The purpose of the processing of your personal data is to supervise the change of ownership scheme, which based on statutory order no. 1449 of 17 June 2021 on replacement or scrapping of certain solid fuel combustion installations below 1 MW in connection with change of ownership of real estate, establishes rules on the purchaser's obligation when transferring ownership of real estate to report information about certain solid fuel combustion plants under 1 MW, such as wood-burning stoves and fireplace inserts, in connection with registration.
In this regard, your personal data will undergo necessary processing, including journalisation in accordance with the Public Access to Information Act, and your information will be stored in accordance with archival legislation.
The Danish Environmental Protection Act (Consolidated Act No. 5 of 3 January 2023 on environmental protection), Section 7 (1), para 12.
We process CPR numbers for the purpose of unique identification according to the Data Protection Act (Consolidated Act No. 702 of 23 May 2022 on the Central Person Register), Section 11 (1).
Processing of any information on criminal offenses is based on the Data Protection Act (Act No. 502 of 23 May 2018 on supplementary provisions to the regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data), Section 8 (1) as the processing is necessary for the performance of the authority's tasks.
The Danish Environmental Protection Agency processes the following categories of personal data about you.
General information such as:
- Name
- Address
- CPR number/CVR number
In some cases, we process information about criminal offenses, cf. section 8 (1) of the Data Protection Act.
We disclose or transfer your personal data to the following recipients:
- The Danish Environmental Protection Agency will file a police report if we do not receive documentation for combustion plants produced 1 January 2003 or later.
- The Danish Environmental Protection Agency will file a police report if we do not receive information stating that combustion plants produced before 1 January 2003 has been replaced or scrapped.
- The Danish Environmental Protection Agency will file a police report if we do not receive a request for the agency to make a decision on the year of production for combustions plants where the year of production is unknown.
- The Danish Environmental Protection Agency also transfers personal data to the Danish Tax Agency if there is potential debt for collection.
- In addition, the Danish Environmental Protection Agency discloses personal data to other parties if we are required to do so by other legislation, including access to information according to the Public Access to Information Act and the Environmental Information Act.
- The Danish Environmental Protection Agency also transfers your personal data to the agency's data processors and administration, such as the Agency for Governmental IT Services.
We do not transfer your personal data to recipients outside of the EU/EEA.
Besides the information you yourself may have provided the Danish Environmental Protection Agency, we receive your personal information from the Land Registry and the Central Person Register.
We cannot currently specify how long we will store your personal data. However, we can inform you that your information is often subject to the Danish Archives Act, which obliges us to store it until it must be archived or discarded in accordance with the rules of this law. Furthermore, we only process your information as long as it is necessary for the purpose for which it was collected. When there is no longer a legal or administrative need, the information is deleted in accordance with the Danish Environmental Protection Agency's policy for deletion of personal information, which is usually ten years after the case has been closed at the Danish Environmental Protection Agency.
Under the Data Protection Regulation, you have rights in relation to our processing of your personal data.
If you want to exercise your rights, you can contact us via Public Digital Post.
If you do not have access to Digital Post, you can contact us via e-mail mst@mst.dk. If you contact us via e-mail make sure not to send sensitive personal information (such as health information), confidential information (such as CPR number) or information regarding criminal offenses.
In the subject field, please indicate which right you wish to exercise.
You can also contact us by physical post to the Danish Environmental Protection Agency, Tolderlundsvej 5, 5000 Odense C.
Right of access
You are entitled to become informed with which data we process about you, as well as additional information.
Right to rectification
You are entitled to have incorrect information about yourself corrected.
Right to erasure
In certain cases, you are entitled to have information about you erased before the designated retention period has ended.
Right to restriction
In certain cases, you are entitled to have the processing of your personal data restricted. If you exercise your right to have processing restricted, we may in the future only process information - apart from storage - with your consent, for the purpose of establishing, enforcing or defending legal claims, to protect a person or public interest.
Right to objection
If our processing of your personal data is based on article 6 (1)(e) – public interest or exercise of public authority, you are entitled to object to our processing for reasons relating to your particular situation.
You can find more information about your rights as a data subject in the Danish Data Protection Agency's website www.datatilsynet.dk.
The Danish Environmental Protection Agency has adopted internal policies and guidelines on information security and data protection, which contain instructions and measures in order to protect your personal data against loss or alteration, as well as unauthorized publication or access.
The Danish Environmental Protection Agency is obliged to comply with the information security standard ISO 27001 and to implement several technical measures. This means that organizational and technical measures are continuously adapted based on risk assessments.
To the extent that the Danish Environmental Protection Agency uses external contractors to process personal data, these are subject to written instructions and continuous control.
In the event of a security breach which results in a high risk for you, such as a risk of identity theft or similar, we will notify you of the security breach as soon as possible in order for you to take necessary precautions.
Updated on 26 January 2024.
We are the data controller – how do you contact us?
The Danish Environmental Protection Agency is responsible for the processing of your personal data. You will find our contact information below.
The Danish Environmental Protection Agency
Tolderlundsvej 5
DK-5000 Odense C
CVR No.: 25798376
Phone: +45 72 54 44 66
E-mail: mst@mst.dk
Contact the Danish Environmental Protection Agency's Data Protection Office
If you have any questions about our processing of your personal data, you are always welcome to contact our Data Protection Officer:
- E-mail: dpo@mim.dk
- Phone: +45 93 59 70 11 (every Wednesday at 10-12 AM (CET))
- Letter: Tolderlundsvej 5, DK-5000 Odense C, att. Data Protection Officer
Complaint to the Danish Data Protection Agency
Complaints of the Environmental Protection Agency's processing of personal data are to be lodged with The Danish Data Protection Agency. You will find the Danish Data Protection Agency's contact information on datatilsynet.dk.