The Danish Energy Agency is the data controller

The Danish Energy Agency
Carsten Niebuhrs Gade 43
1577 Copenhagen V

Email: ens@ens.dk
Phone: 33 92 67 00

The Danish Energy Agency's data protection officer (DPO)

Bibi Amina Shah
Agency for Data Supply and Infrastructure
Rentemestervej 8
2400 Copenhagen NW

Phone: 72 54 57 41

Processing of personal data

The purposes and legal basis for the processing of your personal data.
We process your personal data in order to carry out the necessary processing of your inquiries.

We also process your information to achieve an efficient and rational review of your inquiries, including the use of your information to search for any previous practice, which might be relevant for your case.
We also store your information for documentation and control purposes.

The legal basis for our processing of your personal data follows from:

• Article 6(1)(e) of the GDPR – necessary for the performance of a task carried out in the exercise of offficial authority vested in the controller
• Article 9(2)(f) - necessary for the establishment, exercise or defense of legal claims or whenever courts are acting in their judicial capacity;
• Section 8(1) and section 8(2)(3) of the Danish Data Protection Act – processing of information on criminal matters, necessary for the performance of the authority’s tasks.

Recipients of personal data

The Danish Energy Agency may forward or entrust your personal data to those for whom the inquiry may be found relevant.
We may also pass on your information if it is otherwise necessary for the processing of your inquiry. As an example, it might be necessary to pass on information to other public authorities, whose contribution is needed to ensure that your inquiry or case will be sufficiently informed.

If we receive a request for access to documents relating to your case, in which your personal data is included, we are generally obliged to pass on the data, unless the information is confidential or other legal exceptions apply to the information in question.

Storage of your personal data

Your personal data in the Danish Energy Agency’s electronic case and document handling system will be transferred to the National Archives in accordance with the rules in the archive legislation after the end of the record period in which the case has been closed.

For a period after the end of the record period in which the case has been closed and transferred for storage in the National Archives, cf. above, the Danish Energy Agency will continue to have access to the information in a historical version of the record period in our system.

At present, we cannot say exactly how long we will store your personal data. However, we can inform you that your personal data will be deleted at the latest when there is no longer a legitimate need to store the personal data in question.

Your rights as a data subject

When the Danish Energy Agency processes personal data about you as a data subject, you have a number of special rights according to the data protection regulation. You can make use of your rights by contacting the Danish Energy Agency using the contact details found above.

Right of access

Pursuant to Article 15 of the Data Protection Regulation, you have the right have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information:

• The purposes of the processing
• The affected categories of personal data
• The recipients or categories of recipients to whom the personal data is or will be disclosed, in particular recipients in third countries or international organizations
• If possible, the intended period of time for which the personal data will be stored, or if this is not possible, the criteria used to determine this period of time
• The right to request the Danish Energy Agency for correction or deletion of personal data or restriction of processing of personal data concerning you or to object to such processing
• The right to lodge a complaint with the Danish Data Protection Authority
• Any available information about where the personal data originates from, if it is not collected from you
• The occurrence of automatic decisions, including profiling, as referred to in Article 22, paragraph 1 and 4, and at least meaningful information about the logic therein as well as the meaning and expected consequences of such processing for you.

You also have the right to receive one copy of the information.

However, the right to obtain confirmation of processing of your personal data and the right to receive a copy may be limited, e.g. for reasons of privacy protection of other persons, for operational or business matters or public interests.

Right to rectification and erasure

If the personal data that the Danish Energy Agency processes about you is incorrect or incomplete, you have the right, in accordance with Article 16 of the Data Protection Regulation, to have it corrected or made complete. You must contact the Danish Energy Agency and state what the inaccuracies consist of and how they can be corrected.

In accordance with Article 17 of the Data Protection Regulation, in some cases you will also have the right to have personal data about you deleted. For example, your personal data might no longer be necessary in relation to the purpose for which the Danish Energy Agency obtained it, or the personal data is processed in breach of legislation or other legal obligations.

However, the right to have information deleted may be limited if continued storage and other processing is necessary, e.g. for the sake of securing documentation or for the sake of continued performance of the agency's tasks.

When you contact us with a request to have your personal data corrected or deleted, the Danish Energy Agency examines whether the conditions are met and, if so, implements changes or deletion as quickly as possible.

Right to restriction of processing

In accordance with Article 18 of the Data Protection Regulation, you have the right in certain cases to have the processing of your personal data restricted, so that the data may not be subjected to other processing than storage.

Right to data portability

In accordance with Article 20 of the Data Protection Regulation, you have the right in certain cases to have the personal data that you have provided to the Danish Energy Agency handed over in a structured, commonly used and machine-readable format and the right to have the personal data transferred to someone else (so-called right to data portability).

The right to data portability does not apply, however, when personal data is processed as part of the Danish Energy Agency's exercise of authority or other tasks in the public interest.

Right to object

Pursuant to Article 21 of the Data Protection Regulation, you have the right to object to the processing of your personal data at any time.

When the Danish Energy Agency receives your objection to the processing of personal data, the Danish Energy Agency will, based on the reasons you state in the objection, reassess the necessity of the processing and possibly stop the processing. If, through the new assessment, the Danish Energy Agency concludes that the processing is still necessary, you will receive a justification as to why the Danish Energy Agency does not believe that your objection can be met.