When you are registered as a user in MitID, you will also be presented with the privacy notice for MitID. For example, you can read how your personal data is processed, what data it is about, where it comes from, how it is stored and who has access to it.
In version 1.8, the structure of the privacy notice for MitID has been changed compared to version 1.7. The purpose of the changes is to make the various sections of the privacy notice more manageable and user-friendly.
The changes have also been made with a view to ensuring that the MitID privacy notice follows the same set-up as in the Danish Agency for Digital Government's other privacy policies where the agency is the data controller.
In version 1.8, the sections on the processing of personal data in MitID Support have been removed for the purpose of preparing an independent privacy notice for MitID Support.
Several changes of a clarifying nature have been made, which you can see below.
Description of the exact changes
Changes to the Privacy Notice version 1.7 compared to version 1.8:
- Introduction: The section will be removed as the guideline content about MitID Business will be moved to Section 1.
- Section 1: The section on data controller is clarified with the addition "If you are a business user and use a special dedicated MitID for business use, you are referred to the privacy notice for MitID Business on mitid-erhverv.dk", which was previously stated in the introduction in version 1.7.
- Section 3: New section on legal bases for processing personal data. "Purpose and legal basis for the processing of your personal data" is changed to "The legal basis for the Danish Agency for Digital Government's processing of your personal data". The section lists the various legal bases.
- Section 3: Adding a legal basis for the processing of data for statistical and scientific studies.
- Section 4: New section on the purposes of processing personal data. The description of the objectives has been expanded and clarified.
- Section 4: Adding purpose for the processing personal data to prevent misuse of one's MitID.
- Section 4: Addition of purpose on processing of personal data for the development of the MitID solution, including for the purpose of scientific studies of significant societal importance.
- Section 5: Former section 4. The list of categories of personal data has been clarified and has been given a more descriptive character. Descriptions have been added to each category of personal data.
- Section 4A of version 1.7: Section is removed in version 1.8 as the information is contained in section 5.
- Section 6: Former section 5. The phrase “We disclose or transfer your personal data to the following recipients” is removed. Descriptions have been added for the individual recipients and categories of recipients of personal data.
- Section 7: Former section 6. The wording "As a general rule, we do not transfer your personal data to recipients outside the EU and EEA" is clarified to "With the exception of Greenland and the Faroe Islands, we do not transfer your personal data to recipients outside the EU and EEA".
- Section 7: Added section on transfer basis for transfer of personal data to Greenland and the Faroe Islands.
- Section 8: The section on the processing of personal data when verifying an identity through the MitID app will be removed. This information is described in Section 5.
- Section 9 of version 1.7: The section on personal data in connection with support of MitID is removed. Instead, an independent privacy notice is prepared for MitID support.
- Section 10: Added section on automated decision-making, including profiling.
- Section 11: Former section 10. The phrase "Your rights" has been changed to "Right to rectification, deletion, restriction, objection and data portability".
- Section 11: Sections on deletion of information about e-mail address, alternate address and/or mobile number are removed.