about you.

b. Rectification: You have the right to request rectification or completion of inaccurate or incomplete personal data.

c. Erasure: You have the right to request the erasure of personal data in certain cases.

d. Restriction: You have the right to request the restriction of the processing of your personal data in certain cases.

e. Objection: You have the right to object to the processing of your personal data in certain cases.

f. Data portability: You have, in certain cases, the right to receive your personal data that you have provided us with in a structured, commonly used, and machine-readable format and to transmit those data to another controller.

To exercise your rights, you must contact us at This email address is being protected from spambots. You need JavaScript enabled to view it.. Your inquiry will be answered as soon as possible, and within one month at the latest. If it takes longer than a month to answer your inquiry, you will be notified.

If the processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on the consent before its withdrawal.

9. Complaints

If you believe that our processing of personal data is not in line with what we have described here or that we are in breach of privacy legislation, you can complain to the Norwegian Data Protection Authority. You can find information on how to contact the Norwegian Data Protection Authority on their website: www.datatilsynet.no.

10. Amendments

We reserve the right to adjust or change this privacy policy, for example in relation to changes of regulatory requirements. The latest version of the privacy policy will always be available on the YouCount Website.