Privacy notice for website
For privacy notice for job applicants, please scroll down.
This website www.leo-foundation.org is owned and provided by:
LEO Foundation (LEO Fondet)
Lautrupsgade 7, 5.
DK-2100 København Ø
Company registration number: 11623336
Phone: +45 3272 5110
The LEO Foundation is data controller for the data collected via this website. The LEO Foundation is committed to protecting the privacy of information we may collect from our online visitors in accordance with applicable law.
Collection and processing of personal data – General
Your personal data may be processed for the following purposes: To provide access to a specific part of our website, to contact you regarding the services you have requested, to provide the services you have requested such as newsletters or information requests, to carry out surveys about how to improve our service to you such as visitor feedback, to supply a reasonable level of services to our users, and for any other purposes directly requested by you.
Collection and processing of personal data – Grants and awards
In connection with the LEO Foundation’s grant and award activities (including processing of applications, pay-out of grants/awards and follow up on supported projects) we process ordinary personal data such as names, addresses and email addresses, telephone number, CV, age, sex, and data about previous research and publications. In addition, we may process sensitive personal data in the form of health data, if you provide information about health or illness as a reason for delay, postponement or change of an ongoing project or pay-out. We collect data directly from you and from online sources such as ResearchFish.
Your personal data may be processed for the following purposes: To contact you in connection with your grant/award application, pay-out or follow-up, to assess and review applications for grants and support and for any other purpose directly requested by you.
The legal basis of the processing of your personal data
In most cases, the LEO Foundation processes your personal data to fulfill an agreement with you (GDPR, article 6, 1, b), to comply with legal obligations such as mandatory reporting to authorities (GDPR, article 6, 1, c) or to pursue purposes of a legitimate interest (GDPR, article 6, 1, f). It is a legitimate interest to respond to your inquiries, to assess grant and award applications with the aim to award grants to the most relevant projects, to award and announce grant beneficiaries and awardees, and to improve our services on this website.
In other cases, the legal basis for processing your data is when you have given your consent (GDPR article 6, 1, a). This is the case when you accept our cookies or sign up to receive a newsletter.
Disclosures and transfer of data to third parties
The LEO Foundation does not disclose your personal information to third parties without your explicit informed consent unless otherwise described in this privacy notice.
The LEO Foundation may share your personal information if disclosure is reasonably necessary in our opinion to: enforce an agreement between you and the LEO Foundation; comply with legal process, including, but not limited to, civil and criminal subpoenas, court orders or other compulsory disclosures;, respond to service inquiries; or protect the rights, property, or personal safety of the LEO Foundation, the users of the website or the public.
We may share your personal data with relevant authorities to the extend we are obligated to do so. In relation to grant and award activities (as described above), we may share your personal data with external evaluators (including but not limited to members of the Foundation’s Scientific Evaluation Committee).
The information originating from the cookies will only be used by the LEO Foundation and our relevant partners to increase the quality of content, service and support to our visitors. The type of information gathered includes origin of the user, type of browser, operating system and search engine used, and length of visit on the site.
The LEO Foundation uses data processors for certain activities, e.g. hosting companies, and consequently we may transfer your personal data to be stored by third parties who will process your data on our behalf and assist in providing the content and services you request. These third-party providers will be obligated to safeguard the confidentiality of your data and to take adequate technical and organizational measures to protect your data against accidental or unlawful destruction, loss or alteration, unauthorized disclosure or abuse, or other unlawful processing.
Transfer of data to countries outside the EU/EEA
The LEO Foundation stores all personal data on computers / servers within the EU/EEA. However, in some cases the LEO Foundation uses data processors outside the EU/EEA. In that case we will ensure that transfers are carried out in accordance with the applicable data protection legislation, and for transfers to the United States of America this only happen to recipients which have adhered to the EU-US Privacy Shield.
Storing of Data (Data Retention)
The LEO Foundation will keep your personal data only for as long as reasonably necessary for the purposes for which it was collected or to comply with any applicable legal or ethical reporting or document retention requirements.
The LEO Foundation has taken appropriate measures to safeguard your personal data. We monitor and regularly update our systems to address possible vulnerabilities and prevent attacks.
Data subject rights
As a data subject you have certain rights over your personal data and the LEO foundation is responsible for fulfilling these rights. Please read more about these rights below. You may exercise your rights by emailing us at firstname.lastname@example.org. We aim to respond to any requests for information promptly and in any event within the legally required time limits.
Your right of access to personal data
You have the right to obtain confirmation as to whether we process personal data about you, receive a copy of your personal data held by us as a controller and obtain certain other information about how and why we process your personal data (similar to the information provided in this privacy notice).
Your right to correction or amendment of personal data
You have the right to request that your personal data is amended or corrected, if it is or becomes inaccurate (e.g., if you change your name or address) and to have incomplete personal data completed. Once we are informed that any personal data processed by us is no longer accurate, we will make updates as appropriate based on your updated information as soon as practically possible.
Your right to deletion and to be forgotten
You have the right to obtain deletion of your personal data in the following cases:
- if the personal data is no longer necessary to fulfil the purposes for which they were collected and processed;
- if our legal grounds for processing is consent, and you withdraw such consent (and we have no other lawful basis for the processing);
- if our legal grounds for processing is that the processing is necessary for legitimate interests pursued by us or a third party, but you object to our processing and we do not have overriding legitimate grounds;
- if you object to our processing for direct marketing purposes;
- if your personal data have been unlawfully processed; or
- if your personal data must be erased to comply with a legal obligation to which we are subject
Your right to restrict processing
You have the right to restrict our processing of your personal data in the following cases:
- for a period enabling us to verify the accuracy of your personal data where you have contested the accuracy of the personal data;
- your personal data have been unlawfully processed and you request restriction of processing instead of deletion;
- your personal data are no longer necessary in relation to the purposes for which they were collected and processed but the personal data are required by you to establish, exercise or defend legal claims; or
- for a period enabling us to verify whether the legitimate grounds relied on by us override your interests where you have objected to processing based on it being necessary for the pursuit of a legitimate interest identified by us.
Your right to object to processing
You have the right to object to the processing of your personal data and have the processing of your personal data restricted.
Your right to data portability
You have the right to receive your personal information in a structured, commonly used and machine-readable format.
Your right to withdraw consent
You have the right at any time to recall the consent you have given us to use of your personal information. If you have requested to receive information from the LEO Foundation, e.g. newsletters etc, and do not wish to be receive further information, you can easily opt out of receiving further information from us. You can find our contact information at the top of this document.
If you have any questions or complaints about our use of personal data, please send an email to email@example.com. If you are not satisfied with our handling of your complaint you can choose to file a complaint with the Danish Data Protection Agency:
Borgergade 28, 5
1300 København K
Phone: +45 33 19 32 00
Disclaimer of liability
The LEO Foundation ensures that reasonable care is being taken to ensure that the website content is accurate and up-to-date, but all information is provided ‘as is’ and the LEO Foundation makes no warranties or representations of any kind as to accuracy or completeness of the website content and may at any time at its sole discretion change, replace or delete the information on the website without prior notice. To the extent permitted by mandatory law, the LEO Foundation shall not be liable for any direct, incidental, consequential, indirect or punitive damages arising out of access to or use of any content on this site, including viruses, regardless of the accuracy or completeness of any such content.
Links to other websites
The website may contain links to third party websites. The LEO Foundation disclaims any control over, relationship with, or endorsement of these sites and shall not be liable for any damages or injuries arising from the content of such sites. Links to other websites are provided only as a convenience and we encourage you to read these third party websites’ privacy statements.
Intellectual property rights
The content of the website is subject to copyright protection and other intellectual property rights. The content of the website may not be copied other than for personal and non-commercial use, with all copyright or other proprietary notices retained. Except as expressly provided above, it is not permitted to copy, display, download, modify, reproduce or retransmit any information on this website without the express written consent of the LEO Foundation.
This website is not intended or designed to attract children under the age of 18 years. We do not collect personally identifiable data from any person we know to be under the age of 18 years.
Changes and questions
Any changes to this privacy notice will be communicated promptly on this page. If you have any further questions concerning the LEO Foundation privacy notice or the website in general, please do not hesitate to contact us.
Governing law and venue
This disclaimer and the contents of this site shall be governed and interpreted by Danish law without regard to its conflict of law rules. Any dispute arising out of or in relation to this disclaimer shall, if it cannot be solved amicably, be decided exclusively by the Danish Courts in Copenhagen, Denmark.
Privacy notice for job applicants
This notice explains how LEO Foundation and LEO Holding A/S (“we”, us”) handle your personal data in connection with job applications.
The entity responsible for the processing of your personal data is:
LEO Foundation (LEO Fondet)
Lautrupsgade 7, 5 tv
Company registration number: 1162 3336
Phone: +45 3272 5110
Description of the processing
Personal information that you provide in connection with your job application or as part of a recruitment process is used for the sole purpose of completing the recruitment process and employment. You are encouraged to only provide relevant information in your application or cv, and no CPR number or other sensitive information unless you believe it to be relevant to your application.
Sources of information
In addition to the information you provide in your application and/or cv, we may request statements from your (former) employers, educational institutions or other relevant parties. Employers will only be contacted with your prior consent.
We may also search publicly available information on you on LinkedIn, Google, Twitter etc. if it is deemed relevant for the position in question.
We do not gather sensitive personal information (incl. health information) without your written consent.
Disclosure of personal data to third parties
We may use external suppliers in the search and selection process to identify the best candidate for a job. You will be informed if any third parties are involved. Before disclosing any personal data to third parties, we have entered a written agreement which complies with applicable rules, including confidentiality requirements and deletion of information after the end of the recruitment process.
Period of storage of personal data:
We will store your application and other relevant personal data gathered in connection with an open position until the recruitment process is completed. This will normally be within a maximum of 6 months. If you are employed by us, we will store your application, personality tests and statements from former employers during your employment.
If you are not employed but we deem your qualifications could be relevant for an upcoming job, we may ask for consent to store your application and/or cv for a longer period than 6 months.
If you submit an unsolicited application, your application and/or cv will be stored for up to 3 months. We may ask for consent to store your unsolicited application and/or cv for a longer period than 6 months
Data transfers to countries outside the EU/EEA
No data will be transferred to countries outside the EU/EEA.
You have the following rights:
- You have the right to request access to and rectification or erasure of your personal data.
- You have the right to receive your personal information in a structured, commonly used and machine-readable format (data portability).
- You have the right to object to the processing of your personal data and have the processing of your personal data restricted.
- In particular, you have an unconditional right to object to the processing of your personal data for direct marketing purposes.
- If processing of your personal information is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before you withdrew your consent. You may withdraw your consent by contacting us at firstname.lastname@example.org
There may be conditions or limitations to these rights. It is as an example not certain that you have the right of data portability in all situations, as this depends on the specific circumstances of the processing activity. If you are not satisfied with our handling of a complaint from you, you can choose to file a complaint with the Danish Data Protection Agency:
Datatilsynet Borgergade 28, 5
DK-1300 København K
Phone number: +45 33 19 32 00
LAST UPDATED ON 14 August 2019