Content
Purpose of processing personal data
Data Controller and Data Processor
The Data Protection Officer
What personal data is processed?
How long is your information stored?
Laws and regulations
Consent
Your rights as a data subject
Complaints about the processing of personal data
____________________
Purpose of processing personal data
The purpose of processing your personal data, your child's and any other custodial parent's personal data is so that your child can be registered for confirmation preparation and confirmation.
Data Controller and Data Processor
The parish where the confirmation is taking place is the processing authority and is thus the data controller for the processing of the personal data in connection with the registration.
The Ministry of Health and Ecclesiastical Affairs and the authorities that use the Ministry's joint systems have joint data responsibility for the processing of personal data when the processing takes place within the Ministry of Health and Ecclesiastical Affairs' remit, cf. 'Cirkulære om fælles dataansvar' no. 9447 of 15 June 2021.
The data processor of the Danish National Church is DXC Technology.
The Data Protection Officer
Questions about an authority under the Ministry of Health and Ecclesiastical Affairs processing of your personal data can be made by contacting the Data Protection Officer in the Ministry of Health and Ecclesiastical Affairs':
Senior Consultant Rasmus Paaske Larsen
Tel.: 3392 3390
E-mail: databeskyttelsesraad@km.dk
By letter: Ministry of Health and Ecclesiastical Affairs, Frederiksholms Kanal 21, 1220 Copenhagen K, Attn.: The Data Protection Officer.
Enquiries to other authorities' data protection officers should be directed to the relevant authority.
What personal data is processed?
The relevant parish processes the following information about you and any other custodial parent of the child:
- Name
- Parental responsibility
- E-mail address
- Phone number
- Civil registration number
The relevant parish processes the following information about your child:
- Name
- Civil registration number
- E-mail address
- Phone number
- Religious affiliation incl. information about baptism
- Information about school and class
- Any special considerations, including health information, that you provide yourself
How long is your information stored?
- A registration for confirmation that is accepted or rejected by the processing authority will be stored for 2 years. The application is then deleted, anonymised or transferred to the archive in accordance with the rules of the archive legislation.
- A digital registration of confirmation that does not reach the processing authority due to technical issues is stored in the system for 6 months, after which it is deleted.
An example of technical issues may be that a digital registration for confirmation is not finally signed before the deadline, or that your child does not have a registered address in Denmark.
Laws and regulations
The processing takes place based on Article 6 (1)(e) of the General Data Protection Regulation on the exercise of public authority.
The processing of Civil registration numbers takes place based on the Danish Data Protection Act, section 11(1).
The processing of sensitive personal data about the child's religious affiliation is based on Article 9(2)(g) of the General Data Protection Regulation on the exercise of public authority in the public interest.
Consent
Processing of sensitive personal data related to any health information about your child that you have provided in connection with registration is based on Article 9(2)(a) of the General Data Protection Regulation on explicit consent.
You have the right to withdraw your consent at any time by writing an email to the parish where the confirmation is to take place.
The withdrawal of your consent will not affect the lawfulness of the processing carried out before you have withdrawn the consent.
Registration for confirmation is processed according to the following rules:
- ‘Anordning om børnekonfirmandundervisning og konfirmation’ (Anordning nr. 1027 af 24/09/ 2014)
- ‘Bekendtgørelse af lov om medlemskab af folkekirken, kirkelig betjening og sognebåndsløsning’ (Lovbekendtgørelse nr. 622 af 19/06/2012)
- ‘Bekendtgørelse af forældreansvarsloven’ (Lovbekendtgørelse nr. 1768 af 30/11/2020)
- ‘Cirkulære om fælles dataansvar i forbindelse med Kirkeministeriets fælles systemer vedrørende personregistrering, sognebåndsløsning samt valg i folkekirken’ (Cirkulære nr. 9447 af 15/06/2021)
- ‘The General Data Protection Regulation’ (EU Regulation No. 2016/679)
- ‘The Data Protection Act’ (Act no. 289 of 08/03/2024)
Your rights as a data subject
You have the following rights under the General Data Protection Regulation.
- Right of access to the data that the authority in question processes about you.
- The right to have your information corrected in certain cases if it proves to be incorrect or misleading.
- The right to object to the authority's otherwise lawful processing of your data.
- The right, in certain cases, to have information about you deleted before the date of the authority's otherwise specified deletion occurs.
- The right to transmit information (data portability) does not apply to registration for confirmation, as the processing takes place as part of an exercise of public authority that the data controller has been assigned by law.
You can read more about your rights in the 'Danish Data Protection Agency's guidance on the rights of data subjects'.
If you want to exercise your rights, including requesting access to the processing of your data or the data of the deceased by the processing authority, you must contact the relevant authority.
You can find contact information on borger.personregistrering.dk.
Complaints about the processing of personal data
You have the right to complain about the data controller's processing of your personal data to the Danish Data Protection Agency in accordance with the rules in Article 77 of the General Data Protection Regulation.
You can contact the Danish Data Protection Agency from your digital mailbox on borger.dk or by e-mail to dt@datatilsynet.dk.