Declaration from a representative – Annex C (2-04)

If you have any questions about our processing of data, you are always welcome to contact our data protection officer.

Skattestyrelsen Hannemanns Allé 25 2300 København S Att.: Databeskyttelsesrådgiveren E-mail: DPO@sktst.dk

The Danish Gambling Authority is responsible for ensuring a fair and well-regulated gambling market in Denmark. Our main tasks as stated in the gambling legislation is to protect players, including young people and other vulnerable people, against the harmful consequences of gambling by ensuring that gambling products and services are offered in a fair, responsible and transparent manner.

The Danish Gambling Authority process personal data about citizens and businesses that are submitted in connection with an application for a licence to offer gambling services. The personal data is thereby processed as a part of the tasks we have been given as an authority.

The legal basis for the processing of personal data follows the Danish Gambling Authority’s regular public authority.

The Danish Gambling Authority process the following categories of personal data:

• Identification information

• Financial and business information

• Family circumstances

• Patterns of movement and location

• Staff matters (not sensitive)

In addition, the Danish Gambling Authority also process data on criminal convictions and offences.

The Danish Gambling Authority often disclose personal data to other public authorities as a part of our general task management and with the consent from applicants. The Danish Gambling Authority may also be obligated by law to disclose data. The data is, for example, disclosed to the Danish Tax Agency, the police, the courts and other relevant authorities.

The Danish Gambling Authority rarely discloses data to recipients outside the EU or EEA.

The Danish Gambling Authority processes personal data that you have submitted to the Danish Gambling Authority. For example, this can be data that you have submitted in connection with your application for authorisation as a manager or staff.

The Danish Gambling Authority can also process data about you that we receive from other individuals, authorities, and companies, for example as part of a statutory reporting obligation.

We store personal data for as long as it is necessary to process your application. In this connection, we consider the complexity of the application when we determine how long the personal data must be stored.

The Danish Gambling Authority does not use automatic decision-making and profiling.

You may withdraw your consent to our processing of your personal data at any time in connection with your application which means that the Danish Gambling Authority must stop the processing of your personal data.

If you choose to withdraw your consent, it does not affect the lawfulness of our processing of your personal data based on your consent before its withdrawal. If you withdraw your consent, we cannot process your application.

You have various rights when the Danish Gambling Authority processes personal data about you. You can read more about the rights below. If you wish to exercise your rights, please contact us.

Right of notification

You have the right to be notified when the Danish Gambling Authority collects and processes personal data about you. You have the right to be informed about the purpose and the legal basis for the processing.The Danish Gambling Authority’s obligation to inform you may be exempted in certain situations. This applies, e.g. if you are already familiar with the data, or your interest in obtaining the data should give way for private or public interests.

Right to access

You are entitled to access information from the Danish Gambling Authority's processing of your personal data. This means that you have the right to obtain confirmation from the Danish Gambling Authority as to whether or not personal data about you is being processed, as well as a number of additional information.

Right to rectification (correction)

You are entitled to have inaccurate personal data concerning yourself rectified.

Right to erasure

In special cases, you have the right to have personal data about you erased before the time of our general deletion.

Right to restrict processing

In certain cases, you may have the right to restrict processing of your personal data. If you are entitled to restriction of processing, we will only be able to process the information - except for storage - with your consent. Moreover, we will only process the data for the purpose of an establishment, exercise or defense of a legal claim, or for protection of the rights of another natural or legal person or for the reasons of important public interest.

Right to object

In some cases, you may have the right to object to our otherwise legitimate processing of your personal data.

Right to transmit information (data portability)

In certain cases, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit such personal data from one data controller to another without hindrance.

Storage and erasure

The data that the Danish Gambling Authority collects and processes about you will be processed and stored in the Danish Gambling Authority's IT systems. We will erase your personal data when they no longer serve a case purpose. The actual time of erasure depends on how long the storage of the data is required.

You have the right to file a complaint to the Danish Data Protection Agency if you are dissatisfied with the way the Danish Gambling Authority process your personal data. You will find the Danish Data Protection Agency’s contact information on www.datatilsynet.dk.