Personal Data Policy
Purpose
The Elsass Foundation processes personal data as part of our activities relating to individuals with Cerebral Palsy (CP), their families, professionals, and in connection with our property and grant administration. By “processing,” we refer to all forms of handling personal data: collection, registration, adaptation, storage, use, disclosure, deletion, etc.
As the data controller, we strive to ensure that everyone involved feels confident in how we handle personal data. Our processing is carried out in accordance with this privacy policy and applicable legislation at all times.
Collection and use of personal data
The Elsass Foundation collects and uses personal data for the following purposes:
- Residential stays, programmes, camps, and other services for children, young people, and adults with CP, as well as their families (parents, siblings, grandparents)
- Collaborative projects with municipalities and institutions (staff and citizens)
- Courses and conferences (participants)
- Grant administration (applicants for grants from the foundation)
- Property administration (residents in housing owned by the foundation)
- Newsletters and similar communications (subscribers)
- Personal data is typically collected in connection with registration for a specific activity.
The Elsass Foundation processes both general personal data (identification and contact information) and special category personal data (such as civil registration number, diagnosis, and other health-related or social information), depending on the activity in question. We only process personal data that is relevant and necessary. This includes information that enables us to tailor our activities to the individual.
The legal basis for the Elsass Foundation’s processing is either legislation or consent. The Elsass Foundation does not use personal data for any purpose other than those for which it was collected.
Storage and deletion
As a general rule, the Elsass Foundation retains your personal data for up to 5 years, after which it is deleted, unless a request for deletion is received earlier. Where required by law (e.g. in connection with property or grant administration), other retention periods may apply.
Disclosure of personal data
The Elsass Foundation never discloses personal data without your consent. When personal data is disclosed, this occurs either because the foundation is legally obligated to do so (e.g. within property or grant administration) or based on your consent (e.g. sharing test results with external professionals).
Use of data processors
The Elsass Foundation shares personal data with administrative IT service providers who process personal data on behalf of the foundation. This includes systems for storing and managing personal data, sending newsletters, and operating the foundation’s website. These providers process personal data solely on the Elsass Foundation’s behalf and in accordance with data processing agreements.
Security
The Elsass Foundation has implemented technical and organisational security measures to ensure that personal data is not accidentally or unlawfully deleted, published, lost, degraded, accessed by unauthorised individuals, misused, or otherwise processed in violation of data protection legislation. The foundation’s security procedures and processes are reviewed regularly to ensure appropriate technical and organisational safeguards.
Withdrawal of consent
You may withdraw your consent at any time (unless otherwise required by law, e.g., in relation to property or grant administration). Upon withdrawal, we will delete your data. You can withdraw your consent by contacting us at post@elsassfonden.dk or by calling 39 65 85 00.
Data subject rights
As a data subject, you may at any time exercise the following rights, on your own behalf and/or on behalf of your child (under 18 years of age):
- Access the personal data we process
- Object to the collection or further processing of personal data
- Request correction of your own or your child’s personal data
- Receive a copy of your or your child’s personal data
- Have your or your child’s data transferred to another data controller (data portability)
Some legal exceptions may apply, especially in relation to our property and grant administration.
You can find more information about your rights on the website of the Danish Data Protection Agency: www.datatilsynet.dk
Cookies on the website
We use cookies on our website to remember browser settings and enhance the user experience. You can read more about how we use cookies in our cookie policy.
Updates to the privacy policy
We regularly update this privacy policy to ensure the accuracy of information and compliance with applicable legislation.
Complaints
You can file a complaint about our processing of your personal data with the Danish Data Protection Agency. Learn more here.
Questions
If you have any questions about our privacy policy or how we process personal data, you are welcome to contact us at post@elsassfonden.dk or by phone at 39 65 85 00.
We aim to respond to all inquiries about personal data as quickly as possible and within 1 month, unless the scope or complexity of the request makes this unfeasible.