Privacy policy

Privacy Policy for the Stibo Foundation

This privacy policy describes how the Stibo Foundation handles and processes personal data with regards to the handling of applications for donations and other inquiries.

1. Data Controller

The legal entity responsible for the processing of your personal data is:

STIBOFONDEN
Axel Kiersvej 11
DK‐8270 Højbjerg
www.stibofonden.dk
CVR no. 64 21 20 28

E‐mail: info@stibo.com
Telefon: 89 39 88 88

2. Contact

If you have any questions regarding our processing of your personal data, please send an e‐mail to info@stibo.com or call the Stibo Foundation on phone no. +45 89 39 88 88.

3. Description of the processing

The following is a description of how we process your personal data. Personal data is only collected to the extent necessary for the purpose for which it is being collected.

Processing of personal data in relation to handling of applications for grants and general contact

When you apply to be considered for the award of a donation, grant of scholarship, we ask you to send us a range of personal data. We process the personal data in the handling of your application and in connection with a potential grant of donation. Further, we process your information to get in contact with your as to follow up on your application or inquiries, which we have received in an online form, by e‐mail or telephone, respectively.

If a donation is granted, we will further process your personal data in connection with the payment of the donation and statutory reporting to the relevant public authorities.

Categories of personal data

We process a range of your personal data, including contact information such as name, e‐mail, address, phone number, bank account information and CV. We may further process your CPR no., and in certain cases your CVR no. If you have been granted donations from us previously, we will further process your application history.

Sources of the personal data

The personal data is collected directly from you or the company or organization that you represent when you send us an application for the grant of a donation or otherwise contact us with an inquiry. Your personal data may also be contained in documentation sent to us by others, including the company or organization to which you are affiliated, in connection with the the company or organization application for funding for a project to which you are affiliated.

Legal basis for the processing

We process your personal data based on GDPR, art. 6.1.b and partly also GDPR, art. 6.1.f.

The processing will be based on GDPR, art. 6.1.b, when the processing is necessary for the performance of our contractual obligation to grant a donation to you, while the processing will be based on GDPR, art. 6.1.f, when this is not the case.

Our legitimate interest in the processing is to be able to contact your and/or process your personal data, when your personal data is contained in documentation sent to us by others, including the company or organization to which you are affiliated, in connection with the company or organization's application for funding for a project to which you are affiliated.

When we process your CPR no., this will be based on the Danish Data Protection Act, Section 11.2.1, cf. GDPR art, 87.

Data retention

Personal data is stored as long as it is necessary for the purpose or purposes to which it is processed. For successful applications the information is stored for 10 years from the end of last financial year including any related transactions. This is done to evaluate the relation of identical or close‐related applications, to ensure compliance with the articles of association of the Stibo Foundation and to comply with the Foundation’s legal obligations.

Personal data related to unsuccessful applications will be deleted after 3 years. Other personal data received by the Stibo Foundation or its associates will be deleted when these are assessed to be no longer be relevant.

4. Recipients

The Stibo Foundation never publishes, sells or passes on any personal data to a third party with‐out your consent unless this is necessary and can be reasonably expected. In some cases, however, the Foundation has a legal obligation to do so. As an example, the Stibo Foundation has an obligation to in‐form the Danish Tax Authority when accommodating an application as well as making a yearly inventory of awarded funds that is to be submitted to the Danish Foundation Authorities, incl. the Danish Business Authority and the Danish Department of Civil Affairs.

The Stibo Foundation uses external partners to provide IT solutions and hosting of the website. Other external partners might be used for audit services and legal advice.

5. Mandatory information

The information, which are described in section 3.1. is ‐ besides from information about CPR no. and bank account information ‐ mandatory. If you do not provide this information, we cannot process your application, and the application will thus be declined.

If we are to pay out a donation to you, e.g. if the application is successful, it will be necessary for us to process information about your CPR no. and bank account information. If you do not provide this information, we cannot grant you the donation.

6. Your rights

You have the following rights:

  • You have the right to request access to, rectification or erasure of your personal data.
  • You also have the right to have the processing of your personal data restricted.
  • If processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before you withdrew your consent. You may withdraw your consent by and make use of your rights as described below.
  • You have the right to receive your personal data in a structured, commonly used and machine‐readable format (data portability).
  • You may always lodge a complaint with a data protection supervisory authority, e.g. the DanishData Protection Agency.

Furthermore, you have the right to object to processing of your personal data as follows.

  • If processing of your personal data is based on GDPR, art. 6.1.f, see above regarding legal basis, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data.
  • Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data about you for such marketing.

There may be conditions or limitations on these rights. It is therefore not certain for example you have the right of data portability in the specific case ‐ this depends on the specific circumstances of the
processing activity.

You can take steps to exercise your rights by contacting the Stibo Foundation by e‐mail info@stibo.com or by phone +45 9 39 88 88.

Last updated: 12.01.2022