Privacy Notice – Gofore Impact Foundation

Gofore Impact Foundation sr

If you have any questions or requests regarding the register, you can send them via e-mail to impact@gofore.com.

The register consists of three parts:

• Register of grant applicants and grantees
• Register of other contacts
• Register of related parties

For grant applicants and grantees, the purpose of processing personal data is the processing and archiving of grant applications and grants awarded. Our processing is primarily based on the legitimate interest of Gofore Impact Foundation. In addition, we have a legal obligation to make notifications of grant payments to the authorities. For referees indicated by the grant applicant, the processing is also based on legitimate interest.

For other contacts, the purpose of the processing of personal data is to process your contact or request, to keep in contact with you and organise events you have signed up for. The legal basis for processing personal data is mainly legitimate interest.

For related parties, the purpose of the processing of personal data is to ensure compliance with the provisions of the Foundation Act on related party transactions.

For grant applicants and grantees, we collect the following personal data:

• Name
• Date of birth
• Professional title and occupation
• Contact details
• Information on whether the applicant is part of a working group
• If the applicant is an organisation, name and registration number of the organisation
• Name and contact details of referees
• Previous and pending grant applications and grants received on the same topic
• Other information you choose to provide in the application or its appendices (such as CV or work plan).

For grantees, we also collect the following personal data:

• Social security number
• Bank account details.

For other contacts (for example contact through the website and registration for an event), we collect the following personal data:

• Name
• Professional title and organisation name
• Contact information
• Other information you choose to provide.

For related parties, we collect the following personal data:

• Name
• Social security number
• Contact information
• Information about your connection to Gofore Impact Foundation
• Names of family members and other close relatives, as well as the name and registration number of organisations controlled by you.

Personal data of grant applicants and grantees is collected from you and the referees you have provided. For other contacts and related parties, the data is collected from you.

For the purpose of evaluating grant applications, we disclose personal data about grant applications to the foundation’s board of directors and pre-appointed personnel of Gofore Plc and, if necessary, to other external experts. We disclose information to the accounting services provider for processing the payment of the grant and managing the reporting requirements. The grant awarded, the topic and the name of the grantee are published on the foundation’s website.

Personal data of related parties is processed by the foundation´s board of director, accounting services provider and auditors.

We use IT infrastructure and services offered by Gofore Plc and Gofore Plc’s third party service providers to process and store information that contains personal data.

We may also disclose personal data to public authorities to the extent permitted and required by applicable law.

Your personal data will not be transferred outside the European Union or the European Economic Area.

We keep records of grant applicants and possible referees for two years after the decision is made. For grants awarded, we keep records for 10 years after the payment of the grant. The material used in the board of director´s meeting materials will be kept permanently.

For other contacts, the data is stored until it is no longer needed for processing your contact or request. Data concerning related parties is stored for two years after your status as related party ceases.

As a data subject you have the following rights:

• Right of access: If you request access to your data, we will inform you whether or not personal data concerning you is being processed and provide you with a copy of the personal data being processed.
• Right to rectification: You can request rectification of erroneous or incomplete data.
• Right to erasure: You can request the erasure of your personal data from the register. Your data may be deleted if there is no longer a lawful basis for the processing.
• Right to data portability: In certain situations, you may be entitled to receive the personal data you have provided to us in a machine-readable format.
• Right to object: You have the right to object to the processing of your personal data insofar as the processing is based on legitimate interests.
• Right to restriction of processing: If the conditions of Article 18 of the Data Protection Regulation are met, you have the right to restrict the processing of your personal data.

If you consider that we are not processing your personal data in accordance with the Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority about the processing of your data. In Finland, this authority is the Data Protection Ombudsman.

We do not use automated decision making to process your personal data.

This privacy notice has been updated on 13.12.2023.

We will update this privacy notice whenever there are changes in the processing of personal data or in applicable legislation, of which we must inform you.