Statutory auditor (establishment)

If you have any questions regarding our processing of your data, please feel free to contact our data protection officer.

You can contact our Data Protection Officer in the following ways:

By e-mail: dpo@em.dk

By telephone + 45: 33 92 33 50

By letter: Ministry of Industry, Business and Financial Affairs, attn. The Data Protection Officer, Slotsholmsgade 10-12, DK-1216 Copenhagen K

We process your personal data for the following purposes:

• For use in the processing of your enquiry to the Danish Business Authority.

The basis in law for our processing of your personal data ensues from:

Act on Approved Auditors and Audit Firms (Auditors Act), Executive Order no. 1167 of 9 September 2016, cf. Art. 13 of Regulation (EU) No 1024/2012 of the European Parliament and of the Council of 25 October 2012 on administrative cooperation through the Internal Market Information System and repealing Commission Decision 2008/49/EC (‘the IMI Regulation’), art. 13, and Art. 6 (1) letter c, and Art. 10 of the General Data Protection Regulation (GDPR).

We process the following categories of personal data about you:

• Identification details

• Details of criminal offences

• Details of financial matters regarding mutual recognition (an auditor seeking approval cannot have debts over DKK 50,000 to the public authorities).

We disclose your personal data or make it available to the following recipients:

• European Commission – via the Internal Market Information (IMI) database.

• If a foreign undertaking asks about a Danish auditor by name, details of the date of approval and any deposits/disqualifications will be provided.

• The Danish Business Authority does not disclose your personal data in connection with the above processing.

• If a foreign authority asks about a Danish auditor by name, details of the date of approval and any deposits/disqualifications will be provided.

Data comes from yourself and databases abroad (in the EU).

To the extent that you do not submit your personal data for processing by the Danish Business Authority in accordance with the above, it will not be possible to be recognised as an auditor in Denmark, or gain access to temporary provision of services for auditors.

Currently, we cannot say how long we will keep your personal data. However, we can inform you that we will emphasise the Authority's objective need for retaining data, including the need to be able to reconstruct lost approvals when we determine how long your data will be stored.

If personal information about you has been submitted, you have the right to withdraw your consent at any time. This can be done by contacting us.

If you choose to withdraw your consent, it does not affect the lawfulness of our processing of your personal data based on your previously given consent and up to the time of the withdrawal. Therefore, if you withdraw your consent, it will only take effect from this time.

Pursuant to the General Data Protection Regulation, you have several rights in relation to our processing of data concerning you. If you wish to exercise your rights, you must contact us.

Right of access

You have the right to obtain access to the data we process concerning you, together with a number of other data.

Right to rectification (correction)

You have the right to have incorrect data concerning you rectified.

Right to erasure

In special cases, you have the right to have data concerning you erased before the time of our ordinary general erasure.

Right to restriction of processing

In certain cases, you have the right to restrict the extent to which we process your personal data. If you have the right to restrict processing, we will henceforth only process information with your consent – with the exception of storage – or if a legal claim can be established, exercised or defended, or to protect a person or important public interests.

Right to object

In certain cases, you have the right to object to our processing of your personal data.

Right to transmit data (data portability)

In certain cases, you are entitled to receive your personal data in a structured, commonly used and machine-readable format, and to have this personal data transmitted from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency's guidance on rights of data subjects, available at www.datatilsynet.dk.

You have the right to complain to the Danish Data Protection Agency if you are not satisfied with the way in which we process your personal data. The contact details of the Danish Data Protection Agency are available at www.datatilsynet.dk.