Privacy Policy


The purpose of processing personal data

The purpose of processing the data is the national implementation study of the Incredible Years programme, which aims to study the use and effectiveness of the Incredible Years programme within the Finnish social and healthcare service system. The purpose of the study, carried out by the Research Centre for Child Psychiatry at the University of Turku, is to improve the access to family-focused forms of support for the families using social and healthcare services. The study maps out the suitability of the parenting programme and to what extent the programme is useful for children and families in different circumstances. The aim of the study it to examine the following: 1) To what extent is the use of the Incredible Years parenting programme as a targeted service for families connected to changes in the children’s behavioural issues and the families’ wellbeing?; 2) How satisfied are the families with the programme and how are family-specific factors connected to the effectiveness of the programme?; 3) How are the group leader’s (programme implementor’s) background factors and faithfulness to the method connected to the results of the programme?; 4) Is the implementation of the Incredible Years programme connected to the use of services on a municipal or regional level, has for example the need for special healthcare or the number of placements outside the home been reduced?; 5) How have changes caused by the COVID-19 pandemic affected the implementation of the programme?

Controller of the file

The University of Turku (FI-20014) administers and maintains the register relating to the Incredible Years study where personal data is processed.

Grounds for processing

The grounds for processing the personal data are public interest; scientific research, which is defined in Section 2 of the Universities Act (558/2007), the EU General Data Protection Regulation (Article 6, paragraph 1e) and the Data Protection Act (Section 4(3)). The grounds for processing special personal data groups are defined in Article 9, paragraph 2j in the EU General Data Protection Regulation and Section 6(1)(7) in the Finnish Data Protection Act.

Contact person

Questions about the study can be directed to: Senior Researcher Marjo Kurki  
Telephone: 0442710797
The study is led by Andre Sourander, Professor of Child Psychiatry
Research Centre for Child Psychiatry, University of Turku, Lemminkäisenkatu 3 / Teutori 3rd floor, 20014 University of Turku.
Questions about data security can be directed to:

Personal data groups

The background information collected about the parent: year of birth, gender, mother tongue, level of education, profession, family setup, information about family structure, information about the training, the child’s psychosocial wellbeing and bullying, and the family’s circumstances. Background information collected about the child: name, year and month of birth, gender, mother tongue and type of day care. In the initial assessment, which is carried out before the treatment programme begins, we will carry out an extensive survey of the child’s behaviour and emotional life, parenting skills in the family, as well as the flow of everyday situations. Symptom meters will also be used to measure the parents’ child-rearing attitudes and levels of stress, anxiety, and depression. The surveys are repeated immediately after the programme, as well as 6, 12, and 24 months after the initial assessment. 


Assessment of the child

•    Strengths and difficulties survey (32 questions)
•    Irritability survey (7 questions)
•    Psychological issues – Child Behaviour Checklist, CBCL (100 questions)
•    Taking others into consideration – Inventory of Callous-Unemotional Traits, ICU (24 questions) 
•    Everyday situations (daily and social situations) (17 questions)
•    Health assessment (8 questions)

Assessment of the parent

•    Parenting Scale, PS (30 questions)
•    Depression Anxiety and Stress Scale Short Form, DASS-21 (21 questions) 
•    Satisfaction survey on the programme’s effect on parenthood

The data collection will be carried out between 01/2021 and 12 /2025.
The study programme’s website is located on a server maintained by the University of Turku, and it is covered by the information security guidance of the data administration of the University of Turku. The link between the website and the user’s computer is protected through SSL encryption. The website is accessed with a personal user ID and password. The participants are responsible for making sure that their actions do not allow a third party to access their login details.
The website registers data about the research participant’s use of the treatment programme (time, views accessed) and the parents’ feedback about the programme. This data will be used to identify factors which impact the effectiveness of the treatment, make technical improvements to the programme, and discover, prevent, and solve technical issues (Information Society Code (917/2014) Sections 138, 141, 144, 272). 
The data will be stored for as long as required for these purposes, and it will not be used for any other purposes. 

Data retention period

The personal data will be stored without identifiers on a secure disc at the University of Turku until 2030. After this the material will be adapted to an aggregated format where individuals cannot be identified. The aggregated material will be archived for research purposes in either the archives or the data system of the University of Turku in line with the Archives Act. The material will only be used for research purposes connected to the Incredible Years programme. 

Potential data recipients

No personal data will be disclosed to external parties. The contract of the application developer (Sofokus) specifies which of the developer’s employees may process personal data (e.g. saving, storage, correcting faults, maintenance and capacity services) on behalf of the controller. The contract on processing personal data binds them to confidentiality. 

Potential data transfers to third countries

All data transfers will take place in Finland within the research group.

Publication or confidentiality

All the collected personal data is confidential. Access to the material is protected by username and password.  

Rights of data subjects

Data subjects have the right to request access to their personal data and to request that this data is corrected or deleted, to limit the processing, and to object to their data being processed. The data subjects shall have the right to lodge a complaint with the competent supervisory authority. The contact person for queries relating to the rights and responsibilities of data subjects is the data protection officer of the University of Turku,
Principles for protecting the personal data
The IT Services of the University of Turku provide the common ICT infrastructure and services for the university’s faculties and other departments, as defined by university staff. The network is divided into separate zones according to specific needs (physical, wireless, services, workstations, protected usage, etc). Storage facilities, servers and other services are produced on-premises.
Campus buildings, including the Research Centre for Child Psychiatry, are secured by centralized key management, and only those keyholders who have been granted entry can access the centre. 
Data security is upheld by 7 main measures: centralized administration by separate administration accounts and compartmentalized user privileges; use of current and reliable hardware and software which is updated continuously; centralized identity management; locally administered industry-standard network infrastructure and service statistics; widely deployed security software and other monitoring tools.
The Chief Information Security Officer of the University of Turku is Mats Kommonen

You are using Internet Explorer. This website does not support Internet Explorer and it might not work correctly. Please switch to another browser.