According to Art. 6 of the GDPR, you are only allowed to process personal data if you have proper legal grounds to do so. It lists six possible legal bases.

In most cases your research will be conducted on the basis of the consent of your research participants. The Ethical Committee of the Faculty (FETC) has templates for consent forms.

In some cases consent is not possible, e.g. when you are scraping social media. You could use one of the other five available legal grounds. The manual titled ‘Tactvol Contactloos Onderzoek‘ helps you working with different legal grounds and the consent of the participants.

In that case however, you are advised to contact the data manager or privacy officer of the faculty.

You’ll document the legal ground in the Processing Registry.

D. Data Manager, Ethical Committees and the Data Protection Officer