Privacy Policy

On May 25, 2018, the new General Data Protection Regulation (GDPR) came into effect, constituting an important common regulation within the EU regarding data protection. GDPR provides you with rights to determine how your personal data is handled.

At the Postcode Lottery Foundation, we care about your personal privacy and always strive for a high level of data protection. We want you who visit our website, subscribe to our newsletter, apply for project support, are granted project support and enter into an agreed collaboration with us, as well as send job applications to us, to feel secure about how we handle your personal data. This privacy policy explains how we collect and use your personal information. It also describes your rights and how you can exercise them.

Definition

Personal data is any kind of information that directly or indirectly can be attributed to a living natural person, such as names and addresses, but also images and audio recordings. Encrypted data and various types of electronic identities, such as IP numbers, are personal data if they can be linked to natural persons. When visiting our website, IP addresses are automatically registered to measure visit frequency, but this information is not used to identify individual visitors.

Processing of personal data is any operation performed on personal data, regardless of whether it is carried out automatically or manually. Examples of common processing activities include collection, registration, storage, processing, transfer, and deletion.

The Postcode Lottery Foundation is the data controller for the processing of personal data as described below, and we safeguard security and integrity in our personal data processing.

Types of processing

The Postcode Lottery Foundation processes personal data provided in connection with the following activities:

When subscribing to our newsletters
When applying for project support
When granting project support and fulfilling agreements
When making inquiries and applying for employment with us

Purpose of processing

The Postcode Lottery Foundation uses personal data for the following purposes:

To administer subscriptions
To process applications and communicate decisions regarding applications
To draft and sign agreements for approved project support, fulfill agreements, handle questions during the project process regarding the use of project funds, and ensure that the contracting party receives relevant updates and information about future calls for proposals, upcoming events, or other project support-related activities
To respond to inquiries regarding employment with us

Legal basis for processing

The Postcode Lottery Foundation processes personal data in accordance with the following legal grounds:

Personal data processing is based on the applicant’s and our legitimate interest in handling applications, whether for project applications or employment applications.
Personal data processing is necessary for us and the applicant to fulfill our commitments according to the project support agreement entered into when the project is approved.
Personal data processing is based on active consent or legitimate interest in receiving information.

Use of cookies and other technical applications

A cookie is a small file that is placed on your computer when you visit a website. Cookies and similar technologies are used on the Postcode Lottery Foundation’s website to improve user experience, analyze traffic, and optimize the website. No personal information (such as email address or name) is saved.

If you do not accept the use of cookies, you can disable cookies through your browser’s security settings. You can also set your browser to warn you each time the website tries to place a cookie on your computer. Previously stored cookies can also be deleted through your browser. See your browser’s help pages for more information on how to do this. General information about cookies and the Electronic Communications Act can be found on the Swedish Post and Telecom Authority’s website.

On our website, there are also applications that link to social media, such as Facebook and Instagram buttons. These features may collect certain personal data, such as IP numbers. This privacy policy does not apply to these features; your interaction with these features is governed by the privacy policies of the companies that provide them.

Information that may be disclosed

We never sell or share your personal data with third parties for marketing purposes or similar, but we may share information with other companies and organizations that process information and data on our behalf and according to our instructions. This is to enable us to offer our services and fulfill our commitments. When your personal data is shared with these organizations, it is only done in a manner consistent with the purposes for which we collected the information, such as to handle applications and distribute newsletters. We also commit to having data processing agreements where required, thereby guaranteeing the security of the personal data being processed.

We want to make you aware that our partners, through which we distribute our newsletter and with whom we share your email address so that you can receive our newsletter, collect general statistics to analyze the reach of the newsletter.

We may also share personal data with the Swedish Gambling Authority when we are required to do so by law, such as when granting project support. The Swedish Gambling Authority is an independent data controller, which means that we do not control how the information provided to the Swedish Gambling Authority is processed. When personal data is shared with an organization that is an independent data controller, that organization’s privacy policy and personal data processing apply.

Time limitation for processing personal data

We do not retain personal data longer than necessary to fulfill any of the services described above, after which we delete the personal data. Exceptions are if we are obligated to retain personal data longer to comply with legal requirements. Storage and deletion of personal data are regulated by our internal policy for personal data processing, which also describes the measures we take in our work to maintain confidentiality, limit availability, and protect integrity.

Your rights

You have the right, upon request, to obtain information about what personal data about you we process. Send a signed request by mail to us. You also have the right to have your personal data corrected if it is incorrect or incomplete, deleted and/or limited under certain specific circumstances, as well as transferred to another data controller. Information on how to contact us can be found under the heading Contact us. You also always have the right to file a complaint with the Swedish Authority for Privacy Protection.

The Postcode Lottery Foundation continuously works on security and privacy issues, which is why this privacy policy may be updated continuously.

Version 4.0 established March 2023

On this web page