Complete the ‘Your participation in our study’ template below and insert (example) text below together with a [link] to view the description in the consent form on Sonar.

Example text:

This Study is conducted by [insert company], a company registered in [insert country]

with business reg. no. [XXXXXXXX] and with registered address at [insert] (the “Company”).

To proceed, you must read and agree, with the description of the Study (including the purpose and method); [insert link] and your rights as a participant. Please take time to read the entire form before deciding whether to take part.

By clicking the box below, I consent to:[1]

I understand that I can withdraw my consent at any time without consequences by notifying the Company at: [insert email].

Your participation in our study

Welcome to the study conducted by [insert company], a company registered in [insert] with business reg. no. [XXXXXXXX] and with a registered address at [insert] (“we”, “our” or “us”).

We appreciate your trust and the opportunity to help and want to ensure that you are comfortable and feel safe sharing your experience. This consent form will help you understand what your participation means and how we will use the information you provide to us.

This is a study researching [insert][3] (the “Study”). You may participate in the Study if you are at least 15 years old, or your parent or guardian has given consent for you.

Participating in the Study is free of charge and does not bring any risks. The Study may require that you have enough experience or knowledge around the topic of the Study, and we reserve the right to reject your participation if you do not have the required knowledge or experience and/or cannot answer the questions properly. In such a case, you will be notified.

The primary goal of the Study is to [insert][4] (the “Purpose”). Your participation will help us achieve this Purpose.

During the session we will ask you questions or tasks (the “Method”) within the topic of the Study. The session will be recorded on video and audio and will take about [insert] minutes, but you may complete it in more or less time. There is no time limit.

After the session, the audio recording will be transcribed to text and used, together with the video recording, to answer the questions and tasks. The recording will be destroyed after no longer than 2 years.

To be able to complete the Study, you need to have access to a computer with a microphone, webcam and internet access or a mobile phone (iOS/Android) with internet/data access.

Your participation in the Study is entirely voluntary and you may withdraw from the Study at any time without consequences. We may contact you again to request your participation in a follow-up study. As always, your participation will be voluntary and we will ask for your explicit consent to participate in any of the follow up studies.[5]

You will receive a gift card[6] as compensation for your participation. You will receive the compensation within a 10-business day period after you have completed the Study.

Your receipt of the compensation is subject to our final approval of your conclusion of the Study. We reserve the right to refuse compensation to participants who fail to meet our instructions, specified deadlines or quality standards, including the following:

Our processing of your personal data[7]

All information that you provide to us in the Study, including your personal data, will remain strictly confidential and only be used for the Purpose. We are the data controller of your personal data and will make sure they will be processed in accordance with the General Data Protection Regulation (Regulation no. 2016/679) (“GDPR”).

Personal data, we may collect from you

We process the following personal data about you, which you provide to us on a voluntary basis:

Non-sensitive personal data: [name, e-mail, gender, date of birth, photograph, and occupation[8] ].

In addition, we also process your responses and actions during the Study in an anonymous form and compare such anonymous information with other participants in the Study, and to participants of similar research studies.

How we use your personal data and the lawful basis for doing so

We use your personal data in order to achieve the Purpose of the Study.

The legal ground for the processing of your personal data is your freely given consent (art. 6 (1) litra (a) of the GDPR).

Recipients of your personal data

We will only share your personal data to the extent that it is necessary in order to fulfill the purpose with the processing or if required by law. In such cases we might share your personal data with third-party service providers, who process personal data on our behalf (data processors). Such third-party providers may only process your personal data in accordance with the instructions given by us.

We may transfer the personal data to countries outside of the EU/EEA. If your personal data is transferred to third countries (countries outside of the European Economic Area), such transfers will only be made if (I) the EU Commission has decided that there is an adequate level of protection in the country in question, or (II) other appropriate safeguards have been taken, for example the use of the standard contractual clauses (EU model-clauses) approved by the EU Commission or the data processor has valid Binding Corporate Rules (BCR) in place.

How we protect your personal data

We have established and will maintain adequate technical and organisational measures in order for your personal data not to be accidentally or illegally deleted, deteriorated or lost, disclosed to unauthorised third parties or in any other way be misused or used contrary to the data protection legislation.

We have internal rules and instructions to ensure that only those of our employees, who have a legitimate purpose, have access to your personal data.

How long we process your personal data

We will store your personal data for as long as it is necessary to achieve the Purpose of the Study. However, no longer than two (2) years.

Your rights

Subject to GDPR, you have certain rights, including the right of access to your personal data, the right to amend incorrect information, the right to have data deleted, the right to restrict data, the right to data portability, the right to object against the processing of personal data, including as regards individual, automated decision-making ("profiling"). We do not use automated decision-making, including profiling. Where the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal does not affect the lawfulness of the processing based on consent before its withdrawal.

If you wish to exercise your rights, please contact us at: [insert email].

Further, if you have any complaints about our processing of your personal data, you can contact the [country] Data Protection Agency by e-mail at [insert email][9] .

This template is made by CO:PLAY Law Firm and is a template to assist you in the design of your informed consent form. You must adapt this template to the requirements of your particular study.

If you transfer personal data to a third party (who is not one of your data processors within the EU), we recommend you to ask for separate consent to this (granular consent). If the personal data is transferred to one of your data processors located outside the EU, we recommend that this is stated in the consent.

Align list with appendix A, section 3 in the DPA

Insert 'what' is being studied e.g. product name

Insert the purpose of the study

Delete if not applicable

Replace with 'no compensation' or 'compensation of DKK/EUR/USD/GBP [insert amount]'

This template is made by CO:PLAY Law Firm, and is a template to a privacy notice containing all information to be provided to a data subject (where personal data are collected from the data subject). If you edit this privacy notice, please check that the following information is provided to the data subject :

§ 1:

(a) the identity and the contact details of you, as the controller and, where applicable, of the controller’s representative;

(b) the contact details of the data protection officer, where applicable;

(c) the purposes of the processing for which the personal data are intended as well as the legal basis for the processing;

(d) where the processing is based on legitimate interest (Article 6(1) of GDPR), the legitimate interests pursued by the controller or by a third party;

(e) the recipients or categories of recipients of the personal data, if any;

(f) where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.

§ 2:

In addition to the information referred to in paragraph 1, the controller shall, at the time when personal data are obtained, provide the data subject with the following further information necessary to ensure fair and transparent processing:

(a) the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period;

(b) the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability;

(c) where the processing is based on consent (Article 6(1) or point (a) of Article 9(2)), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;

(d) the right to lodge a complaint with a supervisory authority;

(e) whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible consequences of failure to provide such data;

(f) the existence of automated decision-making, including profiling (Article 22(1) and (4)) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

§ 3:

Where the controller intends to further process the personal data for a purpose other than that for which the personal data were collected, the controller shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information as referred to in paragraph 2.

§ 4:

Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.

Align list with appendix A, section 3 in the DPA

Insert country and email address

DK: Danish Data Protection Agency; dt@datatilsynet.dk