Privacy Policy

About this privacy policy

The Ragnar Söderberg Foundation (hereinafter referred to as the Foundation) is committed to protecting your privacy. This Privacy Policy explains how the Foundation processes personal data, what personal data we collect, the purposes for which it is collected and how it is protected.

Parties and responsibility for the processing of your personal data

The Ragnar Söderberg Foundation (Swedish organisation number: 802008-1306) is the data controller for the processing of personal data carried out as part of the Foundation’s activities.

How does the Foundation use personal data?

The Foundation processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable legislation protecting personal privacy. Personal data means any information that can be used to identify a living person.

When you are in contact with the Foundation, you may provide us with information about yourself, and we may ask you to provide personal data. Most commonly, personal data is provided or collected in connection with grant applications. This may include your name, Swedish personal identity number, title, email address, telephone number, gender, information about your education, employment and research visits (including any interruptions), information about scientific publications and similar matters, budget information and any other information you choose to provide. Personal data may also be provided or collected if you contact the Foundation regarding another matter.

The Foundation may process and publish photographs, video and audio recordings for the purpose of providing information about and communicating the Foundation’s activities. Where applicable, consent will be obtained when photographs, video or audio recordings are made.

Why do we process your personal data?

The Foundation processes personal data for the following purposes:

To administer and process grant applications from researchers, higher education institutions and organisations in accordance with the Foundation’s statutes, strategy, published calls for proposals and decisions of the Board. Processing may include activities during the initial application process and review of the application, as well as subsequent activities when grant decisions are announced and during the implementation, follow-up, evaluation and monitoring of funded activities.
To provide services and respond to enquiries about the Foundation’s activities.
For internal administration and statistics, and to evaluate, develop and improve the Foundation’s activities.
To provide information about the Foundation’s activities and events to those who have expressed an interest.
To comply with legal obligations under applicable laws, regulations and decisions by public authorities. This also includes obligations under employment law relating to employees of the Foundation’s office.

Legal basis for processing personal data

The Foundation may only process personal data where there is a lawful basis for doing so. There are several lawful bases for processing personal data, and the applicable basis in different circumstances is described below.

When you provide personal data so that the Foundation can administer and process a grant application, the processing is lawful because it is necessary for the purposes of the legitimate interests pursued by both the Foundation and you in having the application assessed and administered and, if the grant is awarded, in implementing, following up and monitoring the grant. If the information is not provided, we will not be able to assess the application.
When the Foundation processes personal data in order to provide information and services and respond to enquiries about its activities, the processing is based on legitimate interests.
When the Foundation processes personal data for internal administration and to evaluate, develop and improve its activities, the processing is based on legitimate interests. This also includes troubleshooting, protecting, testing and improving the technical systems used by the Foundation in its activities.
When personal data is processed in order to comply with obligations under applicable laws, regulations and decisions by public authorities (for example, under the Swedish Accounting Act (1999:1078)), the lawful basis is compliance with a legal obligation.
When you consent to specific processing of your personal data, consent constitutes the lawful basis for that processing. You may withdraw your consent at any time.
When the Foundation processes personal data relating to employees of the Foundation’s office, the processing is generally based on compliance with legal obligations (employment and other measures under employment law) and, in certain cases, on legitimate interests or consent (for example, the publication of photographs).

Who do we share personal data with?

The Foundation may share personal data with other organisations with which we collaborate in order to fulfil our commitments to you and your higher education institution. Grant applications are routinely shared with the expert reviewers appointed by the Foundation. As part of the Swedish Foundations’ Starting Grants collaboration, we also share your personal data with other participating foundations and organisations during the application and assessment process. Personal data may also be disclosed to public authorities where required by applicable law.

The Foundation engages various service providers to administer applications and grant payments and to operate the technical systems used to manage applications and grants. In such cases, the Foundation is the data controller and the service provider is the data processor.

How long do we retain your personal data?

As a general principle, personal data relating to grants is retained indefinitely. Personal data collected for other purposes is deleted or anonymised when it is no longer relevant to the purposes for which it was collected.

What are your rights?

You have the right to obtain information about the personal data that the Foundation processes and retains about you and to request the correction of inaccurate information. You also have the right to request that the Foundation erase personal data relating to you. We will comply with your request for erasure unless there are legal grounds preventing us from doing so.

Please contact the Foundation to exercise your rights. You also have the right to lodge a complaint concerning the Foundation’s processing of personal data with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).

Security

The Foundation takes necessary and reasonable measures to protect personal data against unauthorised access, disclosure, alteration or destruction. Where the Foundation engages an external service provider to process personal data in support of its activities, the service provider may only process personal data in the manner authorised by the Foundation.

Changes to this Privacy Policy

Any changes to this Privacy Policy will be announced on the Foundation’s website.

Contact the Foundation

If you have any questions about the Foundation’s processing of personal data or wish to exercise your rights, please contact us.

Version: November 2021.