We will process the following categories of personal data for the Purpose as the processing is necessary to fulfil our contractual obligations, cf. Article 6.1.b of the GDPR:  name, e-mail address, telephone number, bank account details We will process the following categories of personal data for the Purpose, based on our legitimate interests, cf. Article 6.1.f of the GDPR, in being able to process and assess your application for grants. We have assessed that our legitimate interests override your interests or fundamental rights and freedoms:  Age, gender, CV information and data about previous research and publications, Open Researcher and Contributor ID (ORCID) iD We will also process your national identification number, such as the Danish social security number (CPR)., as it is mandatory that we can identify you to ensure that payouts are made to the correct individual for taxation and bookkeeping purposes, cf. Section 11(2)(1) of the Danish Data Protection Act. We may process your health information, if you choose to provide it to us (e.g. if illness is listed as a reason for a delay in a project and a subsequent deferment of grant payouts), in which case we will process your health information on the We collect data from the following sources:  directly from you; and  online sources, such as Researchfish® . We may share your personal data with:  suppliers and vendors, including information technology suppliers, under our instruction and financial institutions with which we collaborate to assist the Foundation; and  the Danish Customs and Tax Administration and other public authorities to the extent that we are obligated to do so. In instances where we are collaborating with other foundations or donors on a call or funding instrument, the grant application may be We will store personal data for as long as is necessary to fulfil the purpose for which the personal data is collected, meaning the following.  Data on unsuccessful applications will be stored for up to two years following final rejection. In some cases, the personal data may be necessary for the purpose of Impact analysis and reporting, in which the personal data will be stored for up to 50.  Data on successful applications will be stored as described below under “Grant administration and impact assessment”. Page श/ऴव basis of Article 9.2.f of the GDPR, as it may be necessary in We will process the following categories of personal data for the Purpose as the processing is necessary to fulfil our contractual obligations, cf. Article 6.1.b of the GDPR:  name, e-mail address, telephone number, bank account details We will process the following categories of personal data for the Purpose, based on our legitimate interests, cf. Article 6.1.f of the GDPR, in being able to process and assess your application for grants. We have assessed that our legitimate interests override your interests or fundamental rights and freedoms:  Age, gender, CV information and data about previous research and publications, Open Researcher and Contributor ID (ORCID) iD We will also process your national identification number, such as the Danish social security number (CPR)., as it is mandatory that we can identify you to ensure that payouts are made to the correct individual for taxation and bookkeeping purposes, cf. Section 11(2)(1) of the Danish Data Protection Act. We may process your health information, if you choose to provide it to us (e.g. if illness is listed as a reason for a delay in a project and a subsequent deferment of grant payouts),

We will process the following categories of personal data for the Purpose, based on our legitimate interests, cf. Article 6.1.f of the GDPR, in being able to demonstrate the value and impact of research in relation to grants and other activities, and improving funding strategies to enhance equality and diversity through funding processes. We have assessed that our legitimate interests override your interests or fundamental rights and freedoms:  name, e-mail address, telephone number, gender, birth year, age, city and country of residence, ORCID iD, data on the progress of the research project that is funded and the type of research project that is funded We collect data from the following sources:  directly from you;  online sources, such as Researchfish® ; and  the Novo Nordisk Foundation’s application systems. We may share your personal data with:  suppliers and vendors, including information technology suppliers, support, and financial institutions with which we collaborate to assist the Foundation;  third parties in association with a research project, including independent national and  Data will be stored throughout the period covered by a grant from the Foundation for up to at least 50 years for the purpose of Impact analysis and reporting on the basis of the Novo Nordisk Foundation’s legitimate interests, cf. Article 6.1.f of the GDPR.  Thereafter, the data will be transferred to the Foundation’s archives, in which the data will be processed in accordance with the policies on processing data for archiving purposes. Page ष/ऴव We will also process your health data if you choose to