Content
Purpose of processing personal data
Data Controller and Data Processor
The Data Protection Officer
What personal data is processed?
How long is your information stored?
Laws and regulations
Your rights as a data subject
Complaints about the processing of personal data
___________________
Purpose of processing personal data
The purpose of processing your or your child's and the other parent's personal data is to register the parental relationship for your child in the Danish CPR-register.
The processing is based on a legal requirement (see the section 'Laws and Regulations').
Data Controller and Data Processor
The parish or municipality in the Southern part of Jutland where the mother resides is the processing authority and thus the data controller for the processing of personal data for the Declaration for Care and Parental Responsibility.
If the mother is not resident in Denmark, the parish or municipality in the Southern part of Jutland where the birth took place is the processing authority and thus the data controller for the processing of personal data for the registration of the Declaration for Care and Parental Responsibility.
If a Declaration for Care and Parental Responsibility is submitted to a parish or municipality in the Southern part of Jutland later than 28 days after the child's birth, it will be forwarded to the Agency of Family Law, cf. Section 8 of the Regulation on the Registration of Paternity and Co-maternity.
The Ministry of Health and Ecclesiastical Affairs and the authorities that use the Ministry's joint systems have joint data responsibility for the processing of personal data when the processing takes place within the Ministry of Health and Ecclesiastical Affairs' remit, cf. 'Cirkulære om fælles dataansvar, no. 9447 of June 15, 2021.
The data processor of the Danish National Church is DXC Technology.
The Data Protection Officer
Questions about an authority under the Ministry of Health and Ecclesiastical Affairs processing of your personal data can be made by contacting the Data Protection Officer in the Ministry of Health and Ecclesiastical Affairs:
Senior Consultant Rasmus Paaske Larsen
Tel.: 3392 3390
E-mail: databeskyttelsesraad@km.dk
By letter: Ministry of Health and Ecclesiastical Affairs, Frederiksholms Kanal 21, 1220 Copenhagen K, Attn.: The Data Protection Officer.
Enquiries to other authorities' data protection officers should be directed to the relevant authority.
What personal data is processed?
In connection with the submission of the Declaration for Care and Parental Responsibility, information is processed about:
- The father/co-mother/co-father
- The child
- The birth mother
- 2 witnesses (only necessary if using paper forms)
The authority processes following information about the father/co-mother/co-father of the child:
- Civil registration number or, if applicable, date of birth for a person without a Civil registration number
- Name
- Citizenship
- Country of birth
- Address, postal code, city and country
- Phone number
- Email address
The authority processes following information about the child:
- Civil registration number or, if applicable, date of birth for a person without a Civil registration number
The authority processes following information about the woman giving birth:
- Civil registration number or, if applicable, date of birth for a person without a Civil registration number
- Name
- Citizenship
- Address, postal code, city and country
- Phone number
- Email address
The authority processes following information about any witnesses (only on paper forms):
- Name
- Address, postal code, city and country
- Phone number
How long is your information stored?
- A Declaration for Care and Parental Responsibility, which is approved or rejected by the processing authority, is stored for 30 years, cf. 'Cirkulære om aflevering og kassation af kirkebogsarkivalier', no. 227 of December 5, 1975. The application is then deleted, anonymised or transferred to the archive in accordance with the rules of the archive legislation.
- A digital Declaration for Care and Parental Responsibility that does not reach the processing authority due to technical issues is stored in the system for 6 months, after which it is deleted.
An example of technical issues may be that a digital Declaration for Care and Parental Responsibility is not finally signed before the deadline, or that the child does not reside in Denmark.
Laws and regulations
Declaration for Care and Parental Responsibility is processed according to the following rules:
The processing takes place based on Article 6(1)(c) and (e) of the General Data Protection Regulation on legal obligations and the exercise of public authority, cf. 'Bekendtgørelse af Børneloven'.
Processing of Civil registration number takes place based on section 11(1) of the Danish Data Protection Act.
No automated decision-making or profiling is used in connection with the processing.
You can read more about the regulatory framework here:
- ‘Bekendtgørelse af børneloven’ (Lovbekendtgørelse nr. 772 af 07/08/2019)
- ‘Bekendtgørelse om registrering af faderskab og medmoderskab i forbindelse med anmeldelse af barnets fødsel’, § 4, stk. 1, § 4, stk. 2 (Bekendtgørelse nr. 986 af 26/08/2024)
- ‘Vejledning om registrering af faderskab og medmoderskab (Vejledning nr. 9608 af 28/08/2024), punkt 2, punkt 3.2 og punkt 3.2.1.
- ‘Cirkulære om fælles dataansvar i forbindelse med Kirkeministeriets fælles systemer vedrørende personregistrering, sognebåndsløsning samt valg i folkekirken’ (Cirkulære nr. 9447 af 15/06/2021)
- ‘The General Data Protection Regulation’ (EU Regulation No. 2016/679)
- ‘The Data Protection Act’ (Act no. 289 of 08/03/2024)
Your rights as a data subject
You have the following rights under the General Data Protection Regulation.
- Right of access to the data that the authority in question processes about you.
- The right to have your information corrected in certain cases if it proves to be incorrect or misleading.
- The right to object to the authority's otherwise lawful processing of your data.
- The right, in certain cases, to have information about you deleted before the date of the authority's otherwise specified deletion occurs.
- The right to transmit information (data portability) does not apply to a Declaration for Care and Parental Responsibility, as the processing takes place as part of an exercise of public authority that the data controller has been assigned by law.
You can read more about your rights in the 'Danish Data Protection Agency's guidance on the rights of data subjects'.
If you want to exercise your rights, including requesting access to the processing of your data or the data of the deceased by the processing authority, you must contact the relevant authority.
You can find contact information on borger.personregistrering.dk.
Complaints about the processing of personal data
You have the right to complain about the data controller's processing of your personal data to the Danish Data Protection Agency in accordance with the rules in Article 77 of the General Data Protection Regulation.
You can contact the Danish Data Protection Agency from your digital mailbox on borger.dk or by e-mail to dt@datatilsynet.dk.