Information on the personal data processing of the Albert Påhlsson Foundation
Herein, we set forth how we process the personal data of those who apply for grants from the Foundation, of contact persons for applicants who are not physical persons and other persons covered by such applications.
The Albert Påhlsson Foundation for research and charity, reg. no. 846001-6119 (Albert Påhlssons Stiftelse för forskning och välgörenhet), c/o Advokatfirman LA PARTNERS AB, P.O. Box 487, 201 24 Malmö (the ”Foundation”), is the controller for the data processing described in this document. This means that we are responsible for the correct processing of the data and that the processing complies with applicable data protection legislation.
What data are processed?
We mainly collect personal data in connection with your application, or an organization’s – for whom you are the contact person – application for grants or contributions from the Foundation. Sometimes we also supplement the personal data by collection of data from private and public registers as well as other sources in order to be able to process and decide on your application.
The personal data we process may concern contact information (such as name, title, work role, address, telephone number and e-mail address), identity information (such as birth date/personal registration number), application and project information (such as information on academic titles, university or college affiliation, profession, degrees and other accomplishments, publications and the like) and financial information (such as bank account information and other payment information). In addition thereto, we may need to process other categories of data provided by you or the organization you represent.
We will only process your personal registration number if and to the extent is clearly justified by the purpose of the processing, the importance of secure identification or other justifiable reason.
You are not obligated to provide personal data to us, but if you choose to not do so or limit our rights to process your data, this could, for example, entail that we are unable to process or grant your application for grants or contributions.
For what purposes do we process personal data?
We process data which have been provided or gathered in connection with applications for grants or contributions from the Foundation in order to administer the applications, and to review and make decisions on grants or contributions as well as to protect our rights in connection with the decision.
What is the legal basis for the processing?
The legal basis for the processing is a so-called justified interest. This means that we deem the processing of the personal data necessary for the purposes concerning applications for grants and applications and that these interests are more important than any contradicting interests or fundamental rights and freedoms.
How long are the data stored?
The personal data are stored for the duration of the application process and for as long as there is financial reporting obligations for grants or contributions or as long as the matter remains open.
Thereafter, required data are stored for 10 years following the date of the closing of the matter, having regard to applicable rules on statute of limitations or such longer time period as required by the nature of the matter or the possibility of reviewing the matter in conjunction with a new application from the same applicant or other person connected to the matter.
In addition, required information may be stored until further notice for continued processing for archiving purposes of public interest, for scientific or historic research purposes as well as for statistical purposes.
Who has access to the personal data?
We have taken appropriate technical and organizational security measures to protect the data we process from, amongst other things, loss and unauthorized access.
Our goal is that all processing shall occur within the EU/EEA. However, in certain situations your data may be transferred to and be processed by suppliers, sub-suppliers or other partners whose seat may be outside the EU/EEA. Any transfers of data outside the EU/EEA will be made in compliance with applicable data protection legislation and for the purposes set forth above.
We may, to the extent required for the purposes set forth in this instruction, transfer necessary personal data to our advisers, suppliers (such as IT services suppliers), sub-suppliers, banks and external reviewers of grant applications. Upon such transfers, we will take all reasonable technical, legal and organizational measures required to ensure that your personal data are processed securely and with appropriate security levels. Third parties who process your data on our behalf are bound by a data processing agreement which, amongst other things, contains rules on confidentiality and that the third party may only process the data in accordance with our instructions.
Data subjects shall have the right to access information on which of their personal data we process. A data subject shall also have the right to request that its personal data, which is incorrect or incomplete, shall be corrected or deleted (for example if the personal data are no longer necessary for the purpose or if consent is withdrawn). Data subjects shall further, in certain cases, have the right to object to certain specific data processing and request that the data processing shall be limited. Finally, data subjects have, under certain circumstances, the right to obtain the personal data which they have provided in machine readable format and transfer them to other controllers.
Please note that a limitation or deletion of personal data could mean that we are unable to process or approve your application for grants or contributions.
If you have objections to or comments on our data processing, you may contact or submit a complaint to the Swedish Data Protection Authority (Sw: Datainspektionen), which is the supervisory authority for our data processing.
If you have questions or complaints concerning our data processing or if you wish to exercise any of the rights set out above, please contact us via e-mail at email@example.com or via mail at the address set out above.