Joinalyse Researcher Terms

1. Your role as a research data controller

You decide why and how the data your participants give you is processed for your own study, and you are therefore the data controller for that study under Article 4(7) GDPR. SkyWise International B.V., operating Joinalyse, acts as your data processor for the study data (Article 28 GDPR) and is separately the controller for the platform account data (your account, authentication, billing, and platform usage logs). This split is described in more detail in the Privacy Statement and, where applicable, in the Data Processing Agreement (DPA) between you or your institution and SkyWise.

2. You guarantee a lawful basis and ethical approval

Before you publish, you must have both a valid lawful basis under GDPR Article 6 and, where your institution requires one, a written approval from an Institutional Review Board (IRB), ethics committee, or comparable body. For most academic research the lawful basis is explicit consent from the participant (Art 6(1)(a)) or legitimate interest in scientific research (Art 6(1)(f)) with appropriate safeguards under Article 89. You must keep the ethics-committee approval on file and be able to produce it on request from SkyWise, a supervisory authority, or a participant who challenges the study.

3. Special-category data requires extra care

If your study collects special category data (health, ethnicity, religion, political opinion, sexual orientation, biometric, or genetic data under GDPR Art 9) or criminal data (Art 10), you may not publish it unless you have both:

• Written approval from an IRB, ethics committee, or comparable body specifically covering the special-category processing
• Explicit, granular double consent from each participant, separate from the general consent to participate, that names the special-category concerned and its purpose
• An on-platform acknowledgement, given when Joinalyse prompts you at publish time, that both of the above are in place

The platform detects likely Art 9 or Art 10 content in your survey and will ask you to confirm both points before publishing. Publishing an Article 9 or Article 10 survey without a valid double consent and IRB approval is a serious breach of these Terms and can trigger immediate suspension under section 10, notification of the relevant supervisory authority, and full researcher liability under section 11.

4. You write surveys that respect participants

Your survey:

• Accurately describes its purpose, how the data will be used, and who you are
• Does not deceive, harass, intimidate, or coerce
• Allows participants to stop at any time without penalty
• Does not request information beyond what your research design needs (data minimisation, Art 5(1)(c) GDPR)

5. Participation is voluntary

You agree that participation in your study is voluntary and that you will not penalise or pressure anyone who declines or withdraws. Where you offer external surveys via third-party tools such as Qualtrics, Typeform, or Google Forms, you must disclose that redirect and the operator on the consent screen before the participant leaves the Joinalyse domain.

6. You handle responses responsibly

The responses you collect belong to your research and remain under your control as controller. You agree to:

• Use them only for the research purpose you described to participants
• Not sell, transfer, or share them with third parties without explicit participant consent or a compatible legal basis
• Apply appropriate technical and organisational safeguards to any responses you export or store outside Joinalyse, proportionate to the sensitivity of the data
• Honour data subject requests (access, rectification, erasure, portability, objection) from your participants, and cooperate with Joinalyse when a request reaches us first
• Anonymise or hard-delete identifiable participant data within 30 days after study completion, defined as the moment your survey is closed and the raw responses have been exported
• Not combine Joinalyse responses with external datasets in a way that could re-identify participants, and not attempt to re-identify participants who chose to remain anonymous

7. You respect platform integrity

You will not:

• Attempt to identify anonymous or pseudonymous participants, whether by inference, by combining Joinalyse data with external datasets, or by any other means
• Scrape, automate, or otherwise circumvent normal platform use, including the participant matching engine and the discovery filters
• Publish surveys that violate applicable law, university policy, or generally accepted research ethics standards
• Impersonate other researchers, institutions, universities, or funding bodies, or misrepresent the affiliation of your study
• Use the platform to harvest participant contact details, send unsolicited communications, or otherwise treat participants as a marketing audience

8. Data subject rights and how requests reach you

Participants may exercise the rights granted under GDPR Chapter III (access, rectification, erasure, restriction, portability, objection, and the right not to be subject to automated decision-making) either directly with you as controller or via Joinalyse. When a request reaches Joinalyse first, we will:

• Identify the study or studies concerned and confirm you as the responsible controller
• Forward the request to you via the contact channel on file within five (5) working days, following the Joinalyse Data Subject Rights runbook
• Provide the technical assistance a processor owes under Article 28(3)(e), including making the raw response export and deletion tools available
• Track and log closure of the request so that we can demonstrate compliance to a supervisory authority if asked

You agree to respond to the participant within the timelines set by GDPR (one calendar month by default, extendable to three where the request is complex, with an interim reply to the participant) and to keep Joinalyse informed of the outcome so we can close the ticket in our records.

9. SkyWise's right to suspend

SkyWise may pause, take down, or restrict a survey or researcher account when there is reasonable evidence of:

• A breach of these Researcher Terms
• A regulatory complaint or a supervisory-authority inquiry
• Risk of harm to participants
• Suspected misuse of the platform, including harvesting, spamming, deceptive purpose, or unauthorised data reuse

You will be notified and have the opportunity to respond unless an urgent legal or safety reason requires immediate action. Where we take immediate action we will notify you as soon as reasonably possible and explain the reason.

10. Your liability and indemnification of SkyWise

You are responsible for compliance with applicable research ethics, privacy law, and these Researcher Terms in your own study. You bear the full liability for any misuse of the platform on your part, including but not limited to: publication of studies without valid consent, unauthorised reuse of participant data, attempts to re-identify participants, harvesting or spamming, breach of the special-category rules in section 3, or breach of the 30-day anonymisation obligation in section 6a. You indemnify SkyWise International B.V., Joinalyse, and their contractors (including Prikr) against any third-party claims, regulatory fines, and reasonable defence costs that arise from your breach of these Terms or of applicable law. Nothing in this section limits liability that cannot be limited under Dutch mandatory law.

11. Termination and withdrawal

You may close or withdraw any of your studies at any time from your researcher dashboard, in which case new participants can no longer join but the responses already collected remain available to you for export and anonymisation under section 6a. You may also close your researcher account, subject to the retention rules described in the Privacy Statement. SkyWise may terminate your access to the researcher features of the platform for cause, including repeated or serious breach of these Terms, following a written notice and a reasonable opportunity to remedy the breach where the breach is capable of remedy. Termination for cause without a remedy period is reserved for cases of manifest misuse, ongoing risk to participants, or a supervisory-authority order.

12. Governing law and disputes

These Researcher Terms are governed by the laws of the Netherlands, without regard to conflict-of-law rules. Any dispute arising out of or in connection with these Terms that cannot be resolved amicably shall be submitted to the exclusive jurisdiction of the competent court in Rotterdam, the Netherlands, unless mandatory law grants a different court exclusive jurisdiction. Nothing in this section prevents a participant from lodging a complaint with a data-protection supervisory authority under Article 77 GDPR.

13. Updates to these terms

We may update these Researcher Terms when law, regulator guidance, or platform changes require it. We will ask you to re-accept the new version before your next publish. Substantive changes will be summarised so you can see at a glance what changed since your last acceptance.