Stiftelsen Promobilia is the data controller for the processing of personal data carried out within the scope of the Foundation’s grant activities. Personal data is processed in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection legislation.

What personal data do we process?

Personal data is collected in connection with the Foundation’s application procedures and the follow-up of awarded grants, primarily through application forms and reporting processes. The data may include, for example, name, contact details, date of birth, position, employer/organisational affiliation, as well as information contained in the application and project description.

Why do we process personal data?

Personal data is processed in order to:

• administer and assess applications,
• make decisions on and manage awarded grants,
• follow up and evaluate funded projects, and
• fulfil requirements relating to financial reporting and accountability, as well as to conduct internal monitoring and organisational development.

Legal basis

The processing is based on one or more legal grounds under the GDPR, primarily performance of a contract, compliance with legal obligations, and in certain cases legitimate interest. Where processing in a specific case is based on consent, you have the right to withdraw your consent at any time.

Who may have access to the data?

Personal data may be shared internally with authorised individuals within the Foundation’s administration, the Technical and Scientific Committee, the Strategic Committee and the Board, to the extent necessary for handling, decision-making and follow-up. Where required, data may also be shared with external experts for evaluation purposes. In such cases, processing is carried out in accordance with the GDPR, including through data processing agreements and appropriate safeguards.

Data retention

Personal data is retained only for as long as necessary for the purposes for which it is processed, or as required by law. Thereafter, the data is securely deleted or otherwise disposed of.

Transfers to third countries

If personal data is processed in digital systems or cloud services, transfers to countries outside the EU/EEA may occur. Such transfers take place only where appropriate safeguards are in place in accordance with the GDPR.

Publication of awarded grants

In order to promote transparency and provide information about the Foundation’s grant activities, Stiftelsen Promobilia may publish information about awarded grants on its website. This may include the recipient’s name, university or organisation, project title, a popular science description of the project, and the amount awarded. Publication is carried out with due regard to the data subject’s privacy and applicable data protection rules.

Your rights

Under the GDPR, you have the right to obtain information about how your personal data is processed, request access (data subject access request), request rectification, request erasure in certain cases, request restriction of processing, object to processing based on legitimate interest, and request data portability where applicable.

Contact and complaints

If you have any questions or wish to exercise your rights, please contact us at info@promobilia.se. If you believe that your personal data is being processed in violation of applicable rules, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).