You have been invited to be a participant in a research activity carried out in the scope of the EU- funded project ENSURESEC. This document intends to provide you with detailed information concerning the research, in order for you to be able to take an informed decision on whether or not to participate.
Before making a decision, it is important that you clearly understand the purpose of the research and what it would involve for you. As such, please take time to read this document carefully and ask all the questions you may have so you can be completely sure that you understand all the proceedings of the research, including any potential risks and benefits it may entail.
This information document may include terms or concepts that you do not fully understand. If this is the case, please ask the contact person or any other member of the team coordinating the activity to fully explain it or clarify pieces of information.
At all times during the foreseen activities and afterwards, the ENSURESEC Consortium assures the compliance with the relevant national and European legislation.
Project Title: ENSURESEC – End-to-end Security of the Digital Single Market’s E-commerce and Delivery Service Ecosystem
Project Coordinator: INOV – Instituto de Engenharia de Sistemas e Computadores Inovação (PT) Website and contact: https://www.ensuresec.eu/
You are invited to take part in the testing of the ENSURESEC-solution. This form contains information which is intended to help you to make a decision if you join the study.
ENSURESEC is an innovation project funded by the Horizon 2020 research and innovation programme of the European Commission, under Grant Agreement no. 833242. The project is being undertaken by a consortium of 22 organisations from 14 European countries, including large industrial partners, Small and Medium Enterprises (SMEs), research centres and universities. It will have a duration of 2 years, having started in June 2020 and being expected to end in May 2022.
ENSURESEC is a security solution which protects e-commerce operations from cyber and physical threats. In order to do this, it monitors the whole e-commerce operation, from browsing to delivery. It identifies cyber and physical threats, and responds to and mitigates those threats. The ENSURESEC project is a project funded and under the supervision of the European Commission, in order to develop and test the ENSURESEC solution.
Taking part in this research project is voluntary. You do not have to participate and you can end your participation at any time. Please take the time to read this entire form and ask questions before deciding whether to take part in this research project.
The purpose of this study is to raise awareness about cyber-security in general, and specifically also information about ENSURESEC
Persons who are 18 years or older (non-minors according to the applicable national legislation)
Responding to the survey would take 2-5 minutes and beyond this very minimal, we estimate at the very maximum 30 minutes of your time in total could be taken over the course of the full delivery of experiments. This assumes you engage with all our deliveries of fake scams.
You have been invited because you meet the recruitment criteria mentioned in Section 3 and your contribution will help us to improve our project.
You are not obliged to participate. Your participation is fully voluntary, and your consent to it can be withdrawn at any time. No consequences will follow your withdrawal. If you withdraw your consent after study and the researchers have already used your information in a research analysis, it will not be possible to extract the information and remove it.
If you agree to participate in this study, please understand that your participation is voluntary (you are not obliged to participate, nor will refusal to participate have any consequences). You have the right to ask questions and receive understandable answers before making any decision. You have the right to withdraw your consent or stop your participation at any time without penalty and without stating a reason. You may leave the meeting at any time.
You have the right to access, update, correct and erase all personal data. As to the qualitative information that you provide us with, you have a right to withdraw the same up to the point of publishing the information in the relevant deliverable. A member of the consortium will inform you as to the planned publication date.
You have a right to lodge a complaint, to do so please contact the project coordinator (details below).
You can read more about the information that will be collected about you in Section 7 and in the Data Protection Policy.
The risks related to participating in the testing are minor, but we are required to inform you about any potential risks included. In principle, risk of breach of confidentiality in the handling of your personal data may lead to personal data breaches. Because this study collects information about you, one of the risks of this research is a loss of confidentiality. See Section 7 of this document and the Data Protection Policy for more information on how the study team will protect your confidentiality and privacy.
The following measures will be taken by the researchers to minimize the risks described above:
None of the participants will be paid for their participation.
1) Complementary Cyber Security training
You are free to end your participation in the study at any time. There will be no consequences to you for leaving the study before it is finished, even id mid-testing. If you decide to leave the study before it is finished, please tell one of the persons in charge of conducting the testing. If you choose to tell the researchers why you are leaving the study, your reasons may be kept as part of the study record. The researchers will keep the information collected about you for the research until the end of the project, unless you ask us to delete it from our records. If the researchers have already used your information in a research analysis it will not be possible to extract the information and remove it.
Every effort will be taken to protect your identity. You will not be identified in any report or publication of this study or its results.
Please consult data protection policy (attached here) for a full picture on how we process and protection your personal information. However, please note, that the following considerations apply.
If you agree to take part, any personal information (e.g., name, contact details) that will be collected from you is for our internal processing and administrative purposes only, and to enable us to contact you if we require further information. Your details will be kept for a maximum period of 12 months following the end of the research project. Unless you prefer otherwise, we will not publish any information in reports or communications materials that would enable you to be directly or indirectly identified.
We will disclose your information if the European Commission, who is funding this research, requests information for auditing purposes or to evaluate our procedures.
Within the consortium partners, your information will only be accessible on a need-to-know basis. Please also consult our Data Protection Policy, which will be provided to you by the partner.
We will keep the information we collect about you during the research period (until June 2022). If required, we may retain the information for a year after its termination. By then, all personal data will be deleted. Your name and other information that can directly identify you will be stored securely and separately from the research information we collected from you. However, it is not in our objectives to identify you. We will therefore apply anonymization and minimization techniques in order to minimize any risk of confidentiality breach or unintentional data breach.
We do not plan to share your identifiable information with other researchers for future research. If otherwise, we will ask for your consent.
Please consult our data protection policy and our consent form for processing of personal data for more information about how we handle personal data. You will also be asked to consider our data protection policy and provide your consent thereto, before participating in the study.
The reports on the execution of the pilots will be confidential. However, the report on the evaluation of the pilots will be public.
Your data will always be kept confidential.
Please contact the researchers listed below to obtain more information about the study:
If you have questions about your rights as a research participant, or wish to obtain more information, ask questions or discuss any concerns about this study with someone other than the researcher(s), please contact the following:
ENSURESEC Coordination team email – ensuresec.coordination@inov.pt