1. We are the data controller - how do you contact us?

The Agency for Digital Government is data responsible for processing the personal data we have received about you. You can find our contact information below.

The Agency for Digital Government
Landgreven 4
1301 København K
CVR No: 34051178
Phone: 33925200
Mail: digst@digst.dk

2. Contact information of the Data Protection Officer

The Ministry of Finance, of which the Agency for Digital Government is a part, has appointed a Data Protection Officer who will manage the rules for data protection within the Ministry of Finance. The task of the Data Protection Officer is to support the Ministry of Finance's compliance with the regulations on the processing of personal data.

The Data Protection Officer can guide you on your rights in connection with the processing of your data within the Ministry of Finance. If you wish to contact the data protection adviser by e-mail, please do not provide your CPR Number or other sensitive/confidential information.

The Agency for Digital Government
Att: the Data Protection Officer
Landgreven 4
1301 København K
CVR No: 34051178
Phone: 33925200
E-mail: dpo@digst.dk

3. The purposes and legal basis for the processing of your personal data

We process your personal information for the following purposes:

• We process your personal information to inform you exactly how you can transfer to MitID using your NemID.
• The legal basis for The Agency for Digital Government to process your personal data is as follows:
• The processing of your personal data is based on the Data Protection Regulation article 6, section 1, litra e on the exercise of official authority
• Your CPR Number is processed based on section 11 of the Data Protection Act.

4. Categories of personal information

The Agency for Digital Government processes the following types of personal information about you:

General personal information:

• Name (only if you are exempt from Digital Post)
• Address (only if you are exempt from Digital Post)
• PID number, which is a unique ID number from your NemID

Information subject to special regulation:

• CPR Number

5. Recipients or categories of recipients

We give or disclose your personal information to the following recipients:

• We give your personal information to The Agency for Digital Government's data processors Nets DanID A/S to assist with the operation and maintenance of our IT systems, and Formpipe A/S to assist with sending MitID letters.

6. Where your personal information comes from

The personal data that the Agency for Digital Government processes originates from the following sources:

• Your PID number originates from the public PID service, which Nets DanID A/S manages on behalf of the Agency for Digital Government
• Your CPR Number originates from the NemID database, which Nets DanID A/S manages. When you received your NemID, Nets DanID registered your civil registration number, which was provided by you, in the NemID database and the PID service at the Agency for Digital Government.
• If you are exempt from Digital Post, your name and address are obtained from the CPR register to send you a physical letter. If you are not exempt from Digital Post, the Agency for Digital Government has not processed your name and address.
• To target the relevant information about the MitID transition, we have obtained information from all banks participating in the migration and from Bank Nordik and the Bank of Greenland on whether you have an online banking agreement with one of them.

7. Storage of your personal information

We store your personal information for a maximum of 15 days from the time we receive the above information

8. Your rights

Under the Data Protection Regulation, you have several rights concerning our information processing about you.

If you want to use your rights, do not hesitate to get in touch with us.

Right to view information (right of access)

You have the right to access the information we process about you and other additional information.

Right to rectification (correction)

You have the right to have incorrect information about yourself corrected.

Right to delete

In some instances, you have the right to have information about you deleted before the time of our general deletion occurs.

Right to limitation of treatment

In some instances, you have the right to have the processing of your personal data restricted. Suppose you have the right to have the processing restricted. In that case, we may in the future only process the information - apart from storage - with your consent, or for legal claims being established, asserted or defended, or to protect a person or vital societal interests.

Right to object

In some instances, you have the right to object to our otherwise lawful processing of your personal data.
Right to transmit information (data portability)

Right to transmit information (data portability)

In some instances, you have the right to receive your personal information in a structured, commonly used and machine-readable format and to transfer this personal data from one Data Controller to another without obstructions.

You can read more about your rights in the Danish Data Protection Agency's guide to the data subjects' rights, which you will find at www.datatilsynet.dk.

9. Complaint to the Danish Data Protection Agency

You have the right to complain to The Danish Data Protection Agency if you are dissatisfied with how we process your personal data. The Danish Data Protection Agency's contact information is at www.datatilsynet.dk.