Privacy Policy

The CreaTures research project studies the role and impact of creative arts and design practices in supporting societal transformation towards sustainability.

Participation in the CreaTures research study is voluntary. If you stop, there will be no consequences, but it may not be possible to remove information already published.

Aalto University is the coordinator of the CreaTures project and project partners are the University of Sussex, RMIT University Spain, Utrecht University, Zemos98, Sniffer, Superflux, Kersnikova, Hellon, Furtherfield, OKFI, and RMIT University Australia. The CreaTures project receives funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No 870759.

What data is collected, how is it collected and processed?

CreaTures researchers will collect data from participants in the form of paper notes and as audio and video recordings, photography, and screen capture. This data may be included in CreaTures project outputs, including academic reports, academic conference presentations, and other academic or artistic publications. Some of these publications will be shared on the project’s website and/or published by publishers and conference organizers.

CreaTures will publish participants’ names and affiliations if the participants wish to be credited for their contributions in co-creation activities or for their personal opinions shared in interviews. In that case, CreaTures makes sure that participants’ names or pseudonyms are mentioned in the relevant project’s outputs and that appropriate credit to authors is given, as demanded by copyright legislation.

Legal basis for processing personal data and processing for artistic and academic purposes

The legal basis for processing personal data in the CreaTures project is consent of the data subject.

The CreaTures partners believe that publication of the published CreaTures material would be in the public interest, taking into account the specific public interest in the role of creative arts and design practices in supporting societal transformations towards sustainability. Please note that artistic and academic expression are covered by the exemption for processing personal data for artistic and academic purposes. The processing is being carried to enable artistic and academic publications.

Personal Data outside EU/EEA countries                                         

All CreaTures partners, including those located outside European Union, will have access to data collected within the CreaTures project. Some of CreaTures partners, namely the University of Sussex, Sniffer, Superflux, and Furtherfield, are located in the UK. The CreaTures partner RMIT-OZ is located in Australia. Therefore, data will be processed outside European Union. Data will be shared by UK partners under the European Commission Adequacy decision and by RMIT Australia using Standard Contractual Clauses for International Transfers published by the EU Commission.

Storage period of your data

All textual and audio-visual materials and artefacts will be gathered into an existing secure database and server provided by Aalto University and University of Sussex IT services, complying with university regulations, and stored there until 31.12. 2025. Artistic and academic publications will remain a public record.

Once the project is finished, we will store two open data sets on the CreaTures website (until 2025) and the meta-data set for further reference and reuse through one of the CESSDA (Consortium of European Social Science Data Archives) archives of the countries where partners are located. CreaTures consortium partners in the UK, Finland, and the Netherlands have access to national archive facilities for social sciences that are all part of CESSDA, which guarantees unlimited access for other users and maintenance. Meta-data of our research datasets will also be uploaded to ACRIS, Aalto Research Information System.

Data subjects’ rights

According to the General Data Protection Regulation (GDPR), data subjects have the right:

  • To obtain information on the processing of their personal data
  • To request access to their data
  • To request rectification of their data
  • To request restricting of the processing of their data
  • To object to the processing of their data
  • To erasure, if research data have been unlawfully processed and processing is no longer necessary for archiving purposes in the public interest, for scientific research purposes or statistical purposes, and the erasure of research data will not render impossible or seriously impair objectives of scientific research. 

NOTE: The rights of participants have exemptions in GDPR and national legislation to allow freedom of artistic and academic expression. After the CreaTures material is published, you as a participant may not be able to have the publications removed or altered, as these publications, containing photographs, videos, or other types of personal data, will remain part of public record.

The following protection measures have been enacted in this research

The processing of personal data is based on a research plan and data management plan. The Principle Investigator from the Aalto University (project coordinator) has been appointed; this is Professor Tuuli Mattelmäki

More information on the study and the exercising of your rights

Aalto University is the controller of personal data and Aalto University and Utrecht University are joint controllers of personal data. University of Sussex, RMIT University Spain, Zemos98, Sniffer, Superflux, Kersnikova, Hellon, Furtherfield, and OKFI are processors of personal data. For more detailed information on partners, see Our Team – CreaTures (

RMIT University Australia is a processor of personal data. For more information on how RMIT uses research data see RMIT Privacy Statement – RMIT University.

Aalto University as coordinator of this project is the designated contact organization, with Dr. Markéta Dolejšová ( as a contact person and Aalto University’s Data Protection Officer Anni Tuomela (, phone +358-9-47001) as the Data Protection Officer for the CreaTures Project.

Data subjects may contact any of the partners, who are all joint controllers in matters related to their personal data. The contact persons of partners and the contact information to their Data Protection Officers, when applicable:

University of Sussex: main contact person is Ann Light (, Data Protection Officer is Alexandra Elliott, Head of Information Management and Compliance (

RMIT University Spain: main contact person is Cristina Ampatzidou (, Data Protection Officer is Ioana Marin (

Utrecht University: main contact person is Joost Vervoort (, Data Protection Officer is Artan Jacquet (

Zemos98: main contact person is Felipe G. Gil (

Superflux: main contact person is Anab Jain (

Kersnikova: main contact person is Jana Putrle Srdić (

Hellon: main contact person is Kirsikka Vaajakallio (

Furtherfield: main contact person is Ruth Catlow (

Open Knowledge Finland: main contact person is Tarmo Tokkanen (

Sniffer: main contact person is Ruth Wolstenholme (

If participants see that their data has been processed in violation of the GDPR or data protection legislation, they have the right to lodge a complaint with the lead supervisory authority the Office of the Data Protection Ombudsman – Data Protection Ombudsman’s Office (

Website Analytics

This website ( collects anonymised user data for purposes of audience measurement and evaluation of the website performance using the Matomo open source web analytics platform. Tracking cookies are not used. The data is not used for any other purpose than analytics. Visitors are not tracked across websites. Fingerprints change daily for every visitor meaning no visitor can be followed across days, and no user profiles can be generated. This website respects your browser’s “do not track” settings. All data collected is anonymous.