Privacy Policy

KR Foundation's Policy for Processing Personal Data from Applicants

KR Foundation values the importance of protecting your privacy and personal data and complies with EU’s General Data Protection Regulation. To ensure transparency and security, our privacy policy as set forth below will inform you about the nature, scope, and purpose of the personal data processed by us.

Retrieving personal data in connection with an application
In connection with filling out and sending an application to KR Foundation, the data you pass on to KR Foundation will be registered and processed by KR Foundation.

The data that is processed is all the data you divulge to KR Foundation including personal information about name, job title, workplace, work telephone number, work email, professional biography, and salary costs (via the budget template).

The purpose of processing and erasure policy
The purpose of processing your personal data is to review your application.

Name, job title, workplace, work telephone number and work email will be processed to be able to contact you about your application.

Name, job title, professional biographies and salary costs in budgets, will be processed as part of the review of your application.

The personal data that you divulge to KR Foundation will as a minimum be filed until a decision about your application has been made and from then on based on the following criteria:

If you receive a grant
In the event that KR Foundation decide to award a grant on the basis of your application, the personal information about your name, job title, work e-mail, work phone number, workplace, professional biography, and salary (in the budget template) will be filed together with the rest of the application in KR Foundation’s database of granted projects. The purpose of this processing is for KR Foundation to be able to contact you during the grant period, to document on which ground the grant has been made, and for statistical purposes. The data will be kept on file for documentation and statistical purposes for as long as this is deemed relevant by KR Foundation.

If you do not receive a grant
In the event that KR Foundation decide not to give a grant based on your application, all personal data except for name and workplace of the primary contact person will be deleted from the application as soon as possible and under all circumstances within three (3) months after the decision has been made. The rest of the application, without any personal data, will be filed in KR Foundation’s database for documentation and statistical purposes. The data will be kept on file for documentation and statistical purposes for as long as this is deemed relevant by KR Foundation.

Governing law on processing
Your personal data will be processed on the basis of article 6, paragraph (1) (f) of the EU General Data Protection Regulation (the legitimate interest assessment regulation). KR Foundation has a legitimate interest in processing data in applications for possible funding as well as processing data in projects that have been awarded grants.

Your rights
At any time, you shall be entitled to ask for access to and rectification or erasure of the personal data that KR Foundation processes about you by contacting KR Foundation via the below contact information. Moreover, at any time you shall be entitled to request that the processing of your personal data is limited as well as to object to KR Foundation’s processing of your personal data. Please be aware that KR Foundation may not be able to evaluate your application if you choose to object to KR Foundation processing your personal data. Finally, you are entitled to take advantage of the right to data portability whereby, on request to KR Foundation, your personal data will be returned to you in a structured, ordinarily used and machine-readable format, or KR Foundation will see to it that this data is transmitted to another data controller if technically possible.

At any time, you shall be entitled to complain about KR Foundation’s processing of your personal data to the Danish Data Protection Agency.

Sharing personal data
In order to evaluate your application, KR Foundation will share your personal data with members of KR Foundation’s Board. KR Foundation may also share your personal data with other trusted third parties such as financial controllers and IT service providers.

All third parties will access your information only to perform tasks on our behalf in compliance with our privacy policy, and we will remain responsible for their handling of your information per our instructions.

KR Foundation is also required to share your personal information in accordance with the law or on the basis of a legitimate inquiry from the public authority, cf. article 6, paragraph (1) (c) of the EU General Data Protection Regulation.

Transfer of personal data
As part of the processing of your personal data your data will be stored on servers located in countries outside the EU/EEA as well as be accessible to countries outside the EU/EEA with a view to updating the servers. KR Foundation guarantee that your data will only be transferred to third countries which, cf. a European Commission regulation, will ensure a sufficient protection level, or based on standard regulations on data protection adopted by the European Commission, which is binding on the recipient of personal data in third countries.

Keeping your personal data secure
KR Foundation uses technical and organizational security measures to protect your personal information against manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed based on the latest technological developments.

Data controller
Data controller in relation to the above processing of your personal data is KR Foundation, CVR No. 36291095, address c/o Klub, Linnésgade 25, 1361 Copenhagen K, Denmark.