Personal Data Policy
Processing of personal data
1. Introduction
Johan and Ajla Askehave’s almennyttige fond til bekæmpelse af klimaforandringer (hereinafter the Foundation) protects your personal data, and we are very aware of the need for appropriate protection and proper processing of the personal data we receive from you.
The guidelines set out herein are also the Foundation’s description of how the Foundation complies with the applicable personal data legislation.
Our processing of your personal data meets the requirements in force at any time, including security requirements arising from personal data legislation. The Foundation regularly reviews the registered personal data and deletes the personal data which is no longer relevant to process. The same applies to personal data that a user wishes to delete and which the Foundation no longer has any basis for processing.
We collect a number of personal data about you when you submit an application for receipt of the Foundation’s donations.
In accordance with the applicable personal data legislation, the Foundation is considered the data controller in relation to the personal data you provide to us.
2. Data controller
Below you will find all relevant contact information:
Name: Johan og Ajla Askehaves almennyttige fond til bekæmpelse af klimaforandringer
Address: C/O Fondsdrift, Østre Alle 102, 9000 Aalborg.
Danish reg. no. (CVR): 43392514
E-mail: Askehave_Climate_Foundation@70151000.dk
3. What personal data do we process?
When you contact us or apply to receive a donation from the Foundation, the following data is collected:
- Name, contact details, including e-mail, telephone number, address
- Data included in your application to the Foundation. In some cases, data about individuals from the organization or research group who are applying will be included, including CV information such as education, work experience, research projects, etc.
- Account number for payment of donations
Generally, we do not process sensitive personal data about applicants such as data about race, religion, political beliefs, trade union, health data, etc.
4. The purpose of processing your personal data
The Foundation only uses your personal data for the purpose of purposes for which it was collected. Thus, we never disclose your personal data to third parties unless you have consented to this yourself or we are obliged to do so by law. In this case, we will always inform you accordingly.
When you contact the Foundation, we process your personal data to handle your inquiry.
If you receive a donation from the Foundation, we process the personal data necessary for us to pay the donation to you. Typically, it will be necessary to process your contact information, including name, address, e-mail address, telephone number, or of the recipient’s contact person, as well as account information.
5. The basis for processing your personal data
Generally, the basis for processing your personal data will be to be able to answer your inquiry and process your application for a donation.
Thus, the legal basis for our processing is Article 6(1)(b) of the General Data Protection Regulation. In some cases, we also use Article 6(1)(f) of the General Data Protection Regulation as a basis for processing personal data if we assess that we have a legitimate interest in doing so that is not overridden by the interests and freedoms of the data subject.
6. Inquiries
When you contact us by phone, we will – if relevant – note your name and the purpose of the inquiry. We do this to be able to follow up on your inquiry and to be able to document your inquiries. Therefore, you should be aware that in some cases we make a note of the relevant particulars that you inform us of by phone in our system.
7. Storage period
The Foundation only stores personal data for as long as necessary and for the fulfilment of the purposes for which it was collected.
A number of procedures have been established for the deletion of your personal data. The Foundation stores customers’ personal data for the period in which the donation can be paid, which is typically 3-5 years.
Data about applicants who have not been considered for a donation will be deleted when the applications have been processed.
8. Secure processing of personal data
We store your personal data on computers with limited access, which are located in controlled facilities, and our security measures are continuously checked to determine whether personal data is handled responsibly, always taking into account your rights as a user.
It may be relevant and necessary for the Foundation to change the applicable personal data policy, including, for example, changes in our work processes or legislation. Therefore, we reserve the right to update and amend this personal data policy. You can always find the applicable personal data policy on our website, and if we amend the policy significantly, we will notify you in the form of a visible notice on our website.
9. Use of data processors
Your personal data is used solely by the Foundation and for the above purposes.
The data processors we use only handle personal data on instructions from us and thus only for the specific purposes that we have determined. The data processors are also subject to a number of security requirements, and subsequently, the personal data to which we give our data processors access is always handled confidentially.
10. Disclosure of personal data and transfer of personal data to third countries
As a rule, we do not disclose your personal data to any other companies, authorities or other third parties in general, unless this follows from certain rules of law.
As a rule, the personal data is not transferred to countries outside the EU/EEA.
11. Your rights and right of appeal
Above, it is described what personal data we process about you, what the basis for this is and for how long it is stored, as we are obliged to inform you about this.
As a data subject, you also have a number of rights against us as a result of us processing your personal data. Below you can read more about this, but you are also always welcome to contact us if you have any questions about this.
11.1 Right of access to own personal data
You have the right to know what personal data we process about you. A request for access must be addressed to us and it does not have to be substantiated. In other words, you have the right to know what personal data we process about you, what the purpose is, from where we got the information, for how long we store it and who we may share it with.
11.2 Right to have incorrect personal data corrected
If you are of the opinion that we are processing incorrect or misleading data about you, you have the right to request correction of that data. Upon receipt of such a request, we will decide whether the data should be corrected.
11.3 Right to deletion
In some cases, we are required to delete your personal data before the time when we would normally delete your personal data. This applies if we no longer have an objective purpose for processing the personal data, if consent is revoked, if the personal data has been processed unlawfully, or if it must be deleted to comply with a legal obligation and, in some cases, if an objection is made to the processing. These rights have been considered when defining the Foundation’s deletion policies.
11.4 Right to object
In certain cases, you have the right to object to our processing of your personal data. If we receive an objection from you, we will assess whether we should restrict the processing of personal data until we have verified whether our legitimate interests override the customer’s interests.
11.5 Data portability
In some cases, you have the right to receive your personal data in a commonly used and machine-readable format so that it can be used for disclosure to another data controller. If technically feasible, we may also transmit the data directly to the new data controller.
11.6 Withdrawal of consent
If you have given us consent in relation to the processing of your personal data, you can always withdraw this. We will then stop processing the personal data to which the consent relates if there is no other legal basis for processing the personal data.
11.7. Complaint to the Danish Data Protection Agency
You have the right to lodge a complaint with the Danish Data Protection Agency (“Datetilsynet”) if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency’s contact information at www.datatilsynet.dk.
