Privacy policy
In this privacy policy, you can read how Statistics Denmark manages the personal data we process when you contact us, visit our websites or use our services.
Updated September 2023.
When you contact Statistics Denmark, visit our websites or use our services, we collect data about you. It is important to us that you feel comfortable contacting us, visiting our websites and using our services. Statistics Denmark has prepared the below privacy policy to inform you of our processing of this information.
Statistics Denmark has high security standards. For that reason, we have procedures to ensure that we live up to these standards and comply with the requirements for appropriate security measures as stated in the General Data Protection Regulation. We process personal data in accordance with Statistics Denmark’s general security measures, and Statistics Denmark is ISO27001 certified.
This privacy policy does not contain guidelines for Statistics Denmark’s data security and data confidentiality in relation to statistical output.
Read about Statistics Denmark’s information security and data confidentiality
Read more about Statistics Denmark’s processing of data about you as part of our statistics
Statistics Denmark is data controller of the processing of your personal data and has the following contact information:
Statistics Denmark
Sankt Kjelds Plads 11
2100 Copenhagen
dst@dst.dk
CVR – 17150413
Phone +45 39 17 39 17
Our data protection officer (DPO) is Amalie Stubdrup and you can contact her at databeskyttelse@dst.dk or phone +45 39 17 39 95.
If you need to include sensitive or confidential personal data in your enquiry, we encourage you to send your enquiry to us via Digital Post. To do so, log in at Digital Post and select Statistics Denmark as receiver from the list of government agencies. You can also send us a letter.
Below, you can read more on how we process data about you, depending on how you have been in contact with us. The information on your rights applies regardless how you have been in contact with us.
The purposes of and the legal basis for the processing of your personal data
We process your personal data to be able to reply to you or to handle the case that is the result of your enquiry.
If your enquiry is about support for business reporting, we use the data to ensure good and direct communication about previous, outstanding, current and future reporting. In addition, we use the data to prepare user statistics and to optimise our support.
The processing of your personal data is based on article 6(1)(e) of the General Data Protection Regulation.
If you have sent us sensitive information, this is processed pursuant to article 9(2)(f) of the General Data Protection Regulation.
If you have sent us information on criminal convictions or offences, our processing is based on section 8(1) and section 8(2) no 3, of the Danish Data Protection Act.
Processing of civil registration number data happens for the purpose of unique identification, cf. section 11(1) of the Danish Data Protection Act.
Storage and, if relevant, receiver of the data
If your enquiry to us is subject to the digital archiving requirement by which we as a public authority are bound, your enquiry will be entered in our electronic case and document handling system. The data will be transferred for storage in the national archives, Rigsarkivet, pursuant to the statutory rules on archives after closing of the archiving period in which the case is included.
To be able to respond to your enquiry to us, we may find it necessary to share your personal data with others – e.g. public authorities.
If your enquiry is about support for business reporting, the information will be stored in a central reporting system (IBS).
If we receive a public records disclosure request for the case that includes your personal data, we are usually required to disclose the data, unless the information is confidential.
The purposes of and the legal basis for the processing of your personal data
We process your personal data to be able to reply to you or to handle the case that is the result of your enquiry.
The processing of your personal data is based on article 6(1)(c) and (e) of the General Data Protection Regulation.
If you have sent us sensitive information, this is processed pursuant to article 9(2)(g) of the General Data Protection Regulation.
If you have sent us information on criminal convictions or offences, our processing is based on section 8(1) and section 8(2) no 3, of the Danish Data Protection Act.
Processing of civil registration number data happens for the purpose of unique identification, cf. section 11(1) of the Danish Data Protection Act.
Storage and, if relevant, receiver of the data
When you have reported to us, your enquiry is recorded in Statistics Denmark’s electronic case and document handling system with restricted access, so that only authorised employees with a work related requirement can access your reporting. The data will be transferred for storage in the national archives, Rigsarkivet, pursuant to the statutory rules on archives after closing of the archiving period in which the case is included.
If you have filed a report via our whistleblower system, we will treat your request with full confidentiality. Under exceptional circumstances, if necessary for the processing of your reporting or for our exercise of authority in general, we will share data about your identity or other data from which your identity can be directly or indirectly inferred. This could be e.g. disclosure to the police or other public authorities. In general, you will be notified in advance of any such disclosure.
When you visit our websites (www.dst.dk, www.statistikbanken.dk, www.statbank.dk and m.statbank.dk), your IP address will be stored for six months. Your IP address is used only in connection with the operation of the website and to generate anonymised counting of visits. Cookies are not used to collect or process information about your behavior.
The processing of your personal data is based on article 6(1)(e) of the General Data Protection Regulation.
Storage and, if relevant, receiver of the dataWhen you visit our website, your IP address will be stored for six months. Your IP address is used only in connection with the operation of the website and for collection of visit statistics. We make our own anonymised counting of visits based on IP addresses.
Statistics Denmark does not pass on your IP address to others.
The purposes of and the legal basis for the processing of your personal data
When you subscribe to our news in the form of newsletters, blog posts or press releases, we process your personal data to be able to send you relevant news.
The processing of your personal data is based on article 6(1)(a) of the General Data Protection Regulation about consent.
Storage and, if relevant, receiver of the data
Statistics Denmark stores your personal data for as long as we have your consent. You are entitled to withdraw your consent at any time. You can do so by clicking the unsubscribe link at the bottom of your email news.
If you subscribe to Statistics Denmark’s press releases, your email address will be stored with Ritzau, which puts out the press releases. Statistics Denmark has a data processor agreement with Ritzau.
If you have subscribed to the newsletters: Perspektiv, Nyt fra DST Consulting, Kursusnyt and Newsletter on International Consulting, the subscription form is handled through a cloud-based add-on for our CRM system. This add-on is hosted by ClickDimensions, which has access to your name, business name and e-mail address. In connection with ClickDimensions’ processing, data may be transferred to the USA.
The purposes of and the legal basis for the processing of your personal data
Statistics Denmark collects and processes personal data that you enter at the Statbank Denmark website when you create a user profile.
The purpose is to allow us to communicate with you regarding errors or changes in a set of statistics that you use.
The processing of your personal data is based on article 6(1)(a) of the General Data Protection Regulation about consent.
Storage and, if relevant, receiver of the data
Statistics Denmark stores your personal data for as long as we have your consent. You are entitled to withdraw your consent at any time. You can do so by deleting your user profile in Statbank Denmark or by contacting Statistics Denmark. If your user profile has not been used for 13 months, your profile will be deleted automatically.
Statistics Denmark does not disclose your personal data to others.
The purposes of and the legal basis for the processing of your personal data
Statistics Denmark processes personal data that you provide in connection with your registration as a borrower with Statistics Denmark’s library. We collect the data so that we can communicate with you regarding lending of library materials.
The processing of your personal data is based on article 6(1)(a) of the General Data Protection Regulation about consent.
Processing of civil registration number data happens for the purpose of unique identification, cf. section 11(1) of the Danish Data Protection Act.
Storage and, if relevant, receiver of the data
Statistics Denmark stores your personal data for as long as we have your consent. You are entitled to withdraw your consent at any time. You can do so by contacting Statistics Denmark. You will automatically be deleted from the register of borrowers, if you have not used your borrower profile for two years.
Statistics Denmark does not disclose your personal data to others.
Statistics Denmark has company pages on Facebook and LinkedIn, as well as profiles on X, Vimeo and YouTube.
Statistics Denmark and the social media in question are joint data controllers in terms of the data collection that happens in connection with visits to Statistics Denmark’s pages and profiles. Consequently, Statistics Denmark share the responsibility as data controllers with the following media:
- Meta Platforms Ireland Limited, Serpentine Avenue, Block J, Dublin 4, Ireland
- LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
- X Corp and Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
- Vimeo.com, Inc., Noerdliche Muenchner Str 47, 82031 Grünwald /Munich, Germany
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
When you visit Statistics Denmark’s profiles or pages on social media, the media will store cookies on the device that you have used when visiting our profile or page. In this way, the media process data on you when you visit Statistics Denmark on social media, whether you have a profile on the media or not.
The majority of the collected data is processed by the social media (e.g. to gear content specifically to you). Statistics Denmark does not exercise control over this data. The data that is available to Statistics Denmark is page view statistics and activity, which can be used to improve Statistics Denmark’s use of the pages and to target posts.
Besides, Statistics Denmark will process data about you that you send in a direct message via the social media to Statistics Denmark. This will typically be your name and your question to us. The message will be forwarded to an employee who can reply to your enquiry. This information will be deleted after 30 days and will no longer be available to Statistics Denmark via the company page on the social media. The social media will still have the data in their respective databases.
The purposes of and the legal basis for the processing of your personal data
The purpose of Statistics Denmark’s presence on Facebook, LinkedIn, X, Vimeo and YouTube is to be able to communicate and publish statistical material.
The processing of your personal data is based on article 6(1)(e) of the General Data Protection Regulation.
The processing of your personal data by the social media is based on their legitimate interests, including the media’s interest in providing an innovative, individually customised, secure and profitable service, see article 6(1)(f) of the General Data Protection Regulation.
Storage and, if relevant, receiver of the data
Statistics Denmark does not disclose your personal data to others.
For more information on with whom the social media share your personal data and for how long they store data about you, we refer to the privacy policy of the media:
In general, the General Data Protection Regulation gives you a number of rights. You have the right:
- Of access to the personal data we process about you (article 15)
- To rectification, erasure or restriction of processing of personal data that is inaccurate or processed unlawfully (articles 16-18)
- To object to our processing of your data (article 21)
In certain cases you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have your data transmitted from Statistics Denmark to another data controller without hindrance (article 20).
If you want to exercise any of your above rights, please contact Statistics Denmark at databeskyttelse@dst.dk.
Complaints
You can lodge a complaint with the Danish Data Protection Agency if you are not satisfied with our handling of your personal data.
Learn more about your access to complain at the Data Protection Agency
Revision of this privacy policy
At the top of this privacy policy, you can see when it was last updated. We are going to update the policy on a regular basis. In case of significant changes, we will make sure that this is announced in a prominent position on our website.