This privacy statement explains how the Norwegian Human Rights Fund (NHRF) collect, stores and uses personal data.

Last updated 2025


The Norwegian Human Rights Fund (NHRF) is responsible for the personal information processed. The organisation’s data controller is the Executive Director.

You may reach us in the following ways:

Email: Ingeborg.moa(a)nhrf.no

Postal address: Rådhusgata 4, 0151 Oslo, Norway


When does the NHRF collect personal data?

We primarily process personal information about persons from the following categories:

  • Grantee partners and other organisations we have contract agreements with
  • Grant applicants
  • Job applicants
  • Consultants/providers
  • Event participants
  • Individual donors
  • Network partners and collaboration partners
  • Newsletter recipients
  • Persons contacting us through email or phone
  • Social media users
  • Website users (including cookies)


What information does the NHRF store and for how long?

Grantee partners and other organisations we have contract agreements with

Through our grant management processes, we collect and store necessary personal information about persons from or connected to our grantee partners and other partner organisations in order to follow up on our grant agreements, as well as our external reporting requirements.

The following information may be processed:

  • Contact information, including name, email address and telephone number
  • Application potentially containing personal information about the organisation’s resource persons, staff and board members as well as previous donors and references. This entails:

➜ Name, email, phone number

➜ Affiliation to grantee organisation

  • Reports potentially containing undefined personal information about the organisation’s resource persons, staff and board members, as well as cooperation partners and target groups
  • Instalment disbursement requests with personal information about contact persons and organisational signatories

The data will be deleted at the latest 5 years after ended partner relationship. An exception is the NHRF’s work in Colombia, where we are legally bound to keep this data for 10 years.

Grant applicants

Through the grant application process, we collect and store necessary personal information about persons from, or connected to, applicant organisations, to assess the applications according to applicable guidelines.

The following information may be processed:

  • Contact information, including name, email address and telephone number
  • Application potentially containing personal information about the organisation’s resource persons, staff and board members as well as previous donors and references. This entails:

➜ Name, email, phone number

➜ Affiliation to applicant organisation

The data will be deleted at the latest 6 months after ended application evaluation unless consent is given to store the data for longer through the application process. Consent can at any time be withdrawn.

Job applicants

When you apply for a position at NHRF, information necessary to contact you and to evaluate your application is collected and stored. This includes the information provided by the applicant and potential references.

The following information may be processed:

  • Contact information, including name, email address and telephone number
  • Application and CV, as well as other information provided by the candidate or their reference
  • Name, affiliation to candidate, and contact information of potential references

Data collected will be deleted at the latest 6 months after ended recruitment process.

Consultants/providers

When selling services/goods or conducting consultancies for the NHRF, we collect and store the following information:

  • Contact information, including name, email address and telephone number
  • Minutes from meetings and communication
  • Billing and bank information

Contact information will be deleted at the latest 1 year after ended contract or 1 year after the last use of the services of the provider in cases where we know that we will no longer be using the consultant or provider. Billing/bank information will be retained for 5 years. Minutes will be archived for historical purposes.

Event participants

When registering for, or participating at, one of our events, we may process the following information:

  • Contact information, including name, email address and telephone number
  • Place of employment or organisation, job title, country, language and preferences for instance when it comes to food, allergies etc.

The information will only be used for the purpose of organising the event. The information may be shared with partner organisers of the event.

Special categories of personal information, such as food allergies/preferences, will be deleted immediately after completion of the event. Other personal information will be deleted at the latest 6 months after ended activity or stored upon consent.

In some cases, names of participants and affiliation to organisation will be saved for accounting purposes. In such events the information will be stored for 5 years, as required by the Norwegian Bookkeeping Act.

Individual donors

We process personal information about our individual donors in order to follow up with you as a donor and due to the requirements of the Norwegian Bookkeeping Act and Taxation Act.

The following information may be processed:

  • Contact information, such as name, email address and phone number
  • Donor history
  • Personal ID number

Information is stored for 5 years, in accordance with the requirements of the Norwegian Bookkeeping Act.

Newsletter recipients

When you sign up for our newsletter, you consent to the NHRF processing personal information about you. The information will only be used to send future newsletters, as well as to understand our subscribers and what they find interesting.

The following information may be processed:

  • Email address and name
  • Duration of subscription
  • Activity (opening of newsletter)
  • Non-personalised information about locations of newsletter subscribers

The information will be retained for the duration of your subscription.

Network contacts and collaboration partners

The NHRF records a registry of our network contacts and collaboration partners. The purpose of the registry is to coordinate our contact with our network and collaboration partners and to ensure that they are updated about the NHRF’s work.

The following information may be processed:

  • Contact information, such as name, email address and telephone number
  • Place of employment and job title
  • Affiliation to the NHRF

The information will be deleted at the latest one year after the relation/collaboration with the NHRF is ended.

When you contact the NHRF by telephone and email

NHRF has no systematic registration of phone calls. When calling NHRF or calling directly to one of our staff, information about the call may be stored on the phone log of the person you are calling.

Email correspondence with the NHRF may be stored in our e-mail applications. NHRF urge you to keep in mind what information you share with us via e-mail, and refrain from sending information that can be seen as sensitive.

Social Media

NHRF does not export or store data given to us through activities on social media, apart from through third-party social media management tools (Meta Business and LinkedIn) from which non-personal data in form of activity statistics may be exported and stored.

The NHRF website

a. Reporting

When submitting a report through our online form, personal information provided through the online reporting form will be processed by the NHRF. This includes personal information about the person reporting when such information is included, as well as any person mentioned in the report.

The information will be handled according to the NHRF’s whistleblowing routines. At least once per year, closed cases will be deleted from the database of whistleblowing cases.

b. Cookies

A cookie is a text file that is downloaded to the device you use to access our website. The NHRF uses cookies to improve the user experience of the NHRF website.

NHRF uses Google Analytics to analyse statistics about activities on our website. This includes the amount of time spent on the site and which links are used, the pages with most traffic, as well as user preferences and search history. This service requires data from nhrf.no. The data stored in these cookies are anonymised and can only be read by Google.

The NHRF uses cookies for the following purposes:

  • Collect statistical data about the use of the website and its function, in order to improve the site.

By using the NHRF website, you consent to the processing of cookies. If you do not consent to our use of cookies, you can disable them by changing the privacy settings of your web browser. If you disable cookies, you will still be able to use most of the services we offer at nhrf.no.

More information. You can find out more about cookies at: www.allaboutcookies.org or www.youronlinechoices.eu


Sharing of data

Personal information is only shared with partners or subcontractors performing tasks on behalf of the NHRF as required to conduct our operations. All subcontractors will be subject to a data processing agreement with the NHRF and data processing responsibility lie with the NHRF for any personal information collected.

We may also disclose personal information to others due to legal obligations or as required by contracts, agreements and terms and references.

Retention of information

If not otherwise clarified and agreed, NHRF will store personal information only for as long as necessary for the relevant activity or agreement, and for as long as necessary for our reporting, legal and transparency obligation.

Your rights

You can exercise your rights to access to own information, correction of personal data, deletion of personal data, limitation of processing of personal data and to protest treatment of personal information by sending an e-mail to ingeborg.moa(a)nhrf.no.

You are entitled to a response within 30 days.

For more information on your rights, see www.datatilsynet.no/en/