• Query, including any other personal data you choose to share with us in your query. 

   

2.1.2. When working with us: 

• First name surname, title  

• E-mail address 

• Organisation, job title, department 

• Telephone number, address 

• Skype & Twitter accounts 

• Login on information systems 

• Personal identification number, ID card 

• Bank account number. 

   

2.1.3. During a visit to this Website: 

• IP address 

• Authentication and tracking cookies – see our cookies policy. 

   

2.1.4. When registering for our newsletters: 

We use Mautic, an open-source marketing and newsletter tool, to manage newsletter subscriptions on the EEA and Norway Grants website (eeagrants.org). When you subscribe to a newsletter on this website, the following information is collected and stored in Mautic: 

• E-mail address 

• First name, surname, title (if provided) 

• Subscription preferences and tracking data (e.g., opens, clicks, bounces, geographic location based on IP address) 

• The Financial Mechanism Office (FMO) acts as the data controller for newsletter data collected via eeagrants.org/en/fmo and uses it solely for sending newsletters and communications from this website. 

FMO sometimes processes public data, e.g. data that are subject to a publication duty, such as the publication of your appointment as director of an organisation, or data that you made public yourself, such as information posted on your website, or data that are generally known in your region or that have appeared in the press. We may also receive information about you from third parties – but only if you have given them permission to share your information or if permitted under the applicable rules and regulations. 

2.3 Cookie policy 

2.3.1 What is a cookie?

A cookie is a small text file that a website stores on your computer or mobile device when you visit the site. They are widely used to “remember” you and your preferences, to make websites work (or work more efficiently), as well as to provide information to the owners of the website. 

Our cookies have different functions. They are either necessary for the functioning of our services, help us improve performance, or provide you with additional functionalities. 

Every time you visit a website within the EEA and Norway Grants multisite network (including eeagrants.org and other websites hosted on the same platform), you will be prompted to accept or refuse cookies. 

2.3.2 How do we use cookies? 

We use two types of cookies across the entire multisite network: 

• Essential cookies – required to provide you with services you request. For example, these include cookies that make it possible for you to use different functionalities of the websites and save your preferences about cookies. 

• Performance cookies – used to measure how often you visit our websites and how you use them. This information helps us understand how users engage with our content. For example, we collect information about which pages are most frequently visited and by which types of users. 

• You have the right to choose whether or not to accept cookies and to set your own cookie preferences on your computer. 

These preferences can be to accept all cookies or not to receive cookies at all. Users can block most cookies by activating the setting on their browser that allows them to refuse the setting of all or some cookies. However, if browser settings block all cookies (including essential cookies), users may not be able to access all or parts of the websites, or they may experience reduced functionality or unexpected operations when accessing certain services. 

2.3.3 What types of cookies do we collect? 

The following cookies are used across the EEA and Norway Grants multisite network: 

Essential cookies 

These are necessary cookies used to provide the basic functions of the websites. They are essential for accessing features such as secure login and session navigation. 

• Drupal cookies 

• DRUPAL SessionID (for logged-in users only) 

Third-party cookies 

Some pages display content from external providers (e.g. YouTube, Juicer social media feed). To view this third-party content, you must first accept their specific terms and conditions. This includes their cookie policies, which we have no control over. If you do not view this content, no third-party cookies are installed on your device. 

• YouTube 

• consent (18 years) 

• gps (30 min) 

• pref (243 days) 

• visitor_info1_live (180 days) 

• ysc (on session close) 

• Juicer (social media feed) 

• __cfduid (30 days) 

Analytics cookies (Matomo) 

We use Matomo, an open-source web analytics platform, to measure how visitors use the multisite network and to help us improve its performance. 

Matomo sets cookies to store: 

• a randomly generated unique visitor ID 

• the time of the visitor’s first visit 

• the time of the visitor’s previous visit 

• the number of visits by the same user 

• the referrer URL (the website from which the user came, if available) 

• Typical Matomo cookies include: 

• _pk_id.* (used to store visitor ID and details about visits; expiry up to 13 months) 

• _pk_ses.* (short-lived cookie used to temporarily store visit/session data; expires after 30 minutes) 

• _pk_ref.* (stores referrer information; expires after 6 months) 

• These cookies do not collect personal data such as names or email addresses, and IP addresses are anonymised in accordance with our configuration. 

Please note that we have no control over third-party cookies such as those set by YouTube or Juicer. Providers may change their terms of service, purpose, and use of cookies independently. 

You can find out more about YouTube, Juicer, and Matomo on their respective websites. 

3. Purposes of the processing 

As a general rule, your personal data will not be used for any other purpose than those for which they were provided to us. The main purpose of processing the data is the implementation of the EEA and Norway Grants (the Grants). 

The EEA and Norway Grants are funded by Iceland, Liechtenstein and Norway. The Grants have two goals – to contribute to a more equal Europe, both socially and economically – and to strengthen the relations between Iceland, Liechtenstein and Norway, and the 15 beneficiary countries in Europe. This strengthens the internal market, leading to a more prosperous Europe.   

The FMO is the Brussels-based secretariat for the Grants. The FMO, which is administratively a part of the European Free Trade Association, is responsible for the day-to-day implementation of the Grants and serves as a contact point for all stakeholders. 

Your personal data may be used by the FMO in the following ways: 

• In order to implement the Grants, i.e., inter alia, for preparation of MoUs, concept notes and programme agreements defining the scope and planned results for each programme; managing programmes; evaluations of on-going or completed programmes.   

• To provide the requested information or services. 

• The sending of newsletters, with your prior explicit consent.   

• For our internal and external communications, with your prior explicit consent or affirmative action. 

• Reg. the IP address: to look after and improve this website by including personal data in anonymous statistics, from which the identity of specific persons or companies cannot be discovered, with as legal basis the legitimate interests of FMO in continuously improving its website and provision of services. 

Any personal data you submit when applying for career opportunities will be used solely for recruitment purposes (including for identifying job applicants, evaluating applications, making hiring and employment decisions, and contacting you by phone or in writing). 

You are not obliged to release your personal data, but you do understand that the granting of certain services becomes impossible if you refuse the processing. 

The purposes described in this section apply exclusively to data collected through eeagrants.org/en/fmo.  

Newsletter subscription data is used exclusively for sending newsletters and related communications for which you have registered. 

4. Who has access to your data? 

4.1. Trained staff 

Your information is only accessible by our staff and your personal data will, as a general rule, only be accessible insofar as it is necessary to fulfil the purpose for which it was collected. 
 

4.2. Transfer to third parties 

FMO will not sell your personal data, rent them out, share them or otherwise make them commercially available to third parties. 

Your personal data are only shared or transferred to trusted third parties if such sharing or transfer is authorized by you or required to achieve the purposes for which you have provided them to us. It means that we may share your personal data with service providers or other third parties, who help assist us in fulfilling our purposes. 

Our trusted recipients include: 

• Eworx, which provides IT support, hosting, and maintenance for the EEA and Norway Grants website. Eworx may access personal data only to perform these services and is bound by EU data protection rules. 

• Other service providers that assist us in fulfilling our purposes, bound by contractual obligations and applicable data protection law. 

FMO shall make reasonable attempts to inform you in advance of the fact that FMO discloses your data to named third parties, but you also acknowledge that this is not technically or commercially feasible under all circumstances.