1. Data Controller
The legal entity responsible for the processing of your personal data is:
Axel Kiersvej 11
CVR no. 64 21 20 28
Telefon: 89 39 88 88
If you have any questions regarding our processing of your personal data, please send an e‐mail to firstname.lastname@example.org or call the Stibo Foundation on phone no. +45 89 39 88 88.
3. Description of the processing
The following is a description of how we process your personal data. Personal data is only collected to the extent necessary for the purpose for which it is being collected.
Processing of personal data in relation to handling of applications for grants and general contact
When you apply to be considered for the award of a donation, grant of scholarship, we ask you to send us a range of personal data. We process the personal data in the handling of your application and in connection with a potential grant of donation. Further, we process your information to get in contact with your as to follow up on your application or inquiries, which we have received in an online form, by e‐mail or telephone, respectively.
If a donation is granted, we will further process your personal data in connection with the payment of the donation and statutory reporting to the relevant public authorities.
Categories of personal data
We process a range of your personal data, including contact information such as name, e‐mail, address, phone number, bank account information and CV. We may further process your CPR no., and in certain cases your CVR no. If you have been granted donations from us previously, we will further process your application history.
Sources of the personal data
The personal data is collected directly from you or the company or organization that you represent when you send us an application for the grant of a donation or otherwise contact us with an inquiry. Your personal data may also be contained in documentation sent to us by others, including the company or organization to which you are affiliated, in connection with the the company or organization application for funding for a project to which you are affiliated.
Legal basis for the processing
We process your personal data based on GDPR, art. 6.1.b and partly also GDPR, art. 6.1.f.
The processing will be based on GDPR, art. 6.1.b, when the processing is necessary for the performance of our contractual obligation to grant a donation to you, while the processing will be based on GDPR, art. 6.1.f, when this is not the case.
Our legitimate interest in the processing is to be able to contact your and/or process your personal data, when your personal data is contained in documentation sent to us by others, including the company or organization to which you are affiliated, in connection with the company or organization's application for funding for a project to which you are affiliated.
When we process your CPR no., this will be based on the Danish Data Protection Act, Section 11.2.1, cf. GDPR art, 87.
Personal data is stored as long as it is necessary for the purpose or purposes to which it is processed. For successful applications the information is stored for 10 years from the end of last financial year including any related transactions. This is done to evaluate the relation of identical or close‐related applications, to ensure compliance with the articles of association of the Stibo Foundation and to comply with the Foundation’s legal obligations.
Personal data related to unsuccessful applications will be deleted after 3 years. Other personal data received by the Stibo Foundation or its associates will be deleted when these are assessed to be no longer be relevant.
The Stibo Foundation never publishes, sells or passes on any personal data to a third party with‐out your consent unless this is necessary and can be reasonably expected. In some cases, however, the Foundation has a legal obligation to do so. As an example, the Stibo Foundation has an obligation to in‐form the Danish Tax Authority when accommodating an application as well as making a yearly inventory of awarded funds that is to be submitted to the Danish Foundation Authorities, incl. the Danish Business Authority and the Danish Department of Civil Affairs.
The Stibo Foundation uses external partners to provide IT solutions and hosting of the website. Other external partners might be used for audit services and legal advice.
5. Mandatory information
The information, which are described in section 3.1. is ‐ besides from information about CPR no. and bank account information ‐ mandatory. If you do not provide this information, we cannot process your application, and the application will thus be declined.
If we are to pay out a donation to you, e.g. if the application is successful, it will be necessary for us to process information about your CPR no. and bank account information. If you do not provide this information, we cannot grant you the donation.
6. Your rights
You have the following rights:
- You have the right to request access to, rectification or erasure of your personal data.
- You also have the right to have the processing of your personal data restricted.
- If processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before you withdrew your consent. You may withdraw your consent by and make use of your rights as described below.
- You have the right to receive your personal data in a structured, commonly used and machine‐readable format (data portability).
- You may always lodge a complaint with a data protection supervisory authority, e.g. the DanishData Protection Agency.
Furthermore, you have the right to object to processing of your personal data as follows.
- If processing of your personal data is based on GDPR, art. 6.1.f, see above regarding legal basis, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data.
- Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data about you for such marketing.
There may be conditions or limitations on these rights. It is therefore not certain for example you have the right of data portability in the specific case ‐ this depends on the specific circumstances of the
You can take steps to exercise your rights by contacting the Stibo Foundation by e‐mail email@example.com or by phone +45 9 39 88 88.
Last updated: 12.01.2022