Fixed-penalty notice

Orientation concerning the General Data Protection Regulation

In accordance with the General Data Protection Regulation[1], the Danish Environmental Protection Agency is as data controller obligated to inform you, how we treat your personal data.

The following is to inform you how we process the personal data that we collect.

1. We are the data controller – how do you contact us?

The Danish Environmental Protection Agency is responsible for the processing of your personal data. You will find our contact information below.

The Danish Environmental Protection Agency

Tolderlundsvej 5

DK-5000 Odense C

CVR No.: 25798376

Phone: +45 72 54 44 66
E-mail: mst@mst.dk

2. Contact the Danish Environmental Protection Agency's Data Protection Officer

If you have any questions about our processing of your personal data, you are always welcome to contact our Data Protection Officer:

E-mail: dpo@mim.dk
Phone: +45 23 11 15 86
Letter: Tolderlundsvej 5, DK-5000 Odense C, att. Data Protection Officer

3. The purpose of and legal basis for the processing of your personal data

The Danish Environmental Protection Agency processes your personal data, to determine whether you have breached the low emission zone rules. This includes processing for the following purposes:

Making sure that the data the Danish Environmental Protection Agency has received from Sund & Bælt Holding A/S is correct.
To issue a fixed-penalty notice for violating the Danish low emission zone rules.
To process any objection of the penalty charge notice.

In this context, your personal data is subject to the necessary case processing, e.g. journaling in accordance with the Danish Public Access to Information Act (offentlighedsloven), just as your personal data is stored in accordance with the Danish Archive legislation (arkivloven).

Legal basis for processing personal data:

The Danish Environmental Protection Agency is responsible for issuing fixed-penalty notices, cf. Section 34 (1) of Statutory Order no. 315 of 25 March 2025 on requirements for diesel-powered lorries, buses, vans and passenger cars in municipally determined low emission zones, etc., cf. Section 110 d (6) of the Danish Environmental Protection Act, for breach of Section 6 in Statutory Order no. 315 of 25 March 2025. The Danish Environmental Protection Agency is obligated to process your personal data, when assessing the data we have received from Sund & Bælt Holding A/S, collected by their automated camera and case processing system, in order to determine whether a fixed-penalty notice should be issued. Hence the personal data is processed on the basis of the General Data Protection Regulation article 6 (1)(e) – processing is necessary for the performance of a task carried out as a part of the exercise of public authority.
The Danish Environmental Protection Agency process national identification numbers, it is for the purpose of lawful unique identification in accordance with section 11 of the Danish Data Protection Act [3].
The Danish Environmental Protection Agency process data on criminal offences in accordance with section 8 (1) of the Danish Data Protection Act, as the processing is necessary for performing the tasks of the Agency.
If you provide sensitive personal data, we process the data on the basis of Article 6(1)(e) of the General Data Protection Regulation –processing is necessary for the performance of a task carried out as a part of the exercise of public authority, and Article 9(2)(g) - processing is necessary for reasons of substantial public interest on the basis of Union or Member State law.

4. Categories of personal data

The Danish Environmental Protection Agency process the following categories of personal data:

Name
Address
E-mail
National identification number
Vehicle registration number and other information regarding your vehicle
Time and place of entry into the low emission zone
If you pay the amount due

We process additional personal data including any sensitive personal data that you have provided.

5. Recipients or categories of recipients

The Danish Environmental Protection Agency disclose your personal data to the following recipients:

If you do not accept the fixed-penalty notice, the Danish Environmental Protection Agency will transfer your personal data to the police for further processing/investigation.
The Danish Environmental Protection Agency will if you have acknowledged the offence, but not paid the fixed-penalty, transfer your personal data to The Danish Debt Collection Agency for them to collect the amount due.
The Danish Environmental Protection Agency will share information with Sund & Bælt Holding A/S necessary for them to handle their obligations pertaining to the Danish low emission zone regulation.
The Danish Environmental Protection Agency leaves your personal information in the care of our data processors, e.g. the Agency for Governmental IT Services.
The Danish Environmental Protection Agency disclose personal data to third parties if we are obliged to do so in accordance with other legislation – e.g. to grant access to documents according to the Danish Public Access to Information Act (offentlighedsloven) and the Danish Environmental Information Act (miljøoplysningsloven).

6. Transfer to recipients in third countries, including international organizations

The Danish Environmental Protection Agency do not transfer your personal data to recipients outside of the EU/EEA.

7. The source of your personal data

Besides the information you may have provided the Danish Environmental Protection Agency, we receive your personal data from Sund & Bælt Holding A/S.

8. Storage of your personal information

The Danish Environmental Protection Agency will keep and process your personal data as long as it is necessary in accordance with the purpose of which it was collected. When we no longer have a legal or administrative purpose, the information is deleted in accordance with the Danish Environmental Protection Agency’s policy for deletion of personal information. However, we can inform you that your information is often covered by the Danish Archives Act, which obliges us to store it until it must be archived or discarded in accordance with the Act.

9. Your rights

Under the Data Protection Regulation, you have rights in relation to our processing of your personal data.

If you want to exercise your rights, you can contact us via Public Digital Post.

If you do not have access to Public Digital Post, you can contact us via e-mail mst@mst.dk. If you contact us via e-mail make sure not to send sensitive personal information, confidential information or information regarding criminal offenses.

In the subject field, please indicate which right you wish to exercise.

Right of access

You are entitled to become informed which data the Danish Environmental Protection Agency process about you as well as access to said data.

Right to rectification

You are entitled to have your personal data rectified.

Right to erasure

In certain cases, you are entitled to have information about you erased before the designated retention period has ended.

Right to restriction

In certain cases, you are entitled to have the processing of your personal data restricted. If you exercise your right to have processing restricted, the Danish Environmental Protection Agency may in the future only process data – apart from storage – with your consent, for the purpose of establishing, enforcing or defending legal claims, to protect a person or public interest.

Right to objection

If our processing of your personal data is based on article 6(1)(e) - public interest or exercise of public authority, you are entitled to object to our processing of your personal data on the basis of reasons that may relate to your particular situation.

Find more information about your rights as a data subject on the Danish Data Protection Agency’s website https://www.datatilsynet.dk/english.

10. Complaint to the Danish Data Protection Agency

Complaints of the Danish Environmental Protection Agency's processing of personal data are to be lodged with The Danish Data Protection Agency. You will find the Danish Data Protection Agency's contact information on https://www.datatilsynet.dk/english.

N.B.: New exemption options as of 1st April 2025

Information on data