Privacy Policy

The Agency for Digital Government is the Data Controller processing your personal data in relation to setting up your AltID app, as well as the issuance of a credential, up until the credential has been delivered to your AltID.

Our contact information is listed below.

Agency for Digital Government 
Division for Apps and Cross-Border eIDs
Landgreven 4
1301 Copenhagen K
CVR no.: 34 05 11 78
Phone: +45 33 92 52 00
E-mail: digst@digst.dk

If you have questions regarding how we process your data, you are always welcome to contact our Data Protection Officer.

You can reach the Data Protection Officer in the following ways:

• Via Digital Post: Send a message to the Agency for Digital Government in Digital Post, stating “Att. Data Protection Officer” in the subject line
• By e‑mail: dpo@digst.dk. If you choose to contact the Data Protection Officer by e‑mail, please do not include your CPR number or any other sensitive/confidential information
• By letter: Agency for Digital Government, att.: Data Protection Officer, Landgreven 4, 1301 Copenhagen K.
• By phone: +45 33 92 52 00

The Agency for Digital Government processes your personal data on the basis of the following:

• The processing of your personal data is carried out under Article 6(1)(e) of the GDPR, in conjunction with the National Digital Identity Wallet Act (Act No. 301 of 24 February 2026).
  
  
• Processing of sensitive personal data is carried out under Article 9(2)(g) of the GDPR, in conjunction with the National Digital Identity Wallet Act (Act No. 301 of 24 February 2026).
  
  
• Processing of personal identification numbers for the purpose of unambiguous identification is carried out under Section 11(1) of the Data Protection Act (Act No. 502 of 23 May 2018)

The Agency for Digital Government processes your personal data in order to deliver and administer the national digital identity wallet (AltID), which consists of three technical solutions: the wallet application (AltID app), the credential issuer service, and the relying party registry (AltID Relying Party Registry).

The processing of your personal data is carried out for the following purposes:

1. Setting up a profile in the AltID app
   The Agency for Digital Government processes personal data about you as part of the enrolment in the AltID app and when adding credentials to the app. This is necessary for the AltID app to function

2. Issuing credentials to your app through the Agency for Digital Government’s credential issuer service
   The Agency for Digital Government processes personal data about you in order to issue credentials on behalf of public authorities to your AltID app. As part of the issuance process, the Agency for Digital Government must be able to handle personal data received from public authorities in order to create and issue the credentials

3. Relying Party Registry
   The Agency for Digital Government is required to facilitate the registration of AltID relying parties in the AltID Relying Party Registry and to make that registration publicly available
   
   If a relying party is a sole proprietorship (or similar), the AltID Relying Party Registry will include general personal data/non-sensitive personal data about the owner of the business so that the owner can register in the AltID Relying Party Registry

the Agency for Digital Government processes personal data in the following categories:           

• Data concerning your identity
• Contact information

Identity data and contact details regard your full name, date of birth, place of birth registration, nationality, residential address, and CPR number, as these details are retrieved from the Civil Registration System (CPR).

You may add your passport photo when you first register as a user in AltID, or you may add it later. If you choose to add your passport photo, data from your passport will be processed.

The Agency for Digital Government entrusts your personal data to its data processors, who assist with the operation and maintenance of the AltID app.

The Agency for Digital Government does not transfer your personal data to recipients outside the EU/EEA.

The Agency for Digital Government stores and processes your personal data for as long as necessary to fulfil the purposes of AltID, including setup and administration, credential issuance, and the operation and maintenance of the system.

The Agency for Digital Government will delete your personal data no later than six months after a reset or revocation.

Personal data that the Agency for Digital Government has received from another authority in order to issue a credential to you will be deleted as soon as the credential has been delivered to your AltID.

Information from your passport will be deleted no later than 15 minutes after the scan is completed.

If you are a relying party and operate a sole‑proprietorship, you can delete your registration in the AltID Relying Party Registry at any time.

When you install and register in AltID, we obtain your personal data from:

• Your MitID or another approved eID from another EU/EEA country integrated with the eID gateway (through NemLog‑in).
• The Civil Registration System (CPR).
• Your passport, if you choose to add a passport photo to your AltID.

If you, as a sole proprietorship, are registered as a relying party, ordinary personal data about you as the business owner will be processed in the AltID recipient register. This data is obtained from the CVR register.

No automated decisions, including profiling, are made in the AltID app.

Under the GDPR you have a number of rights concerning the processing of information about you.

You can read about your right to rectification, erasure, restriction, objection and data portability below. More information about your rights can be found in the Danish Data Protection Agency’s “Vejledning om de registreredes rettigheder,” available at www.datatilsynet.dk (in Danish).

If you wish to exercise any of these rights, please contact the Agency for Digital Government.

• Right to access
  You have the right to obtain access to which data, we are processing about you, and a range of additional information
  
  
• Right to rectification
  You have the right to have inaccurate personal data corrected. You also have the right to have incomplete data supplemented with additional information where this would make your personal data more complete and/or up‑to‑date
  
  
• Right to deletion
  In certain circumstances you have the right to have your personal data deleted before the deadlines set in statutory of the Agency for Digital Government
  
  
• Right to restrict processing
  In certain circumstances you have the right to obtain restriction of the processing of your personal data. If you obtain this right, the Agency for Digital Government may continue to store the data but may only process it (apart from storage) with your consent, or for the purpose of establishing, exercising or defending legal claims, or to protect the vital interests of a person or important public interests
  
  
• Right to object
  In certain circumstances you have the right to object to the otherwise lawful processing of your personal data by the Agency for Digital Government
  
  
• Right to data portability
  This right does not apply to AltID, because the processing is carried out as part of the exercise of public authority powers that the data controller is legally obliged to perform

If you wish to lodge a complaint about the handling of your personal data by the Agency for Digital Government, you should do so with the Danish Data Protection Agency. Contact details are available at www.datatilsynet.dk.

You are also welcome to contact the Agency for Digital Government directly.