Considering GDPR when running an l-rex instance you might process/store personal data of the participants, e.g. demographics.
This makes a data-processing-agreement ("Auftrags-Verarbeitungs-Vertrag") required.
This could probably be avoided if we would encrypt all study data with some password not stored on the server and entered by participants & researcher.
Considering GDPR when running an l-rex instance you might process/store personal data of the participants, e.g. demographics. This makes a data-processing-agreement ("Auftrags-Verarbeitungs-Vertrag") required.
This could probably be avoided if we would encrypt all study data with some password not stored on the server and entered by participants & researcher.