The Danish ETS registry - Send Secure mail

If you have questions regarding our treatment of your personal data, you are welcome to contact our Data Protection Officer.

You can contact our DPO via e-mail: dpo@em.dk or by phone: 0045 33 92 33 50 or letter to:

Ministry of Business, Industry and Financial Affairs Att.: Data Protection Officer Slotsholmsgade 10-12 1216 Copenhagen K, Denmark

The purpose of processing personal data is the administration and supervision of the EU ETS registry and the Danish Kyoto Registry.

The basis in law for our processing of your personal data ensues from:

Commission regulations (EU) 389/2013 and (EU) 2019/1122.

Act on CO2 allowances, consolidated by Executive order No. 62 of 19/01/2021.

Danish Executive Order No 1637 of 18/11/ 2020.

The Danish Business Authority collects, processes and stores personal data concerning the notifier, account holder, account representatives and account holder's management and real owners (if the account holder is a legal person). This might involve the following personal data categories:

• Ordinary personal data, including data on name, date and place of birth, national identity number, passport number/ID card number, expiry date and issuing country, email address, place of ordinary residence and telephone number

• Criminal record

For the purposes of security surveillance, a log is also retained of the user ID, IP addresses, time of login and logout, applications used and infrastructure resources accessed (server logs). In addition, bank details will for some account holders be collected, processed and stored.

The recipients we may disclose or transfer personal data to are as follows:

• Account representatives on the account(s) concerned, account holder and account holder’s digital mailbox, and the notifier who has submitted the personal data.

• The Danish Energy Agency, SKAT (Danish Tax Authority), SØIK (State Prosecutor for Serious Economic and International Crime), European Court of Auditors, Eurojust, national supervisory authorities, entities for investigation of economic crime in countries other than Denmark, the European Commission and the Danish National Archives.

• In special cases, in response to letters rogatory, data may be disclosed to Danish courts or courts in other EU/EEA Member States.

• In the event of non-compliance with the requirement to submit documents, for example, in connection with the Danish Business Authority's periodic documentation checks of account holders and account representatives, personal data may be disclosed to national administrators of the emission trading registries in other EU/EEA Member States and to the European Commission.

The recipients outside the EU and EEA we may disclose or transfer personal data to are:

• UN Climate Committée

Transfer of personal data to the UN Climate Committee is covered by the rules for secure data processing under the UN Kyoto Protocol.

The personal data we collect, register and process are those that we obtain from the account holder, from you, and from other authorities.

We can obtain data from the Danish Central Business Register (CVR) and Danish Civil Registration System (CPR), the National Police of Denmark, SKAT (the Danish Tax Authority), the EU's financial sanctions list, and we can cross-check data with Transparency International and Financial Action Task Force.

We store personal data for 10 years after you no longer are associated with, or after the closure of the account you are associated with in the Danish Emission Trading Registry, cf. Articles 108-110 of Commission Regulation (EU) 389/2013 regarding the Kyoto registry and Commission Regulation 2019/1122 articles 77-80 regarding EU’s ETS registry.  

Criminal records we receive after January 1st, 2021 will be deleted after pending cases are closed.

This limitation on the storage of personal data also applies to files submitted to the Danish National Archives every 5 years pursuant to the rules of the National Archives. Personal data delivered to the National Archives are kept confidential for 75 years.

We see profiling to conduct risk assessments in relation to transactions analysis.

The data protection regulation establishes a number of rights you have in relation to our treatment of your data.

Contact us if you want to apply your rights.

Right to see information about you

You have the right to know what information we have about you:

Right to correct data

You have the right to rectify or have rectified information about yourself.

Right to object

There are limited possibilities to object to our treatment of your data.

You can read more about your rights at the website of the Danish Data Protection Agency: https://www.datatilsynet.dk/english/

The data protection regulation establishes a number of rights you have in relation to our treatment of your data.

Contact us if you want to apply your rights.

Right to see information about you

You have the right to know what information we have about you:

Right to correct data

You have the right to rectify or have rectified information about yourself.

Right to object

There are limited possibilities to object to our treatment of your data.

You can read more about your rights at the website of the Danish Data Protection Agency: https://www.datatilsynet.dk/english/

You have the right to lodge a complaint at the Danish Data Protection Agency about our treatment of your personal data. You can find the contact information on the Danish Data Protection Agency’s website: https://www.datatilsynet.dk/english/