Privacy policy

If you provide personal data to the Danish Institute for Human Rights, we will protect this data.

This page has information about why and how we collect and process your personal data. It also provides information about your rights, who we disclose your data to, and who you can contact if you have questions or wish to file a complaint about how we process your data.

The Danish Institute for Human Rights is the legal entity that serves as the controller of the processing of personal data carried out by the Institute.

You are welcome to contact us at:

The Danish Institute for Human Rights
Wilders Plads 8K
1403 Copenhagen K, Denmark
Telephone: +45 32 69 88 88
Email: info@humanrights.dk

If you have any questions about how we process your personal data, you are welcome to contact our Data Protection Officer at dpo@humanrights.dk.

What is the purpose and legal framework for processing my personal data?

The Danish Institute for Human Rights processes personal data about you in the interests of the tasks we perform as a government authority.

This could be in order to meet our legal obligations, such as human rights analysis and research, conducting independent surveys concerning discrimination, ensuring library facilities regarding human rights, helping victims of discrimination to process complaints, or in connection with teaching about human rights.

Perhaps we have entered into an agreement with you and compliance with the agreement requires us to use your data.

The type of data we collect about you will depend on the purpose of the task we are to perform. We will only collect the data necessary to perform our tasks.

We therefore process your personal data because we have a legal obligation to do so, or because the processing is otherwise considered necessary for our work as an authority.

We may also have previously obtained consent from you for our processing of your personal data.

Points (a), (c) or (e) of Article 6(1) and points (a) or (f) of Article 9(2) of the EU General Data Protection Regulation (2016/679/EU) therefore form the legal framework for our collection and other processing of your personal data.

If we collect or further process your data for scientific or statistical purposes, we will do so within the limits of point (e) of Article 6(1) or point (j) of Article 9(2) of the EU General Data Protection Regulation, cf. section 10(1) and (2) of the Data Protection Act.

Find the General Data Protection Regulation here:  REGULATION (EU) 2016/ 679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL - of 27 April 2016 - on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/ 46/ EC (General Data Protection Regulation) (europa.eu), and the Danish Data Protection Act here (in Danish).

How do you collect my personal data?

We collect your personal data in different ways.

You yourself can submit data to us, for example if you sign up for an event on our website, send us a letter or an email, or participate in an online questionnaire survey. In all these situations, you will often be asked to submit your name, address, and other personal data.

You may also have called us, or given us your email address so we can send you newsletters. You may have given us personal data when you use our library facilities.

Apart from in the above situations, we do not collect your personal data on our websites. We do not use cookies for tracking, personalisation or marketing. However, we show videos from YouTube on our website. YouTube places a cookie that we cannot deactivate. Before playing the video, we therefore ask for your consent that such cookies be placed. Also read our cookie policy for humanrights.dk.

In other cases, we receive data about you from third parties. For example, you may appear as a subordinate party in a case if you are related to the person the case concerns, or you may be party to a case raised by others, e.g. in connection with a complaint about discrimination.

When we conduct our statistical or scientific surveys, the Institute may gain insight into your personal data from other public actors. We may also need to gather information from other authorities, the courts and registers.

You are always entitled to know what data we collect about you from third parties.

Who receives my personal data?

In certain cases we will disclose your data.

In order to comply with the rules about public access in the Danish Public Administration Act or the Access to Public Administration Files Act, in some cases we will disclose information about you.

In some cases, we use data processors who help us process your personal data in a good and secure manner. This may be in connection with storing and processing personal data in the IT systems used by the Institute, or when we use external actors for transcription tasks, for example.

We enter into data processor agreements or non-disclosure agreements with all the external actors/suppliers who, either for our own purposes or on our behalf, process the data for which we are responsible.

Will you transfer my data to third countries?

Some of our data processors are based outside the EU/EEA (third countries) or use sub-processors based in third countries.

We may therefore share your personal data with recipients in these third countries.

If we transfer data to countries outside the EU/EEA, we will make sure that there is always a valid reason for transfer. This means that we will ensure the necessary guarantees that your personal data is processed appropriately and safely.

For how long do you keep my personal data?

We will only process your personal data as long as it is necessary for us to carry out our activities and to comply with our obligations as a Danish public authority.

Once the Institute has completed the processing, your personal data will be deleted, anonymised or archived in accordance with applicable legislation unless the Institute is obliged to keep the data due to other rules, e.g. the rules on registration of public records.

What are my rights when you process my personal data?

You have various rights when we process your personal data:

The right of access

You have the right of access to your personal data.

This means that you are entitled to obtain a copy of the data that we process about you and to additional information about our processing.

The right to withdraw consent

If our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.

When you withdraw your consent, we will stop processing your personal data for the purpose specified.

The right to have inaccurate personal data rectified

You have the right to have inaccurate data about you rectified or supplemented, so that we do not process data about you that is obsolete or in some other way incomplete.

The right to have personal data erased

As a public authority, in many cases, we will have an obligation to process data about you, among other things because this is explicitly stated in legislation, or if this is necessary for our work as an official authority.

This means that the Danish Institute for Human Rights cannot just delete information about you if other rules stipulate that the information cannot be deleted. This could be public rules on the duty to register and record or the Danish Archives Act.

However, in exceptional circumstances, you are entitled to have data about you erased before our general erasure process.

The right to object

You have the right to object to our processing of your personal data, for example because you believe that our processing of your data is not lawful.

In certain cases, you also have the possibility to object to otherwise lawful processing if your specific situation means that the Danish Institute for Human Rights should stop processing the relevant personal data about you.

The right to restricted processing

In certain circumstances, you are entitled to restrict the processing of your data.

This means that if the conditions for obtaining restricted processing are met, we can only process your personal data in specific situations.

Exceptions

Please note, that there are certain exceptions to these rights, which means you will not always be able to exercise all of your rights. For example, this applies when the Institute processes your data for statistical or scientific purposes.

Read more about your rights in the Danish Data Protection Agency guidelines on the processing of data in connection with statistical and scientific surveys (in Danish).

Can I complain?

If you would like to complain about how the Danish Institute for Human Rights processes your personal data, we recommend that you send your complaint to us at dpo@humanrights.dk.

You also have the option to complain directly to the Danish Data Protection Agency here.