Terms and conditions

The Agency for Digital Government is the data controller of your personal data in the health insurance card app in relation to the use and the operation of the app.

You will find our contact information below.

The Agency for Digital Government
Office for eID and apps
Landgreven 4
1301 Copenhagen K
Denmark
CVR no.: 34 05 11 78
Phone number: +45 3392 5200
E-mail address: digst@digst.dk

• The processing of your personal data is based on Article 6(1)(e) of the General Data Protection Regulation regarding the exercise of official authority, in accordance with the Order on Optional Placement in Security Groups and Issuance of Health Cards, Section 11 (Order no. 1016 of May 25, 2021).
• The processing of your CPR number is carried out for the purpose of unique identification, in accordance with Section 11 (1) of the Data Protection Act.

• The processing of your personal data is based on Article 6(1)(e) of the General Data Protection Regulation regarding the exercise of official authority, in accordance with the Order on Optional Placement in Security Groups and Issuance of Health Cards, Section 11 (Order no. 1016 of May 25, 2021).
• The processing of your CPR number is carried out for the purpose of unique identification, in accordance with Section 11 (1) of the Data Protection Act.

The purpose of the Agency for Digital Government’s processing of your personal data is to make it possible for you to set up and use the health insurance card app and the appurtenant self-service solution on borger.dk.

The Agency for Digital Government processes the following types of personal data about you:

Common personal data:

• Name
• Address
• Post district
• Municipality code
• Residence code
• Residence status
• Date of birth
• Health insurance group
• Your general practitioner’s name, address, phone number and contributor number
• Name, health insurance group and information on the general practitioner of children that you have custody of, until the child turns 15 years old
• The PID number, which is a personal ID number from your MitID, is used to identify your identity when logging in with MitID to create a digital health insurance card.
• Your mobile phone’s IP-address
• Installation Identifier (your mobile phone’s ID used in relation to enrollment)

Confidential personal data:

• Civil registration number
• Civil registration number of children that you have custody of
• CPR number of spouse/partner/cohabitant

Electronic trails

When you download and use the health insurance card app, the Agency for Digital Government collects the following data, which you leave behind as electronic trails: Which mobile device you use, which operating system your mobile device has, which IP-address you use, if the security on your device is undamaged (for instance not jailbroken/rooted) and information about technical failures. We use this information to be able to rectify technical failures and to be able to name your device, so you can recognise it if you need to deregister your health insurance card app via the self-service solution on borger.dk. To improve the user-friendliness and the dissemination of this app, the Agency for Digital Government collects technical information that elucidates how the app works, and which functions we need to improve. These technical data cannot be attributed to you personally.

The Agency of Digital Government passes on or entrusts your personal data to the following recipients:
We entrust your personal data to our data processors, who assist with the operation and maintenance of our IT systems.

The Agency for Digital Government does not transfer your personal data to recipients outside of the EU/EEA.

The Agency for Digital Government store your personal data in the following way:

We store your personal data as long as you have a health insurance card in the app.
You can always reset the health insurance card app via your mobile phone or via the self-service solution at borger.dk.
When you reset the health insurance card app from your mobile phone or via the self-service solution on borger.dk, your personal data is deleted on your mobile phone immediately. After you have reset the app, we store your personal data in our underlying IT-system for 1 month after which we delete it.

The Agency for Digital Government store a log for audit. The log is deleted 12 months after you have reset the app. If you only delete the app from your mobile phone without resetting the app, your personal data will still be stored in our underlying IT-system.

• We get the data that appear on the health insurance card, from the National Service Platform. The platform is operated by Sundhedsdatastyrelsen.
• We get your civil registration number from the Civil Registration System. 

No automatic decisions are made, including profiling in the health insurance card app

Below you can read about your right to rectification, deletion, restriction, objection and data portability. You can read more about your rights in the Danish Data Protection Agency’s "Guidance on the rights of data subjects", which you can find at datatilsynet.dk.

If you would like to make use of these rights, please contact The Agency of Digital Government.

Right of access to your data (right of access)
You have the right to access the personal data that we process about you as well as a range of additional information.

Right to rectification of your data (correction)
You have the right to have incorrect personal data about you corrected. You also have the right to have your information supplemented with additional information if this will make your personal data more complete and/or updated.

Right to deletion of your data
In special cases, you have the right to have personal data about you deleted before the time of our normal deletion occur.

If you no longer wish to have your personal data processed in the health insurance card app you can reset the health insurance card app yourself. This can be done in two ways: In the app itself under the menu option “Reset the health insurance card app” or at health insurance card app on borger.dk. Please be aware that you do not delete your personal data by solely deleting the app from your mobile phone.

Right to restriction of processing of your data
In special cases you have the right to restriction of the processing of your data. If you have the right to have the processing of your data restricted, we may henceforward only process your personal data, apart from storage, with your consent, or for legal claims to be established, asserted or defended, or to protect a person or important public interests.

Right to object to processing of your personal data
In certain cases, you have the right to object to The Agency of Digital Government’s otherwise lawful processing of your personal data.

Right to transmit information (data portability)
In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance.

If you wish to complain about the Agency of Digital Government's processing of your personal data, this must be done to the Danish Data Protection Agency. You can find their contact information on datatilsynet.dk.