This text is to inform you of your rights in connection with the collection of your personal data.

According to Article 13 of the General Data Protection Regulation (GDPR), we are required to provide you with certain information when we collect personal data from you.

The information we are required to provide includes the following:

• We are the data controller – how can you contact us?
• Contact details of the Data Protection Officer
• The purposes of and legal basis for processing your personal data
• Categories of personal data
• Recipients or categories of recipients
• Retention of your personal data
• The right to withdraw consent
• Your rights
• Complaint to the Danish Data Protection Agency

Please refer to Annex 1 for more detailed information regarding the above points.

This text is for informational purposes only and does not currently give rise to any case processing concerning you.

If you have any questions, please feel free to contact us. You can find our contact details in Annex 1.

Kind regards,

Aarhus University

Annex 1 – Information on Our Processing of Your Personal Data

1. We are the data controller – how can you contact us?

Aarhus University is the data controller for the processing of the personal data we have received about you.

You can find our contact details below:

Aarhus University
Nordre Ringgade 1
8000 Aarhus C
CVR no.: 31 11 91 03
Phone: +45 87 15 00 00
Email: au@au.dk

2. Contact details of the Data Protection Officer

If you have any questions regarding our processing of your data, you are welcome to contact our Data Protection Officer by using the following contact information:

• Email: dpo@au.dk
• Mail: Aarhus University, Nordre Ringgade 1, DK-8000 Aarhus C, attn. Data Protection Officer

3. Purposes of and legal basis for processing your personal data

We process your personal data for the following purposes:

• To assess the applications for the AU Launch programme, and to inform the respective applicants through an official decision whether or not their project will receive an AU Launch grant.
• To evaluate if the applicant team passes the evaluation criteria set up by AU Launch and to also ensure Aarhus University’s compliance with any relevant regulations in its evaluation of the AU Launch applications and management of the AU Launch grants.
• To maintain contact with any applicants that have received an AU Launch grant to ensure that such applicants are compliant with the terms of the grant, and to also receive their final evaluation of the programme.
• To produce insight and decision support for further development of the programme in the form of project summaries and application statistics.

The legal basis for our processing of your personal data is:

• Article 6, section 1, litra a and e, from the General Data Protection Regulation.

4. Categories of personal data

We process the following categories of personal data about you:

Ordinary personal data:

• Name
• Email address
• Phone number
• Gender
• Age
• City

5. Recipients or categories of recipients

If you have received an AU Launch grant, we will potentially disclose your name to Meta Ireland and LinkedIn Ireland, as your name might be mentioned in our subsequent posts on Facebook, Instagram, and LinkedIn.

6. Retention of your personal data

We retain your personal data for as long as it is necessary for the purposes of the data processing. If you have received an AU Launch grant, we consider the data necessary as long as you are subject to the terms of the grant.

Your personal data will be deleted at an earlier stage if you do not receive an AU Launch grant, unless you consent to being contacted by us in the event of new subsequent AU Launch rounds.

When the personal data is no longer necessary for processing, it will be anonymized, transferred to the Danish National Archives, or deleted.

7. Right to withdraw consent

You have the right to withdraw your consent at any time. You may do so by contacting us using the contact details listed above in section 1.

Withdrawing your consent does not affect the legality of our processing of your personal data based on your previously given consent up until the time of withdrawal. Therefore, the withdrawal only takes effect from the time it is made.

8. Your rights

Under the General Data Protection Regulation, you have a number of rights in relation to our processing of your personal data.

If you wish to exercise your rights, please contact us.

Please find a list of your rights directly below:

Right of access to your personal data
You have the right to access the personal data we process about you and to obtain supplementary information.

Right to rectification
You have the right to have inaccurate personal data about you corrected.

Right to erasure
In certain circumstances, you have the right to have personal data about you erased before our general deletion schedule.

Right to restriction of processing
In certain situations, you have the right to restrict the processing of your personal data. If you are entitled to restriction, we may only process your data – apart from storage – with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of a person or important public interests.

Right to object
In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your data for direct marketing purposes.

Right to data portability
In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this data transferred from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency’s guidance on the rights of data subjects, available at www.datatilsynet.dk.

9. Complaint to the Danish Data Protection Agency

You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Agency’s contact details at www.datatilsynet.dk.