Belmont Forum:Belmont Grant Operations System
We also use analytics. By navigating any page you are giving your consent for us to set cookies.
Save Now Dismiss
The Belmont Forum is a multinational partnership organization that supports international projects through Collaborative Research Actions (CRAs), international calls for proposals that result in synchronized funding support from a variety of resource and funding partners. This Belmont Forum Grant Operations (BFgo) Privacy Statement explains the reason for the collection and processing of your personal data, the way we protect the personal data provided and what rights you may exercise in relation to your data (the right to access, rectify, block etc.).
The Belmont Forum is committed to protecting and respecting the privacy of Applicants, Reviewers, and Awardees. The evaluation of proposals, management of funded actions as well as the design, monitoring, evaluation, and learning in CRAs require the processing of personal data, including those of persons in the European Union. Therefore this privacy statement and associated policies are designed to be compliant with the EU's General Data Protection Regulation (2016/679) (GDPR).
This Privacy Statement concerns the processes associated with (1) application submission, (2) application review and (3) awardee reporting through the BFgo system. BFgo is supported by a U.S. National Science Foundation (NSF) contractor, Lux Consulting Group, Inc. The data input by users from all over the globe are received directly into servers in the USA, which are maintained by Amazon Web Services using industry best practices for data security. The Belmont Forum is hereby making the benefits of these GDPR compliant policies available to all users regardless of geographic location.
BFgo maintains data related to CRAs and associated processes in Annex 1. Changes to this Annex do not constitute a change to the BFgo Privacy and Legal Statement.
The data provided to us and the purpose of our processing these data are different for (1) application submission, (2) application review (3) awardee reporting or (4) Monitoring and Evaluation and Learning (MEL) roles. The purpose of processing the data for each of these roles are as follows:
The Belmont Forum and the NSF contractor supporting the BFgo system have a legitimate interest in processing these data to meet obligations laid down by law in funding countries, including European Union Member countries, meeting obligations to which the Belmont Forum is subject, and the necessity for the performance of a contract to which the data are subject. (This basis is described in GDPR 2016/679 §40.) The organizations providing resources and funding for the CRAs are subject to obligations laid down by law for the application, review, and award processes and the Belmont Forum and the NSF contractor processing is directly linked to these obligations.
The data we collect and process are different for (1) application submission, (2) application review (3) awardee reporting and (4) MEL roles. The purpose of processing the data for each of these roles through the BFgo system are as follows:
**In all cases above, "Organization" information includes the organization's name, website, email, phone, fax, Twitter handle, street address, city/town, state, country, and postal code.
The Belmont Forum and the NSF contractor supporting the BFgo system will not collect or process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health, data concerning a natural person's sex life or sexual orientation, ideological views or activities, information on social security measures, or administrative or criminal proceedings and sanctions, which are treated outside pending proceedings. (These are "special categories" of data under GDPR Article 9 and Swiss-U.S. Privacy Shield and are not collected or processed by the Belmont Forum or the NSF contractor supporting the BFgo system.)
Personal data and reviewer data related to unsuccessful applications are kept for up to 10 years after the closure of the call for which the data have been collected or updated, or, concerning calls with multiple cut-offs, for up to 10 years after the date of the cut-off following the submission of the application. This applies also to data contained in previous outdated versions of applications and in withdrawn proposals.
Information on awardees receiving funding through a CRA, personal data (in electronic and/or any other format) are retained for 10 years after the closing of the action.
Anonymized data can be retained for a longer period and further processed for historical, statistical, or scientific purposes.
All data in BFgo are stored on the BFgo support contractor's servers or those of their vendor, Amazon Web Services. The operations of these services comply with industry best practices and the appropriate U.S. government's Federal Information Security Act (FISMA) provisions.
Your data will be accessible to Belmont Forum staff and contractors, resource and funding organizations and their contractors, partner organisations and contractors, and the contractor supporting the BFgo system. (BFgo is supported by a U.S. National Science Foundation (NSF) contractor, Lux Consulting Group, Inc.) Additionally, data in applications will be accessible by application reviewers solely for the purpose of providing their review.
BFgo maintains a list of Belmont Forum members and partners for each CRA in Annex 2. Changes to this Annex do not constitute a change to the BFgo Privacy and Legal Statement.
We do not currently share your personal information with companies, organizations, or individuals outside of Belmont Forum staff and contractors, resource and funding organizations and their contractors, partner organisations and contractors, and the contractor supporting the BFgo system. If the need arises, we may share your information in the following cases:
Future Sharing with your consent We'll share personal information outside of Belmont Forum when we have your consent. We'll ask for your explicit consent to share any sensitive personal information.
Future Sharing for external processing We would provide personal information to our affiliates and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.
Future Sharing for legal reasons We will share personal information outside of Belmont Forum if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to:
The BFgo system is supported by Lux Consulting Group, Inc, (Lux) a Maryland USA corporation under a contract with the National Science Foundation, which is a U.S. Federal Government agency. Per their Privacy Shield certification and the letter provided in Annex 3, Lux complies with the EU-US and Swiss-US Privacy Shield Frameworks (Privay Shield) as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information transfered from the European Union and the United Kingdom and/or Switzerland, as applicable, to the United States in reliance on Privacy Shield. Lux has certified that it adheres to the Privacy Shield Principles and this BFgo Privacy and Legal Statement. Lux remains responsible for any of your personal information that is shared under the Privacy Shield Onward Transfer Principle with third parties for external processing on our behalf, as described in the "Who has access to your data and to whom is it disclosed?" section. To learn more about the Privacy Shield program, and to view Lux's certification, please visit the Privacy Shield website.
Lux is subject to the investigatory and enforcement powers of the US Federal Trade Commission (FTC). In certain circumstances, the Privacy Shield Framework provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the Privacy Shield Principles.
You are entitled to access your personal data and rectify/block or erase them in case the data are inaccurate or incomplete. You can exercise your rights by emailing help@bfgo.org. In case of conflict, you can contact the Belmont Forum at info@belmontforum.org. Each will reply to requests within 60 days.
Do not provide personal data about others unless you are authorized or required to do so by contract or applicable law.
BFgo system users must comply with this statement and may not take any actions to subvert the processes associated with this statement. Those with access to these data are reminded of their obligation to process the personal data provided to them only for the purposes for which they were transmitted.
If you have comments or questions, any concerns or complaints regarding the collection and use of your personal data, please feel free to contact the Belmont Forum at info@belmontforum.org. Persons in European Union Member countries may also contact their National Data Commissioner or other national office responsible for GDPR compliance.
If you have an inquiry regarding Lux's privacy practices in relation to its Privacy Shield certification, we encourage you to contact them at it@luxcg.com.
*Full project names and descriptions are available at www.belmontforum.org.
Lux Consulting Group, Inc. 8403 Colesville Rd. Suite #1100 Silver Spring, MD 20910.
November 2, 2018
To Whom It May Concern,
Lux Compliance with BFgo System Privacy and Legal Statement EU-US and Swiss-US Privacy Shield Frameworks
Lux Consulting Group, Inc. (Lux) supports the Belmont Forum Grant Operations (BFgo) system under a contract with the National Science Foundation. Lux hereby certify and affirms compliance with the BFGo System Privacy and Legal Statement and the EU-US and Swiss-US Privacy Shield Frameworks as set forth by the US Department of Commerce regarding the collection, use and retention of personal information from European Union member countries and Switzerland, respectively. Lux remains responsible for any personal information that is shared under the Privacy Shield Onward Transfer Principle with third parties for external processing on our behalf, as described in the "Sharing your information" section.
In particular, Lux shares your data with other parties involved in the review and processing of the application, award, and monitoring of your grant. This includes national governments, funding agencies, program staff, application reviewers, and program evaluators. Lux does not share your data for commercial purposes and we do not use your data for a purpose materially different from the purpose(s) for which it was originally collected or subsequently authorized by you.
You can exercise right to opt-out of sharing with third parties by emailing it@luxcg.com with the subject line "OPT-OUT OF SHARING", your name, the program/opportunity name, and application number or project name in the body of your email.
If you choose to opt-out of sharing your data with Lux or third parties, please be advised that this will prevent your further use of this system, it may also affect compliance with national government agencies' rules, evaluation of your application, and/or the conditions of your award. Lux does not monitor or enforce compliance with national government, funding agency, or program rules, but will inform these parties that an opt-out and anonymization has occurred for your application or awarded opportunity, so they may follow up as required and appropriate. Lux will reply to requests within 60 days.
In compliance with the Privacy Shield Principles, Lux commits to resolve complaints about our collection or use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Lux at: it@luxcg.com.
Lux has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved Privacy Shield complaints concerning data transferred from the EU and Switzerland.
To learn more about the Privacy Shield program, and to view Lux's certification, please visit the Privacy Shield website at https://www.privacyshield.gov/welcome. Lux's certification is listed at this Privacy Shield website maintained by the U.S government at https://www.privacyshield.gov/list.
Lux is subject to the investigatory and enforcement powers of the US Federal Trade Commission (FTC). In certain circumstances, the Privacy Shield Framework provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the Privacy Shield Principles at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
Please email it@luxcg.com with any questions.
Sincerely,
Leonard Boyd. President and CEO, Lux Consulting Group, Inc.