Privacy disclaimer

Version 1.0
Datum: 23-07-2024

Privacy statement of the ETAIN 5G Scientist App

With the ETAIN 5G Scientist App we aim to measure the exposure to radiofrequency electromagnetic fields (RFEMF). This is an exposure that occurs nearly everywhere from the use of telecommunication technology, for example when calling with a mobile phone. This privacy statement explains what data we collect with the ETAIN 5G Scientist App and why we collect it, how we handle and protect your personal data, and what rights you may exercise in relation to your data.

1. Controller of personal data

Utrecht University is the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR). Utrecht University treats your privacy with respect and care and processes your personal data in a way that complies with the applicable laws and regulations. If you have any questions about your rights mentioned below or would like to exercise them, you can contact the ETAIN project team by email: privacy@uu.nl

2. What data do we collect?

In order to measure radiofrequency electromagnetic field exposure, we need to collect certain information with the ETAIN 5G Scientist App.

(a) By using the ETAIN 5G Scientist App, the following data is recorded for research purposes:

  • Location data: We use various technologies to determine location, including GPS if you allow to use this and network location of the cell tower to get an estimate of your location.

  • Sensor data of your mobile phone (reception quality of the network signal, signal strength of WiFi and Bluetooth signals, type of network such as GSM, LTE, NR), which is used to estimate exposure at a given place.

This data is collected when the App runs in the foreground or in the background. If we have location data, then a data point is collected approximately every 15-20 minutes. At night, data is collected only one or two times. If it runs in the foreground, then data is collected more frequently (about every 5s). Default of app use is in the background, and you have to actively switch to foreground use if you select to use this mode.

The 5G Scientist App collects location information together with signal quality indicators of the network (RSSI). This information is then used to make maps of electromagnetic fields. The maps are made based on environmental measurements to translate RSSI indicators into exposure values. We display exposure values for 25 by 25m raster cells and do not display your original location data on our maps.

We do not collect information that identifies you (such as your name, phone numbers, or other identifiable information), so it is not possible to link the collected location data to you. The aggregated location data of many different app users is used to create a map that shows exposure levels at different geographical places. This ensures it is not possible to find out who participated in the study by looking at the maps; each exposure level at a specific location is based on the information from many different app users.

(b) You may additionally want to use the web portal to gain insight into your personal exposure to radiofrequency electromagnetic fields. In that case, we additionally to the data under a) collect:

  • A user name linked to your exposure data. You can choose any user name you want and we will not use these user names for any other purpose than allowing access to the portal.

  • Your usage of the mobile phone that the app is installed on: How you use your phone (e.g. for calling or browsing), amount of data usage via the mobile network, signal strength, Bluetooth or WiFi, and duration and timing of calls, which is used to calculate the exposure more precisely, as exposure to RF-EMF is higher with increased phone usage. We do not collect which websites you visit or which numbers you call.

  • In addition we collect the following personal characteristics: age group, sex, body weight and length. This data will be linked to your account but no email address or your name will be collected, so cannot be used to identify you from the collected data. Providing this data is on a voluntary basis, you can leave the questions open and this does not hamper functionality of the app. It allows for a better calculation of the exposure you have.

The collection of this data is on the basis of informed consent.

(c) You may additionally give us consent for collecting and processing of device debug data and feedback by enabling and using the feedback-option. We use this information to improve the app.  

For this purpose, we use Shake Software development Kit. Information collected using Shake is stored within Europe (Frankfurt, Germany). This data will be processed by our partner Games for Health B.V. A data processing agreement which ensures your privacy is in place. The data that can be processed includes non-personal information and personal information. Non-personal information is for instance app-diagnostic data, memory usage, screen size or device ID. Personal information includes a timeline of all user actions (every tap, swipe, pan), your network requests, system events, how you use the app, push notifications that arrive, custom logs and application console logs. Shake SDK automatically deletes as much personally identifying information as possible on the mobile device itself.

As an app user, you can upload screenshots or screen recordings. Please be aware that this may include personal information. 

Google Analytics:

(d) You may additionally give us consent for collecting and processing of anonymous analytical data to gain insight in the usage of the app. We can use this information for improving the app.  

For this purpose we use Google Analytics 4 software. We only collect data that cannot be linked to you personally and we do not collect more detailed location data than country and region .

This data will be processed by our partner Games for Health B.V. A data processing agreement which ensures your privacy is in place.

3. Security and retention period

We collect data for the duration of the lifetime of the ETAIN 5G Scientist App, this will be at least five years and extension may be possible. We will store the data for 10 years after the last publication of the research results by the researchers. This is necessary to achieve the research aims and in accordance with the relevant privacy laws and regulations regarding scientific research. The entire data processing provides security according to the latest technical insights.

4. Who else can access your data?

Researchers working with the data are part of the ETAIN project www.etainproject.eu

We will share data with researchers outside of Utrecht University for research questions related to radiofrequency electromagnetic field exposures. Sharing of data will be restricted to exposure and location data of many app users together, no personal data will be shared. It is not possible for the other researchers to find out your identity.

Data sharing will only be performed on the basis of strict conditions regarding processing of the data and in accordance with the relevant privacy laws and regulations.

5. Your rights

  • You can stop participating at any time. To stop further collection of your location and exposure data, you can remove the ETAIN 5G Scientist App from your mobile device. All locally stored data will be deleted. The data already entered will remain available for the research.

  • You can delete your user-account from the web portal. In that case, the already existing data will be continued to be used for scientific purposes. The link between user-account and location data will be deleted.

6. Who is the data protection officer of Utrecht University?

The data protection officer of Utrecht University can be contacted by email at privacy@uu.nl

7. Questions and complaints

Do you have questions regarding our privacy policy? In that case, please contact the contact person mentioned under point 1 or the data protection officer mentioned above.

If you have a complaint about data processing, then we’d prefer if you contact us first.

You can also file a complaint with the Dutch Data Protection Authority. This can be done via the following link, which also states the conditions under which you can submit your complaint (Dutch version):

https://www.autoriteitpersoonsgegevens.nl/de-ap-enprivacy/privacyverklaring-autoriteit-persoonsgegevens/privacyverklaring-klacht-melden