Power of attorney to act on behalf of the applicant and the applicant’s consent to obtaining and disclosing information I hereby authorise the Child Abduction Unit to act on my behalf or to appoint a representative to act on my behalf and to take all such steps as may be reasonable and necessary in connection with this application. By my signature below, I also consent to the Child Abduction Unit obtaining any necessary information from and disclosing any necessary information to relevant Danish and foreign authorities about my application. The power of attorney will cease to be effective when the Child Abduction Unit has fully completed the processing of the application. Notwithstanding the foregoing, I am entitled to withdraw the power of attorney by notifying the Danish central authority thereof. I have been made aware of the legal basis for processing the information set out below.
Applicant’s full name (block capitals):
Date:
Signature:

When you contact the Ministry for Social Affairs and Housing, you furnish certain information, including personal data, to the Ministry, which becomes the recipient of such information, and the EU General Data Protection Regulation (GDPR) requires us to provide you with certain information when we obtain personal data from you (Article 13) and when we obtain personal data about you from other parties (Article 14).

General Data Protection Regulation

The processing of applications by the Child Abduction Unit of the Danish Ministry for Social Affairs and Housing is subject to the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) and the Danish Data Protection Act (Act No. 502 of 23 May 2018). The GDPR and the Danish Data Protection Act apply to both children and adults. The custodial parent usually safeguards the rights of the child in accordance with the Act.

Information to be provided

It follows from the GDPR that we are required to provide you with the following information:

We are the data controller – How to contact us

Contact details of the data protection officer

The purposes of the processing of your personal data and the legal basis for the processing

Categories of personal data

The source from which your personal data originate

Storage of your personal data

Disclosure of personal data

Your rights

Lodging a complaint with the Danish Data Protection Agency

1. We are the data controller – How to contact us

The Department of the Danish Ministry for Social Affairs and Housing is the data controller in respect of the processing of personal data we have received about you. You will find our contact details here:

Ministry for Social Affairs and Housing

Holmens Kanal 22

1060 Copenhagen K, Denmark

Business reg. (CVR) no.: 33962452

Tel.: +45 33 92 93 00

Mail: sm@sm.dk

2. Contact details of the data protection officer

If you have any questions concerning the way we process your data, please do not hesitate to contact our data protection officer, Louise Ellemann Christensen, in one of the following ways:

Email: dpo@sm.dk

Secure connection for receiving signed and encrypted mails: sikkermail@sm.dk (Subject line: Data protection officer)

Tel.: +45 33 92 93 00

Postal address: Danish Ministry for Social Affairs and Housing, Holmens Kanal 22, 1060 Copenhagen K, Denmark, for the attention of the “data protection officer”.

3. The purposes of the processing of your personal data and the legal basis for the processing

The Danish Ministry for Social Affairs and Housing is the appropriate central authority of Denmark under the Hague Convention of 25 October 1980 on the Civil Aspects of International Child Abduction and under the Hague Convention of 19 October 1996 Jurisdiction, Applicable Law, Recognition, Enforcement and Co-operation in Respect of Parental Responsibility and Measures for the Protection of Children. We process your personal data for the purpose of ensuring that we are capable of taking all necessary steps to process an application in the discharge of the central authority’s duties.

The processing of your personal data usually relates to general personal data such as name, address and contact details, and the processing of such data is based on points (a), (c) and (e) of Article 6(1) of the GDPR.

If we have received sensitive personal data about you, our processing will be based on point (a) or (f) of Article 9(2) of the GDPR. Sensitive personal data are data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

If we have received data relating to criminal convictions and offences, our processing will be based on Article 10 of the GDPR and section 8(1) and (2) of the Danish Data Protection Act.

4. Categories of personal data

We may process the following categories of personal data about you:

General personal data

Sensitive personal data

Data relating to criminal convictions and offences.

5. The source from which your personal data originate

The data may originate from yourself, another citizen or a Danish or foreign authority.

6. Storage of your personal data

As a public authority, we have a duty to keep adequate records of incoming and outgoing mails under the provisions of the Danish Act on Public Access to Documents in Administrative Files.

At this point in time, we do not know for how long we will store your personal data. However, we can inform you that we are subject to the provisions of the Danish Archives Act governing the storage and disposal of the records of central government authorities. This means that we typically store the data for a maximum period of 15 years.

7. Disclosure of personal data

We will only disclose your personal data if disclosure is necessary for processing an application. Your data may for instance be disclosed to other Danish or foreign public authorities who can contribute to determining the facts of the case or resolving the case.

8. Your rights

The General Data Protection Regulation gives you various rights in relation to our processing of data about you. Please contact us if you wish to exercise any of these rights.

Right to access data (right of access)

As a general rule, you have the right to obtain access to the data we are processing about you and to a variety of other information.

Right to rectification (correction)

You have the right to have any inaccurate data about you rectified.

Right to restriction of processing

In special circumstances, you have the right to request restriction of the processing of your personal data.

Right to object

In certain circumstances, you have the right to object to our lawful processing of your personal data.

Right to transmit data (data portability)

In certain circumstances, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have those data transmitted from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency’s guidelines on the rights of data subjects, which are available on the agency’s website at www.datatilsynet.dk.

9. Lodging a complaint with the Danish Data Protection Agency

You are entitled to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with our processing of your personal data. You find the contact details of the Danish Data Protection Agency on the agency’s website at www.datatilsynet.dk or by calling +45 33 19 32 00.

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with

regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. Article 14(1) states

that the controller must provide the data subject with certain information where personal data have not been obtained from the data

subject.